last executing test programs: 2m40.648662763s ago: executing program 3 (id=347): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (fail_nth: 6) 2m40.581611005s ago: executing program 3 (id=350): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1221, &(0x7f0000002300)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 2m40.386055698s ago: executing program 3 (id=354): r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a03000000000000000000030000000900030073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c0001"], 0xa4}}, 0x0) 2m40.282313189s ago: executing program 3 (id=357): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000e80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@gettfilter={0x4c, 0x2e, 0x8, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x7}, {0x8, 0xd}, {0x2, 0xfff3}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x2e}, {0x8, 0xb, 0x200}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x80}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004841}, 0x40082) io_setup(0x6, &(0x7f0000000140)=0x0) r5 = epoll_create1(0x0) io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x8, r5, 0x0}]) io_cancel(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8280, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x4008088) getsockopt$inet_mreq(r0, 0x0, 0x11, &(0x7f0000000200)={@broadcast, @remote}, &(0x7f0000000240)=0x8) 2m40.22021405s ago: executing program 3 (id=359): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000"], 0x7c}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4f9309", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 2m39.977138024s ago: executing program 3 (id=364): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1221, &(0x7f0000002300)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 2m39.976844784s ago: executing program 32 (id=364): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000500)=ANY=[@ANYBLOB="002918d910d46be7099c66b02010b1f0b7c3dc1dabe625969fb0adc922385af53d57a1d35dd71c90d9dd649b53142dd3d4108b4c7db82e8475d5bb6fa2fa626cd92c7326ce1ba2f33b0aef2b2164e01d910058b51684696959ea7f5a607a6572d2640cf9312a07000000260e3651a0cbfd2c080990fb4c76e9e613a759863734a70d0600ec77e8ba76aacbb21e4b903aa4873a9951f269a9c0f87805a1a0cbdf6b8644a1de05a8d9dd9687d67c8af7f68cb59e60d1fbefb49b93d6b72cce4162edc4468a13987d94d428df36915621aeff6dc1358a7331fa69e05c417c2e1e6b8dc29c496c76d02dfc2d7b48616fb3f01b221f4f8f484a00090964922de8909a1f9f7ef655a12a68a56cb341a8fba4cd81cedec9cb518d13d2a2564427b63b037494748a24daa21fe1256df68d000b2778bf0437cc642cd83c5a1b34eeffdf93ecbd85bb340eeef68dd60101769c74f94d217264c171feea0305bfc87c36247d90b129a9973f00000001d99b195d2f75653a0193672783c6dbca5d1445110621d8095064f0a034f492cf5aa4767a772d6f4967722546bfd83d3202f76c20a9d7f40f9e7818d77129df7fd072804e0227ecaa03dddd303a318d6f7763ce011543587e6a306780ca2f37db7e8a5b64a5059ac91ff2110e40ea13d70e1504653ba9eebcf61b427797fb3fd79d2bb9aaa13c9729fe323c4ac222991981381e004684fb200b17d2f6ede181067662ad8a31f45b613869ca8fc5b1dbe62407a1f6dcb86a4c430210e9bcfca9b83283b87316c4d17f388e0bab0500000092a82e12f8e5348f11e7739033e9081bfc598746cf032fa55d0300470000000019ac65f89ca7d96da3ca2db52f8ec80462fddf42dbbca24b720000000000000000000000000000005214e7febdbc0033d6402c34aa96940474", @ANYRESDEC], 0x1, 0x1221, &(0x7f0000002300)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 1m38.409948302s ago: executing program 1 (id=1355): socket$kcm(0x10, 0x2, 0x0) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x420540, 0x12) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prlimit64(0x0, 0xa, &(0x7f0000000540)={0x8, 0x2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x20, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xd}, @jmp={0x5, 0x0, 0x3, 0x8, 0x7, 0x20, 0xffffffffffffffff}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3c4}, @alu={0x3, 0x0, 0x7, 0x9, 0x7, 0xfffffffffffffff8, 0x8}, @ldst={0x1, 0x1, 0x6, 0x6, 0x0, 0x30, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000b00)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x2, 0x4, 0x4, {0x3, 0x0, 0x101, 0x6, 0x5, 0x2}, {0x3, 0x1, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x100000, 0x2, 0x0, 0x5, 0x2, 0x6, 0x4, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0x1, 0x1, 0x4, 0xffffffda, 0x8, 0x2, 0x76ccfa5f, 0x5, 0x8, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x1, 0x9, 0x5, 0xc, 0x1, 0x40000008, 0x7, 0x5, 0x8, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xffffff01, 0x80000001, 0x80, 0x9, 0x7f, 0x84, 0x6, 0x637, 0x8, 0xfb, 0xfff, 0x97, 0x6, 0x791a, 0x0, 0x0, 0x7, 0xab8, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x9, 0x1eb, 0x7, 0xd43, 0x9, 0x6, 0x7, 0x7, 0x4, 0x4, 0x4, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x3, 0xaa2, 0x400, 0x40, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x7, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x7, 0x7ff, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x1, 0x587, 0x8, 0x1, 0x800, 0x3c, 0x6, 0x3ff, 0x2, 0x431, 0xfffffffc, 0x3, 0x9, 0x3, 0x6, 0x1ff, 0x1ff, 0x8, 0x2, 0x5, 0xffffffff, 0x9, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x9, 0xfffffffd, 0x4, 0x6, 0x1, 0x3, 0x3, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0x2, 0x8, 0x5, 0x4, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xfffffff8, 0x5, 0x8, 0xfffeffff, 0x1, 0x0, 0x49fb, 0x1, 0xd0c0, 0xfffff33c, 0xc974, 0x3, 0xff, 0x7, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0x5, 0x5, 0x7, 0x800, 0x2, 0x5, 0x7fff, 0x5, 0x7ff, 0x800, 0x7, 0x0, 0x9, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0x10000, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x3, 0x80000001, 0x6, 0x3, 0xf, 0x6, 0x9, 0x9, 0xffffffff, 0x7ff, 0x10, 0x2, 0x8, 0x4, 0xa27d, 0x9, 0x9, 0x5, 0x81, 0x4, 0x7f8000, 0x9, 0x0, 0x0, 0x0, 0x5, 0xc1, 0x2, 0x401, 0x40, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r5, r4, r4, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}}, 0x20050800) 1m38.348778993s ago: executing program 1 (id=1357): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x3000046, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpjquota}, {@oldalloc}, {@errors_remount}, {@orlov}, {@usrquota}, {@stripe={'stripe', 0x3d, 0x622}}]}, 0x1, 0x56c, &(0x7f0000001a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x641, 0x1c3) fallocate(r0, 0x10, 0x3, 0x7c27) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="06000000000000000153d3"]) 1m38.106457517s ago: executing program 1 (id=1362): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@mblk_io_submit}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) 1m37.834539181s ago: executing program 1 (id=1366): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101e, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) 1m37.695203753s ago: executing program 1 (id=1368): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fb, &(0x7f0000000500)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 1m37.408322657s ago: executing program 1 (id=1377): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$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") symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') 1m37.368157138s ago: executing program 33 (id=1377): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$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") symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') 7.509056531s ago: executing program 2 (id=2509): syz_clone(0x42001011, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r3 = msgget$private(0x0, 0x53) getpgrp(0x0) msgrcv(r3, 0x0, 0x0, 0x3, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="001801000020646c250000000000d3ca3dfa2020207b1af8ff00000000bfa10000000000000701a000f8ffffffb702000005000000b703000000000000850000007200000095e73d43c04284b3e7f8df13c3a6eabb3ae05572ba27a11585255333d3f1c846bfb42bc88457d90095f741ac83d99453064e97d32c53c3425a456c1a78bace58450499e19a77e6d16df46e2f217cf2b5ae31a3d495e6f7d99beb08edea5429ba27b4fd42a6c951c91645e4e6de10856c64934da33d02a60c0b4578ec8378420f8061022689", @ANYRES32=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=0x0, @ANYBLOB="3064b44ca32376297bb371c5d925790ec1738b5598ed8c9a93c5bb41b759d6e7a1bebc61156ca94a1d446f0ba6852c8aa61b4cffb251a20a0878e8e3e412e163b284b16ccfbe0f53c25236013d471a522afed3cf60a2d28d11090ba240819595d7d812c8fcad4e593f1949645645dbf57532cf54e1c175db456fe62a28637c29a0c00f1715013acc170594c5f74bc8d9e69377ca84b6951a63226664b11889d888e079026893f663393bb9983c3e97303b5896e62f31b6b82fedf8a43dddc456df153eadf2262ba96eba"], 0x3c}}, 0x4000010) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket(0x28, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r8, 0x10f, 0x82, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) getpeername$l2tp(r8, &(0x7f00000004c0), &(0x7f0000000580)=0x10) 5.240980454s ago: executing program 2 (id=2527): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xe) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x6}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000008c0)={[{@inlinecrypt}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@errors_remount}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@nodelalloc}, {@grpquota}, {@noload}, {@nouid32}, {@bh}, {@dioread_nolock}, {@test_dummy_encryption}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file1\x00'}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='rpcgss_svc_seqno_low\x00', r7, 0x0, 0x1000}, 0x18) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20001) listen(r6, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 4.353903787s ago: executing program 2 (id=2540): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r1, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) capset(0x0, &(0x7f0000000000)={0x200000, 0x200000, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) 4.247038378s ago: executing program 4 (id=2543): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x1164, 0x9, 0xb}, {0x7, 0x2, 0x6, 0x5}, {0x8, 0x4}, {0x401, 0x2, 0x81, 0x4}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, @perf_config_ext={0x400000000000000, 0xa}, 0x115428, 0x0, 0x0, 0x0, 0x5f4d, 0x1, 0x2, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000207010100000000000000000a0000060c00034000000000000000053400078008000140000000cf080002"], 0x54}}, 0x40010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000500)={@empty, 0x0}, &(0x7f0000000540)=0x14) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0xcee, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640)={0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xb, 0x1, 0x4, 0x8c6, 0x1c410, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x0, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)=r0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x2010, r3, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat6\x00') pread64(r11, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0xe, &(0x7f00000009c0)=@raw=[@map_fd={0x18, 0x7}, @map_val={0x18, 0x7, 0x2, 0x0, r8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x3, 0x0, 0x5, 0x2, 0xc, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x6, 0xfe, &(0x7f0000000b80)=""/254, 0x41101, 0x20, '\x00', r4, @fallback=0x15, r5, 0x8, &(0x7f00000005c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x2, 0x9, 0x100}, 0x10, r6, r7, 0x2, &(0x7f0000000880)=[0xffffffffffffffff, r8, r9, r10], &(0x7f00000008c0)=[{0x3, 0x1, 0x2, 0x6}, {0x0, 0x2, 0xb}], 0x10, 0xb04, @void, @value}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r12, 0x0, 0x0, 0x1) 4.12097154s ago: executing program 4 (id=2545): unshare(0x2040400) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}], 0x1) r3 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) r5 = fsmount(r3, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x0, 0x3}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x245, &(0x7f0000000ec0)="$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") 4.084265921s ago: executing program 4 (id=2547): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1221, &(0x7f0000002300)="$eJzs3M9rHGUYB/Bn2/wyNdmotdqC9EUvehmbHDx5CZKCdEFpm0IrCFMz0WU3uyGzBLaI7c2rf4d49CaI/0AuXjwL3nLx2IM40p1gTUiRFNrdhs/nsg8775d9ZncZ2OF9dv/D77Y6m2W2mQ/iTKMRU9sR6WGKFGfibNQexHu3fvv9rRu371xbbbXWrqd0dfXm8gcppcXLP3/29Q9v/zI4d+vHxZ9mY2/p8/0/V/7Yu7B3cf/vm1+1y9QuU68/SHm62+8P8rvdIm20y06W0qfdIi+L1O6Vxc6h45vd/vb2MOW9jYX57Z2iLFPeG6ZOMUyDfhrsDFP+Zd7upSzL0sJ88PRmYv37h1VVRVTVdMxEVVXVSzEf5+LlWIjFaMbSdMSr8Vqcj9fjQrwRb8bF0apxdw4AAAAAAAAAAAAAAAAAAACny//M/8cr5v8BAAAAAAAAAAAAAAAAAADgmTP/DwAAAAAAAAAAAAAAAAAAAONn/h8AAAAAAAAAAAAAAAAAAADG78btO9dWW6216ynNRWx9u7u+u14/1sdXN6Md3SjiSjTjrxhN/9fq+urHrbUraWQp3t+6f5C/v7t+9nB+efR3Asfml+t8Opyfjfn/5leiGeePz68cm5+Ld9+p841H+Sya8esX0Y9ubMSj7OP8N8spffRJ60j+0mgdAAAAnAZZ+texv9+zLDUa9dIjx+snn3x/oGoeuT/QOJyfiktTYzxxRsrhvU7e7RY7L1Zx8JWMe5388iT08+Ri5qDTSelnAoqDd+TBpPTzghbTEfEMX+LIhWIuImaf44WJ5+Lxhz7uTgAAAAAAAAAAADiJE2wMnKr32558O+G4zxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAfduBYAAAAAECYv3UaHRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcFQAA//8my+RP") perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xb, 0xfe, 0x0, 0xff, 0x0, 0x1000, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x7ff, 0x0, 0x6}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x60400, 0x0) close_range(r1, r2, 0x200000000000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x8, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r8}, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 3.987299853s ago: executing program 4 (id=2549): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 3.954971523s ago: executing program 5 (id=2551): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000300)={0x0, &(0x7f0000000300)}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x66) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x1, @local}, 0x4a, {0x2, 0x4e23, @dev}}) socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f00000000c0)="b2", 0x5f65bd31, 0x20008840, &(0x7f0000000040)={0xa, 0x2, 0x80398, @loopback, 0xfffffffe}, 0x1c) 3.104710515s ago: executing program 5 (id=2558): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7", @ANYRES8, @ANYBLOB="ed0564a446cfee611db880ed40954b1e245eda3bed0771f1055479c542846be0", @ANYRES64, @ANYBLOB="4801f404ab090810ac26161eca458a856f2120fe5cb61f5d80b9b388a031df0ce0d575599531509f00b4596a2f14775307e94f7338063e5a0917093465ec1eba0ab56f91647a6b85d1a30ca2879b8153a5a7534bcf61095a8ad0210bb6a6814b01e7b38eaf3c363343f870355c4ba4b5c1844c15f1f4fb9a3f0903ecd528a0817876518ab24bbf8cb576470583a7d06d8c1642f378fd9dfd", @ANYRESOCT, @ANYRESOCT], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02090903020000002bbd7000fedbdf25791f165010034e74964e0654c09efd97e6b12fdbd7fde400b27893f311f991d4f431b9420b77684ec84ee0aa063bc9cb9e7799c9480e9fa8ab82aa90db28662edffe349abf474b3bb338a87cc540cce0290a743f6e371f71802cb3effac2a80b588c7bdd8213a5c4"], 0x10}}, 0x20048844) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f00000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r3}, 0x38) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b0000000700000001000100090000000100"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) 2.812001509s ago: executing program 5 (id=2565): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xe) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x6}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000008c0)={[{@inlinecrypt}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@errors_remount}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@nodelalloc}, {@grpquota}, {@noload}, {@nouid32}, {@bh}, {@dioread_nolock}, {@test_dummy_encryption}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file1\x00'}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='rpcgss_svc_seqno_low\x00', r7, 0x0, 0x1000}, 0x18) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20001) listen(r6, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 2.329037897s ago: executing program 6 (id=2567): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005", @ANYRESHEX=0x0], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x0) vmsplice(r3, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) write(r1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000ed07449e00000303009497bfb3f9fc00", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095", @ANYRESDEC=r0, @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x80}, 0x18) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000068000100781be03c4f5023c0020000000000000004000b"], 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) socket$inet6_udplite(0xa, 0x2, 0x88) 2.029840261s ago: executing program 0 (id=2568): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x100987, 0x7ff, 0x7, 0x2, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r4, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12011, r3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="600000001000030500000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003800128008000100677265002c0002800500090001000000080014000900000005000a000100000005000a"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x47f8, 0x0, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) writev(r0, &(0x7f00000009c0)=[{&(0x7f00000004c0)='\n', 0x1}], 0x1) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000140)={'ipvlan1\x00', &(0x7f0000000600)=@ethtool_link_settings={0x4c, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0xfd, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xa67}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r11 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f00000001c0)='cpu|00\t&&') 1.897981083s ago: executing program 5 (id=2569): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000300)={0x0, &(0x7f0000000300)}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x66) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x1, @local}, 0x4a, {0x2, 0x4e23, @dev}}) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000000c0)="b2", 0x5f65bd31, 0x20008840, &(0x7f0000000040)={0xa, 0x2, 0x80398, @loopback, 0xfffffffe}, 0x1c) 1.880158783s ago: executing program 0 (id=2570): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x100987, 0x7ff, 0x7, 0x2, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12011, r1, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="600000001000030500000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003800128008000100677265002c0002800500090001000000080014000900000005000a000100000005000a"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0x4800, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47f8, 0x0, 0x0, 0x0, 0x0) 1.802106594s ago: executing program 0 (id=2571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r1, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) capset(0x0, &(0x7f0000000000)={0x200000, 0x200000, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r5) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 1.320558581s ago: executing program 6 (id=2572): unshare(0x2040400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x2000400) 1.272866412s ago: executing program 6 (id=2573): r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) timer_create(0x0, 0x0, &(0x7f0000000280)=0x0) timer_getoverrun(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000008000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) r8 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r8, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000680)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3014850, &(0x7f0000000040)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@nouser_xattr}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4d8, &(0x7f0000000740)="$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") openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) 1.267771732s ago: executing program 2 (id=2574): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x100987, 0x7ff, 0x7, 0x2, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, 0x0, 0x800) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12011, r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc0b0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1af}, 0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0x4800, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x47f8, 0x0, 0x0, 0x0, 0x0) 1.255516722s ago: executing program 6 (id=2575): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_bp={0x0, 0x8}, 0x3df0, 0xfffffffffffffffc, 0x800004, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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") r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x7ffffffe, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) r2 = open(0x0, 0x40c5, 0x130) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='xen_cpu_write_idt_entry\x00', r7, 0x0, 0xfffffffffffffffe}, 0x18) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r8, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r4}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r5, 0x0, 0x8000000000000}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732"], 0xa8}}, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x200) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x6}, 0x18) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32250000000900010073797a3000000000080005400000001f"], 0xec}, 0x1, 0x0, 0x0, 0x20048011}, 0x0) sendfile(r2, r3, 0x0, 0xe065) 1.209936523s ago: executing program 2 (id=2576): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_bp={0x0, 0x8}, 0x3df0, 0xfffffffffffffffc, 0x800004, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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") r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x7ffffffe, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) r2 = open(0x0, 0x40c5, 0x130) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='xen_cpu_write_idt_entry\x00', r7, 0x0, 0xfffffffffffffffe}, 0x18) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r8, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r4}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r5, 0x0, 0x8000000000000}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732"], 0xa8}}, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x200) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x6}, 0x18) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32250000000900010073797a3000000000080005400000001f"], 0xec}, 0x1, 0x0, 0x0, 0x20048011}, 0x0) sendfile(r2, r3, 0x0, 0xe065) 1.204764303s ago: executing program 6 (id=2577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r1, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(0x0, &(0x7f0000000000)={0x200000, 0x200000, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r5) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 1.160078764s ago: executing program 2 (id=2578): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0x78}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000fb", @ANYRES32=0x0, @ANYBLOB="03000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x81}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdde, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x3, 0x6, 0x101}, 0x14}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) 1.041948345s ago: executing program 5 (id=2579): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r1, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) capset(0x0, &(0x7f0000000000)={0x200000, 0x200000, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) r7 = getpid() r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r6) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 859.035548ms ago: executing program 0 (id=2580): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000001700)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="417bd2", 0x3}], 0x2, 0x5) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xe7c9a000) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r7, 0x0, 0x2000000002ffff, 0x0) io_submit(0x0, 0x2, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000080)="9b4fafda1289405d17fac575b4dd4c85a5921c4362500d899e1673b1249e09919e4a2320d6682cd6eeeced87928609973efc7763af48bcc8f28afa14837415838b4c685e6b84f6f59a88faf06ac643fca6f2694d5b0e379871de97", 0x5b, 0x5, 0x0, 0x3}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0xf000, r4, &(0x7f00000001c0)="09951b7f8d38d2df0c01350fad300618b28237f62924ab78dee4603c928e0a227c78c9999d4c5b67ac7b1c8147e183c32d34a686192cb2699e2ff3b0758edcebdcbbb4265e643e31b97e7155738867b602cf6f4c9c4c0a27c6ecf43e3215b2a8c2d213e85ed05887e75d175f8fd1e7cd599b75de703aebe47c8d4da5aaf7d0831d0314684f632956618ec58b20c2bf918a76e3703d24dd9c32a2ebaaaf0e82", 0x9f, 0x7ff, 0x0, 0x1}]) r8 = getpgrp(0xffffffffffffffff) sched_setscheduler(r8, 0x2, 0x0) getpeername$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000001740)=@deltclass={0x10a0, 0x29, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xffe0, 0xc}, {0xd, 0x8}, {0xfffc}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x6}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x40}}, @TCA_RATE={0x6, 0x5, {0x1}}, @tclass_kind_options=@c_htb={{0x8}, {0x1034, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RATE64={0xc, 0x6, 0x401}, @TCA_HTB_CTAB={0x404, 0x3, [0x6, 0x9, 0x9fd, 0x6e, 0x6, 0xaa, 0x7ff, 0x1, 0x4, 0x6, 0x7, 0x2, 0xfffffff7, 0x200, 0x1, 0xc, 0xffffffff, 0x4, 0x1, 0x9, 0x9, 0x4, 0xd76, 0x10000, 0x2, 0x5, 0xfffffffd, 0x3, 0xc, 0x9, 0x6, 0x81, 0x6, 0x2, 0x2c, 0x9, 0x0, 0x9, 0x2, 0xaca, 0x8000, 0x84, 0x5, 0x4, 0x7, 0x7, 0x82, 0x1, 0x7, 0x6149cb52, 0xfffffffd, 0x8, 0x100, 0x4, 0xffffff1c, 0x3, 0x1, 0x1, 0x4, 0x0, 0x3, 0x9, 0x8, 0x4, 0x40, 0x9, 0x4eb8, 0xffffffff, 0x8, 0xa, 0x3, 0x4, 0x254c, 0x8, 0x81, 0x7, 0x5dee, 0x6, 0x10000, 0x6, 0x8f, 0x81, 0x7, 0x9, 0x7, 0x4751, 0x2, 0xe000, 0x7fff, 0x9, 0x2, 0x401, 0x0, 0x2, 0x3, 0xe952, 0xee, 0x7, 0x8, 0xffffffff, 0xfffffff5, 0x9, 0x2, 0x2000, 0xa9eb, 0x7, 0xfffffffc, 0x4, 0xd, 0x3, 0x9e28, 0xd, 0x6, 0x6, 0x6, 0x8, 0x400, 0x1f, 0x3, 0x4, 0x4, 0x7, 0x200, 0x4, 0x8, 0xd, 0x7ff, 0xffffffff, 0x89, 0x1, 0x101, 0x1, 0x6, 0x3, 0x4, 0xa1c, 0x8, 0x2, 0x7, 0xa, 0xdaef, 0x6, 0x36a0, 0x3, 0x401, 0x5, 0x8, 0x9, 0x3, 0x2, 0xfffffffd, 0x160, 0x1, 0xffff, 0x0, 0x7fb, 0x3, 0xe45, 0x80000001, 0x9, 0xfffffe01, 0x80000, 0x5, 0x7, 0xf4a2, 0x2, 0xefe2, 0xf, 0x89, 0x3, 0xffffffca, 0x119, 0x5ee8, 0x4, 0x7, 0x40000000, 0xc, 0xb1, 0x81, 0x7, 0x68, 0xe, 0xd, 0x0, 0x3, 0x4, 0x2, 0x0, 0xcd0e, 0x3, 0x1, 0x2, 0x0, 0x1, 0x1000, 0x0, 0x5, 0xa143, 0x4, 0x5a07, 0x1cfc, 0xd, 0x1, 0x3, 0x200, 0xd1, 0x2, 0x0, 0x40, 0x0, 0x6e6, 0x1ff, 0x7fffffff, 0x1ff, 0x84, 0x400, 0x26, 0x1000, 0x7, 0x4, 0x4, 0xfff, 0x0, 0xa4, 0x1800000, 0xffffac97, 0x7fff, 0x0, 0x9, 0x1, 0x4, 0x10000, 0x3ff, 0x5, 0x1, 0x8, 0x7fff, 0x9, 0x7, 0x3, 0x9, 0x7, 0x8, 0x6, 0x6, 0xd61b, 0x1c00, 0x3ff, 0x2, 0x9, 0x81, 0x3, 0x7f, 0xfffff800, 0x0, 0x1]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x3}, @TCA_HTB_RTAB={0x404, 0x4, [0x2, 0x1, 0x0, 0xfffffffc, 0x5, 0x89, 0x80, 0x75, 0xeda7, 0x9, 0x0, 0x6, 0x401, 0x6f61, 0x80000000, 0xfffff001, 0x1, 0x0, 0x5, 0x6, 0x8, 0xb35, 0xf21, 0x6f7, 0x3, 0x2, 0x9, 0x80, 0x1ff, 0x1ff, 0x1, 0x0, 0x4, 0xe, 0xfffffff5, 0x323, 0x1000, 0x3, 0x8000, 0x8001, 0x2, 0xfffffffa, 0x7, 0x78, 0x2, 0x4, 0xffffffff, 0x841, 0x171, 0x401, 0x4, 0x2, 0x1, 0x0, 0x1f3ef766, 0xb, 0x7fff, 0x7, 0x0, 0x1, 0x7, 0xffffffff, 0xfffffff3, 0x3, 0x2, 0x3, 0x0, 0x5, 0x31e, 0xfaa7, 0x200, 0xfffffe00, 0x9, 0x2, 0x18000000, 0x100, 0x7fff, 0xffffffff, 0x100, 0x10001, 0x3, 0x3, 0x8, 0x9, 0x6, 0xfffffffc, 0x8, 0x3, 0xfffffbf9, 0x800, 0x9, 0x1, 0x9, 0x7, 0x200, 0x42b5, 0xd8, 0x0, 0x2, 0x6, 0x3, 0x1, 0xa, 0x1, 0x800, 0x2, 0x2, 0x8, 0x8000, 0x9, 0x3, 0x337, 0x5, 0x1, 0x8001, 0x2, 0x80, 0x41b, 0x0, 0xcfe, 0x5, 0x2, 0x1ff, 0x6cee, 0x7f000, 0x9, 0xc4, 0x1, 0x100, 0x4, 0xffff4f96, 0xfffffffc, 0x6, 0x2, 0x10001, 0x1, 0xe, 0xf, 0x7f, 0x9, 0x1, 0x3b, 0x0, 0x40, 0xff, 0x7f, 0x9, 0x8, 0x995, 0x7, 0xc, 0x0, 0x4, 0xe5, 0x7fff, 0x5, 0x5, 0x3, 0xfffffffc, 0x8, 0x7fffffff, 0x1, 0xb327, 0x0, 0x8, 0x8, 0xff, 0xff, 0x8, 0x4f36, 0x17c7, 0x2ce, 0x7, 0x9c0, 0xd, 0x4033, 0xf3a6, 0x7, 0x200, 0xf46, 0x0, 0x9, 0xfffffffc, 0x2, 0x4, 0x2, 0x0, 0x0, 0xffffffff, 0x2, 0xeb, 0xe52b, 0xb4f, 0x0, 0x4a, 0x3ff, 0x9, 0xffffffff, 0x31f, 0x9, 0x401, 0xb09, 0x7, 0x4, 0x4, 0xb651, 0x5, 0x0, 0xd71, 0xa0000000, 0x4, 0x2, 0xfffffff7, 0xc, 0x12, 0x3ff, 0xfffffffb, 0x7, 0x4, 0x69, 0x4, 0x6, 0x4c8, 0x42, 0xfffff003, 0x5, 0x1, 0x0, 0x1, 0x9, 0x6, 0x8, 0x9, 0x8, 0x8, 0x76, 0x3, 0x2, 0x80, 0x0, 0x4, 0x1, 0x0, 0x6, 0x3, 0xd6, 0xff, 0x5, 0x1, 0xfffffff7, 0x6, 0x3, 0x8, 0x9, 0x7, 0x1]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CTAB={0x404, 0x3, [0x7fff, 0x738, 0x3, 0x6, 0x5, 0x4, 0x9, 0x5, 0x8, 0xff8, 0x1ff, 0x4, 0x9, 0x99ac, 0xfff, 0x27456d66, 0xe2, 0xfffffffc, 0x0, 0x1, 0x6, 0xfffffffa, 0x4, 0x6, 0xb, 0x3, 0x376, 0x8, 0x4, 0x7, 0x4, 0x3, 0x0, 0xe, 0x8, 0x1, 0x0, 0x1, 0x6, 0x319e, 0x5f99, 0x7, 0xaa2, 0x2, 0xfffffffd, 0x4, 0x9, 0x100, 0x2, 0x8, 0x5, 0x100, 0x8, 0x6, 0x10000, 0x9, 0x80, 0x8, 0x0, 0x5, 0x7ff, 0x2, 0x7, 0x5, 0x3, 0x9, 0x10001, 0x2, 0x0, 0x5, 0x5, 0x1, 0xb7, 0x401, 0x2, 0x4, 0x9, 0xc, 0x603b, 0x9, 0x8, 0x0, 0x0, 0x2, 0x8, 0x2, 0x7fff, 0x4, 0x2, 0x17, 0xfffff5b8, 0x2, 0x3, 0x8, 0xffffffff, 0x8, 0x4, 0x101, 0xd0, 0x4000000, 0x10, 0x400, 0xa9, 0x1, 0x401, 0xa0000000, 0x8, 0x80000001, 0xf, 0x7fffffff, 0x8001, 0x7f000000, 0x800, 0x10, 0x1, 0x10, 0x33f, 0x1000, 0x0, 0xffff, 0x4, 0x7, 0x4, 0x7000, 0x800, 0x7, 0x8, 0xffffffff, 0x19, 0x3, 0x6, 0x6, 0x2, 0x4, 0x9, 0x5, 0x1d, 0x7, 0x6a, 0xff, 0x204, 0x9, 0xe, 0x739e, 0x37, 0xc247, 0x9, 0x1, 0x40000000, 0x3, 0x6, 0xe, 0x0, 0x6, 0xcc, 0x5, 0x9, 0x9, 0x6, 0x6, 0x120000, 0xff, 0x3, 0x8001, 0x5e7a1deb, 0x1, 0x8, 0x7fff, 0x8, 0x1775, 0x0, 0x8, 0xfffffffc, 0x9, 0x9, 0x6, 0x8, 0x6, 0x8000, 0xcd, 0x2, 0x6, 0x400, 0x6, 0x4, 0x1, 0x998d, 0x9, 0x401, 0x4, 0x1, 0x7, 0xfffffff9, 0x0, 0xd, 0x8001, 0xffff, 0x5, 0x7, 0x0, 0xfffffffb, 0x8, 0x9, 0x7f, 0x8, 0x9, 0x7fffffff, 0x8, 0xcac2, 0x8, 0x8, 0x80, 0xfffffffa, 0x2, 0x0, 0x10001, 0x6, 0x78e, 0x6, 0xfff, 0x8, 0x0, 0x4, 0x8000, 0x0, 0x3, 0x10e, 0x9, 0xa45d, 0x4, 0x7ff, 0x9, 0x1, 0x3ff, 0x2, 0xffffffff, 0x4, 0xb7, 0x6, 0x1ff, 0x5, 0xb, 0x2, 0xc, 0xfffffffe, 0x8, 0x9, 0x1b7, 0x0, 0xf64b, 0xaf, 0x6, 0x401, 0x5, 0x9, 0x8]}, @TCA_HTB_CTAB={0x404, 0x3, [0x3, 0x20, 0x3, 0x8, 0x1, 0x5, 0x7, 0xfffffffe, 0x1, 0x89, 0x7, 0x0, 0x1, 0xf6, 0x400, 0x80, 0x6, 0x800, 0x3, 0x4, 0x40, 0x101, 0x5, 0x2, 0xffffff00, 0x4, 0x6, 0x2bb, 0x7, 0x4, 0x1, 0xc1, 0x6, 0x8, 0x2, 0x101, 0x4, 0x1, 0x9, 0x7, 0x5bbc, 0x606a, 0xf0d, 0x1, 0x80000000, 0x1, 0x1, 0x9, 0x3, 0x1, 0x7ff, 0x9, 0x2, 0xffffffff, 0x43, 0x1, 0x6, 0x9, 0xfffffffc, 0x4, 0x2, 0xca, 0x8, 0xb, 0x80, 0x6, 0xe, 0x0, 0x8, 0x1e, 0x101, 0x8, 0xffffffff, 0x5e, 0x0, 0x7, 0xec, 0x40, 0x2, 0x93be7472, 0x4, 0x80, 0x1, 0xf, 0xdc, 0x9, 0x8401, 0x8000, 0x4, 0x7ff, 0xb, 0xe6b, 0xc00000, 0x971d, 0x46, 0x1, 0xb, 0x4, 0x9, 0xfff, 0x1, 0x6, 0x8, 0xc, 0x8, 0x8d, 0x10001, 0x6, 0x4, 0x4, 0x47b, 0x4, 0xa7, 0x4, 0x4, 0x3, 0x4, 0xff, 0x7ff, 0x7, 0x0, 0x8, 0x1, 0xd, 0x2, 0x101, 0x2, 0x80, 0x87, 0xd, 0x4, 0xfffffe01, 0x90, 0x7, 0x9, 0x5, 0x5, 0xffffffff, 0x6000, 0x0, 0x7fff, 0x0, 0x5eb, 0x92, 0xe, 0x64df, 0x401, 0x2, 0x0, 0x6, 0x5, 0xfffffff3, 0x4, 0x1ff, 0x73a06e77, 0x3, 0x6, 0x68af01e8, 0x9, 0x0, 0x5, 0x3, 0xb2f, 0xac, 0x8, 0x0, 0x2, 0x28b5, 0x80000000, 0x6, 0x0, 0x7ff, 0xff, 0x9, 0xfffffff2, 0x3ff, 0xffffffff, 0x3700, 0x9, 0x2, 0x8001, 0x80, 0x3, 0x9, 0xf2db, 0xd, 0x80000000, 0x80000000, 0x6, 0x9, 0xd, 0x40, 0x4, 0xfffffffb, 0x9, 0x400, 0x10000000, 0x5, 0xfffffffa, 0x132bbcbc, 0xf, 0x200, 0xd, 0xffffff81, 0x709, 0xc68, 0x8bd7, 0x2, 0xffff, 0x4, 0xf8e, 0x8, 0x5, 0x8de7, 0x9, 0x819, 0x9, 0x10001, 0x5, 0x0, 0x2, 0x0, 0x5, 0x3ff, 0xfffffff4, 0x7, 0xc3, 0x2, 0x5, 0x4, 0x9, 0x9, 0x9, 0x7fffffff, 0x2, 0x9, 0x1, 0x1, 0x3, 0xd, 0x1, 0x1b, 0x101, 0x1, 0x2, 0x0, 0x5, 0x9, 0x400, 0xffff8627, 0x3ff, 0x4, 0x80000001, 0x7ff, 0xc494, 0x3ff]}]}}]}, 0x10a0}}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) 481.778734ms ago: executing program 0 (id=2581): unshare(0x2040400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}], 0x1) r3 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) 328.764746ms ago: executing program 0 (id=2582): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000300)={0x0, &(0x7f0000000300)}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x66) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x1, @local}, 0x4a, {0x2, 0x4e23, @dev}}) socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f00000000c0)="b2", 0x5f65bd31, 0x20008840, &(0x7f0000000040)={0xa, 0x2, 0x80398, @loopback, 0xfffffffe}, 0x1c) 281.846767ms ago: executing program 6 (id=2583): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005", @ANYRESHEX=0x0], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x0) vmsplice(r3, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) write(r1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000ed07449e00000303009497bfb3f9fc00", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095", @ANYRESDEC=r0, @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x80}, 0x18) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000068000100781be03c4f5023c0020000000000000004000b"], 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) socket$inet6_udplite(0xa, 0x2, 0x88) 152.121938ms ago: executing program 5 (id=2584): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r1, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) capset(0x0, &(0x7f0000000000)={0x200000, 0x200000, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) 129.432529ms ago: executing program 4 (id=2585): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0xa, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1c2}]}, &(0x7f0000000140)=0x10) fchownat(0xffffffffffffffff, 0x0, 0xee00, 0x0, 0x400) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_score_adj\x00') write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYRESOCT], 0x6ad) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14c}}) r4 = socket$nl_route(0x10, 0x3, 0x0) flock(r4, 0x8) socket$packet(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 4 (id=2586): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='ns\x00') fchdir(r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x1f00, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x5ff5}, 0x18) r3 = memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f', 0x0) write$bt_hci(r3, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r2], 0x1b) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000900c000000000000000000001801000020756c0900000000000000207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc, 0xc5a, 0xfffffffb, 0x9, 0x40, 0x3, 0x7f, 0x7, 0x6}}}}]}, 0x58}}, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) dup(0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fsetxattr$trusted_overlay_redirect(r8, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r8, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r9 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x42, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, @perf_config_ext={0x7f}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) kernel console output (not intermixed with test programs): a0 [ 163.167350][ T9356] ? clear_bhb_loop+0x40/0x90 [ 163.167369][ T9356] ? clear_bhb_loop+0x40/0x90 [ 163.167388][ T9356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.167414][ T9356] RIP: 0033:0x7fbbed35e969 [ 163.167443][ T9356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.167465][ T9356] RSP: 002b:00007fbbeb9c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 163.167492][ T9356] RAX: ffffffffffffffda RBX: 00007fbbed585fa0 RCX: 00007fbbed35e969 [ 163.167509][ T9356] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 163.167525][ T9356] RBP: 00007fbbeb9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 163.167560][ T9356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.167628][ T9356] R13: 0000000000000000 R14: 00007fbbed585fa0 R15: 00007ffc20744768 [ 163.167646][ T9356] [ 163.405744][ T9358] loop6: detected capacity change from 0 to 1764 [ 163.412823][ T9358] iso9660: Bad value for 'uid' [ 163.417729][ T9358] iso9660: Bad value for 'uid' [ 163.426911][ T9360] __nla_validate_parse: 8 callbacks suppressed [ 163.426926][ T9360] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1994'. [ 163.454417][ T9360] ALSA: seq fatal error: cannot create timer (-19) [ 163.517580][ T9368] loop4: detected capacity change from 0 to 8192 [ 163.524792][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.556744][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1997'. [ 163.565894][ T9368] IPVS: Error joining to the multicast group [ 163.582587][ T9375] loop2: detected capacity change from 0 to 8192 [ 163.628015][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1998'. [ 163.637452][ T9375] IPVS: Error joining to the multicast group [ 163.741094][ T9393] FAULT_INJECTION: forcing a failure. [ 163.741094][ T9393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.743808][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2003'. [ 163.754690][ T9393] CPU: 1 UID: 0 PID: 9393 Comm: syz.2.2000 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 163.754792][ T9393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 163.754811][ T9393] Call Trace: [ 163.754819][ T9393] [ 163.754894][ T9393] __dump_stack+0x1d/0x30 [ 163.754924][ T9393] dump_stack_lvl+0xe8/0x140 [ 163.754955][ T9393] dump_stack+0x15/0x1b [ 163.754983][ T9393] should_fail_ex+0x265/0x280 [ 163.755027][ T9393] should_fail+0xb/0x20 [ 163.755088][ T9393] should_fail_usercopy+0x1a/0x20 [ 163.755106][ T9393] strncpy_from_user+0x25/0x230 [ 163.755131][ T9393] ? kmem_cache_alloc_noprof+0x186/0x310 [ 163.755156][ T9393] ? getname_flags+0x80/0x3b0 [ 163.755238][ T9393] getname_flags+0xae/0x3b0 [ 163.755340][ T9393] user_path_at+0x28/0x130 [ 163.755372][ T9393] __se_sys_mount_setattr+0x136/0x240 [ 163.755415][ T9393] __x64_sys_mount_setattr+0x67/0x80 [ 163.755453][ T9393] x64_sys_call+0xda0/0x2fb0 [ 163.755548][ T9393] do_syscall_64+0xd0/0x1a0 [ 163.755578][ T9393] ? clear_bhb_loop+0x40/0x90 [ 163.755606][ T9393] ? clear_bhb_loop+0x40/0x90 [ 163.755634][ T9393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.755727][ T9393] RIP: 0033:0x7f74a333e969 [ 163.755843][ T9393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.755866][ T9393] RSP: 002b:00007f74a19a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 163.755890][ T9393] RAX: ffffffffffffffda RBX: 00007f74a3565fa0 RCX: 00007f74a333e969 [ 163.755922][ T9393] RDX: 0000000000000800 RSI: 0000200000004900 RDI: ffffffffffffffff [ 163.755938][ T9393] RBP: 00007f74a19a7090 R08: 0000000000000020 R09: 0000000000000000 [ 163.755958][ T9393] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 163.755981][ T9393] R13: 0000000000000000 R14: 00007f74a3565fa0 R15: 00007ffe98d09138 [ 163.756005][ T9393] [ 163.956887][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2003'. [ 163.967867][ T9395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2004'. [ 163.976940][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2004'. [ 163.987695][ T9395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9395 comm=syz.2.2004 [ 164.162821][ T9405] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2007'. [ 164.221237][ T9408] loop5: detected capacity change from 0 to 512 [ 164.230804][ T9402] ALSA: seq fatal error: cannot create timer (-19) [ 164.282430][ T9408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.299509][ T9408] ext4 filesystem being mounted at /325/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.300358][ T9409] loop4: detected capacity change from 0 to 8192 [ 164.357260][ T9404] random: crng reseeded on system resumption [ 164.405572][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2009'. [ 164.415280][ T9409] IPVS: Error joining to the multicast group [ 164.422225][ T29] kauditd_printk_skb: 694 callbacks suppressed [ 164.422241][ T29] audit: type=1326 audit(1747247178.452:12535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.5.2008" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe7c79e969 code=0x0 [ 164.457463][ T29] audit: type=1400 audit(1747247178.482:12536): avc: denied { read write } for pid=9425 comm="syz.0.2014" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 164.482039][ T29] audit: type=1400 audit(1747247178.482:12537): avc: denied { open } for pid=9425 comm="syz.0.2014" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 164.506647][ T29] audit: type=1400 audit(1747247178.492:12538): avc: denied { ioctl } for pid=9425 comm="syz.0.2014" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 164.559887][ T4541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.570359][ T29] audit: type=1400 audit(1747247178.602:12539): avc: denied { create } for pid=9431 comm="syz.6.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 164.618447][ T9435] netlink: 'syz.4.2016': attribute type 21 has an invalid length. [ 164.641639][ T9438] tmpfs: Bad value for 'mpol' [ 164.648375][ T9438] loop0: detected capacity change from 0 to 256 [ 164.655443][ T9438] vfat: Unexpected value for 'rodir' [ 164.660922][ T9435] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2016'. [ 164.686265][ T29] audit: type=1400 audit(1747247178.622:12540): avc: denied { shutdown } for pid=9431 comm="syz.6.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 164.706377][ T29] audit: type=1400 audit(1747247178.622:12541): avc: denied { setopt } for pid=9431 comm="syz.6.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 164.726029][ T29] audit: type=1400 audit(1747247178.622:12542): avc: denied { getopt } for pid=9431 comm="syz.6.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 164.745622][ T29] audit: type=1400 audit(1747247178.622:12543): avc: denied { bind } for pid=9431 comm="syz.6.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 164.766197][ T29] audit: type=1400 audit(1747247178.622:12544): avc: denied { setopt } for pid=9431 comm="syz.6.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 164.839315][ T9446] loop5: detected capacity change from 0 to 256 [ 165.138139][ T9459] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.281949][ T9458] loop0: detected capacity change from 0 to 512 [ 165.326531][ T9459] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.388013][ T9458] EXT4-fs (loop0): failed to initialize system zone (-117) [ 165.398805][ T9458] EXT4-fs (loop0): mount failed [ 165.408038][ T9459] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.419799][ T9467] xt_TPROXY: Can be used only with -p tcp or -p udp [ 165.475198][ T9465] loop5: detected capacity change from 0 to 8192 [ 165.507728][ T9459] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.588519][ T9459] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.600359][ T9459] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.612599][ T9459] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.624825][ T9459] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.633361][ T9475] IPVS: Error joining to the multicast group [ 165.742670][ T9478] ALSA: seq fatal error: cannot create timer (-19) [ 165.759124][ T9482] FAULT_INJECTION: forcing a failure. [ 165.759124][ T9482] name failslab, interval 1, probability 0, space 0, times 0 [ 165.772231][ T9482] CPU: 1 UID: 0 PID: 9482 Comm: syz.5.2031 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 165.772295][ T9482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 165.772312][ T9482] Call Trace: [ 165.772320][ T9482] [ 165.772330][ T9482] __dump_stack+0x1d/0x30 [ 165.772356][ T9482] dump_stack_lvl+0xe8/0x140 [ 165.772377][ T9482] dump_stack+0x15/0x1b [ 165.772419][ T9482] should_fail_ex+0x265/0x280 [ 165.772460][ T9482] should_failslab+0x8c/0xb0 [ 165.772557][ T9482] __kmalloc_noprof+0xa5/0x3e0 [ 165.772648][ T9482] ? do_handle_open+0x324/0x640 [ 165.772676][ T9482] do_handle_open+0x324/0x640 [ 165.772708][ T9482] __x64_sys_open_by_handle_at+0x44/0x50 [ 165.772798][ T9482] x64_sys_call+0xaa0/0x2fb0 [ 165.772825][ T9482] do_syscall_64+0xd0/0x1a0 [ 165.772855][ T9482] ? clear_bhb_loop+0x40/0x90 [ 165.772883][ T9482] ? clear_bhb_loop+0x40/0x90 [ 165.772947][ T9482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.772971][ T9482] RIP: 0033:0x7efe7c79e969 [ 165.772986][ T9482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.773003][ T9482] RSP: 002b:00007efe7ae07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 165.773024][ T9482] RAX: ffffffffffffffda RBX: 00007efe7c9c5fa0 RCX: 00007efe7c79e969 [ 165.773099][ T9482] RDX: 0200000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 165.773176][ T9482] RBP: 00007efe7ae07090 R08: 0000000000000000 R09: 0000000000000000 [ 165.773191][ T9482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.773206][ T9482] R13: 0000000000000000 R14: 00007efe7c9c5fa0 R15: 00007fffee087a58 [ 165.773227][ T9482] [ 165.987372][ T9485] loop5: detected capacity change from 0 to 512 [ 166.011117][ T9485] EXT4-fs (loop5): failed to initialize system zone (-117) [ 166.046682][ T9485] EXT4-fs (loop5): mount failed [ 166.138437][ T9500] loop5: detected capacity change from 0 to 256 [ 166.248755][ T9510] xt_TPROXY: Can be used only with -p tcp or -p udp [ 166.263999][ T9509] loop4: detected capacity change from 0 to 1024 [ 166.321170][ T9509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.367741][ T9517] ALSA: seq fatal error: cannot create timer (-19) [ 166.710485][ T9527] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.980496][ T9527] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.048631][ T9527] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.108061][ T9527] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.149692][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.179029][ T9527] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.191445][ T9527] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.203594][ T9527] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.215531][ T9527] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.777556][ T9548] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.144817][ T9550] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.423920][ T9548] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.493127][ T9560] __nla_validate_parse: 8 callbacks suppressed [ 168.493151][ T9560] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2054'. [ 168.542878][ T9550] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.627103][ T9561] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.909285][ T9548] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.926771][ T9550] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.212936][ T9560] ALSA: seq fatal error: cannot create timer (-19) [ 169.225832][ T9561] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.238254][ T9548] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.251027][ T9550] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.287774][ T9561] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.306669][ T9574] capability: warning: `syz.5.2058' uses deprecated v2 capabilities in a way that may be insecure [ 169.333935][ T9550] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.345857][ T9550] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.357886][ T9550] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.374670][ T9550] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.389869][ T9561] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.417994][ T9582] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2060'. [ 169.431517][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 169.431580][ T29] audit: type=1400 audit(1747247183.462:12892): avc: denied { ioctl } for pid=9581 comm="syz.5.2060" path="socket:[29955]" dev="sockfs" ino=29955 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 169.464391][ T29] audit: type=1400 audit(1747247183.462:12893): avc: denied { module_request } for pid=9581 comm="syz.5.2060" kmod="netdev-batadv0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 169.488949][ T29] audit: type=1400 audit(1747247183.502:12894): avc: denied { read } for pid=9584 comm="syz.0.2061" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 169.489655][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2060'. [ 169.512043][ T29] audit: type=1400 audit(1747247183.502:12895): avc: denied { open } for pid=9584 comm="syz.0.2061" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 169.512088][ T29] audit: type=1400 audit(1747247183.512:12896): avc: denied { sys_module } for pid=9581 comm="syz.5.2060" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 169.548900][ T29] audit: type=1400 audit(1747247183.582:12897): avc: denied { open } for pid=9581 comm="syz.5.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 169.586139][ T29] audit: type=1400 audit(1747247183.582:12898): avc: denied { kernel } for pid=9581 comm="syz.5.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 169.606923][ T29] audit: type=1400 audit(1747247183.622:12899): avc: denied { write } for pid=9581 comm="syz.5.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 169.611519][ T9561] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.626635][ T29] audit: type=1326 audit(1747247183.622:12900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9581 comm="syz.5.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7c79e969 code=0x7ffc0000 [ 169.638325][ T9561] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.658225][ T29] audit: type=1326 audit(1747247183.622:12901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9581 comm="syz.5.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7c79e969 code=0x7ffc0000 [ 169.670399][ T9561] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.701724][ T9561] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.782801][ T9596] loop5: detected capacity change from 0 to 512 [ 169.792079][ T9596] EXT4-fs (loop5): failed to initialize system zone (-117) [ 169.799628][ T9596] EXT4-fs (loop5): mount failed [ 169.847768][ T9602] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2067'. [ 169.857137][ T9600] loop5: detected capacity change from 0 to 256 [ 169.874188][ T9600] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2066'. [ 169.874224][ T9602] ALSA: seq fatal error: cannot create timer (-19) [ 170.021663][ T9612] loop2: detected capacity change from 0 to 1024 [ 170.032326][ T9612] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2070: Failed to acquire dquot type 0 [ 170.044990][ T9612] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 170.062861][ T9612] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2070: corrupted inode contents [ 170.094466][ T9612] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.2070: mark_inode_dirty error [ 170.107571][ T9612] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2070: corrupted inode contents [ 170.111093][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2071'. [ 170.128423][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2071'. [ 170.146400][ T9612] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.2070: mark_inode_dirty error [ 170.172502][ T9612] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2070: corrupted inode contents [ 170.227973][ T9612] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 170.237320][ T9612] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2070: corrupted inode contents [ 170.256493][ T9612] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.2070: mark_inode_dirty error [ 170.288650][ T9612] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 170.329865][ T9612] EXT4-fs (loop2): 1 truncate cleaned up [ 170.344135][ T9612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.359949][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2074'. [ 170.369199][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2074'. [ 170.418219][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.512027][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2078'. [ 170.657652][ T9635] ALSA: seq fatal error: cannot create timer (-19) [ 170.764603][ T9642] loop5: detected capacity change from 0 to 512 [ 170.773359][ T9642] EXT4-fs: Ignoring removed orlov option [ 170.859707][ T9642] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.893179][ T9642] ext4 filesystem being mounted at /349/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.929950][ T9651] loop4: detected capacity change from 0 to 512 [ 170.948108][ T9651] EXT4-fs (loop4): failed to initialize system zone (-117) [ 170.955818][ T9651] EXT4-fs (loop4): mount failed [ 171.433182][ T9660] 9pnet: Could not find request transport: r [ 171.645085][ T4541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.902507][ T9666] loop4: detected capacity change from 0 to 256 [ 172.281477][ T9675] siw: device registration error -23 [ 172.290178][ T9675] loop2: detected capacity change from 0 to 512 [ 172.296850][ T9675] ext4: Unknown parameter 'nouser_xattr' [ 172.351622][ T9681] loop2: detected capacity change from 0 to 512 [ 172.368646][ T9681] EXT4-fs (loop2): 1 orphan inode deleted [ 172.374922][ T9681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.387755][ T9681] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.398412][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 172.411386][ T9681] FAULT_INJECTION: forcing a failure. [ 172.411386][ T9681] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 172.424738][ T9681] CPU: 1 UID: 0 PID: 9681 Comm: syz.2.2095 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 172.424774][ T9681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 172.424790][ T9681] Call Trace: [ 172.424799][ T9681] [ 172.424808][ T9681] __dump_stack+0x1d/0x30 [ 172.424864][ T9681] dump_stack_lvl+0xe8/0x140 [ 172.424942][ T9681] dump_stack+0x15/0x1b [ 172.424963][ T9681] should_fail_ex+0x265/0x280 [ 172.425019][ T9681] should_fail_alloc_page+0xf2/0x100 [ 172.425130][ T9681] __alloc_frozen_pages_noprof+0xff/0x360 [ 172.425184][ T9681] alloc_pages_mpol+0xb3/0x250 [ 172.425205][ T9681] folio_alloc_noprof+0x97/0x150 [ 172.425226][ T9681] filemap_alloc_folio_noprof+0x66/0x210 [ 172.425252][ T9681] __filemap_get_folio+0x28f/0x650 [ 172.425353][ T9681] ext4_write_begin+0x1b4/0xc30 [ 172.425437][ T9681] ? cap_inode_need_killpriv+0x3a/0x50 [ 172.425467][ T9681] ? security_inode_need_killpriv+0x1e/0x70 [ 172.425546][ T9681] ? inode_to_bdi+0x47/0xa0 [ 172.425564][ T9681] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 172.425601][ T9681] generic_perform_write+0x181/0x490 [ 172.425635][ T9681] ext4_buffered_write_iter+0x1ee/0x3c0 [ 172.425699][ T9681] ? ext4_file_write_iter+0xfe/0xf00 [ 172.425732][ T9681] ext4_file_write_iter+0x383/0xf00 [ 172.425787][ T9681] ? kstrtouint_from_user+0x9f/0xf0 [ 172.425843][ T9681] ? avc_policy_seqno+0x15/0x30 [ 172.425945][ T9681] ? selinux_file_permission+0x213/0x360 [ 172.426049][ T9681] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 172.426082][ T9681] vfs_write+0x49d/0x8d0 [ 172.426248][ T9681] ksys_write+0xda/0x1a0 [ 172.426272][ T9681] __x64_sys_write+0x40/0x50 [ 172.426296][ T9681] x64_sys_call+0x2cdd/0x2fb0 [ 172.426354][ T9681] do_syscall_64+0xd0/0x1a0 [ 172.426376][ T9681] ? clear_bhb_loop+0x40/0x90 [ 172.426394][ T9681] ? clear_bhb_loop+0x40/0x90 [ 172.426451][ T9681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.426470][ T9681] RIP: 0033:0x7f74a333e969 [ 172.426483][ T9681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.426498][ T9681] RSP: 002b:00007f74a19a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.426514][ T9681] RAX: ffffffffffffffda RBX: 00007f74a3565fa0 RCX: 00007f74a333e969 [ 172.426529][ T9681] RDX: 000000000208e24b RSI: 00002000000004c0 RDI: 0000000000000007 [ 172.426592][ T9681] RBP: 00007f74a19a7090 R08: 0000000000000000 R09: 0000000000000000 [ 172.426607][ T9681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.426622][ T9681] R13: 0000000000000000 R14: 00007f74a3565fa0 R15: 00007ffe98d09138 [ 172.426643][ T9681] [ 172.706108][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.852217][ T9548] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.864560][ T9548] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.876987][ T9548] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.889748][ T9548] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.899078][ T9700] loop0: detected capacity change from 0 to 8192 [ 172.916424][ T9702] FAULT_INJECTION: forcing a failure. [ 172.916424][ T9702] name failslab, interval 1, probability 0, space 0, times 0 [ 172.929280][ T9702] CPU: 0 UID: 0 PID: 9702 Comm: syz.4.2102 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 172.929316][ T9702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 172.929348][ T9702] Call Trace: [ 172.929357][ T9702] [ 172.929366][ T9702] __dump_stack+0x1d/0x30 [ 172.929389][ T9702] dump_stack_lvl+0xe8/0x140 [ 172.929408][ T9702] dump_stack+0x15/0x1b [ 172.929434][ T9702] should_fail_ex+0x265/0x280 [ 172.929505][ T9702] should_failslab+0x8c/0xb0 [ 172.929572][ T9702] __kmalloc_noprof+0xa5/0x3e0 [ 172.929596][ T9702] ? bpf_test_init+0xa9/0x160 [ 172.929661][ T9702] bpf_test_init+0xa9/0x160 [ 172.929691][ T9702] bpf_prog_test_run_xdp+0x274/0x8f0 [ 172.929728][ T9702] ? kstrtouint+0x76/0xc0 [ 172.929805][ T9702] ? kstrtouint_from_user+0x9f/0xf0 [ 172.929843][ T9702] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 172.929880][ T9702] bpf_prog_test_run+0x20a/0x390 [ 172.929954][ T9702] __sys_bpf+0x3dc/0x790 [ 172.929988][ T9702] __x64_sys_bpf+0x41/0x50 [ 172.930013][ T9702] x64_sys_call+0x2478/0x2fb0 [ 172.930045][ T9702] do_syscall_64+0xd0/0x1a0 [ 172.930138][ T9702] ? clear_bhb_loop+0x40/0x90 [ 172.930164][ T9702] ? clear_bhb_loop+0x40/0x90 [ 172.930206][ T9702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.930234][ T9702] RIP: 0033:0x7ffab3f0e969 [ 172.930252][ T9702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.930319][ T9702] RSP: 002b:00007ffab2577038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 172.930341][ T9702] RAX: ffffffffffffffda RBX: 00007ffab4135fa0 RCX: 00007ffab3f0e969 [ 172.930353][ T9702] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 172.930364][ T9702] RBP: 00007ffab2577090 R08: 0000000000000000 R09: 0000000000000000 [ 172.930375][ T9702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.930386][ T9702] R13: 0000000000000000 R14: 00007ffab4135fa0 R15: 00007ffd24844728 [ 172.930406][ T9702] [ 173.150005][ T9705] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.174703][ T9700] IPVS: Error joining to the multicast group [ 173.175596][ T9711] siw: device registration error -23 [ 173.191840][ T9711] loop4: detected capacity change from 0 to 512 [ 173.198492][ T9711] ext4: Unknown parameter 'nouser_xattr' [ 173.292842][ T9720] loop0: detected capacity change from 0 to 8192 [ 173.337324][ T9720] IPVS: Error joining to the multicast group [ 173.408833][ T9731] loop0: detected capacity change from 0 to 256 [ 173.518328][ T9736] loop6: detected capacity change from 0 to 256 [ 173.529334][ T9736] __nla_validate_parse: 8 callbacks suppressed [ 173.529354][ T9736] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2112'. [ 173.618388][ T9744] loop2: detected capacity change from 0 to 256 [ 173.643397][ T9742] loop6: detected capacity change from 0 to 8192 [ 173.658940][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2114'. [ 173.668194][ T9742] IPVS: Error joining to the multicast group [ 173.669353][ T9751] siw: device registration error -23 [ 173.683933][ T9751] loop2: detected capacity change from 0 to 512 [ 173.691502][ T9751] ext4: Unknown parameter 'nouser_xattr' [ 173.738193][ T3392] hid-generic 0000:0004:0000.0007: item fetching failed at offset 0/3 [ 173.747933][ T3392] hid-generic 0000:0004:0000.0007: probe with driver hid-generic failed with error -22 [ 173.840603][ T9761] loop6: detected capacity change from 0 to 8192 [ 173.856901][ T9761] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2121'. [ 173.865996][ T9761] IPVS: Error joining to the multicast group [ 173.928893][ T9766] loop6: detected capacity change from 0 to 256 [ 173.932481][ T9768] xt_TPROXY: Can be used only with -p tcp or -p udp [ 173.949389][ T9766] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2122'. [ 174.241923][ T9785] loop4: detected capacity change from 0 to 256 [ 174.275596][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2128'. [ 174.294538][ T9787] loop0: detected capacity change from 0 to 512 [ 174.312831][ T9787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.327350][ T9787] ext4 filesystem being mounted at /383/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.341455][ T9787] random: crng reseeded on system resumption [ 174.466604][ T29] kauditd_printk_skb: 487 callbacks suppressed [ 174.466631][ T29] audit: type=1107 audit(1747247188.502:13386): pid=9795 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='l' [ 174.487443][ T29] audit: type=1400 audit(1747247188.522:13387): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 174.488213][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.571410][ T29] audit: type=1326 audit(1747247188.602:13388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9799 comm="syz.0.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0b9ce969 code=0x7ffc0000 [ 174.595312][ T29] audit: type=1326 audit(1747247188.602:13389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9799 comm="syz.0.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0b9ce969 code=0x7ffc0000 [ 174.619081][ T29] audit: type=1326 audit(1747247188.602:13390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9799 comm="syz.0.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa0b9ce969 code=0x7ffc0000 [ 174.642868][ T29] audit: type=1326 audit(1747247188.602:13391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9799 comm="syz.0.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0b9ce969 code=0x7ffc0000 [ 174.666520][ T29] audit: type=1326 audit(1747247188.602:13392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9799 comm="syz.0.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7ffa0b9ce969 code=0x7ffc0000 [ 174.690456][ T29] audit: type=1326 audit(1747247188.602:13393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9799 comm="syz.0.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0b9ce969 code=0x7ffc0000 [ 174.714240][ T29] audit: type=1326 audit(1747247188.602:13394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9799 comm="syz.0.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7ffa0b9ce969 code=0x7ffc0000 [ 174.720635][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2134'. [ 174.737959][ T29] audit: type=1326 audit(1747247188.602:13395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9799 comm="syz.0.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0b9ce969 code=0x7ffc0000 [ 174.746786][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2134'. [ 174.873007][ T9806] team0: Port device team_slave_1 removed [ 174.909164][ T9808] loop0: detected capacity change from 0 to 256 [ 174.964892][ T9812] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2138'. [ 174.982617][ T9813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2136'. [ 174.991955][ T9812] ALSA: seq fatal error: cannot create timer (-19) [ 175.050466][ T9816] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.118201][ T9816] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.138922][ T9826] xt_TPROXY: Can be used only with -p tcp or -p udp [ 175.188966][ T9816] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.228100][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2146'. [ 175.245875][ T9816] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.372840][ T9844] FAULT_INJECTION: forcing a failure. [ 175.372840][ T9844] name failslab, interval 1, probability 0, space 0, times 0 [ 175.385623][ T9844] CPU: 0 UID: 0 PID: 9844 Comm: syz.2.2150 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 175.385651][ T9844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 175.385666][ T9844] Call Trace: [ 175.385674][ T9844] [ 175.385720][ T9844] __dump_stack+0x1d/0x30 [ 175.385744][ T9844] dump_stack_lvl+0xe8/0x140 [ 175.385776][ T9844] dump_stack+0x15/0x1b [ 175.385820][ T9844] should_fail_ex+0x265/0x280 [ 175.385854][ T9844] should_failslab+0x8c/0xb0 [ 175.385885][ T9844] kmem_cache_alloc_node_noprof+0x57/0x320 [ 175.385910][ T9844] ? __alloc_skb+0x101/0x320 [ 175.385953][ T9844] __alloc_skb+0x101/0x320 [ 175.386004][ T9840] loop5: detected capacity change from 0 to 8192 [ 175.385991][ T9844] ? audit_log_start+0x365/0x6c0 [ 175.386107][ T9844] audit_log_start+0x380/0x6c0 [ 175.386215][ T9844] audit_seccomp+0x48/0x100 [ 175.386249][ T9844] ? __seccomp_filter+0x68c/0x10d0 [ 175.386278][ T9844] __seccomp_filter+0x69d/0x10d0 [ 175.386374][ T9844] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 175.386410][ T9844] ? vfs_write+0x75e/0x8d0 [ 175.386460][ T9844] __secure_computing+0x82/0x150 [ 175.386489][ T9844] syscall_trace_enter+0xcf/0x1e0 [ 175.386522][ T9844] do_syscall_64+0xaa/0x1a0 [ 175.386553][ T9844] ? clear_bhb_loop+0x40/0x90 [ 175.386644][ T9844] ? clear_bhb_loop+0x40/0x90 [ 175.386672][ T9844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.386736][ T9844] RIP: 0033:0x7f74a333e969 [ 175.386750][ T9844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.386772][ T9844] RSP: 002b:00007f74a19a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000014d [ 175.386796][ T9844] RAX: ffffffffffffffda RBX: 00007f74a3565fa0 RCX: 00007f74a333e969 [ 175.386812][ T9844] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 175.386887][ T9844] RBP: 00007f74a19a7090 R08: 0000000000000000 R09: 0000000000000000 [ 175.386903][ T9844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.386918][ T9844] R13: 0000000000000000 R14: 00007f74a3565fa0 R15: 00007ffe98d09138 [ 175.386943][ T9844] [ 175.614375][ T9840] IPVS: Error joining to the multicast group [ 175.648569][ T9852] xt_TPROXY: Can be used only with -p tcp or -p udp [ 175.754503][ T9856] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9856 comm=syz.0.2154 [ 175.768990][ T9856] tipc: Invalid UDP bearer configuration [ 175.769004][ T9856] tipc: Enabling of bearer rejected, failed to enable media [ 175.818535][ T9859] loop0: detected capacity change from 0 to 256 [ 176.467748][ T9870] loop2: detected capacity change from 0 to 512 [ 176.475276][ T9870] EXT4-fs: Ignoring removed orlov option [ 176.518984][ T9870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.546549][ T9870] ext4 filesystem being mounted at /438/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.603162][ T9874] siw: device registration error -23 [ 176.652590][ T9874] loop5: detected capacity change from 0 to 512 [ 176.683500][ T9874] ext4: Unknown parameter 'nouser_xattr' [ 176.713229][ T9878] xt_TPROXY: Can be used only with -p tcp or -p udp [ 176.848871][ T9885] loop5: detected capacity change from 0 to 256 [ 177.462138][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.733169][ T9816] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.748964][ T9816] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.765186][ T9913] loop2: detected capacity change from 0 to 512 [ 177.770974][ T9816] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.786431][ T9913] EXT4-fs: Ignoring removed orlov option [ 177.791138][ T9816] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.828875][ T9913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.847353][ T9919] xt_TPROXY: Can be used only with -p tcp or -p udp [ 177.856284][ T9913] ext4 filesystem being mounted at /441/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.065183][ T9931] tipc: Invalid UDP bearer configuration [ 178.065198][ T9931] tipc: Enabling of bearer rejected, failed to enable media [ 178.142684][ T9935] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.469157][ T9935] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.491981][ T9940] loop5: detected capacity change from 0 to 256 [ 178.528499][ T9935] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.558145][ T9939] __nla_validate_parse: 8 callbacks suppressed [ 178.558165][ T9939] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2182'. [ 178.587870][ T9935] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.598040][ T9936] loop6: detected capacity change from 0 to 8192 [ 178.623080][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2183'. [ 178.648886][ T9936] IPVS: Error joining to the multicast group [ 178.655623][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.675776][ T9935] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.687641][ T9935] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.700179][ T9935] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.712514][ T9935] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.811522][ T9948] loop6: detected capacity change from 0 to 256 [ 178.823953][ T9948] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2187'. [ 178.849154][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2185'. [ 178.858434][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2185'. [ 179.024975][ T9966] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2193'. [ 179.034277][ T9966] tipc: Invalid UDP bearer configuration [ 179.034295][ T9966] tipc: Enabling of bearer rejected, failed to enable media [ 179.606201][ T9994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2201'. [ 179.615352][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2201'. [ 179.650379][ T9994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9994 comm=syz.0.2201 [ 179.861251][ T29] kauditd_printk_skb: 403 callbacks suppressed [ 179.861269][ T29] audit: type=1400 audit(1747247193.892:13797): avc: denied { create } for pid=10001 comm="syz.4.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 179.902406][T10002] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.935005][T10004] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2206'. [ 179.944308][T10004] tipc: Invalid UDP bearer configuration [ 179.944324][T10004] tipc: Enabling of bearer rejected, failed to enable media [ 179.998597][T10002] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.057628][T10002] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.067455][T10022] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2211'. [ 180.079461][T10023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10023 comm=syz.2.2213 [ 180.087604][ T29] audit: type=1400 audit(1747247194.112:13798): avc: denied { ioctl } for pid=10018 comm="syz.6.2211" path="socket:[32232]" dev="sockfs" ino=32232 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.136726][ T29] audit: type=1400 audit(1747247194.162:13799): avc: denied { prog_load } for pid=10017 comm="syz.5.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 180.156335][ T29] audit: type=1400 audit(1747247194.162:13800): avc: denied { bpf } for pid=10017 comm="syz.5.2212" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 180.177194][ T29] audit: type=1400 audit(1747247194.162:13801): avc: denied { perfmon } for pid=10017 comm="syz.5.2212" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 180.198377][ T29] audit: type=1400 audit(1747247194.162:13802): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.222850][ T29] audit: type=1400 audit(1747247194.162:13803): avc: denied { open } for pid=3320 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.247463][ T29] audit: type=1400 audit(1747247194.162:13804): avc: denied { ioctl } for pid=3320 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.273581][ T29] audit: type=1400 audit(1747247194.172:13805): avc: denied { mount } for pid=10017 comm="syz.5.2212" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 180.273874][T10020] team0: Port device team_slave_1 removed [ 180.296271][ T29] audit: type=1400 audit(1747247194.212:13806): avc: denied { create } for pid=10024 comm="syz.2.2214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.327971][T10022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.335535][T10022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.352563][T10022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.360152][T10022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.372340][T10002] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.472690][T10002] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.484832][T10002] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.495881][T10002] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.508271][T10002] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.599866][T10039] loop4: detected capacity change from 0 to 512 [ 180.620353][T10039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.641312][T10039] ext4 filesystem being mounted at /477/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.680967][T10037] random: crng reseeded on system resumption [ 180.820532][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.908408][T10047] 9pnet: Could not find request transport: r [ 181.058430][T10050] loop2: detected capacity change from 0 to 8192 [ 181.087662][T10050] IPVS: Error joining to the multicast group [ 181.129593][T10057] tipc: Invalid UDP bearer configuration [ 181.129608][T10057] tipc: Enabling of bearer rejected, failed to enable media [ 181.287727][T10064] loop5: detected capacity change from 0 to 512 [ 181.294538][T10064] EXT4-fs: Ignoring removed orlov option [ 181.307834][T10064] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.321245][T10064] ext4 filesystem being mounted at /383/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.837268][T10074] ALSA: seq fatal error: cannot create timer (-19) [ 182.101942][T10087] xt_TPROXY: Can be used only with -p tcp or -p udp [ 182.131021][ T4541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.182687][T10089] tipc: Invalid UDP bearer configuration [ 182.182706][T10089] tipc: Enabling of bearer rejected, failed to enable media [ 182.252645][T10092] loop5: detected capacity change from 0 to 8192 [ 182.313915][T10092] IPVS: Error joining to the multicast group [ 182.423510][T10106] loop5: detected capacity change from 0 to 512 [ 182.443362][T10106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.466257][T10106] ext4 filesystem being mounted at /385/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.570540][T10104] random: crng reseeded on system resumption [ 182.718204][ T3316] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 182.729250][ T3316] CPU: 0 UID: 0 PID: 3316 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 182.729288][ T3316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 182.729304][ T3316] Call Trace: [ 182.729312][ T3316] [ 182.729321][ T3316] __dump_stack+0x1d/0x30 [ 182.729343][ T3316] dump_stack_lvl+0xe8/0x140 [ 182.729368][ T3316] dump_stack+0x15/0x1b [ 182.729388][ T3316] dump_header+0x81/0x220 [ 182.729443][ T3316] oom_kill_process+0x334/0x3f0 [ 182.729477][ T3316] out_of_memory+0x979/0xb80 [ 182.729586][ T3316] ? css_next_descendant_pre+0x138/0x160 [ 182.729614][ T3316] mem_cgroup_out_of_memory+0x13d/0x190 [ 182.729781][ T3316] try_charge_memcg+0x5e2/0x870 [ 182.729858][ T3316] charge_memcg+0x51/0xc0 [ 182.729881][ T3316] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 182.729909][ T3316] __read_swap_cache_async+0x1df/0x350 [ 182.730052][ T3316] swap_cluster_readahead+0x376/0x3e0 [ 182.730089][ T3316] swapin_readahead+0xde/0x6f0 [ 182.730113][ T3316] ? __filemap_get_folio+0x49f/0x650 [ 182.730196][ T3316] ? next_uptodate_folio+0x81c/0x890 [ 182.730229][ T3316] ? swap_cache_get_folio+0x77/0x200 [ 182.730323][ T3316] do_swap_page+0x301/0x2460 [ 182.730356][ T3316] ? cgroup_rstat_updated+0xa3/0x510 [ 182.730392][ T3316] ? __pfx_default_wake_function+0x10/0x10 [ 182.730437][ T3316] handle_mm_fault+0xb60/0x2ae0 [ 182.730476][ T3316] ? mas_walk+0xf2/0x120 [ 182.730511][ T3316] do_user_addr_fault+0x636/0x1090 [ 182.730556][ T3316] ? restore_fpregs_from_fpstate+0x61/0x120 [ 182.730591][ T3316] ? fpregs_restore_userregs+0xbb/0x190 [ 182.730626][ T3316] exc_page_fault+0x54/0xc0 [ 182.730645][ T3316] asm_exc_page_fault+0x26/0x30 [ 182.730766][ T3316] RIP: 0033:0x7ffab3de5997 [ 182.730785][ T3316] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 08 fe e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 19 fd e7 00 48 01 d1 39 7c 24 [ 182.730807][ T3316] RSP: 002b:00007ffd24844ab0 EFLAGS: 00010206 [ 182.730826][ T3316] RAX: 0000001b32e20000 RBX: 000000000000049e RCX: 000000000002c6f0 [ 182.730842][ T3316] RDX: 000000000a355f5a RSI: 00007ffd24844b40 RDI: 0000000000000015 [ 182.730854][ T3316] RBP: 00007ffd24844aec R08: 0000000026f1398f R09: 7fffffffffffffff [ 182.730866][ T3316] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 182.730878][ T3316] R13: 00000000000927c0 R14: 000000000002c86c R15: 00007ffd24844b40 [ 182.730907][ T3316] [ 182.730915][ T3316] memory: usage 307200kB, limit 307200kB, failcnt 3104 [ 182.981175][ T3316] memory+swap: usage 110112kB, limit 9007199254740988kB, failcnt 0 [ 182.989199][ T3316] kmem: usage 96692kB, limit 9007199254740988kB, failcnt 0 [ 182.996601][ T3316] Memory cgroup stats for /syz4: [ 183.002836][ T3316] cache 131072 [ 183.011231][ T3316] rss 106496 [ 183.014545][ T3316] shmem 0 [ 183.017620][ T3316] mapped_file 4096 [ 183.021408][ T3316] dirty 4096 [ 183.024722][ T3316] writeback 0 [ 183.028111][ T3316] workingset_refault_anon 86 [ 183.032815][ T3316] workingset_refault_file 145 [ 183.037624][ T3316] swap 86016 [ 183.040937][ T3316] swapcached 135168 [ 183.044780][ T3316] pgpgin 186925 [ 183.048526][ T3316] pgpgout 186860 [ 183.052245][ T3316] pgfault 181498 [ 183.055906][ T3316] pgmajfault 48 [ 183.059410][ T3316] inactive_anon 8192 [ 183.063351][ T3316] active_anon 118784 [ 183.067286][ T3316] inactive_file 0 [ 183.070953][ T3316] active_file 126976 [ 183.074943][ T3316] unevictable 0 [ 183.078501][ T3316] hierarchical_memory_limit 314572800 [ 183.083903][ T3316] hierarchical_memsw_limit 9223372036854771712 [ 183.090093][ T3316] total_cache 131072 [ 183.094058][ T3316] total_rss 106496 [ 183.097847][ T3316] total_shmem 0 [ 183.101347][ T3316] total_mapped_file 4096 [ 183.105646][ T3316] total_dirty 4096 [ 183.109501][ T3316] total_writeback 0 [ 183.113331][ T3316] total_workingset_refault_anon 86 [ 183.118482][ T3316] total_workingset_refault_file 145 [ 183.123700][ T3316] total_swap 86016 [ 183.127477][ T3316] total_swapcached 135168 [ 183.131820][ T3316] total_pgpgin 186925 [ 183.135816][ T3316] total_pgpgout 186860 [ 183.139982][ T3316] total_pgfault 181498 [ 183.144246][ T3316] total_pgmajfault 48 [ 183.148452][ T3316] total_inactive_anon 8192 [ 183.152886][ T3316] total_active_anon 118784 [ 183.157444][ T3316] total_inactive_file 0 [ 183.161658][ T3316] total_active_file 126976 [ 183.166215][ T3316] total_unevictable 0 [ 183.170189][ T3316] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2226,pid=10078,uid=0 [ 183.185008][ T3316] Memory cgroup out of memory: Killed process 10078 (syz.4.2226) total-vm:100164kB, anon-rss:1020kB, file-rss:26540kB, shmem-rss:128kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 183.185178][T10079] syz.4.2226 (10079) used greatest stack depth: 9464 bytes left [ 183.204389][ T4541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.417898][T10123] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.458836][T10123] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.472815][T10125] loop5: detected capacity change from 0 to 512 [ 183.674860][T10123] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.719212][T10123] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.782434][T10123] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.792765][T10125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.794617][T10123] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.817152][T10123] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.828757][T10123] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.837985][T10125] ext4 filesystem being mounted at /386/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 183.878264][T10122] random: crng reseeded on system resumption [ 184.075269][T10135] xt_TPROXY: Can be used only with -p tcp or -p udp [ 184.088806][ T4541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.121600][T10141] loop0: detected capacity change from 0 to 256 [ 184.153751][T10142] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.209230][T10141] __nla_validate_parse: 8 callbacks suppressed [ 184.209302][T10141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2242'. [ 184.227653][T10138] loop2: detected capacity change from 0 to 8192 [ 184.228553][T10142] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.317824][T10142] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.338124][T10138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2243'. [ 184.347427][T10138] IPVS: Error joining to the multicast group [ 184.379035][T10142] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.392060][T10154] loop2: detected capacity change from 0 to 256 [ 184.441984][T10142] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.455354][T10142] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.468453][T10142] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.480765][T10142] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.515003][T10159] loop2: detected capacity change from 0 to 512 [ 184.522849][T10159] EXT4-fs: Ignoring removed orlov option [ 184.551482][T10159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.573585][T10159] ext4 filesystem being mounted at /460/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.768302][T10176] loop4: detected capacity change from 0 to 256 [ 184.779468][T10176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2253'. [ 184.814898][T10178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10178 comm=syz.4.2254 [ 184.911480][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 184.911494][ T29] audit: type=1400 audit(1747247198.942:14170): avc: denied { audit_write } for pid=10179 comm="syz.4.2255" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 184.939501][ T29] audit: type=1107 audit(1747247198.942:14171): pid=10179 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='l' [ 184.953946][ T29] audit: type=1400 audit(1747247198.942:14172): avc: denied { create } for pid=10179 comm="syz.4.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 184.974727][ T29] audit: type=1400 audit(1747247198.942:14173): avc: denied { write } for pid=10179 comm="syz.4.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 184.999134][ T29] audit: type=1400 audit(1747247199.032:14174): avc: denied { create } for pid=10183 comm="syz.0.2256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 185.036865][T10186] loop0: detected capacity change from 0 to 256 [ 185.122237][ T29] audit: type=1400 audit(1747247199.152:14175): avc: denied { create } for pid=10187 comm="syz.0.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 185.142653][ T29] audit: type=1400 audit(1747247199.152:14176): avc: denied { prog_load } for pid=10187 comm="syz.0.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 185.154753][T10191] 9pnet: Could not find request transport: r [ 185.162114][ T29] audit: type=1400 audit(1747247199.152:14177): avc: denied { bpf } for pid=10187 comm="syz.0.2258" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 185.188934][ T29] audit: type=1400 audit(1747247199.152:14178): avc: denied { perfmon } for pid=10187 comm="syz.0.2258" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 185.210195][ T29] audit: type=1400 audit(1747247199.152:14179): avc: denied { mounton } for pid=10187 comm="syz.0.2258" path="/402" dev="tmpfs" ino=2164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 185.345374][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.718664][T10208] loop4: detected capacity change from 0 to 256 [ 185.729018][T10208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2265'. [ 186.132351][T10218] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.169155][T10218] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.319246][T10218] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.388818][T10218] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.455452][T10226] loop2: detected capacity change from 0 to 512 [ 186.474147][T10218] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.487868][T10218] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.502168][T10218] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.516820][T10218] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.536845][T10224] loop5: detected capacity change from 0 to 512 [ 186.543896][T10224] EXT4-fs: Ignoring removed orlov option [ 186.550246][T10226] EXT4-fs: Ignoring removed orlov option [ 186.568728][T10226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.581885][T10226] ext4 filesystem being mounted at /462/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.637005][T10224] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.655169][T10224] ext4 filesystem being mounted at /393/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.869528][T10244] loop0: detected capacity change from 0 to 512 [ 186.876740][T10244] ext4: Unknown parameter 'nouser_xattr' [ 187.007684][T10249] 9pnet: Could not find request transport: r [ 187.088374][T10252] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2278'. [ 187.110307][T10252] ALSA: seq fatal error: cannot create timer (-19) [ 187.268855][ T4541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.281796][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.308903][T10260] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2281'. [ 187.337388][T10260] ALSA: seq fatal error: cannot create timer (-19) [ 187.431938][T10264] loop2: detected capacity change from 0 to 8192 [ 187.471056][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2282'. [ 187.480312][T10264] IPVS: Error joining to the multicast group [ 187.538426][T10278] siw: device registration error -23 [ 187.548139][T10278] loop4: detected capacity change from 0 to 512 [ 187.555136][T10278] ext4: Unknown parameter 'nouser_xattr' [ 187.817957][T10284] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.305607][T10292] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2289'. [ 188.334293][T10294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10294 comm=syz.4.2290 [ 188.334430][T10284] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.364962][T10292] ALSA: seq fatal error: cannot create timer (-19) [ 188.427978][T10284] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.449000][T10301] xt_TPROXY: Can be used only with -p tcp or -p udp [ 188.507370][T10284] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.637951][T10308] loop4: detected capacity change from 0 to 8192 [ 188.702766][T10284] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.714790][T10284] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.726350][T10284] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.738550][T10284] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.742007][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2296'. [ 188.790690][T10315] IPVS: Error joining to the multicast group [ 188.980925][T10327] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2301'. [ 188.990097][T10327] tipc: Invalid UDP bearer configuration [ 188.990120][T10327] tipc: Enabling of bearer rejected, failed to enable media [ 189.151279][T10333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10333 comm=syz.2.2303 [ 189.376971][T10346] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.430620][T10346] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.498870][T10346] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.548426][T10346] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.920084][ T29] kauditd_printk_skb: 670 callbacks suppressed [ 189.920102][ T29] audit: type=1326 audit(1747247203.952:14850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10371 comm="syz.5.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7efe7c79e969 code=0x7ffc0000 [ 190.023988][ T29] audit: type=1400 audit(1747247204.052:14851): avc: denied { create } for pid=10371 comm="syz.5.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.118488][ T29] audit: type=1400 audit(1747247204.152:14852): avc: denied { create } for pid=10376 comm="syz.2.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.139307][ T29] audit: type=1400 audit(1747247204.152:14853): avc: denied { open } for pid=10377 comm="syz.4.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 190.158943][ T29] audit: type=1400 audit(1747247204.152:14854): avc: denied { kernel } for pid=10377 comm="syz.4.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 190.183906][T10380] loop4: detected capacity change from 0 to 256 [ 190.191886][ T29] audit: type=1400 audit(1747247204.212:14855): avc: denied { write } for pid=10376 comm="syz.2.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.213198][ T29] audit: type=1400 audit(1747247204.212:14856): avc: denied { read } for pid=10376 comm="syz.2.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.233764][ T29] audit: type=1400 audit(1747247204.222:14857): avc: denied { prog_run } for pid=10376 comm="syz.2.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 190.256350][ T29] audit: type=1400 audit(1747247204.292:14858): avc: denied { mounton } for pid=10377 comm="syz.4.2320" path="/506/file1" dev="tmpfs" ino=2710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 190.281031][ T29] audit: type=1400 audit(1747247204.312:14859): avc: denied { mount } for pid=10377 comm="syz.4.2320" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 190.345631][T10380] __nla_validate_parse: 2 callbacks suppressed [ 190.345646][T10380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2320'. [ 190.419843][T10387] loop4: detected capacity change from 0 to 512 [ 190.426624][T10387] EXT4-fs: Ignoring removed orlov option [ 190.439013][T10387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.452448][T10387] ext4 filesystem being mounted at /508/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.530892][T10392] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.688622][T10392] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.742151][T10397] xt_TPROXY: Can be used only with -p tcp or -p udp [ 190.768600][T10392] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.837591][T10392] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.260594][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.437923][T10410] loop6: detected capacity change from 0 to 256 [ 191.468079][T10410] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2329'. [ 191.499879][T10412] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2330'. [ 191.524069][T10412] ALSA: seq fatal error: cannot create timer (-19) [ 191.628920][T10416] loop6: detected capacity change from 0 to 512 [ 191.635845][T10416] EXT4-fs: Ignoring removed orlov option [ 191.648790][T10416] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.661727][T10416] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.352320][T10346] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.364471][T10346] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.376207][T10346] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.388042][T10346] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.468928][ T7479] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.504758][T10432] loop0: detected capacity change from 0 to 512 [ 192.535286][T10432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.550292][T10432] ext4 filesystem being mounted at /411/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.599210][T10429] random: crng reseeded on system resumption [ 192.729511][T10451] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2342'. [ 192.748077][T10451] ALSA: seq fatal error: cannot create timer (-19) [ 192.775773][T10392] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.787219][T10392] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.798816][T10392] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.810585][T10392] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.900661][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2346'. [ 192.909714][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2346'. [ 192.976614][T10462] xt_TPROXY: Can be used only with -p tcp or -p udp [ 193.036283][T10467] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2349'. [ 193.051465][T10463] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.095675][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2350'. [ 193.099980][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2349'. [ 193.104676][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2350'. [ 193.124145][T10463] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.183411][T10463] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.237664][T10463] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.314403][T10463] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.323777][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.326887][T10463] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.345449][T10463] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.357100][T10463] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.380426][T10479] loop6: detected capacity change from 0 to 512 [ 193.412702][T10479] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.436497][T10479] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.465842][T10479] random: crng reseeded on system resumption [ 193.552624][T10483] ALSA: seq fatal error: cannot create timer (-19) [ 193.835060][T10501] xt_TPROXY: Can be used only with -p tcp or -p udp [ 194.096643][T10515] loop5: detected capacity change from 0 to 512 [ 194.134806][ T7479] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.151930][T10515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.167443][T10515] ext4 filesystem being mounted at /416/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.194324][T10515] random: crng reseeded on system resumption [ 194.375086][T10523] loop2: detected capacity change from 0 to 256 [ 194.522870][T10531] loop2: detected capacity change from 0 to 512 [ 194.529891][T10531] EXT4-fs: Ignoring removed orlov option [ 194.557978][T10531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.571052][T10531] ext4 filesystem being mounted at /480/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.838661][T10542] loop0: detected capacity change from 0 to 256 [ 194.892770][ T4541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.938139][T10546] loop4: detected capacity change from 0 to 512 [ 194.969814][T10546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.010130][T10546] ext4 filesystem being mounted at /518/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.054447][T10544] random: crng reseeded on system resumption [ 195.119922][ T29] kauditd_printk_skb: 630 callbacks suppressed [ 195.119940][ T29] audit: type=1326 audit(1747247209.152:15490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10543 comm="syz.4.2375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffab3f0e969 code=0x0 [ 195.215767][T10551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10551 comm=syz.6.2377 [ 195.229394][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.362695][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.609017][T10572] loop6: detected capacity change from 0 to 1024 [ 195.628511][T10572] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.672306][T10576] xt_TPROXY: Can be used only with -p tcp or -p udp [ 195.683373][ T29] audit: type=1400 audit(1747247209.672:15491): avc: denied { create } for pid=10570 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 195.703468][ T29] audit: type=1400 audit(1747247209.672:15492): avc: denied { read write } for pid=10570 comm=77DEA305FF07 name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 195.727654][ T29] audit: type=1400 audit(1747247209.672:15493): avc: denied { open } for pid=10570 comm=77DEA305FF07 path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 195.751223][ T29] audit: type=1400 audit(1747247209.682:15494): avc: denied { ioctl } for pid=10570 comm=77DEA305FF07 path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 195.777257][ T29] audit: type=1326 audit(1747247209.712:15495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.0.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0b9ce969 code=0x7ffc0000 [ 195.801116][ T29] audit: type=1326 audit(1747247209.712:15496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.0.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ffa0b9ce969 code=0x7ffc0000 [ 195.825037][ T29] audit: type=1326 audit(1747247209.712:15497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.0.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0b9ce969 code=0x7ffc0000 [ 195.848950][ T29] audit: type=1326 audit(1747247209.712:15498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.0.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7ffa0b9ce969 code=0x7ffc0000 [ 195.872743][ T29] audit: type=1326 audit(1747247209.712:15499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.0.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0b9ce969 code=0x7ffc0000 [ 195.950527][T10577] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.104958][T10577] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.117853][T10580] loop0: detected capacity change from 0 to 256 [ 196.129740][T10580] __nla_validate_parse: 9 callbacks suppressed [ 196.129759][T10580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2388'. [ 196.150985][T10582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10582 comm=syz.4.2389 [ 196.207479][T10577] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.234910][T10587] loop4: detected capacity change from 0 to 256 [ 196.269782][T10577] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.297366][T10590] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.346370][T10588] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.377925][T10590] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.400022][T10588] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.452761][T10590] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.469328][T10588] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.520861][T10590] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.531356][ T7479] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.558090][T10588] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.645807][T10588] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.658058][T10588] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.670107][T10588] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.682339][T10588] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.080453][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2401'. [ 197.089683][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2401'. [ 197.180819][T10623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2402'. [ 197.189993][T10623] tipc: Invalid UDP bearer configuration [ 197.190035][T10623] tipc: Enabling of bearer rejected, failed to enable media [ 197.360622][T10631] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2406'. [ 197.373424][T10612] syz.4.2400 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 197.384590][T10612] CPU: 1 UID: 0 PID: 10612 Comm: syz.4.2400 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 197.384625][T10612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 197.384642][T10612] Call Trace: [ 197.384651][T10612] [ 197.384661][T10612] __dump_stack+0x1d/0x30 [ 197.384722][T10612] dump_stack_lvl+0xe8/0x140 [ 197.384745][T10612] dump_stack+0x15/0x1b [ 197.384766][T10612] dump_header+0x81/0x220 [ 197.384805][T10612] oom_kill_process+0x334/0x3f0 [ 197.384837][T10612] out_of_memory+0x979/0xb80 [ 197.384861][T10612] ? css_next_descendant_pre+0x138/0x160 [ 197.384887][T10612] mem_cgroup_out_of_memory+0x13d/0x190 [ 197.384978][T10612] try_charge_memcg+0x5e2/0x870 [ 197.385009][T10612] charge_memcg+0x51/0xc0 [ 197.385066][T10612] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 197.385100][T10612] __read_swap_cache_async+0x1df/0x350 [ 197.385213][T10612] swap_cluster_readahead+0x376/0x3e0 [ 197.385251][T10612] swapin_readahead+0xde/0x6f0 [ 197.385281][T10612] ? __filemap_get_folio+0x49f/0x650 [ 197.385369][T10612] ? __rcu_read_unlock+0x34/0x70 [ 197.385396][T10612] ? swap_cache_get_folio+0x77/0x200 [ 197.385427][T10612] do_swap_page+0x301/0x2460 [ 197.385543][T10612] ? cgroup_rstat_updated+0xa3/0x510 [ 197.385575][T10612] ? __pfx_default_wake_function+0x10/0x10 [ 197.385602][T10612] handle_mm_fault+0xb60/0x2ae0 [ 197.385638][T10612] ? mas_walk+0xf2/0x120 [ 197.385697][T10612] do_user_addr_fault+0x636/0x1090 [ 197.385801][T10612] ? restore_fpregs_from_fpstate+0x61/0x120 [ 197.385837][T10612] ? fpregs_restore_userregs+0xbb/0x190 [ 197.385889][T10612] exc_page_fault+0x54/0xc0 [ 197.385909][T10612] asm_exc_page_fault+0x26/0x30 [ 197.385930][T10612] RIP: 0033:0x7ffab3de53de [ 197.385955][T10612] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 00 e8 18 c4 ff ff 48 39 eb 75 df 0f 1f 00 8b 05 d6 27 35 00 85 c0 0f 8e a3 fd ff ff 8d 9f fe ff 49 39 c4 73 a0 48 8d 1d b1 0b 35 00 83 3d b6 27 35 [ 197.385992][T10612] RSP: 002b:00007ffd24844890 EFLAGS: 00010202 [ 197.386008][T10612] RAX: 0000000000000002 RBX: 00007ffab4137ba0 RCX: 0000000000000000 [ 197.386021][T10612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555c28808 [ 197.386035][T10612] RBP: 00007ffab4137ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 197.386051][T10612] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000003044a [ 197.386064][T10612] R13: 00007ffab4136240 R14: ffffffffffffffff R15: 00007ffd248449a0 [ 197.386084][T10612] [ 197.626756][T10612] memory: usage 307200kB, limit 307200kB, failcnt 3365 [ 197.633983][T10612] memory+swap: usage 297532kB, limit 9007199254740988kB, failcnt 0 [ 197.642093][T10612] kmem: usage 284904kB, limit 9007199254740988kB, failcnt 0 [ 197.649449][T10612] Memory cgroup stats for /syz4: [ 197.652942][T10612] cache 131072 [ 197.661460][T10612] rss 8392704 [ 197.664870][T10612] shmem 0 [ 197.667853][T10612] mapped_file 65536 [ 197.671839][T10612] dirty 0 [ 197.674781][T10612] writeback 0 [ 197.678203][T10612] workingset_refault_anon 111 [ 197.682905][T10612] workingset_refault_file 243 [ 197.687871][T10612] swap 217088 [ 197.691203][T10612] swapcached 4096 [ 197.694966][T10612] pgpgin 201560 [ 197.698558][T10612] pgpgout 199479 [ 197.702171][T10612] pgfault 202720 [ 197.705924][T10612] pgmajfault 67 [ 197.709520][T10612] inactive_anon 0 [ 197.713246][T10612] active_anon 4096 [ 197.717096][T10612] inactive_file 0 [ 197.720860][T10612] active_file 122880 [ 197.724798][T10612] unevictable 8388608 [ 197.729086][T10612] hierarchical_memory_limit 314572800 [ 197.734636][T10612] hierarchical_memsw_limit 9223372036854771712 [ 197.740897][T10612] total_cache 131072 [ 197.745004][T10612] total_rss 8392704 [ 197.748904][T10612] total_shmem 0 [ 197.752425][T10612] total_mapped_file 65536 [ 197.756886][T10612] total_dirty 0 [ 197.760365][T10612] total_writeback 0 [ 197.764358][T10612] total_workingset_refault_anon 111 [ 197.769806][T10612] total_workingset_refault_file 243 [ 197.775171][T10612] total_swap 217088 [ 197.779047][T10612] total_swapcached 4096 [ 197.783352][T10612] total_pgpgin 201560 [ 197.787446][T10612] total_pgpgout 199479 [ 197.791565][T10612] total_pgfault 202720 [ 197.795730][T10612] total_pgmajfault 67 [ 197.800038][T10612] total_inactive_anon 0 [ 197.804403][T10612] total_active_anon 4096 [ 197.808835][T10612] total_inactive_file 0 [ 197.813108][T10612] total_active_file 122880 [ 197.817607][T10612] total_unevictable 8388608 [ 197.822226][T10612] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2400,pid=10612,uid=0 [ 197.837424][T10612] Memory cgroup out of memory: Killed process 10612 (syz.4.2400) total-vm:98116kB, anon-rss:9128kB, file-rss:26536kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 197.862393][T10577] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.874319][T10577] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.886171][T10577] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.898434][T10577] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.918580][T10637] xt_TPROXY: Can be used only with -p tcp or -p udp [ 198.060415][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2412'. [ 198.069779][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2412'. [ 198.157730][T10590] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.192124][T10590] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.209659][T10590] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.221723][T10590] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.277206][T10657] loop4: detected capacity change from 0 to 512 [ 198.300818][T10657] EXT4-fs: Ignoring removed orlov option [ 198.303166][T10659] xt_TPROXY: Can be used only with -p tcp or -p udp [ 198.459074][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2420'. [ 198.468107][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2420'. [ 198.480793][T10657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.497994][T10673] loop2: detected capacity change from 0 to 512 [ 198.527132][T10673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.540261][T10657] ext4 filesystem being mounted at /528/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.564232][T10673] ext4 filesystem being mounted at /485/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.616642][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.631159][T10673] random: crng reseeded on system resumption [ 198.712402][T10682] xt_TPROXY: Can be used only with -p tcp or -p udp [ 198.822978][T10693] siw: device registration error -23 [ 198.832166][T10693] loop4: detected capacity change from 0 to 512 [ 198.838977][T10693] ext4: Unknown parameter 'nouser_xattr' [ 198.938245][T10701] loop0: detected capacity change from 0 to 512 [ 198.945062][T10701] EXT4-fs: Ignoring removed orlov option [ 198.958211][T10701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.971654][T10701] ext4 filesystem being mounted at /429/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.139420][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2432'. [ 199.279333][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.538887][T10728] loop2: detected capacity change from 0 to 256 [ 199.566564][T10724] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.579437][T10718] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.650660][T10734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10734 comm=syz.5.2443 [ 199.683822][T10724] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.703835][T10718] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.741132][T10724] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.746898][T10739] loop5: detected capacity change from 0 to 1024 [ 199.768085][T10739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.782075][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.782454][T10718] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.803411][T10737] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.828538][T10724] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.868237][T10718] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.884782][T10737] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.915687][T10724] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.927822][T10724] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.939514][T10724] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.951459][T10724] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.007902][T10737] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.026279][T10718] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.037995][T10718] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.049055][T10718] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.060654][T10718] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.147370][T10737] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.242734][T10759] siw: device registration error -23 [ 200.251843][T10759] loop4: detected capacity change from 0 to 512 [ 200.274926][T10759] ext4: Unknown parameter 'nouser_xattr' [ 200.324357][T10767] loop6: detected capacity change from 0 to 256 [ 200.362210][T10771] siw: device registration error -23 [ 200.371497][T10771] loop6: detected capacity change from 0 to 512 [ 200.378421][T10771] ext4: Unknown parameter 'nouser_xattr' [ 200.411737][T10776] loop4: detected capacity change from 0 to 512 [ 200.418531][T10776] EXT4-fs: Ignoring removed orlov option [ 200.427952][T10776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.440922][T10776] ext4 filesystem being mounted at /544/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.460825][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 200.460841][ T29] audit: type=1400 audit(1747247214.492:15740): avc: denied { tracepoint } for pid=10781 comm="syz.6.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 200.487442][ T29] audit: type=1326 audit(1747247214.502:15741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.6.2459" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbbed35e969 code=0x0 [ 200.524130][ T29] audit: type=1400 audit(1747247214.552:15742): avc: denied { create } for pid=10781 comm="syz.6.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.544435][ T29] audit: type=1400 audit(1747247214.552:15743): avc: denied { ioctl } for pid=10781 comm="syz.6.2459" path="socket:[36457]" dev="sockfs" ino=36457 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.596937][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.608647][ T4541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.622659][T10787] loop4: detected capacity change from 0 to 512 [ 200.629757][T10787] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 200.640745][T10787] EXT4-fs (loop4): 1 truncate cleaned up [ 200.646815][T10787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.660633][ T29] audit: type=1400 audit(1747247214.692:15744): avc: denied { write } for pid=10786 comm="syz.4.2460" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.682974][ T29] audit: type=1400 audit(1747247214.712:15745): avc: denied { add_name } for pid=10786 comm="syz.4.2460" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.705424][ T29] audit: type=1400 audit(1747247214.732:15746): avc: denied { create } for pid=10786 comm="syz.4.2460" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 200.731874][ T29] audit: type=1400 audit(1747247214.762:15747): avc: denied { read write } for pid=10786 comm="syz.4.2460" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 200.754819][ T29] audit: type=1400 audit(1747247214.762:15748): avc: denied { open } for pid=10786 comm="syz.4.2460" path="/545/bus/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 200.778259][ T29] audit: type=1400 audit(1747247214.762:15749): avc: denied { read } for pid=10786 comm="syz.4.2460" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.820158][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.892208][T10803] loop0: detected capacity change from 0 to 256 [ 200.916961][T10804] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.948740][T10805] 9pnet: Could not find request transport: r [ 201.037906][T10804] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.107726][T10804] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.168096][T10804] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.685511][T10819] FAULT_INJECTION: forcing a failure. [ 201.685511][T10819] name failslab, interval 1, probability 0, space 0, times 0 [ 201.698199][T10819] CPU: 1 UID: 0 PID: 10819 Comm: syz.4.2469 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 201.698228][T10819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 201.698244][T10819] Call Trace: [ 201.698253][T10819] [ 201.698260][T10819] __dump_stack+0x1d/0x30 [ 201.698279][T10819] dump_stack_lvl+0xe8/0x140 [ 201.698296][T10819] dump_stack+0x15/0x1b [ 201.698350][T10819] should_fail_ex+0x265/0x280 [ 201.698379][T10819] should_failslab+0x8c/0xb0 [ 201.698406][T10819] kmem_cache_alloc_node_noprof+0x57/0x320 [ 201.698503][T10819] ? __alloc_skb+0x101/0x320 [ 201.698533][T10819] __alloc_skb+0x101/0x320 [ 201.698613][T10819] netlink_alloc_large_skb+0xba/0xf0 [ 201.698715][T10819] netlink_sendmsg+0x3cf/0x6b0 [ 201.698814][T10819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.698832][T10819] __sock_sendmsg+0x142/0x180 [ 201.698862][T10819] ____sys_sendmsg+0x31e/0x4e0 [ 201.698883][T10819] ___sys_sendmsg+0x17b/0x1d0 [ 201.698914][T10819] __x64_sys_sendmsg+0xd4/0x160 [ 201.698937][T10819] x64_sys_call+0x2999/0x2fb0 [ 201.698999][T10819] do_syscall_64+0xd0/0x1a0 [ 201.699020][T10819] ? clear_bhb_loop+0x40/0x90 [ 201.699089][T10819] ? clear_bhb_loop+0x40/0x90 [ 201.699109][T10819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.699127][T10819] RIP: 0033:0x7ffab3f0e969 [ 201.699141][T10819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.699166][T10819] RSP: 002b:00007ffab2577038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.699195][T10819] RAX: ffffffffffffffda RBX: 00007ffab4135fa0 RCX: 00007ffab3f0e969 [ 201.699206][T10819] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 201.699224][T10819] RBP: 00007ffab2577090 R08: 0000000000000000 R09: 0000000000000000 [ 201.699239][T10819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.699331][T10819] R13: 0000000000000000 R14: 00007ffab4135fa0 R15: 00007ffd24844728 [ 201.699349][T10819] [ 201.918773][T10821] xt_TPROXY: Can be used only with -p tcp or -p udp [ 201.931277][T10823] loop4: detected capacity change from 0 to 512 [ 201.938022][T10823] EXT4-fs: Ignoring removed orlov option [ 201.948090][T10823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.960938][T10823] ext4 filesystem being mounted at /548/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 202.226750][T10830] __nla_validate_parse: 7 callbacks suppressed [ 202.226824][T10830] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2473'. [ 202.246668][T10830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.255381][T10830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.348683][T10835] loop0: detected capacity change from 0 to 256 [ 202.415736][T10835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2475'. [ 202.502010][T10804] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.513138][T10804] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.524638][T10804] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.536097][T10804] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.596169][T10837] loop5: detected capacity change from 0 to 256 [ 202.763247][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.811066][T10843] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2479'. [ 202.953411][T10737] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.965114][T10737] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.977188][T10737] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.988984][T10737] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.209056][T10854] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.238226][T10856] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2483'. [ 203.247282][T10856] tipc: Invalid UDP bearer configuration [ 203.247297][T10856] tipc: Enabling of bearer rejected, failed to enable media [ 203.297761][T10854] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.348049][T10854] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.407415][T10854] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.440437][T10865] loop0: detected capacity change from 0 to 256 [ 203.482910][T10867] loop0: detected capacity change from 0 to 512 [ 203.489832][T10867] EXT4-fs: Ignoring removed orlov option [ 203.528077][T10867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.541126][T10867] ext4 filesystem being mounted at /446/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.946710][T10884] siw: device registration error -23 [ 203.964145][T10884] loop2: detected capacity change from 0 to 512 [ 204.007942][T10884] ext4: Unknown parameter 'nouser_xattr' [ 204.096567][T10888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10888 comm=syz.2.2494 [ 204.115401][ T3316] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 204.126520][ T3316] CPU: 0 UID: 0 PID: 3316 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 204.126561][ T3316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 204.126577][ T3316] Call Trace: [ 204.126590][ T3316] [ 204.126604][ T3316] __dump_stack+0x1d/0x30 [ 204.126630][ T3316] dump_stack_lvl+0xe8/0x140 [ 204.126717][ T3316] dump_stack+0x15/0x1b [ 204.126745][ T3316] dump_header+0x81/0x220 [ 204.126811][ T3316] oom_kill_process+0x334/0x3f0 [ 204.126842][ T3316] out_of_memory+0x979/0xb80 [ 204.126867][ T3316] ? css_next_descendant_pre+0x138/0x160 [ 204.126902][ T3316] mem_cgroup_out_of_memory+0x13d/0x190 [ 204.126942][ T3316] try_charge_memcg+0x5e2/0x870 [ 204.126978][ T3316] charge_memcg+0x51/0xc0 [ 204.127006][ T3316] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 204.127089][ T3316] __read_swap_cache_async+0x1df/0x350 [ 204.127117][ T3316] swap_cluster_readahead+0x277/0x3e0 [ 204.127180][ T3316] swapin_readahead+0xde/0x6f0 [ 204.127209][ T3316] ? __filemap_get_folio+0x49f/0x650 [ 204.127247][ T3316] ? swap_cache_get_folio+0x77/0x200 [ 204.127275][ T3316] do_swap_page+0x301/0x2460 [ 204.127306][ T3316] ? _raw_spin_unlock+0x26/0x50 [ 204.127334][ T3316] ? finish_task_switch+0xad/0x2b0 [ 204.127364][ T3316] ? __pfx_default_wake_function+0x10/0x10 [ 204.127442][ T3316] handle_mm_fault+0xb60/0x2ae0 [ 204.127481][ T3316] ? mas_walk+0xf2/0x120 [ 204.127530][ T3316] do_user_addr_fault+0x636/0x1090 [ 204.127570][ T3316] ? switch_fpu_return+0xe/0x20 [ 204.127630][ T3316] exc_page_fault+0x54/0xc0 [ 204.127649][ T3316] asm_exc_page_fault+0x26/0x30 [ 204.127668][ T3316] RIP: 0033:0x7ffab3f411e5 [ 204.127687][ T3316] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 5e 33 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 204.127770][ T3316] RSP: 002b:00007ffd24844a68 EFLAGS: 00010246 [ 204.127787][ T3316] RAX: 0000000000000000 RBX: 0000000000000547 RCX: 00007ffab3f411e3 [ 204.127803][ T3316] RDX: 00007ffd24844a80 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.127818][ T3316] RBP: 00007ffd24844aec R08: 0000000002a6fcd2 R09: 0000000000000000 [ 204.127833][ T3316] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 204.127846][ T3316] R13: 00000000000927c0 R14: 0000000000031d02 R15: 00007ffd24844b40 [ 204.127926][ T3316] [ 204.127940][ T3316] memory: usage 307200kB, limit 307200kB, failcnt 5225 [ 204.252560][T10890] loop2: detected capacity change from 0 to 256 [ 204.253155][ T3316] memory+swap: usage 243400kB, limit 9007199254740988kB, failcnt 0 [ 204.253174][ T3316] kmem: usage 243184kB, limit 9007199254740988kB, failcnt 0 [ 204.391502][ T3316] Memory cgroup stats for /syz4: [ 204.392045][ T3316] cache 0 [ 204.392542][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.398359][ T3316] rss 24576 [ 204.398371][ T3316] shmem 0 [ 204.398378][ T3316] mapped_file 0 [ 204.398385][ T3316] dirty 0 [ 204.398393][ T3316] writeback 0 [ 204.398401][ T3316] workingset_refault_anon 166 [ 204.398410][ T3316] workingset_refault_file 310 [ 204.436277][ T3316] swap 184320 [ 204.439864][ T3316] swapcached 32768 [ 204.443716][ T3316] pgpgin 211295 [ 204.447246][ T3316] pgpgout 211286 [ 204.450833][ T3316] pgfault 213770 [ 204.454565][ T3316] pgmajfault 102 [ 204.458437][ T3316] inactive_anon 0 [ 204.462078][ T3316] active_anon 36864 [ 204.465901][ T3316] inactive_file 0 [ 204.469682][ T3316] active_file 0 [ 204.473299][ T3316] unevictable 0 [ 204.476909][ T3316] hierarchical_memory_limit 314572800 [ 204.482557][ T3316] hierarchical_memsw_limit 9223372036854771712 [ 204.489424][ T3316] total_cache 0 [ 204.493341][ T3316] total_rss 24576 [ 204.497211][ T3316] total_shmem 0 [ 204.500860][ T3316] total_mapped_file 0 [ 204.505873][ T3316] total_dirty 0 [ 204.509426][ T3316] total_writeback 0 [ 204.513348][ T3316] total_workingset_refault_anon 166 [ 204.518840][ T3316] total_workingset_refault_file 310 [ 204.524250][ T3316] total_swap 184320 [ 204.528163][ T3316] total_swapcached 32768 [ 204.532430][ T3316] total_pgpgin 211295 [ 204.536481][ T3316] total_pgpgout 211286 [ 204.537998][T10895] loop5: detected capacity change from 0 to 256 [ 204.540714][ T3316] total_pgfault 213770 [ 204.551210][ T3316] total_pgmajfault 102 [ 204.555289][ T3316] total_inactive_anon 0 [ 204.559612][ T3316] total_active_anon 36864 [ 204.564086][ T3316] total_inactive_file 0 [ 204.568410][ T3316] total_active_file 0 [ 204.572426][ T3316] total_unevictable 0 [ 204.576457][ T3316] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2491,pid=10876,uid=0 [ 204.591314][ T3316] Memory cgroup out of memory: Killed process 10876 (syz.4.2491) total-vm:98116kB, anon-rss:988kB, file-rss:26536kB, shmem-rss:128kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 204.614971][T10854] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.635202][T10854] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.647105][T10854] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.680655][T10854] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.689554][T10897] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2499'. [ 204.698662][T10897] tipc: Invalid UDP bearer configuration [ 204.698677][T10897] tipc: Enabling of bearer rejected, failed to enable media [ 204.778794][T10910] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2503'. [ 204.848560][T10914] siw: device registration error -23 [ 204.867680][T10914] loop4: detected capacity change from 0 to 512 [ 204.874311][T10916] loop6: detected capacity change from 0 to 512 [ 204.881190][T10914] ext4: Unknown parameter 'nouser_xattr' [ 204.887388][T10916] EXT4-fs: Ignoring removed orlov option [ 204.932487][T10916] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.946611][T10916] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.990082][T10917] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.077799][T10917] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.138942][T10917] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.198300][T10917] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.265549][T10917] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.277782][T10917] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.290213][T10917] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.301941][T10917] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.669908][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 205.669926][ T29] audit: type=1400 audit(1747247219.692:15958): avc: denied { open } for pid=10930 comm="syz.5.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 205.695672][ T29] audit: type=1400 audit(1747247219.692:15959): avc: denied { kernel } for pid=10930 comm="syz.5.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 205.715534][ T29] audit: type=1400 audit(1747247219.692:15960): avc: denied { execmem } for pid=10930 comm="syz.5.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 205.735068][ T29] audit: type=1400 audit(1747247219.692:15961): avc: denied { read } for pid=10930 comm="syz.5.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 205.735724][T10935] xt_TPROXY: Can be used only with -p tcp or -p udp [ 205.754810][ T29] audit: type=1400 audit(1747247219.752:15962): avc: denied { create } for pid=10934 comm="syz.0.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 205.765698][T10936] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2512'. [ 205.787789][ T29] audit: type=1400 audit(1747247219.792:15963): avc: denied { create } for pid=10933 comm="syz.5.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 205.811823][ T29] audit: type=1400 audit(1747247219.792:15964): avc: denied { write } for pid=10933 comm="syz.5.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 205.832826][ T29] audit: type=1400 audit(1747247219.812:15965): avc: denied { create } for pid=10927 comm="syz.2.2509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 205.852707][ T29] audit: type=1400 audit(1747247219.812:15966): avc: denied { setopt } for pid=10927 comm="syz.2.2509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 205.881298][T10928] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.911466][T10940] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.914101][T10941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2513'. [ 205.937097][ T29] audit: type=1326 audit(1747247219.912:15967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10934 comm="syz.0.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0b9ce969 code=0x7ffc0000 [ 205.965156][T10928] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.979452][ T7479] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.991725][T10946] netlink: 'syz.4.2517': attribute type 4 has an invalid length. [ 206.023895][T10940] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.043690][T10948] siw: device registration error -23 [ 206.059318][T10928] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.074916][T10948] loop4: detected capacity change from 0 to 512 [ 206.082324][T10948] ext4: Unknown parameter 'nouser_xattr' [ 206.107754][T10940] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.198018][T10928] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.258273][T10940] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.787809][ T3315] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 206.798792][ T3315] CPU: 1 UID: 0 PID: 3315 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 206.798828][ T3315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 206.798844][ T3315] Call Trace: [ 206.798852][ T3315] [ 206.798886][ T3315] __dump_stack+0x1d/0x30 [ 206.798908][ T3315] dump_stack_lvl+0xe8/0x140 [ 206.799090][ T3315] dump_stack+0x15/0x1b [ 206.799111][ T3315] dump_header+0x81/0x220 [ 206.799148][ T3315] oom_kill_process+0x334/0x3f0 [ 206.799175][ T3315] out_of_memory+0x979/0xb80 [ 206.799206][ T3315] ? css_next_descendant_pre+0x138/0x160 [ 206.799361][ T3315] mem_cgroup_out_of_memory+0x13d/0x190 [ 206.799430][ T3315] try_charge_memcg+0x5e2/0x870 [ 206.799508][ T3315] charge_memcg+0x51/0xc0 [ 206.799537][ T3315] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 206.799575][ T3315] __read_swap_cache_async+0x1df/0x350 [ 206.799612][ T3315] swap_cluster_readahead+0x277/0x3e0 [ 206.799687][ T3315] swapin_readahead+0xde/0x6f0 [ 206.799719][ T3315] ? __filemap_get_folio+0x49f/0x650 [ 206.799752][ T3315] ? next_uptodate_folio+0x81c/0x890 [ 206.799828][ T3315] ? swap_cache_get_folio+0x77/0x200 [ 206.799859][ T3315] do_swap_page+0x301/0x2460 [ 206.799963][ T3315] ? cgroup_rstat_updated+0xa3/0x510 [ 206.800005][ T3315] ? __pfx_default_wake_function+0x10/0x10 [ 206.800085][ T3315] handle_mm_fault+0xb60/0x2ae0 [ 206.800115][ T3315] ? mas_walk+0xf2/0x120 [ 206.800149][ T3315] do_user_addr_fault+0x636/0x1090 [ 206.800276][ T3315] ? restore_fpregs_from_fpstate+0x61/0x120 [ 206.800323][ T3315] ? fpregs_restore_userregs+0xbb/0x190 [ 206.800361][ T3315] exc_page_fault+0x54/0xc0 [ 206.800386][ T3315] asm_exc_page_fault+0x26/0x30 [ 206.800470][ T3315] RIP: 0033:0x7ffa0b8a5997 [ 206.800562][ T3315] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 08 fe e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 19 fd e7 00 48 01 d1 39 7c 24 [ 206.800585][ T3315] RSP: 002b:00007ffc1de276a0 EFLAGS: 00010202 [ 206.800600][ T3315] RAX: 0000001b32a20000 RBX: 0000000000000473 RCX: 00000000000324b0 [ 206.800612][ T3315] RDX: 000000000ad1ab0c RSI: 00007ffc1de27730 RDI: 0000000000000014 [ 206.800624][ T3315] RBP: 00007ffc1de276dc R08: 0000000029457211 R09: 7fffffffffffffff [ 206.800708][ T3315] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 206.800724][ T3315] R13: 00000000000927c0 R14: 00000000000326cf R15: 00007ffc1de27730 [ 206.800750][ T3315] [ 206.800758][ T3315] memory: usage 307200kB, limit 307200kB, failcnt 2315 [ 207.049610][ T3315] memory+swap: usage 307580kB, limit 9007199254740988kB, failcnt 0 [ 207.057543][ T3315] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 207.064975][ T3315] Memory cgroup stats for /syz0: [ 207.104854][ T3315] cache 0 [ 207.112849][ T3315] rss 0 [ 207.115704][ T3315] shmem 0 [ 207.118702][ T3315] mapped_file 0 [ 207.122336][ T3315] dirty 0 [ 207.125313][ T3315] writeback 0 [ 207.128809][ T3315] workingset_refault_anon 8 [ 207.133640][ T3315] workingset_refault_file 1 [ 207.138202][ T3315] swap 389120 [ 207.141516][ T3315] swapcached 12288 [ 207.145339][ T3315] pgpgin 177564 [ 207.148934][ T3315] pgpgout 177557 [ 207.152767][ T3315] pgfault 224917 [ 207.156508][ T3315] pgmajfault 11 [ 207.159991][ T3315] inactive_anon 12288 [ 207.163986][ T3315] active_anon 0 [ 207.167571][ T3315] inactive_file 16384 [ 207.171557][ T3315] active_file 0 [ 207.175057][ T3315] unevictable 0 [ 207.178561][ T3315] hierarchical_memory_limit 314572800 [ 207.184266][ T3315] hierarchical_memsw_limit 9223372036854771712 [ 207.190643][ T3315] total_cache 0 [ 207.194210][ T3315] total_rss 0 [ 207.197698][ T3315] total_shmem 0 [ 207.201178][ T3315] total_mapped_file 0 [ 207.205259][ T3315] total_dirty 0 [ 207.208840][ T3315] total_writeback 0 [ 207.212667][ T3315] total_workingset_refault_anon 8 [ 207.217824][ T3315] total_workingset_refault_file 1 [ 207.222864][ T3315] total_swap 389120 [ 207.226915][ T3315] total_swapcached 12288 [ 207.231244][ T3315] total_pgpgin 177564 [ 207.235265][ T3315] total_pgpgout 177557 [ 207.239391][ T3315] total_pgfault 224917 [ 207.243640][ T3315] total_pgmajfault 11 [ 207.247768][ T3315] total_inactive_anon 12288 [ 207.252305][ T3315] total_active_anon 0 [ 207.256344][ T3315] total_inactive_file 16384 [ 207.260858][ T3315] total_active_file 0 [ 207.264917][ T3315] total_unevictable 0 [ 207.269116][ T3315] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2516,pid=10943,uid=0 [ 207.283979][ T3315] Memory cgroup out of memory: Killed process 10943 (syz.0.2516) total-vm:98116kB, anon-rss:1004kB, file-rss:26536kB, shmem-rss:128kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 207.312925][T10940] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.345405][T10940] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.376613][T10940] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.398245][T10940] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.488102][T10970] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.506673][T10977] loop5: detected capacity change from 0 to 512 [ 207.539466][T10970] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.608789][T10977] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.609595][T10970] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.630577][T10977] ext4 filesystem being mounted at /438/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.669561][T10974] random: crng reseeded on system resumption [ 207.704311][T10982] loop0: detected capacity change from 0 to 256 [ 207.711652][T10970] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.745429][T10928] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.758375][T10928] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.772496][T10928] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.785065][T10928] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.797611][T10970] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.809136][T10970] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.821171][T10986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2526'. [ 207.821490][T10970] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.837304][T10987] loop2: detected capacity change from 0 to 512 [ 207.842380][T10970] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.846234][T10987] EXT4-fs: Ignoring removed orlov option [ 207.878522][T10987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.895846][T10987] ext4 filesystem being mounted at /499/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.926283][ T4541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.976481][T10999] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2532'. [ 207.995529][T10999] ALSA: seq fatal error: cannot create timer (-19) [ 208.041324][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2533'. [ 208.050444][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2533'. [ 208.115105][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2534'. [ 208.124124][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2534'. [ 208.275663][T11012] loop6: detected capacity change from 0 to 8192 [ 208.313323][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2536'. [ 208.322533][T11012] IPVS: Error joining to the multicast group [ 208.362743][T11020] loop6: detected capacity change from 0 to 256 [ 208.366069][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.383668][T11020] FAT-fs (loop6): Directory bread(block 64) failed [ 208.390506][T11020] FAT-fs (loop6): Directory bread(block 65) failed [ 208.397683][T11020] FAT-fs (loop6): Directory bread(block 66) failed [ 208.404299][T11020] FAT-fs (loop6): Directory bread(block 67) failed [ 208.411138][T11020] FAT-fs (loop6): Directory bread(block 68) failed [ 208.417843][T11020] FAT-fs (loop6): Directory bread(block 69) failed [ 208.424699][T11020] FAT-fs (loop6): Directory bread(block 70) failed [ 208.431639][T11020] FAT-fs (loop6): Directory bread(block 71) failed [ 208.438230][T11020] FAT-fs (loop6): Directory bread(block 72) failed [ 208.444763][T11020] FAT-fs (loop6): Directory bread(block 73) failed [ 208.509138][T11022] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2538'. [ 208.663295][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.775803][T11027] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.791378][T11030] xt_TPROXY: Can be used only with -p tcp or -p udp [ 208.824348][T11034] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2543'. [ 208.842685][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2544'. [ 208.857350][T11027] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.869945][T11034] ALSA: seq fatal error: cannot create timer (-19) [ 208.908124][T11027] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.958362][T11027] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.016599][T11044] loop4: detected capacity change from 0 to 8192 [ 209.054628][T11044] IPVS: Error joining to the multicast group [ 209.120930][T11056] team0 (unregistering): Port device team_slave_0 removed [ 209.455699][T11064] xt_TPROXY: Can be used only with -p tcp or -p udp [ 209.870393][T11074] ALSA: seq fatal error: cannot create timer (-19) [ 210.022292][T11084] loop5: detected capacity change from 0 to 512 [ 210.042682][T11084] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.055783][T11084] ext4 filesystem being mounted at /447/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.067151][T11088] tipc: Invalid UDP bearer configuration [ 210.067165][T11088] tipc: Enabling of bearer rejected, failed to enable media [ 210.097475][T11079] random: crng reseeded on system resumption [ 210.245225][ T4541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.265436][T11101] loop5: detected capacity change from 0 to 512 [ 210.272346][T11101] EXT4-fs: Ignoring removed orlov option [ 210.287919][T11101] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.300903][T11101] ext4 filesystem being mounted at /448/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.734627][ T29] kauditd_printk_skb: 548 callbacks suppressed [ 210.734646][ T29] audit: type=1326 audit(1747247224.762:16516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.6.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbed35e969 code=0x7ffc0000 [ 210.764832][ T29] audit: type=1326 audit(1747247224.792:16517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.6.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbed35e969 code=0x7ffc0000 [ 210.788704][ T29] audit: type=1326 audit(1747247224.792:16518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.6.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbed35e969 code=0x7ffc0000 [ 210.812819][ T29] audit: type=1326 audit(1747247224.792:16519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.6.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbed35e969 code=0x7ffc0000 [ 210.836895][ T29] audit: type=1326 audit(1747247224.792:16520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.6.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbbed35e969 code=0x7ffc0000 [ 210.860487][ T29] audit: type=1326 audit(1747247224.792:16521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.6.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbed35e969 code=0x7ffc0000 [ 210.884343][ T29] audit: type=1326 audit(1747247224.792:16522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.6.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbed35e969 code=0x7ffc0000 [ 210.908209][ T29] audit: type=1326 audit(1747247224.792:16523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.6.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fbbed35e969 code=0x7ffc0000 [ 210.931817][ T29] audit: type=1326 audit(1747247224.792:16524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.6.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbed35e969 code=0x7ffc0000 [ 210.956262][ T29] audit: type=1326 audit(1747247224.792:16525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.6.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fbbed35e969 code=0x7ffc0000 [ 211.118325][ T4541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.416024][T11122] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.467406][T11122] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.527581][T11122] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.587660][T11122] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.635347][T11122] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.647270][T11122] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.659179][T11122] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.671124][T11122] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.691689][T11027] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.703831][T11027] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.716483][T11027] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.728317][T11027] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.768861][T11126] siw: device registration error -23 [ 211.777888][T11126] loop6: detected capacity change from 0 to 512 [ 211.785088][T11126] ext4: Unknown parameter 'nouser_xattr' [ 211.828421][T11130] loop6: detected capacity change from 0 to 256 [ 211.865669][T11135] loop2: detected capacity change from 0 to 256 [ 212.204125][T11142] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.232565][T11145] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.256769][T11144] xt_TPROXY: Can be used only with -p tcp or -p udp [ 212.293301][T11142] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.307830][T11145] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.348579][T11142] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.389207][T11145] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.429340][T11142] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.469137][T11145] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.544016][T11142] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.556023][T11142] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.568057][T11142] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.580608][T11142] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.621959][T11145] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.634196][T11145] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.646450][T11145] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.658582][T11145] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.047058][T11158] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.097500][T11158] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.126024][T11146] ================================================================== [ 213.134171][T11146] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 213.140400][ T3320] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 213.144003][T11146] [ 213.144010][T11146] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 213.154950][ T3320] CPU: 0 UID: 0 PID: 3320 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 213.154988][ T3320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 213.155004][ T3320] Call Trace: [ 213.155012][ T3320] [ 213.155023][ T3320] __dump_stack+0x1d/0x30 [ 213.155085][ T3320] dump_stack_lvl+0xe8/0x140 [ 213.155111][ T3320] dump_stack+0x15/0x1b [ 213.155159][ T3320] dump_header+0x81/0x220 [ 213.155201][ T3320] oom_kill_process+0x334/0x3f0 [ 213.155237][ T3320] out_of_memory+0x979/0xb80 [ 213.155317][ T3320] ? css_next_descendant_pre+0x138/0x160 [ 213.155400][ T3320] mem_cgroup_out_of_memory+0x13d/0x190 [ 213.155446][ T3320] try_charge_memcg+0x5e2/0x870 [ 213.155489][ T3320] charge_memcg+0x51/0xc0 [ 213.155579][ T3320] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 213.155616][ T3320] __read_swap_cache_async+0x1df/0x350 [ 213.155701][ T3320] swap_cluster_readahead+0x376/0x3e0 [ 213.155765][ T3320] swapin_readahead+0xde/0x6f0 [ 213.155797][ T3320] ? __filemap_get_folio+0x49f/0x650 [ 213.155900][ T3320] ? next_uptodate_folio+0x81c/0x890 [ 213.155947][ T3320] ? swap_cache_get_folio+0x77/0x200 [ 213.156150][ T3320] do_swap_page+0x301/0x2460 [ 213.156186][ T3320] ? cgroup_rstat_updated+0xa3/0x510 [ 213.156234][ T3320] ? __pfx_default_wake_function+0x10/0x10 [ 213.156281][ T3320] handle_mm_fault+0xb60/0x2ae0 [ 213.156323][ T3320] ? mas_walk+0xf2/0x120 [ 213.156359][ T3320] do_user_addr_fault+0x636/0x1090 [ 213.156433][ T3320] ? restore_fpregs_from_fpstate+0x61/0x120 [ 213.156469][ T3320] ? fpregs_restore_userregs+0xbb/0x190 [ 213.156508][ T3320] exc_page_fault+0x54/0xc0 [ 213.156535][ T3320] asm_exc_page_fault+0x26/0x30 [ 213.156583][ T3320] RIP: 0033:0x7f74a3215997 [ 213.156603][ T3320] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 08 fe e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 19 fd e7 00 48 01 d1 39 7c 24 [ 213.156627][ T3320] RSP: 002b:00007ffe98d094c0 EFLAGS: 00010202 [ 213.156647][ T3320] RAX: 0000001b32c20000 RBX: 00000000000004d5 RCX: 0000000000034008 [ 213.156663][ T3320] RDX: 000000000030ccce RSI: 00007ffe98d09550 RDI: 0000000000000013 [ 213.156679][ T3320] RBP: 00007ffe98d094fc R08: 0000000000ba2848 R09: 7fffffffffffffff [ 213.156695][ T3320] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 213.156771][ T3320] R13: 00000000000927c0 R14: 0000000000033ecf R15: 00007ffe98d09550 [ 213.156878][ T3320] [ 213.156906][ T3320] memory: usage 307200kB, limit 307200kB, failcnt 1105 [ 213.157159][T11146] tick_do_update_jiffies64+0x113/0x1c0 [ 213.165209][ T3320] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 213.177773][T11146] tick_nohz_handler+0x7f/0x2d0 [ 213.177807][T11146] __hrtimer_run_queues+0x20f/0x5a0 [ 213.177832][T11146] hrtimer_interrupt+0x21a/0x460 [ 213.177857][T11146] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 213.187950][ T3320] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 213.191195][T11146] sysvec_apic_timer_interrupt+0x6f/0x80 [ 213.194124][ T3320] Memory cgroup stats for /syz2 [ 213.198441][T11146] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 213.203046][ T3320] : [ 213.207159][T11146] __tsan_read4+0xe9/0x190 [ 213.476529][T11146] __register_sysctl_table+0x18e/0xc00 [ 213.482198][T11146] register_net_sysctl_sz+0x19e/0x1c0 [ 213.487769][T11146] neigh_sysctl_register+0x661/0x6d0 [ 213.493263][T11146] addrconf_sysctl_register+0x81/0x130 [ 213.498745][T11146] ipv6_add_dev+0x8da/0xb30 [ 213.503318][T11146] addrconf_notify+0x4c8/0x930 [ 213.508287][T11146] raw_notifier_call_chain+0x6c/0x1b0 [ 213.513779][T11146] call_netdevice_notifiers_info+0xae/0x100 [ 213.519719][T11146] register_netdevice+0xd48/0xf10 [ 213.525042][T11146] register_netdev+0x3b/0x50 [ 213.529666][T11146] ip6_tnl_init_net+0x229/0x310 [ 213.534639][T11146] ops_init+0x22a/0x2e0 [ 213.538917][T11146] setup_net+0x13b/0x5f0 [ 213.543378][T11146] copy_net_ns+0x565/0x720 [ 213.547824][T11146] create_new_namespaces+0x20e/0x410 [ 213.553329][T11146] copy_namespaces+0x1ad/0x210 [ 213.558154][T11146] copy_process+0xd1b/0x1f90 [ 213.562780][T11146] kernel_clone+0x16c/0x5b0 [ 213.567329][T11146] __x64_sys_clone+0xe6/0x120 [ 213.572046][T11146] x64_sys_call+0x2c59/0x2fb0 [ 213.576852][T11146] do_syscall_64+0xd0/0x1a0 [ 213.581485][T11146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.587415][T11146] [ 213.589751][T11146] read to 0xffffffff868099c0 of 8 bytes by task 11146 on cpu 1: [ 213.597401][T11146] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 213.603699][T11146] count_shadow_nodes+0x6a/0x230 [ 213.608710][T11146] do_shrink_slab+0x63/0x680 [ 213.613345][T11146] shrink_slab+0x448/0x760 [ 213.617813][T11146] shrink_node+0x6c3/0x2110 [ 213.622345][T11146] do_try_to_free_pages+0x3f6/0xcd0 [ 213.627666][T11146] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 213.633631][T11146] try_charge_memcg+0x3ab/0x870 [ 213.638515][T11146] charge_memcg+0x51/0xc0 [ 213.642963][T11146] __mem_cgroup_charge+0x28/0xb0 [ 213.648036][T11146] shmem_get_folio_gfp+0x470/0xd40 [ 213.653172][T11146] shmem_fault+0xf6/0x250 [ 213.657542][T11146] __do_fault+0xb9/0x200 [ 213.661823][T11146] handle_mm_fault+0x110c/0x2ae0 [ 213.666792][T11146] __get_user_pages+0xde2/0x1d20 [ 213.671869][T11146] __mm_populate+0x243/0x3a0 [ 213.676494][T11146] vm_mmap_pgoff+0x232/0x2e0 [ 213.681148][T11146] ksys_mmap_pgoff+0xc2/0x310 [ 213.685956][T11146] x64_sys_call+0x1602/0x2fb0 [ 213.690944][T11146] do_syscall_64+0xd0/0x1a0 [ 213.695596][T11146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.701591][T11146] [ 213.703916][T11146] value changed: 0x00000000ffffdddb -> 0x00000000ffffdddc [ 213.711029][T11146] [ 213.713354][T11146] Reported by Kernel Concurrency Sanitizer on: [ 213.719605][T11146] CPU: 1 UID: 0 PID: 11146 Comm: syz.2.2578 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 213.732136][T11146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 213.742215][T11146] ================================================================== [ 213.751611][ T3320] cache 0 [ 213.754590][ T3320] rss 0 [ 213.757411][ T3320] shmem 0 [ 213.760427][ T3320] mapped_file 0 [ 213.763912][ T3320] dirty 0 [ 213.767028][ T3320] writeback 0 [ 213.770327][ T3320] workingset_refault_anon 12 [ 213.774991][ T3320] workingset_refault_file 16 [ 213.780026][ T3320] swap 208896 [ 213.783328][ T3320] swapcached 0 [ 213.786761][ T3320] pgpgin 196444 [ 213.790237][ T3320] pgpgout 196442 [ 213.793794][ T3320] pgfault 210203 [ 213.797390][ T3320] pgmajfault 15 [ 213.800884][ T3320] inactive_anon 0 [ 213.804529][ T3320] active_anon 0 [ 213.808036][ T3320] inactive_file 8192 [ 213.811965][ T3320] active_file 0 [ 213.815451][ T3320] unevictable 0 [ 213.819038][ T3320] hierarchical_memory_limit 314572800 [ 213.824476][ T3320] hierarchical_memsw_limit 9223372036854771712 [ 213.830761][ T3320] total_cache 0 [ 213.834247][ T3320] total_rss 0 [ 213.837579][ T3320] total_shmem 0 [ 213.841049][ T3320] total_mapped_file 0 [ 213.845041][ T3320] total_dirty 0 [ 213.848695][ T3320] total_writeback 0 [ 213.852613][ T3320] total_workingset_refault_anon 12 [ 213.857838][ T3320] total_workingset_refault_file 16 [ 213.863159][ T3320] total_swap 208896 [ 213.867025][ T3320] total_swapcached 0 [ 213.870963][ T3320] total_pgpgin 196444 [ 213.875035][ T3320] total_pgpgout 196442 [ 213.879235][ T3320] total_pgfault 210203 [ 213.883512][ T3320] total_pgmajfault 15 [ 213.887566][ T3320] total_inactive_anon 0 [ 213.891810][ T3320] total_active_anon 0 [ 213.895849][ T3320] total_inactive_file 8192 [ 213.900317][ T3320] total_active_file 0 [ 213.904318][ T3320] total_unevictable 0 [ 213.908389][ T3320] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2578,pid=11136,uid=0 [ 213.923589][ T3320] Memory cgroup out of memory: Killed process 11136 (syz.2.2578) total-vm:98116kB, anon-rss:1048kB, file-rss:26536kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 213.949445][T11158] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.987650][T11158] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.551334][T11158] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.562806][T11158] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.574166][T11158] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.585434][T11158] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0