8ae6d2ddaf34830507ec5c6ce6531c5267e1e7a746a89963d50cf37f849c4ecd11f59ae6a8466eba796a0d7659fdf96cdf781c34eb7c4300407d8727f33f7be41232a9f198bb8c8a85ccc11c8b6aa23106d1e7c37d85735daa7901718d448cb2048e45f70f6034dd3d77a747301945bd4c2393ba5e7d35bb29623fd82bb2ed74bad679b263253210ea08a196e10b5f704347a4a64f09a300b77ccdd7b0b4009f394ca0395e2b1e47747d9f9936986405ab4ad33b44423052268d60e620d2bcc1c9e925302e7e57e334a6487623ba1bc3614676a41dfb5ccf845e329325f4f3e58e5f618ce79c37d597f143a7c54e69018a53f8d53ee3960a4bf6bfb4aca6a68921fb22cf90a9610844cbb10be8794d4bd989a9e42e0a9c7ac8011b5648de5f36aca33501935d87e6274aecbe5acb8a8a486d2556b5dc4672af974cc51153ff5b5d52af67df247d21e72c842b78dec7cadb219239aa19631642339187a241a13aa3aaac1bfea71ec59962f0df3d58e133c23f36d1c0b8e9bcd6a0d310440cda06ce81692cbea92b9df4fca6c3c92eb9b75f8e686571c0faeb68a34529397915c48ffef2b213191c1f0a374296ca8ef6ef9c1048e1700a78b122a057876642c511bfe7a51c155605b709b5311938ae5e05bc80040de27358fee06c6184bc021cee0c131f37ba1b1b90d63866e201cf585711f8e1663b632598820e4af409cf90949090c9cd1100a51eead5d23854e2cad29d3740a29270be6ff643c88d384a2f35903f28eab634bc33c322ad736f621444d7015c29cbae2d621be706397f58c57499c6e3c111c7af9324448f25af6df6d3a6583134ccab2bf15653f509eadf4d52b1adff317e3d2e7af2ae9077eabe94192c8b41e2b4881af3c28ce2856b7c15f3296d25ef283f635326d4272d1e3d79b98edac654a8f1b97c1b7c249a034512dbea098ff1110e5b70b829cfc093dbba2c9667b26047867", 0x1000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/meminfo\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x8000, 0x8000, 0x1, 0x1, {{0x22, 0x4, 0x1, 0x2, 0x88, 0x65, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010100, @private=0xa010101, {[@generic={0x86, 0x12, "8821d89019b112b9d87082faf470c2c4"}, @rr={0x7, 0x17, 0xd8, [@private=0xa010100, @broadcast, @multicast2, @broadcast, @remote]}, @timestamp_prespec={0x44, 0x1c, 0x47, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0xb}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x9}]}, @lsrr={0x83, 0x23, 0x7d, [@multicast1, @private=0xa010100, @private=0xa010102, @empty, @multicast2, @multicast2, @multicast1, @private=0xa010101]}, @rr={0x7, 0x7, 0xd0, [@dev={0xac, 0x14, 0x14, 0x2e}]}, @noop, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r3, 0x6, 0x9, 0xed, 0x7fff, 0xe, @local, @mcast1, 0x10, 0xd6ee52a80e6cc9cd, 0x81, 0x10e02372}}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x40, 0x3, 0x8, 0x81, 0x0, 0x7fff, 0x1400, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000140), 0x3}, 0x4d, 0x8, 0x2, 0x7, 0x6, 0x718, 0x20, 0x0, 0x1, 0x0, 0x10000}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r4) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000000c0)='\x1bb\x00\x00\x01n\x00\x00\x02\x00\x8c\xffx\xe3\xe7\xfa\xbd\x06\x00\x00\x9a', 0x0, r1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff) 09:41:38 executing program 3: clock_getres(0x0, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x80ffff, 0x12, 0xffffffffffffffff, 0x0) 09:41:38 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x1e5fa000, 0x12, r0, 0x0) 09:41:38 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_matches\x00') write$sndseq(r0, 0x0, 0x0) 09:41:38 executing program 0: r0 = fsopen(0x0, 0xb8cd83f4ea73d719) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='\xa7\'-:^}/@~\x00', &(0x7f0000000040)='**)#\x00', 0x0) 09:41:38 executing program 3: clock_getres(0x0, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x80ffff, 0x12, 0xffffffffffffffff, 0x0) 09:41:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') syz_open_dev$ttys(0xc, 0x2, 0x1) read$snapshot(r0, 0x0, 0x2) 09:41:38 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x50f00fff, 0x12, r0, 0x0) 09:41:38 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r0 = fork() r1 = getpgrp(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) sched_rr_get_interval(r1, &(0x7f0000000000)) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x10}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:38 executing program 3: clock_getres(0x0, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x80ffff, 0x12, 0xffffffffffffffff, 0x0) 09:41:38 executing program 0: r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='@&\\\'&]\x00', &(0x7f0000000100)="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", 0x1000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) r3 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ptrace$getsig(0x4202, r3, 0x8000, &(0x7f0000001240)) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) fsmount(r2, 0x1, 0xf0) fsopen(&(0x7f0000001100)='ocfs2_dlmfs\x00', 0x1) r4 = fork() syz_open_procfs(r4, &(0x7f00000011c0)='attr/current\x00') fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='\x94\x00', &(0x7f0000000080)='\\^/}!\x00', 0x0) ptrace$getsig(0x4202, 0xffffffffffffffff, 0x89, &(0x7f0000001140)) 09:41:38 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x50f03fff, 0x12, r0, 0x0) 09:41:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) 09:41:38 executing program 3: r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x80ffff, 0x12, r0, 0x0) 09:41:39 executing program 4: timer_create(0x5, &(0x7f00000000c0)={0x0, 0x24, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x9) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$get_persistent(0x16, r1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r5, 0x8000000) syz_io_uring_submit(r7, r6, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x5, 0x4000, @fd=r0, 0x7, &(0x7f0000000200)="aa6a49c48f191ad9e30c0c27203786caa58a3d49fb7998343d8081e62f44e8f5e50359db04a83e2d808510e79ed2dbcf5c482e5accfc01eca48f99cd7f7b4c0d4126f164b30bbdf91ecfdd969ea66d101bb45127e6941277d59689c062fb94173e5d0facbd19ef2f7d523a16833f2e612ba066f9b233a6cba19ae46ca43c833d5db6fbec82439fe7106554fe027512b41cfb94bc", 0x94, 0x4, 0x1, {0x0, r8}}, 0x48fe) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r9, 0x0, 0x0) 09:41:39 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r0 = fork() syz_open_procfs(r0, &(0x7f0000000000)='fd/3\x00') syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(r0, 0x0, 0x2) write$cgroup_type(r0, &(0x7f0000000040), 0x3) 09:41:39 executing program 3: r0 = io_uring_setup(0x0, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x80ffff, 0x12, r0, 0x0) 09:41:39 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0xff0ff050, 0x12, r0, 0x0) 09:41:39 executing program 3: r0 = io_uring_setup(0x0, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x80ffff, 0x12, r0, 0x0) 09:41:39 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0x7fffffff, 0xffff, 0x80, 0x3, 0xeb80, 0x100}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 09:41:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) read$snapshot(r0, &(0x7f00000004c0)=""/210, 0xd2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_sta\x84s_refreSh_interval\x00', 0x0, r1) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0xb97d) read$snapshot(r0, 0x0, 0x2) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="00000000340411b0a134ccaf89f73456cc3d4943dafc1659bc5699172c7edbf084835d064cb1d972c9902759825ea4e237c8c72ab0dc175fc5156e1770485e552b6e148d78aadaf2d25674f51f7defa21e6e914011f6efc5ffb2824eb9242a308c757e694a42485e2bfb", @ANYRES16=r2, @ANYBLOB="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"], 0x348}, 0x1, 0x0, 0x0, 0x4000}, 0x200000c0) 09:41:39 executing program 0: fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x1) 09:41:39 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0xff3ff050, 0x12, r0, 0x0) 09:41:39 executing program 3: r0 = io_uring_setup(0x0, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x80ffff, 0x12, r0, 0x0) 09:41:39 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r1 = io_uring_setup(0x61f4, &(0x7f0000000000)={0x0, 0x73fb, 0x2, 0x3, 0x2ca, 0x0, r0}) io_uring_setup(0x5964, &(0x7f00000001c0)={0x0, 0x8d3d, 0x10, 0x2, 0x3d0, 0x0, r1}) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:39 executing program 0: fsopen(0x0, 0xb8cd83f4ea73d719) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='.*\'$\x00', &(0x7f0000000080)='./file0\x00', r1) epoll_create1(0x0) 09:41:39 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000000)={0x101, 0x2, {0x0, 0x3, 0x9, 0x1, 0x3ff}, 0xff}) 09:41:39 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0xffff8000, 0x12, r0, 0x0) 09:41:39 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/ip_mr_vif\x00') read$snapshot(r1, 0x0, 0x2) 09:41:39 executing program 3: r0 = io_uring_setup(0x1fd2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x80ffff, 0x12, r0, 0x0) 09:41:39 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) write$sndseq(r0, 0x0, 0x0) 09:41:39 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0xffffc000, 0x12, r0, 0x0) 09:41:39 executing program 3: r0 = io_uring_setup(0x1fd2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x80ffff, 0x12, r0, 0x0) 09:41:39 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005df000/0x3000)=nil, &(0x7f00000002c0), 0x0) r0 = fork() ptrace$getsig(0x4202, r0, 0x5, &(0x7f0000000040)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000001c0)={0x1, 0x80, 0x28, 0x63, 0x40, 0x81, 0x0, 0x3f, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffff000, 0x0, @perf_config_ext={0x80000001, 0x6b4}, 0x180, 0x80000000, 0x6, 0x8, 0x200, 0x3, 0x1000, 0x0, 0x7fffffff, 0x0, 0x2}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) 09:41:39 executing program 0: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000827bd7000fedbdf250600000006008b2e0b000100000014000600ff0200000000000000000000000bbf30aff3dd000001a1ad0b2eed4ae9cfdbcca3fc8608fcd644cfa707bb46f31b7f2327f3107b9b55d9710976473c84f4928c2e789b5aa83ab7937dbe6589ef0becdec1d4c65abd7cae8864dd4a1bf69c4703ab752adab0c6cc32e175e6af020000"], 0x30}, 0x1, 0x0, 0x0, 0x5880}, 0x20000000) fsopen(0x0, 0xb8cd83f4ea73d719) 09:41:39 executing program 2: read$snapshot(0xffffffffffffffff, 0x0, 0x2) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x8001, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000140)='\x00', 0x0, r0) syz_io_uring_setup(0x5db9, &(0x7f0000000000)={0x0, 0xa430, 0x2, 0x2, 0x127}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000603000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x70) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000001c0)={0x2, 0x2, 0x8, {0xfffffffc, 0x1}, 0x1d, 0x4}) 09:41:39 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2f, 0xaf, 0x8, 0x634, 0x12, @private1, @ipv4={'\x00', '\xff\xff', @remote}, 0x700, 0x8000, 0x3204, 0x8}}) write$sndseq(r0, 0x0, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) 09:41:39 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x800000000, 0x12, r0, 0x0) 09:41:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') syz_io_uring_complete(0x0) read$snapshot(r0, 0x0, 0x2) 09:41:39 executing program 1: syz_io_uring_setup(0x1d83, &(0x7f0000000240)={0x0, 0xde05, 0x2}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f0000000000), 0x0) r0 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, &(0x7f0000000040)=0x1, 0x0, 0x4) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x43}, 0x20000000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000140)={0x9}, 0x4) 09:41:39 executing program 3: r0 = io_uring_setup(0x1fd2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x80ffff, 0x12, r0, 0x0) 09:41:39 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') 09:41:39 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x1000000000, 0x12, r0, 0x0) 09:41:39 executing program 3: r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:39 executing program 0: keyctl$invalidate(0x15, 0x0) fsopen(0x0, 0xb8cd83f4ea73d719) r0 = fork() fspick(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xcc, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfeb1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6f4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe05e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000004) timer_create(0x0, &(0x7f0000000000)={0x0, 0x800004, 0x1, @tid=r1}, 0x0) ptrace$getsig(0x4202, r0, 0x4, &(0x7f0000000000)) 09:41:39 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x6, 0x7fffffff, 0x3acd79e4, 0x4, 0x1, 0x1}) 09:41:39 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) ptrace$setopts(0x4206, r0, 0x3f, 0x20) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:39 executing program 2: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) r1 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/udp\x00') read$snapshot(r2, 0x0, 0x2) timer_create(0x4, &(0x7f0000000080)={0x0, 0x3e, 0x2, @tid=r1}, &(0x7f00000000c0)=0x0) timer_getoverrun(r3) r4 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r4}, 0x0) syz_open_procfs(r4, &(0x7f0000000000)='limits\x00') 09:41:39 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x400000000000, 0x12, r0, 0x0) 09:41:39 executing program 3: r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:39 executing program 0: fsopen(0x0, 0xe2f83c8712269a13) 09:41:39 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/sockstat6\x00') write$sndseq(r0, 0x0, 0x0) 09:41:39 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x8000000000000, 0x12, r0, 0x0) 09:41:39 executing program 3: r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:39 executing program 1: ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:40 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='pagemap\x00') openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/keycreate\x00', 0x2, 0x0) read$snapshot(r0, 0x0, 0x2) 09:41:40 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='oom_score_adj\x00') write$sndseq(r1, 0x0, 0x0) 09:41:40 executing program 0: fsopen(0x0, 0xb8cd83f4ea73d719) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x7, 0x4, 0x6, 0x4, @time={0x7aa6, 0x7ff}, {0x3, 0x97}, {0x1, 0xf}, @result={0xdc, 0xe85}}, {0x4, 0x8, 0x40, 0x4, @time={0x7, 0xffff}, {0x1f, 0x3}, {0x80, 0x4}, @connect={{0xf2, 0xd9}, {0xfa, 0x33}}}, {0x2, 0x40, 0x6, 0x2, @time={0x1, 0x3f}, {0x7f, 0x20}, {0x20}, @result={0x0, 0xfffffffb}}], 0x54) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getgroups(0x1, &(0x7f0000000140)=[0xee00]) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000000c0)={0xbb08, 0x800, 0x9, 0x36, 0x8000, 0x800}) getrandom(&(0x7f0000000180)=""/196, 0xc4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='\x00', 0x0, r0) 09:41:40 executing program 3: r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x80ffff, 0x10, r0, 0x0) 09:41:40 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0xf050000000000, 0x12, r0, 0x0) 09:41:40 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') r1 = socket$unix(0x1, 0x2, 0x0) accept$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) write$sndseq(r0, 0x0, 0x0) 09:41:40 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/llc/core\x00') read$snapshot(r0, 0x0, 0x2) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000040)) 09:41:40 executing program 0: r0 = fsopen(0x0, 0xb8cd83f4ea73d719) r1 = fsmount(r0, 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='@,&\'\\}@\x00', &(0x7f00000000c0)='./file0\x00', r1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x40000000, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 09:41:40 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0xffffffffffffb, 0x12, r0, 0x0) 09:41:40 executing program 3: r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x80ffff, 0x10, r0, 0x0) 09:41:40 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0xfffffffc}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000000)) 09:41:40 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') socket$inet6_icmp(0xa, 0x2, 0x3a) write$sndseq(r0, 0x0, 0x0) 09:41:40 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x40000000000000, 0x12, r0, 0x0) 09:41:40 executing program 3: r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x80ffff, 0x10, r0, 0x0) 09:41:40 executing program 0: fsopen(0x0, 0xb8cd83f4ea73d719) r0 = syz_io_uring_complete(0x0) r1 = socket(0x18, 0x0, 0x1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='-[@\x00', 0x0, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x58, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 09:41:40 executing program 2: keyctl$session_to_parent(0x12) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(r0, 0x0, 0x2) 09:41:40 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r1 = fork() r2 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r2, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000014c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd_index=0xa, 0x800, &(0x7f0000001480)=[{&(0x7f0000000300)="5f629a1ea9120966faefe173b31a62a613675026df1118c5cb68c4c1b6b9561b17c0e99c3f63b3f483f076b2e1ca9ff71094b8ced2b9da451e6f956fecba41147daf58e609659082c802435b5101f9500d91a4d1cce47924d8a230aa3a4120a2a88bb081eb6731b9d2e1244b60d86788ffb234ff066d0a7d023f070ee8cf8d3f09fc178b9166509c5974676254", 0x8d}, {&(0x7f00000003c0)="d32b6fb83438b1b9ed57fb91993fc82f59d34d8a5efbb7b8ab2d44d91a0af23445e36ca043016b547414df65990fc46973405fcc1ea936f888084e76f25d320d17ad566fd41598611a45f20485bc6e8340efc1fae7cee5c524e59475d5e806c0c72816431a8cf5c5ed88ed3f754f9d25d8d34999b155300203b7ccec7f70b74faa169f92ea46913cdaf5c3693ce3c2587e4dd86dd64ec751bcfc3b13d711b16f5faa91c72a63e42817a41757", 0xac}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000200)="aac5c787330b5b719c14fb", 0xb}], 0x4, 0x0, 0x1, {0x0, r6}}, 0x8) ptrace$setopts(0x4200, r1, 0x6, 0xc) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sco\x00') ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) read$snapshot(r0, 0x0, 0x2) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008081}, 0x10) 09:41:40 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x60000000000000, 0x12, r0, 0x0) 09:41:40 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ptrace$getenv(0x4201, r1, 0x4, &(0x7f0000000080)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000000c0)) 09:41:40 executing program 0: fsopen(0x0, 0xb8cd83f4ea73d719) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 09:41:40 executing program 3: io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x80ffff, 0x12, 0xffffffffffffffff, 0x0) 09:41:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/4\x00') read$snapshot(r0, 0x0, 0x2) 09:41:40 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$getsig(0x4202, r0, 0x987, &(0x7f0000000040)) 09:41:40 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x80000000000000, 0x12, r0, 0x0) 09:41:40 executing program 0: stat(&(0x7f0000000000)='./file0\x00', 0x0) getuid() fsopen(0x0, 0xb8cd83f4ea73d719) 09:41:40 executing program 4: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x30, 0x4, @tid=r0}, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='oom_score_adj\x00') timer_gettime(0x0, &(0x7f0000000040)) write$sndseq(r1, 0x0, 0x0) 09:41:40 executing program 3: io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x80ffff, 0x12, 0xffffffffffffffff, 0x0) 09:41:40 executing program 2: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/ip6_tables_names\x00') read$snapshot(r1, 0x0, 0x2) getgid() 09:41:40 executing program 3: io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x80ffff, 0x12, 0xffffffffffffffff, 0x0) 09:41:40 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x80ffff00000000, 0x12, r0, 0x0) 09:41:40 executing program 0: fsopen(0x0, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 09:41:40 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fsmount(0xffffffffffffffff, 0x1, 0x2) syz_io_uring_setup(0x5994, &(0x7f00000001c0)={0x0, 0x4ed7, 0x1, 0x0, 0x182, 0x0, r0}, &(0x7f00006f3000/0x3000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000300)) syz_io_uring_setup(0x57b6, &(0x7f0000000140), &(0x7f00006f6000/0x2000)=nil, &(0x7f0000dd3000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x79) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000000)={0x5, 0x5, 0xd11, {0x9, 0x44480081}, 0x9, 0x7f}) 09:41:40 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0xa05f1e00000000, 0x12, r0, 0x0) 09:41:40 executing program 2: ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0xd93) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(r0, 0x0, 0x2) 09:41:40 executing program 4: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) syz_open_procfs(r1, &(0x7f00000000c0)='net/ip6_mr_vif\x00') r2 = syz_open_procfs(r0, &(0x7f0000000040)='oom_score_adj\x00') write$sndseq(r2, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 09:41:40 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x4, 0x3a, 0x3c, 0x22, 0x4, 0x4, 0x0, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000080), 0x9}, 0x45920, 0xd1a2, 0x9, 0x8, 0x9, 0x5, 0x9, 0x0, 0x5, 0x0, 0x4}) fsopen(0x0, 0x1) 09:41:40 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0xc0ffff00000000, 0x12, r0, 0x0) 09:41:40 executing program 3: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x30, 0x4, @tid=r0}, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='oom_score_adj\x00') timer_gettime(0x0, &(0x7f0000000040)) write$sndseq(r1, 0x0, 0x0) 09:41:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000040)={0x5, 0x763, 0x9, 0x3c, 0x5, 0x6}) read$snapshot(r0, 0x0, 0x2) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000000)) 09:41:40 executing program 0: fsopen(0x0, 0xb8cd83f4ea73d719) r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) rt_sigqueueinfo(r0, 0x3, &(0x7f0000000000)={0x27, 0x4, 0x5}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 09:41:40 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x100000000000000, 0x12, r0, 0x0) 09:41:40 executing program 4: write$sndseq(0xffffffffffffffff, 0x0, 0x0) 09:41:40 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "bb412fd7f01035de4d8132b9cc8452ccb5882e85b5e5b7c445320526e485bdd4d80240de2f9abd0a57df812f101212f4a61fd161ba3dda5d5780a809959e1501"}, 0x48, 0xfffffffffffffffb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) syz_io_uring_setup(0x48a0, &(0x7f0000000000)={0x0, 0x8f01, 0x18, 0x1, 0x15f, 0x0, r1}, &(0x7f00005ea000/0x4000)=nil, &(0x7f00005e7000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000280)='id_resolver\x00', &(0x7f0000000240)=@chain) keyctl$read(0xb, r0, &(0x7f0000000300)=""/4096, 0x1000) gettid() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:40 executing program 3: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x30, 0x4, @tid=r0}, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='oom_score_adj\x00') timer_gettime(0x0, &(0x7f0000000040)) write$sndseq(r1, 0x0, 0x0) 09:41:40 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sco\x00') ioctl$SNAPSHOT_S2RAM(r0, 0x330b) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='net/ip6_tables_matches\x00', 0x0, r2) read$snapshot(r0, 0x0, 0x2) 09:41:41 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) r1 = getpgid(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') 09:41:41 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x200000000000000, 0x12, r0, 0x0) 09:41:41 executing program 0: request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffb) fsopen(0x0, 0xb8cd83f4ea73d719) 09:41:41 executing program 3: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x30, 0x4, @tid=r0}, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='oom_score_adj\x00') timer_gettime(0x0, &(0x7f0000000040)) write$sndseq(r1, 0x0, 0x0) 09:41:41 executing program 1: getrusage(0x1, &(0x7f0000000000)) syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000200)) r1 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, 0x0) ptrace$setopts(0x4206, r1, 0xfffffffffffffffd, 0x4) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:41 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x400000000000000, 0x12, r0, 0x0) 09:41:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000001480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001440)={&(0x7f0000000140)={0x1300, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x231}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x16000000}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @mcast1, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ed}]}, @TIPC_NLA_NODE={0x1064, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "4791b7818cb61965e09e4fbac5ee4bb4f7b142f699d70b2eb5552a3e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb16}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xd808, @local, 0xfb}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f27}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x46d}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x1300}, 0x1, 0x0, 0x0, 0x81}, 0x44001) r1 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') r3 = getpgid(r1) ptrace$getsig(0x4202, r3, 0x2, &(0x7f0000000080)) read$snapshot(r2, 0x0, 0x2) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r4) r5 = fsmount(r2, 0x1, 0x70) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000014c0)='ib\x00', 0x0, r5) 09:41:41 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x400) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)=']{^\x00', 0x0, r0) 09:41:41 executing program 3: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x30, 0x4, @tid=r0}, 0x0) syz_open_procfs(r0, &(0x7f00000001c0)='oom_score_adj\x00') timer_gettime(0x0, &(0x7f0000000040)) 09:41:41 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0xa00000000000000, 0x12, r0, 0x0) 09:41:41 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x30, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x118, &(0x7f0000000000), 0x0, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000040)=0xc) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000100)={0x8001, 0x80, 0x51, {0x7f}, 0x4e}) read$snapshot(r2, &(0x7f0000000180)=""/14, 0xe) sched_getattr(r1, &(0x7f0000000080)={0x38}, 0x38, 0x0) fsopen(0x0, 0x1) 09:41:41 executing program 4: syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) 09:41:41 executing program 3: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x30, 0x4, @tid=r0}, 0x0) syz_open_procfs(r0, &(0x7f00000001c0)='oom_score_adj\x00') 09:41:41 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0xfbffffffffff0f00, 0x12, r0, 0x0) 09:41:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x101a00, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) read$snapshot(r0, 0x0, 0x0) 09:41:41 executing program 0: fsopen(0x0, 0xb8cd83f4ea73d719) fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r0 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) fsmount(r0, 0x0, 0xfc) 09:41:41 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f0000a2f000/0x2000)=nil, &(0x7f00000002c0), 0x0) r0 = fork() getpgrp(r0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:41 executing program 4: r0 = fork() getpid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r1, 0x0, 0x0) 09:41:41 executing program 3: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x30, 0x4, @tid=r0}, 0x0) 09:41:41 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0xff0ff05000000000, 0x12, r0, 0x0) 09:41:41 executing program 0: r0 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_complete(r2) getrusage(0x0, &(0x7f0000000000)) fsopen(0x0, 0xb8cd83f4ea73d719) 09:41:41 executing program 2: sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x2d0, 0x0, 0x200, 0x270bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x174, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "858a0627539fd2466e3a881377567ecfcf5a6ff5"}}, @TIPC_NLA_NODE_ID={0x6b, 0x3, "959231bba5f014c2d1c3d03484ff016849cfb4a28a79d1d7337f7ab4ce729330a9bb45756de85e0b5c460c51d7a1837116a53ad8dff080004059db55eb1e7ede5c86dda20fcaa407f98f33b59ef693aa8b380e0ee995cfefd1db9b8991f9c58a1ba644ecf2181e"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9f}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "d6e9d3666d94d1231e49fc1d38a78122a3b641b885b98a1e7dffe965dbb23300bef460cc"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0x22, 0x3, "8d169adbcc6aaa474381de9945271db5bf66de0da4294240da5ee46b4db9"}, @TIPC_NLA_NODE_ID={0x32, 0x3, "d1d9dcc92d149b3075e348cd405c6a4c24c0fd39149cd71cc192b514a097652d8551713596351d24c7736e6debb8"}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1431}]}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x1, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x0, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa7cd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbd5a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x880}, 0x40000) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) openat$cgroup_type(r1, &(0x7f0000000000), 0x2, 0x0) read$rfkill(r1, &(0x7f00000000c0), 0x8) read$snapshot(r0, 0x0, 0x2) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000040)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) 09:41:41 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0xff3ff05000000000, 0x12, r0, 0x0) 09:41:41 executing program 0: r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 09:41:41 executing program 2: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='pagemap\x00') read$snapshot(r1, 0x0, 0x2) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) 09:41:41 executing program 3: fork() 09:41:41 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 09:41:41 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0xffffffff00000000, 0x12, r0, 0x0) 09:41:41 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) mmap$perf(&(0x7f00005e8000/0x3000)=nil, 0x3000, 0xb, 0x4000010, r0, 0x9) 09:41:41 executing program 0: fsopen(0x0, 0x1) 09:41:41 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x2) 09:41:41 executing program 3: fork() 09:41:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3fc2733978223de5}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1bc, r2, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe09}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xae02}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x122b}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x97c}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xdf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd6}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x98d5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc44}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffe0}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff0000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0xc044}, 0x20000008) read$snapshot(r0, 0x0, 0x2) 09:41:41 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) write$sndseq(r0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) 09:41:41 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x4) 09:41:41 executing program 3: fork() 09:41:41 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0xffffffff}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e6000/0x10000)=nil, &(0x7f00000002c0)=0x0, 0x0) fork() r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x1, 0x10, 0x3, 0x40, {{0x16, 0x4, 0x1, 0x4, 0x58, 0x67, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010100, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0x16, 0x3, 0x1, [{@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @noop, @timestamp={0x44, 0x2c, 0x96, 0x0, 0xf, [0x401, 0x10001, 0x9a, 0x8, 0x3ff, 0xff, 0x9, 0xeac, 0x7f, 0x3]}]}}}}}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) syz_io_uring_complete(r0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0xf7b5, 0x1, 0x0, 0x20000000, 0x0, r1}, &(0x7f00005e3000/0x4000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:41 executing program 0: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) fsopen(0x0, 0xb8cd83f4ea73d719) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8080) 09:41:41 executing program 4: write$sndseq(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x9fcf, 0x4, 0x8, 0x4000080, 0x204, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000000)) 09:41:41 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x284000, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x4, 0x8001, 0x48, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x40, 0x0, 0x200, 0x6}}) r4 = syz_open_procfs(r2, &(0x7f0000000080)='pagemap\x00') read$snapshot(r4, 0x0, 0x2) 09:41:41 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8) 09:41:41 executing program 3: fork() timer_create(0x0, 0x0, 0x0) 09:41:41 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x1d7, 0x0, 0x1}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:41 executing program 0: keyctl$negate(0xd, 0x0, 0x6, 0xfffffffffffffffd) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)={0x0}) fsopen(0x0, 0xb8cd83f4ea73d719) 09:41:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) accept$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r3) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000000)='-^\x00', 0x0, r4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000100)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) 09:41:41 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xa) 09:41:42 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x3, 0x1, 0x2, 0x0, 0x0, 0x80020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x3f, 0xffe}, 0xc08, 0x69, 0x9, 0xe, 0x800000000040021, 0x0, 0x3, 0x0, 0x5f, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xa) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000080)) 09:41:42 executing program 3: fork() timer_create(0x0, 0x0, 0x0) 09:41:42 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x10) 09:41:42 executing program 2: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) timer_delete(0x0) timer_create(0x1, &(0x7f0000000100)={0x0, 0x1d, 0x2, @tid=r0}, &(0x7f0000000140)=0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x23, 0x0, @thr={&(0x7f0000001380)="0cd225cb0755ce36fb280900e5fa03070a5b34ba2a8d1f4e93df3b829eea3a79f452a40d609de3f9292ccdda8e1f8bb1099ca2ebb6a7320502786dfea4b9001645cd97bf205424505712ec43604c1daa8cfa48b8c3968e50f89a90610bf971ffeb8420b26610524d3bb6587b452ffe06f71f8a7eedd043ebbe72ed5b0db2b3c88173febe8e13600bdac5579f54831a3d0ea12af0f84f136cad92", &(0x7f0000000180)="5c7bded663cb3495fa1581abf18e5bcbc5fd03df66529c52bb8d9da9c21b488efc3544b5b53020b3ed962cd1b01448239e9116a27911e3c82061cf619e5e967f9ee4ecfc5dab592f921d543929bdff01354fd4c1feb581d389ea52ed01f20a3e2f6dfa5a1ce6ba8cdf9a435e0786c6709e078345431dc0f274bcaecac1"}}, &(0x7f0000001440)=0x0) timer_getoverrun(r2) timer_getoverrun(r1) timer_create(0x2, &(0x7f0000001480)={0x0, 0x1f, 0x0, @tid=r0}, &(0x7f00000014c0)=0x0) clock_gettime(0x0, &(0x7f0000001500)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000001540)={{r4, r5+10000000}, {0x77359400}}, &(0x7f0000001680)) r6 = syz_open_procfs(r0, &(0x7f0000000040)='net/mcfilter6\x00') clock_gettime(0x0, &(0x7f00000015c0)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000001600)={{r7, r8+60000000}}, &(0x7f0000001640)) timer_create(0x5, &(0x7f0000000080)={0x0, 0x18, 0x6, @thr={&(0x7f00000002c0)="b5c1256947767edd40fb30376e91fc145dce3a79bba0a3bdbcea7d1175aa05dc75b9aca126064302710cc011c91f7e7ed46d88d0063f28acf4f5c2864fab43f21945c54fd27905208dfb7191823bdba6db2b9f61f711820989bb51d20810dc29cd76e08589a7b2deb574b57fba47b5b4c0edae8bcba308b4b99ab94c1a50400a534a20407c7210ab4842bbd80a2a2abf4b4e153609385d371ef2bd03c20b7101cd643142ee90a7a26cad3152def826b9e59a8c6b433e491c0dece8e8b73a", &(0x7f0000000380)="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"}}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r9, 0x1, &(0x7f0000000240)={{r10, r11+60000000}, {0x77359400}}, 0x0) read$snapshot(r6, 0x0, 0x2) 09:41:42 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp6\x00') write$sndseq(r0, 0x0, 0x0) 09:41:42 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0)=0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x4ce4, &(0x7f0000000000)={0x0, 0xdec7, 0x4, 0x2, 0x16e}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005ea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x4001}, 0x0, {0x0, r3}}, 0x7) 09:41:42 executing program 3: fork() timer_create(0x0, 0x0, 0x0) 09:41:42 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x60) 09:41:42 executing program 3: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) 09:41:42 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000e, 0x20010, 0xffffffffffffffff, 0x8000000) ptrace$getsig(0x4202, 0x0, 0x7, &(0x7f0000000000)) 09:41:42 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8000) write$sndseq(r0, 0x0, 0x0) 09:41:42 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) capget(&(0x7f00000000c0)={0xf1504, r0}, &(0x7f0000000100)={0x80000001, 0x1ff, 0x1, 0x0, 0xada, 0x10000}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(r1, 0x0, 0x2) 09:41:42 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xa00) 09:41:42 executing program 3: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) 09:41:42 executing program 1: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x885}, 0x20) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000a37c", @ANYRES16=r0, @ANYBLOB="010025bd7000fcdbdf250200000008000500ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0xc008800) fork() syz_io_uring_setup(0xeae, &(0x7f0000000140)={0x0, 0x1a1f, 0x2, 0x4}, &(0x7f0000dd3000/0x4000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000000)) 09:41:42 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xa40, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000040)={0x9, 0x7}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000000c0)) read$snapshot(r1, 0x0, 0x2) 09:41:42 executing program 0: fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)=':e]@/\x00', &(0x7f0000000040)='\x00', 0x0) fsopen(0x0, 0xb8cd83f4ea73d719) keyctl$update(0x1c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 09:41:42 executing program 3: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) 09:41:42 executing program 4: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x1) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x7, 0x7, 0xff, 0x4, {{0x23, 0x4, 0x1, 0x36, 0x8c, 0x67, 0x0, 0x6, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp_addr={0x44, 0x3c, 0xf0, 0x1, 0x0, [{@loopback, 0x7}, {@empty, 0x5}, {@local}, {@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@rand_addr=0x64010102, 0x916}, {@local, 0x10000}]}, @timestamp_prespec={0x44, 0x1c, 0x5b, 0x3, 0x1, [{@broadcast, 0x7}, {@rand_addr=0x64010101, 0x8}, {@private=0xa010102}]}, @rr={0x7, 0x1f, 0x6c, [@multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3f}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000280)=@getsadinfo={0x380, 0x23, 0x400, 0x70bd26, 0x25dfdbff, 0x0, [@extra_flags={0x8, 0x18, 0x8}, @migrate={0x180, 0x11, [{@in=@loopback, @in6=@private1, @in=@rand_addr=0x64010101, @in=@empty, 0x3c, 0x0, 0x0, 0x3503, 0x2, 0x2}, {@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, @in=@multicast2, 0x33, 0x2, 0x0, 0x3501, 0xa, 0x2}, {@in6=@loopback, @in=@multicast2, @in6=@loopback, @in=@broadcast, 0xff, 0x1, 0x0, 0x3506, 0xa, 0xa}, {@in6=@mcast2, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x3c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3c, 0x2, 0x0, 0x0, 0x2, 0x2}, {@in=@multicast1, @in=@empty, @in=@multicast2, @in=@multicast2, 0xff, 0x1, 0x0, 0x3500, 0xa, 0xa}]}, @replay_esn_val={0x38, 0x17, {0x7, 0x70bd26, 0x70bd2c, 0x70bd2b, 0x70bd27, 0x6, [0x3, 0x6, 0xfffffffd, 0x400, 0x2, 0x1, 0x3]}}, @coaddr={0x14, 0xe, @in6=@rand_addr=' \x01\x00'}, @policy={0xac, 0x7, {{@in6=@remote, @in6=@remote, 0x4e20, 0x0, 0x4e20, 0xa967, 0x2, 0x20, 0x0, 0x87, 0x0, 0xee00}, {0x6, 0x5, 0x8b, 0xebb1, 0x1, 0x9, 0x1, 0xffffffff}, {0x1, 0x7f, 0x5, 0xfffffffffffffc00}, 0x7fffffff, 0x6e6bba, 0x0, 0x0, 0x3, 0x3}}, @srcaddr={0x14, 0xd, @in=@multicast1}, @policy={0xac, 0x7, {{@in6=@loopback, @in6=@empty, 0x4e22, 0x2, 0x4e21, 0x3f, 0x2, 0xc0, 0x40, 0x3b, r2, r3}, {0xf4fe, 0xff000000000000, 0x6, 0x17, 0x1, 0x1f, 0x101, 0x101}, {0x7, 0x7, 0x15, 0x40}, 0x4, 0x6e6bb9, 0x0, 0x1, 0x3, 0x1}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010101, @in=@broadcast, 0x0, 0x2}}]}, 0x380}}, 0x4004000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x65a1c0, 0x0) 09:41:42 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x4000) 09:41:43 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1010000}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r1 = syz_io_uring_setup(0x30b2, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x358, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3cf}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x69567f41}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x21c06e69}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NODE={0x1c0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x9a, 0x3, "072ba068f3390d1a525fc336f554848ab10defe4fe9b8fd3d24f24f6b0303998d28c199fe568a77dcaeecf24a83665c89d3781d323d7189da5c982cd45c81382e87550a5d2475a4c3839286df5fd6e17b02e7fa366f18640df86495c9b65b4a2f6c78b22d70ead26f2591e9285e5c4d4bb5bbbf4610a3c291126b7594fc10d903d11b787be4e8d3a3d7f8bd91d5ca7239d293d981fad"}, @TIPC_NLA_NODE_ID={0x59, 0x3, "19b7b7234aabdd1512748334cf0c35016b6d2e352c4abb4c333276c22107353e4c04fa40b6a1f37ae0216f0c35d4208b09aed0112b478ab17bfbf092596327214dcc2b05b5df62685f4ec7454b0d75526d44be787b"}, @TIPC_NLA_NODE_ID={0xc4, 0x3, "81469f86f2ee59fb9ff203e4b1f7ef9400e328514e5cdd18f51f369bf13fbd5462c858314da0c61e5fb1b334ccdd1f209d570284e7f97e19783a3538ad0341516384f85df09b4a0315b4d7667053e1b7906190408a6669d5b19aff7f92a21b738af13a55f1992468cf18232e139cd4c9f926c9f2a25c41c0adb315d7f89a8cb6013e67ae104954c19bddcda0d250854e9c43821743f47503259369f4482931325c1eb15d45b979615b4d0808d04697f86edccfe3da9e4a8761cb73761b73ebbd"}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x67}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x995}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x35f4}]}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x72385d2e}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x358}}, 0x40080) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r1 = syz_io_uring_complete(0x0) recvfrom$unix(r1, &(0x7f0000000000)=""/54, 0x36, 0x143, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r3 = syz_io_uring_complete(0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) fspick(r2, &(0x7f0000000140)='./file0\x00', 0x0) read$snapshot(r0, 0x0, 0x2) r4 = fsmount(r2, 0x1, 0x5) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r4, 0x8008330e, &(0x7f0000000180)) 09:41:43 executing program 0: fsopen(0x0, 0xb8cd83f4ea73d719) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='#!\x00', &(0x7f0000000040)='./file0\x00', r1) 09:41:43 executing program 3: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x30, 0x0, @tid=r0}, 0x0) 09:41:43 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x6000) 09:41:43 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stack\x00') write$sndseq(r0, 0x0, 0x0) 09:41:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(r0, 0x0, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 09:41:43 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:43 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0xfffffffffffffef7) 09:41:43 executing program 0: fsopen(0x0, 0xb8cd83f4ea73d719) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 09:41:43 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x50f00) 09:41:43 executing program 3: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x30, 0x0, @tid=r0}, 0x0) 09:41:43 executing program 2: r0 = fork() r1 = syz_open_procfs(r0, &(0x7f0000000000)='fdinfo/4\x00') getgid() read$snapshot(r1, 0x0, 0x2) 09:41:43 executing program 0: fsopen(0x0, 0xb8cd83f4ea73d719) 09:41:43 executing program 4: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x1, 0x700, 0x7fff, 0x10001, {{0x21, 0x4, 0x3, 0x1, 0x84, 0x67, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @local, {[@generic={0x88, 0xa, "87cff00ce69dbfef"}, @ssrr={0x89, 0x1b, 0x2d, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @multicast1, @private=0xa010101, @multicast2]}, @timestamp={0x44, 0x2c, 0x50, 0x0, 0x8, [0x31d, 0x6, 0x1, 0x6, 0x101, 0x7, 0x2a, 0x10001, 0x1, 0x401]}, @timestamp_addr={0x44, 0x14, 0x12, 0x1, 0x9, [{@private=0xa010100, 0x3ff}, {@broadcast, 0x8001}]}, @end, @lsrr={0x83, 0x7, 0xfc, [@empty]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x90, r0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r2, 0x0, 0x0) 09:41:43 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x80000) 09:41:43 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r0 = fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) ptrace$setopts(0x4206, r0, 0x2, 0x3) tgkill(r0, r0, 0x9) timer_create(0x5, &(0x7f0000000040)={0x0, 0x8, 0x0, @thr={&(0x7f0000000000)="1cbbac8e49f04e2514d242f37efaca98852ed9740376381d", &(0x7f0000000300)="a12d245325534cf68443c2613d1bf11f4cf9398c81312013782ca6302112fe1e1a021111647c60cd12d5e54ccfc9ff9ecd32b921eb0e14c8717bb8feb2a48e784dfe27a14ac4d03739cff4a561f98485a650b6c7e1ba91eb1a76b0e2020e6ea5eb38b777abf7a935b7e048438bc6fea1e7c888c000009f93004f30dadf2250171f90011e933a28c37e4ef105d696ae40791fec56a434e86e20173a29cbea836956b438bc3ad211309b7fcdf5e598aa0c7e6455526ec4e186a26e7438333227707023fcf9ba9dba8da96263215a7d4f5a"}}, &(0x7f0000000080)) 09:41:43 executing program 0: fsopen(0x0, 0xb8cd83f4ea73d719) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='-\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff) 09:41:43 executing program 3: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x30, 0x0, @tid=r0}, 0x0) 09:41:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(r0, 0x0, 0x2) read$snapshot(r0, &(0x7f00000000c0)=""/4096, 0x1000) 09:41:43 executing program 4: r0 = syz_io_uring_complete(0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/31, 0x1f, 0x40000040, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r1 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='attr\x00') write$sndseq(r2, 0x0, 0x0) 09:41:43 executing program 0: r0 = fsopen(0x0, 0xb8cd83f4ea73d719) fsmount(r0, 0x0, 0x94) 09:41:43 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xf0500) 09:41:43 executing program 3: fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x30, 0x4}, 0x0) 09:41:43 executing program 0: fsopen(0x0, 0x1) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) 09:41:43 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='wchan\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipx\x00') r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x18f402, 0x0) read$snapshot(r0, 0x0, 0xfffffffffffffec9) 09:41:43 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000080)={0x95f4, 0x3, {0xffffffffffffffff, 0x0, 0x4, 0x2, 0x8c}, 0x101}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000000)={0x80009, 0x1, {0x0, 0x1, 0xe, 0x0, 0x6}, 0x105}) 09:41:43 executing program 0: fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='\\&}\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff) fsopen(0x0, 0xb8cd83f4ea73d719) 09:41:43 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x400000) 09:41:43 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r1 = syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x1664, &(0x7f0000000000)={0x0, 0x2202, 0x4, 0x0, 0x34e, 0x0, r1}, &(0x7f0000a31000/0x1000)=nil, &(0x7f00005e7000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000001c0)) r3 = syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x0, 0x4}, &(0x7f00006f4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r3, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x2007, @fd=r0, 0x0, &(0x7f0000000300)="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", 0x1000, 0x3e}, 0xffff8001) r6 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r6, 0x8000000) syz_io_uring_submit(r8, r7, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x13f7, &(0x7f0000001300)={0x0, 0x8e0b, 0x4, 0x2, 0x280, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001380), &(0x7f00000013c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) 09:41:43 executing program 3: fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x30, 0x4}, 0x0) 09:41:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(r0, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00') ioctl$SNAPSHOT_FREE(r1, 0x3305) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f0000000040)) syz_open_dev$ptys(0xc, 0x3, 0x1) 09:41:43 executing program 4: syz_io_uring_setup(0x7269, &(0x7f0000000000)={0x0, 0x6349, 0x1, 0x3, 0x139}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb726) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') clock_gettime(0x5, &(0x7f0000000140)) 09:41:43 executing program 0: fsopen(0x0, 0x1) 09:41:43 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x600000) 09:41:43 executing program 3: fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x30, 0x4}, 0x0) 09:41:43 executing program 4: r0 = fork() r1 = gettid() sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000080)='net/ip6_tables_targets\x00') write$sndseq(r2, 0x0, 0x0) 09:41:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) read$snapshot(r0, 0x0, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7ff) r2 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x8) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='$\\+])+)\x00*\x00', 0x0, r2) 09:41:43 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fec000/0x12000)=nil, 0x12000, 0x200000d, 0x4000010, r0, 0x8000000) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:43 executing program 0: r0 = fsopen(0x0, 0xb8cd83f4ea73d719) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000100)=')\x00', &(0x7f00000000c0)='./file0/file0\x00', r1) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='\xf5\x00', &(0x7f0000000040)='./file0\x00', r1) 09:41:43 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x800000) 09:41:43 executing program 3: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r0 = fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) ptrace$setopts(0x4206, r0, 0x2, 0x3) tgkill(r0, r0, 0x9) timer_create(0x5, &(0x7f0000000040)={0x0, 0x8, 0x0, @thr={&(0x7f0000000000)="1cbbac8e49f04e2514d242f37efaca98852ed9740376381d", &(0x7f0000000300)="a12d245325534cf68443c2613d1bf11f4cf9398c81312013782ca6302112fe1e1a021111647c60cd12d5e54ccfc9ff9ecd32b921eb0e14c8717bb8feb2a48e784dfe27a14ac4d03739cff4a561f98485a650b6c7e1ba91eb1a76b0e2020e6ea5eb38b777abf7a935b7e048438bc6fea1e7c888c000009f93004f30dadf2250171f90011e933a28c37e4ef105d696ae40791fec56a434e86e20173a29cbea836956b438bc3ad211309b7fcdf5e598aa0c7e6455526ec4e186a26e7438333227707023fcf9ba9dba8da96263215a7d4f5a"}}, &(0x7f0000000080)) 09:41:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @private2, 0x5db7c396}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x2400c805) read$snapshot(r0, 0x0, 0x2) 09:41:43 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='lb_stats_refresh_interval\x00', 0x0, r1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000140)='lb_stats_refresh_interval\x00', 0x0, r1) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0xda, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 09:41:44 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x80ffff) 09:41:44 executing program 0: r0 = fsopen(0x0, 0xb8cd83f4ea73d719) r1 = fsmount(r0, 0x0, 0xb) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 09:41:44 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x110, r0, 0x8000000) 09:41:44 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) fsmount(r0, 0x0, 0x84) 09:41:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xe0, 0x20, 0x1, 0x7f, 0x0, 0x8000, 0x40400, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfff, 0x4, @perf_bp={&(0x7f0000000240)}, 0x4000, 0x76, 0x1f, 0x8, 0x2, 0x5e, 0x6, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x7) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x12}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x4c}}, 0x40044) read$snapshot(r0, 0x0, 0x2) 09:41:44 executing program 3: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r0 = fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) ptrace$setopts(0x4206, r0, 0x2, 0x3) tgkill(r0, r0, 0x9) timer_create(0x5, &(0x7f0000000040)={0x0, 0x8, 0x0, @thr={&(0x7f0000000000)="1cbbac8e49f04e2514d242f37efaca98852ed9740376381d", &(0x7f0000000300)="a12d245325534cf68443c2613d1bf11f4cf9398c81312013782ca6302112fe1e1a021111647c60cd12d5e54ccfc9ff9ecd32b921eb0e14c8717bb8feb2a48e784dfe27a14ac4d03739cff4a561f98485a650b6c7e1ba91eb1a76b0e2020e6ea5eb38b777abf7a935b7e048438bc6fea1e7c888c000009f93004f30dadf2250171f90011e933a28c37e4ef105d696ae40791fec56a434e86e20173a29cbea836956b438bc3ad211309b7fcdf5e598aa0c7e6455526ec4e186a26e7438333227707023fcf9ba9dba8da96263215a7d4f5a"}}, &(0x7f0000000080)) 09:41:44 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xa05f1e) 09:41:44 executing program 0: keyctl$update(0x2, 0x0, 0x0, 0x0) fsopen(0x0, 0xb8cd83f4ea73d719) 09:41:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='pagemap\x00', 0x0, r0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x3) read$snapshot(r0, 0x0, 0x2) 09:41:44 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) mmap$perf(&(0x7f0000a2e000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x5) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00006f6000/0x4000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) 09:41:44 executing program 0: fsopen(0x0, 0x0) 09:41:44 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xc0ffff) 09:41:44 executing program 3: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r0 = fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) ptrace$setopts(0x4206, r0, 0x2, 0x3) tgkill(r0, r0, 0x9) timer_create(0x5, &(0x7f0000000040)={0x0, 0x8, 0x0, @thr={&(0x7f0000000000)="1cbbac8e49f04e2514d242f37efaca98852ed9740376381d", &(0x7f0000000300)="a12d245325534cf68443c2613d1bf11f4cf9398c81312013782ca6302112fe1e1a021111647c60cd12d5e54ccfc9ff9ecd32b921eb0e14c8717bb8feb2a48e784dfe27a14ac4d03739cff4a561f98485a650b6c7e1ba91eb1a76b0e2020e6ea5eb38b777abf7a935b7e048438bc6fea1e7c888c000009f93004f30dadf2250171f90011e933a28c37e4ef105d696ae40791fec56a434e86e20173a29cbea836956b438bc3ad211309b7fcdf5e598aa0c7e6455526ec4e186a26e7438333227707023fcf9ba9dba8da96263215a7d4f5a"}}, &(0x7f0000000080)) 09:41:44 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(r1, 0x0, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 09:41:44 executing program 0: fsopen(0x0, 0xb8cd83f4ea73d719) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r3) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)={r0, r1+10000000}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x4) 09:41:44 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x1000000) 09:41:44 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x630000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = syz_io_uring_complete(0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000600)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r2, @ANYRES32]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[@ANYBLOB="f40100006dcd42ca366af8a4d6eb48192b1d89d8f7e92418b1d21f19930c1901f3b9ad66073c1677b69e962346bad79c0270c5a9b94f14bbdfc05d68244182528cd79368f08f8fde73aea5d8629d60d27f0e8d37327a6b6f7f59b9aff883e6347fbdaad5c8ad449243b475a1a122d0c0b25a9348b4fe8c1482fd2224ba46439de810df65c14e9bb7759bada8904fdcab2d09c35ab1632825c0ed14c67e21e634b448b7ac6bc6f46c1cbd65ed7b8e", @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="3800028034000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000400040008000100", @ANYRES32=0x0, @ANYBLOB="9801028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004001304000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000180000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400010000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d00003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040008000000"], 0x1f4}, 0x1, 0x0, 0x0, 0x400c020}, 0x0) write$sndseq(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xff00000000000000) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x501002, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r6) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000000c0)='lb_stats_refresh_interval\x00', 0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080)) prctl$PR_SET_FP_MODE(0x2d, 0x2) 09:41:44 executing program 3: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r0 = fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) ptrace$setopts(0x4206, r0, 0x2, 0x3) tgkill(r0, r0, 0x9) 09:41:44 executing program 1: socketpair(0x45ff59ebdb28e13, 0x1, 0x1ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x94, r1, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe3e0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x44025}, 0x4008000) syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r2 = fork() ptrace$getenv(0x4201, r2, 0x6, &(0x7f0000000000)) socketpair(0x1f, 0x3, 0x740, &(0x7f0000000400)={0xffffffffffffffff}) r4 = fsmount(0xffffffffffffffff, 0x1, 0x7) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x8, 0x7, 0x8e4, 0x7fffffff, {{0xc, 0x4, 0x2, 0x1, 0x30, 0x67, 0x0, 0x9, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010101, {[@lsrr={0x83, 0xb, 0x46, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @timestamp={0x44, 0x10, 0x95, 0x0, 0x0, [0x1a, 0x1f, 0x4]}, @noop]}}}}}) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:44 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/hci\x00') read$snapshot(r0, 0x0, 0x0) 09:41:44 executing program 0: fsopen(0x0, 0x0) 09:41:44 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x2000000) 09:41:44 executing program 3: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r0 = fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) tgkill(r0, r0, 0x9) 09:41:44 executing program 2: waitid(0x2, 0xffffffffffffffff, &(0x7f0000000000), 0x2, &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(r0, 0x0, 0x2) 09:41:44 executing program 0: fsopen(0x0, 0xb8cd83f4ea73d719) fsopen(&(0x7f0000000000)='securityfs\x00', 0x1) 09:41:44 executing program 2: r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/wireless\x00') read$snapshot(r1, 0x0, 0x2) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r3) 09:41:44 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x4000000) 09:41:44 executing program 3: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r0 = fork() tgkill(r0, r0, 0x9) 09:41:44 executing program 0: fsopen(0x0, 0x1) 09:41:44 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f00000001c0)={0x0, 0x88e8}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e1000/0xc000)=nil, &(0x7f0000000000), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) prctl$PR_GET_DUMPABLE(0x3) 09:41:44 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc, 0x8010, r0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004404}, 0x4011) r3 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r3, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r6 = syz_io_uring_complete(r5) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), r6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x20, 0x8, 0x8001, 0x200, {{0x2c, 0x4, 0x1, 0x1, 0xb0, 0x68, 0x0, 0x3, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x30}, {[@lsrr={0x83, 0x1f, 0x20, [@multicast2, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x34}, @dev={0xac, 0x14, 0x14, 0x3e}, @local, @multicast1, @broadcast]}, @timestamp_prespec={0x44, 0x24, 0xf9, 0x3, 0x3, [{@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x19}, 0xd78}, {@multicast2, 0x80000000}, {@broadcast, 0x9}]}, @generic={0x86, 0x11, "c3183764ee782a86048d42cae81489"}, @generic={0x83, 0xb, "c1fc4e8b1449724537"}, @rr={0x7, 0x27, 0xf5, [@broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}]}, @rr={0x7, 0x7, 0x63, [@remote]}, @timestamp_prespec={0x44, 0xc, 0x41, 0x3, 0x2, [{@rand_addr=0x64010100}]}, @noop]}}}}}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000640)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x2f, 0xfa, 0x7f, 0xfffff000, 0xaae14e3317e535c5, @remote, @local, 0x7800, 0x10, 0x1000, 0x799}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000740)={'erspan0\x00', 0x0, 0x1, 0x10, 0x8a, 0x200, {{0x25, 0x4, 0x2, 0x5, 0x94, 0x67, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @remote, {[@rr={0x7, 0x23, 0x17, [@local, @local, @rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @broadcast, @private=0xa010102]}, @timestamp_addr={0x44, 0x1c, 0x53, 0x1, 0x8, [{@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast1, 0xfffffff9}]}, @timestamp_addr={0x44, 0x1c, 0xb, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@broadcast, 0x604}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x3}]}, @lsrr={0x83, 0x1b, 0x3a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x39}, @local, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x41}]}, @timestamp={0x44, 0x8, 0xa8, 0x0, 0x2, [0x10001]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000000d00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000840)={0x44c, r8, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x264, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6ea6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff0001}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r11}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}]}}]}, 0x44c}}, 0x20000040) ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0x8) write$sndseq(r0, 0x0, 0x0) 09:41:44 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000) 09:41:44 executing program 2: r0 = fork() timer_create(0x3, &(0x7f0000000180)={0x0, 0x25, 0x2, @thr={&(0x7f00000000c0)="7e6afbab4f818a113d59bf43fc42ae763abeeba35165abad5218d758ad7104190f142e48bed724101cc27d1642cf95438a8c8d33adce35490000008000000000e1d73a6a7e11e8d812d8764646a8789752472a591c9e354a1015b3893b046c5c2062d23109d52d523c15d0734e13a9bd520901bbb91d4de890c6062579da9f054141c0783203dc915fd82ed76fdce60f11aebb1f", &(0x7f0000000000)="25413028b1f5db242eacaf7d58340592a4af1ebbf93bcedb0f72ce21a81065"}}, 0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/ipx\x00') read$snapshot(r1, 0x0, 0x2) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) write$rfkill(r2, &(0x7f0000000200)={0x6, 0x1, 0x1}, 0x8) 09:41:44 executing program 0: fsopen(0x0, 0xb8cd83f4ea73d719) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4000010, r0, 0x0) 09:41:44 executing program 3: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) tgkill(0x0, 0x0, 0x9) 09:41:44 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xa000000) 09:41:44 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) syz_io_uring_complete(0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r3) write$sndseq(r0, 0x0, 0x0) 09:41:44 executing program 3: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) tgkill(0x0, 0x0, 0x9) 09:41:44 executing program 0: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) fsopen(0x0, 0xb8cd83f4ea73d719) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 09:41:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) read$snapshot(r0, 0x0, 0x2) 09:41:45 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x10000000) 09:41:45 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/diskstats\x00', 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x0) syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r1 = fork() r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)) r4 = syz_io_uring_setup(0x11da, &(0x7f00000001c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000380)=0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r4, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) sched_rr_get_interval(r1, &(0x7f0000000340)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) syz_io_uring_submit(r3, r5, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000040)={r7, r8+10000000}, 0x1, 0x1, 0x1}, 0x3) mq_unlink(&(0x7f0000000440)='/proc/asound/seq/clients\x00') 09:41:45 executing program 0: r0 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000340)) ptrace(0x4208, 0xffffffffffffffff) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x8010, r0, 0x0) fsopen(0x0, 0xb8cd83f4ea73d719) 09:41:45 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000000)={0x4, 0x8, 0x3c46, 0x658, 0x2, 0x4f64}) write$sndseq(r0, 0x0, 0x0) 09:41:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$snapshot(r0, 0x0, 0x2) 09:41:45 executing program 3: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) tgkill(0x0, 0x0, 0x9) 09:41:45 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x1e5fa000) 09:41:45 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x14b}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r0 = fork() getpgid(r0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) getpgid(r0) 09:41:45 executing program 0: fsopen(0x0, 0xb8cd83f4ea73d719) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) fspick(r0, &(0x7f0000000000)='./file0\x00', 0x0) 09:41:45 executing program 4: keyctl$get_keyring_id(0x0, 0x0, 0x100000001) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) 09:41:45 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x50f00fff) 09:41:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(r0, 0x0, 0x2) r1 = fsmount(0xffffffffffffffff, 0x1, 0x8a) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000000)) 09:41:45 executing program 3: r0 = fork() tgkill(r0, r0, 0x9) 09:41:45 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x10200, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000000)={0x6, 0x9}) r1 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000000c0)) fsopen(0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x4400, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) 09:41:45 executing program 1: syz_io_uring_setup(0x35a5, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) r1 = syz_io_uring_setup(0x30b2, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:45 executing program 3: r0 = fork() tgkill(0x0, r0, 0x9) 09:41:45 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x2c4, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8b2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "8515d5b96a84b280ec34d1530c4879faa7b824598828a7bcb16e5e"}}, @TIPC_NLA_NODE_ID={0x5f, 0x3, "d8ef7978740d21b03ede5a1ac9e5acfdcf85ce92ec0a271118f9fff1db4d586477d10ee211683227c4cae766cc5560647989f4fe21416a4f8c326b59e6f75a58eca6322f5b10112b4928b19414d5087f275982d7a1c89d5caf8579"}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000000}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff1c1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "a4e7633d3972bd441618536ee1ba0bb73eed5eb2b5c8"}}]}]}, 0x2c4}}, 0x40801) 09:41:45 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x50f03fff) 09:41:45 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x27, 0x7f, 0x7, 0x3, 0x0, 0x6, 0x800, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x380, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x224, 0x1, 0x40, 0x8, 0xa9, 0x5, 0x4f4, 0x0, 0x3ff, 0x0, 0x8001}, r0, 0x3, r1, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='net/ip6_mr_vif\x00') r3 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r3}, 0x0) r4 = getpgid(r0) tgkill(r3, r4, 0x30) syz_open_procfs(r4, &(0x7f0000000140)='net/icmp\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x8010, 0xffffffffffffffff, 0x0) read$snapshot(r2, 0x0, 0x2) 09:41:45 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') 09:41:45 executing program 0: ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) fsopen(0x0, 0x0) 09:41:45 executing program 3: r0 = fork() tgkill(0x0, r0, 0x9) 09:41:45 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xff0ff050) 09:41:45 executing program 2: read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:45 executing program 0: r0 = fsopen(0x0, 0xb8cd83f4ea73d719) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)=',.\xe4&@\x00', &(0x7f0000000040)='\xca)\x19&)&\x00', 0x0) 09:41:45 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) syz_io_uring_setup(0x6a78, &(0x7f0000000000)={0x0, 0xdd8d, 0x2, 0x2, 0x127, 0x0, r0}, &(0x7f0000118000/0x800000)=nil, &(0x7f00007cc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:45 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') r1 = syz_io_uring_complete(0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x8000, 0x700, 0x200000, 0x87f, {{0x1c, 0x4, 0x1, 0x4, 0x70, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @loopback, {[@timestamp={0x44, 0x24, 0xf6, 0x0, 0xe, [0x4, 0x20, 0x100, 0x6, 0x8, 0x10000, 0xbe, 0x7]}, @timestamp_prespec={0x44, 0x1c, 0x6, 0x3, 0x9, [{@multicast2, 0x4}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @noop, @rr={0x7, 0x1b, 0xdb, [@loopback, @broadcast, @private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}]}}}}}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="24010000120000012abd7000fcdbdf2500000000000000000000000000000000000004d6020033000c000f0002000000000000008d0002007863686163686132302d73696d640000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000280200006dd69e98ebda10724654a574a3aa94f7b80919bb147a51351a0e938a74fd571df28ef04fa1fe22794fad4e56db554dc78d2b5d26ec189fca8480d2b528e80d30e473cda4410000001c000400ffff4e234e2200007f0000010000000000000000000000000c0015005d073500010000000c001c00", @ANYRES32=r2, @ANYBLOB="020000002c00130000000000000000000000ffffac1e0101fe8000000000000000000000000000bb0000000002000000"], 0x124}, 0x1, 0x0, 0x0, 0x8001}, 0x804) write$sndseq(r0, 0x0, 0x0) 09:41:45 executing program 3: r0 = fork() tgkill(0x0, r0, 0x9) 09:41:45 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xff3ff050) 09:41:45 executing program 2: sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xfb83d91367dbfd3e}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400001b", @ANYRES16=0x0, @ANYBLOB="000f29bd7000fcdbdf250400000008000300030000000800020000000000"], 0x24}}, 0x20040054) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='pagemap\x00') r1 = fork() r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4, 0x1, 0x95, 0x5, 0x0, 0x6, 0x1000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000140), 0x1}, 0x2040, 0x3, 0x0, 0x5, 0xffffffffffffffe1, 0x4, 0x7fff, 0x0, 0x7f, 0x0, 0x3}, r1, 0xe, r2, 0x0) read$snapshot(r0, 0x0, 0x2) 09:41:45 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xffff8000) 09:41:45 executing program 3: r0 = fork() tgkill(r0, 0x0, 0x9) 09:41:45 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) fork() syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000000)) 09:41:45 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000300)='/(\x9f-*w[\'+$^\x00', 0x0, r1) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x29, 0x2, 0x55}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6f}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x80c5) syz_io_uring_setup(0x3b2c, &(0x7f0000000200)={0x0, 0x386c, 0x8, 0x1, 0x1d6, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_complete(r2) write$sndseq(r0, 0x0, 0x0) 09:41:45 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$snapshot(r0, &(0x7f0000000040)=""/218, 0xda) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x341281, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="c8000000", @ANYRES16=0x0, @ANYBLOB="100025bd7000fbdbdf2516000000880005803c0002800800040006000000080002000600000008000100110000000800030000000000080001001700000004657468000c000280080001003f305c2c08000100657468002c00028008000400d89c000008000400080000000800040000000000080001000300000008000100120000002c0009800800020056b276603fdf42a191a565c700000008000200e300000008000100090000000800020006000000080002000500"/195], 0xc8}, 0x1, 0x0, 0x0, 0x11}, 0x4814) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x13c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbf4d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1588}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xcee8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3f, @private0, 0x3f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}]}]}, 0x13c}}, 0x20000000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x210200, 0x0) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) fsopen(0x0, 0xb8cd83f4ea73d719) 09:41:45 executing program 3: r0 = fork() tgkill(r0, 0x0, 0x9) 09:41:45 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xffffc000) 09:41:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:41:45 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) write$sndseq(r0, 0x0, 0x0) 09:41:46 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x800000000) 09:41:46 executing program 0: keyctl$assume_authority(0x10, 0x0) r0 = fsopen(0x0, 0xb8cd83f4ea73d719) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r3) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r3) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='/dev/vcs\x00', &(0x7f0000000080)="9f4e64d9789f44544de3836cddd67795522f86fa5e8fe8043d332700a7813ac5b1c911c874a99cf7de910b14a0cf7619d7672dac3bc6ba28145cbe93159c16de0abf5fafee35f17b47adef2ec820fe013d66dd076b8e295c65013c2a8256a16a13612775f2cce7b5eabb07e37cc70d073d232785ad32134224b67d2eaf913783c129e424fe5ba5f9eca175c0c38455f4a6af678604e0c065987368e73f4c", 0x9e) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)=':-\'\x00', 0x0, r0) 09:41:46 executing program 3: r0 = fork() tgkill(r0, 0x0, 0x9) 09:41:46 executing program 2: epoll_create1(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(r0, 0x0, 0x2) 09:41:46 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x48, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0xc1) syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x0, 0x4, 0xffffffff}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:46 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') syz_io_uring_setup(0x59a4, &(0x7f00000000c0)={0x0, 0x76a, 0x10, 0x2, 0x2ba}, &(0x7f0000003000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_complete(r1) write$sndseq(r0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) read$snapshot(r2, &(0x7f0000000000)=""/165, 0xa5) 09:41:46 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x1000000000) 09:41:46 executing program 0: fsopen(0x0, 0xb8cd83f4ea73d719) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000080)='lb_stats_refresh_interval\x00', 0x0, r0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000000)) 09:41:46 executing program 3: r0 = fork() tgkill(r0, r0, 0x0) 09:41:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r1 = syz_io_uring_complete(0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000140)={0x7ff, 0x3, 0x8, 0x9, 0x7, 0xcd1}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000000c0)={0x7, 0x1, {0x1, 0x2, 0xfffffff8, 0x0, 0xffffff81}, 0x4}) read$snapshot(r0, 0x0, 0x2) 09:41:46 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='-:&-\x00', 0x0, r0) write$sndseq(r0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000000c0)='oom_score_adj\x00', &(0x7f0000000100)="8ee43fdf9cc9bba01003fc2411ae0b645a8f618f71086e087ca4a23857065f9a40766cfb7324c7344d6b2500e07866338b627f786e0ba8874945168fc6f7fb41c5c5588e66d933d7132f058917cbabceacacd46eb7b60bd21e5ba5df58b2b1d4dc2140fa549793ca58b3ca6cbdd18c3999d6058a52a60ed112759b196f16c7e5003b5f88d8d4ce80fbd33c6c316f953af1228ebd1613e0118002f1710c8b50c0e88d5a7d58eb00c2587b0d77f89c761da05e75f6272fdd86594c9612cde7bd39b6f535264fdfbc5ef409", 0xca) 09:41:46 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x400000000000) 09:41:46 executing program 0: r0 = io_uring_setup(0x4aa2, &(0x7f0000000080)={0x0, 0xf3c0, 0x2, 0x3, 0x1ef}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)={0x77359400}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6000007, 0x40010, r0, 0x8000000) syz_io_uring_setup(0x32d3, &(0x7f0000000000)={0x0, 0x2659, 0x4, 0x3, 0x2b9}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) fsopen(0x0, 0xb8cd83f4ea73d719) 09:41:46 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r1 = io_uring_setup(0xb1b, &(0x7f0000000000)={0x0, 0x3398, 0x2, 0x3, 0x162, 0x0, r0}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) socket$inet(0x2, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x24000081) io_uring_setup(0x24ed, &(0x7f00000001c0)={0x0, 0xb82b, 0x20, 0x3, 0xa1, 0x0, r1}) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:46 executing program 3: r0 = fork() tgkill(r0, r0, 0x0) 09:41:46 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000000000) 09:41:46 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='lb_stats_refresh_interval\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000580)='lb_stats_ref\x01esh_interva\x00\x008\xdbAU\xd3\x81\xdb\xab\xcb\xd7\xe2\xfa\xe4\xb8i\xf5\xd2\x12\t\xbe)\xce\xee\x99\xa2Nb\x18@\x8c\xc6\xf1\xdfk\x17\xe9\x01\xf8\xae\\G\xce\xa3\x93k\xbe\xe3\xab#=\xa8X\xb7\xa5\xacXR\x9bs\xe0\x8fiu\t0!A\xa9\x8e&\xa5\x06z\x91\xe6\xb60\x03\xfea\x14\x8a|\"\x00\x8fk\xd5f`\xaf4\xbf\xc1{\xc5\xb8\x11\x1d\xbc\xcen\x8dw&&b %w\xb4\xb7W\xa7\x01\xe5\xd6\x97\xac\xa9^d\xc3\xb5\xe3\x94\x94\x99b\xb4\x96\\\xf0\xb0\xcc~\x834|\xc2v\x96P\x15\x1a\xa4\\\x85h\x15g7\x1c>\x02\xbe\xf6\x15\xc8A\x95\x98\xff\x00\x00\x00\xa7q\xf3\x9b\x8f\f}\x0e\x01Y[\xa5\xf8\x8f\xa8M#\xf0=\xd1)\xd4v\x02)\xb1\xf7\x83\xe2\x8f\x01\xb0X\xf3\xd6\x05%\x94\xb8R\x89\x9cf\xe0sl\x84x\xcf\xda\'\x9b\xa8\x1c\xfet\x85\xfan\x83\xad\x15\xf1q\xfb\x9c@?\x82\xe5\xac(\xf0\xdc\x16\xd0\xa4;\x13\x9c\x9dsAw\xaew[x\x89\xa7+]v\xe3_\xf5R\x060\xe8\xc3\xd5\a\x88\xbf4<\xba\x97\xdfz\xe0\x06\xe8\x8a\xa2\x16\x80B\xe3\xcfAa\x15\x80\v\xdf\xc5\xd9\x05U\xc4\xa1\x8d\x96\xb1\xdc\x84\x1er\xba_\xed\x9c\xcc\xc0{o\xfb\xc2\x90\xd4\xbbLB\x1c\xe0\xdb\xa79\xd9=J\x03\xf7\xf8\xfe\xb7\'\xb7\xbaI\x858X\x13\x8c\xc0\x1d[\v\xba\x05\xa4_\xc0\\\x92\xf7\vk\x96\x02\xf5\x86\xcd\xa9x\bSNraw\xad\xef{\x97\xe3\xe2\xfd\xf8\x1dj\xc4\r!dp6\'\xf9\aH\x92+\xc9S\xce\x93\xc8\xcbf\xd8\xb2AF\xad\x16\xd3J\x1c|z\x01\xe6\xdf\x8e\"\xf4\x1a\xf8~', 0x0, r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x6fbbc275f0ea86c6}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)={0x598, r3, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x26a000}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcbd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x58d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe17}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x20c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "97ca216ea66d819417b4eb5ff3f274251ee7c1ce4ddf5eb577196d28a3c98f55"}}, @TIPC_NLA_NODE_ID={0xc0, 0x3, "b487a1327fe8a5270da9da740c0505d779109369c69fbeb6b808252abbf42e35a803326eb028b5bef0733a834842268ab4c41a90a3acc094ed3c9d7f420959b51d61314524a10aca2118d45f7cce927186c67abe74d6ce1b920811e24b093ab3222e9d783ba0d91af360880b424268837825a5b89b685f14cd6a62bcef9f9fdb278b4b299ababd950f7f0ae72b78c62ab5bc9be9a8b424945397f9300ae1df7a8b68c6a5aed7ae95c540899dffe082629f1d8f54fa5d6be0b23d0b52"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "beda2bd040a6a96629c845f47f85ad4591c51eed998cab19"}}, @TIPC_NLA_NODE_ID={0xaf, 0x3, "58569cdbb6f722f35be6def0e003d0469eae7d11d0c5d15bf40dd53fa6f5af4e964f44aef153cedd63b83b97f96483b9c5ebea96bedd2d9b8358eefc88b4929eafa2d3b52e7df8ead6958742d78fcf2ee534c64f3c07d37a04976316e3d87f99c19295fb274971afad8ee70bf0f3401df95d291c43cff5adda16ef847708f95136f3f4addff4a326e6367052a9da82b6cce8fcf7495023c48de51017dbea8a94a90bccc9d2f5c2916f2e2f"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x591f}]}, @TIPC_NLA_NODE={0xcc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc8, 0x3, "5150e5284b6a10cb97cb5169f6aced9c3f983eb8d3e27aaf66a15de986ca8a59874b0c1732d75aeb4fc1beff858575d453517d448e320bacb5eb0ec92274d62ee5e8af954a54901fb01433b494be71b4ed103dc82faa5cb4d50cf36cd2fef8fdfe88aa4953c6aadb7ab768df55d46b31d7372ccb9af955cb22223fc113385a4494ddaf85d43bdf22cbee3f30482969d0117a22b0120f9ec1f57b354cb4ed15a703132e9abd4a9372bf07e0722da38d9dfdadb8dbd113e12d768c33fe9d1b9105632ef3bc"}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5edd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8000, @private1, 0x5a}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x598}, 0x1, 0x0, 0x0, 0x4000040}, 0x2400c84c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x0, 0x0) write$sndseq(r1, 0x0, 0x0) 09:41:46 executing program 3: r0 = fork() tgkill(r0, r0, 0x0) 09:41:46 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x1, 0x37, 0x2, 0x6, 0x0, 0x8000, 0x10000, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0xffffffffffffffff}, 0x470, 0x6, 0x8000, 0x3, 0x0, 0x5, 0x8000, 0x0, 0x7ff, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) 09:41:46 executing program 3: r0 = fork() tgkill(r0, r0, 0x0) 09:41:46 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xf050000000000) 09:41:46 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) set_thread_area(&(0x7f0000000200)={0x4, 0x20000800, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x1}) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:46 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) r1 = socket(0x1, 0x0, 0x2e1033f4) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x5}, 0x4) 09:41:46 executing program 3: r0 = fork() timer_create(0x3, &(0x7f0000000180)={0x0, 0x25, 0x2, @thr={&(0x7f00000000c0)="7e6afbab4f818a113d59bf43fc42ae763abeeba35165abad5218d758ad7104190f142e48bed724101cc27d1642cf95438a8c8d33adce35490000008000000000e1d73a6a7e11e8d812d8764646a8789752472a591c9e354a1015b3893b046c5c2062d23109d52d523c15d0734e13a9bd520901bbb91d4de890c6062579da9f054141c0783203dc915fd82ed76fdce60f11aebb1f", &(0x7f0000000000)="25413028b1f5db242eacaf7d58340592a4af1ebbf93bcedb0f72ce21a81065"}}, 0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/ipx\x00') read$snapshot(r1, 0x0, 0x2) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) write$rfkill(r2, &(0x7f0000000200)={0x6, 0x1, 0x1}, 0x8) 09:41:47 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000008, 0x2010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7abb, &(0x7f0000000000)={0x0, 0x396, 0x2, 0x3, 0x2e9}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x4000010, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0xee1633089cda9bde, 0x0, 0x0, 0x0, 0x12345}, 0x8c400000) r3 = fsopen(0x0, 0xb8cd83f4ea73d719) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000140)='\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c) 09:41:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(r0, 0x0, 0x2) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x3, 0x7d, 0x1, @mcast2, @loopback, 0x7800, 0x700, 0x9, 0x6}}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000740)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="0007070000000007fffffffc451b005400640000030490783000000000ac1414bb890b526401016460f99d0101000034ac1c0bdf65ff2fcdd37a2d11530000ac1e0101071ffcff00000000ffffffff0a0100000000000000000000000000000000729df191f06a72a06c3fc1840ac8fe29a2a8c016593f7845371f69f1d5695dc7e94e4204e75d04f1b72861"]}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYBLOB="60a7947f", @ANYRES16=r1, @ANYBLOB="100028bd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="380102803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000180000008000600", @ANYRES32=r4, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000002000008000600", @ANYRES32=r5, @ANYBLOB], 0x160}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20004884) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x410080, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r7) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@mcast1, @in=@dev}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f0000000700)=0xe8) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r6) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r8) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f0000000000)='lb_stats_refresh_interval\x00', 0x0, r6) ioctl$SNAPSHOT_ATOMIC_RESTORE(r6, 0x3304) 09:41:47 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xffffffffffffb) 09:41:47 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x20}, &(0x7f00006f6000/0x2000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) gettid() 09:41:47 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80002100}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="8800fa05", @ANYRES16=r2, @ANYBLOB="00042abd7000fddbdf251500000014000380080002000900000008000200050000001400098008000100fd03000008000100020000001c00038008000200000000000800010004000000080001000500000004000180100005800c000280080004003f0000001c000380080001000400000008000100fb070000080002006d000000"], 0x88}, 0x1, 0x0, 0x0, 0x811}, 0x4005) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000000)={0x1f, 0x961, 0x0, {0x42, 0x5}, 0x9, 0x5}) 09:41:47 executing program 3: r0 = fork() timer_create(0x3, &(0x7f0000000180)={0x0, 0x25, 0x2, @thr={&(0x7f00000000c0)="7e6afbab4f818a113d59bf43fc42ae763abeeba35165abad5218d758ad7104190f142e48bed724101cc27d1642cf95438a8c8d33adce35490000008000000000e1d73a6a7e11e8d812d8764646a8789752472a591c9e354a1015b3893b046c5c2062d23109d52d523c15d0734e13a9bd520901bbb91d4de890c6062579da9f054141c0783203dc915fd82ed76fdce60f11aebb1f", &(0x7f0000000000)="25413028b1f5db242eacaf7d58340592a4af1ebbf93bcedb0f72ce21a81065"}}, 0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/ipx\x00') read$snapshot(r1, 0x0, 0x2) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) write$rfkill(r2, &(0x7f0000000200)={0x6, 0x1, 0x1}, 0x8) 09:41:47 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x40000000000000) 09:41:47 executing program 3: r0 = fork() timer_create(0x3, &(0x7f0000000180)={0x0, 0x25, 0x2, @thr={&(0x7f00000000c0)="7e6afbab4f818a113d59bf43fc42ae763abeeba35165abad5218d758ad7104190f142e48bed724101cc27d1642cf95438a8c8d33adce35490000008000000000e1d73a6a7e11e8d812d8764646a8789752472a591c9e354a1015b3893b046c5c2062d23109d52d523c15d0734e13a9bd520901bbb91d4de890c6062579da9f054141c0783203dc915fd82ed76fdce60f11aebb1f", &(0x7f0000000000)="25413028b1f5db242eacaf7d58340592a4af1ebbf93bcedb0f72ce21a81065"}}, 0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/ipx\x00') read$snapshot(r1, 0x0, 0x2) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) write$rfkill(r2, &(0x7f0000000200)={0x6, 0x1, 0x1}, 0x8) 09:41:47 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = fsmount(r0, 0x1, 0x86) write$sndseq(r3, 0x0, 0x0) 09:41:47 executing program 0: fsopen(0x0, 0xb8cd83f4ea73d719) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000140)='\x00', 0x0, r1) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002cbd7000ffdbdf250300000048000280080001000010e1ff0800020001800000042004002400038008000200050000000800020009fb510008000100ffffffff0800770e362200000400040004bd1cd600040004"], 0x5c}, 0x1, 0x0, 0x0, 0x80000}, 0x0) 09:41:47 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r1 = fork() r2 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r2, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x115b, &(0x7f0000000400)={0x0, 0x492b, 0x8, 0x2, 0x200}, &(0x7f00005e4000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x2, 0x1}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, 0x0) waitid(0x2, r1, &(0x7f0000000000), 0x1000000, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x7fff, 0xff, 0x8001, 0x3ff, 0x5, 0x2, 0xb98, 0x4d84}, &(0x7f00000001c0)={0x1, 0x9, 0x2a, 0xfff, 0x2, 0x0, 0xe4, 0x3}, &(0x7f0000000200)={0x1, 0x9, 0x8e, 0x6405, 0x0, 0x2, 0x6, 0x10dc}, &(0x7f0000000340)={r6, r7+10000000}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x7]}, 0x8}) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:47 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x60000000000000) 09:41:47 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan0\x00') write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x9, 0xfffffff8, 0x9, 0x2, 0x300}) 09:41:47 executing program 3: r0 = fork() timer_create(0x3, &(0x7f0000000180)={0x0, 0x25, 0x2, @thr={&(0x7f00000000c0)="7e6afbab4f818a113d59bf43fc42ae763abeeba35165abad5218d758ad7104190f142e48bed724101cc27d1642cf95438a8c8d33adce35490000008000000000e1d73a6a7e11e8d812d8764646a8789752472a591c9e354a1015b3893b046c5c2062d23109d52d523c15d0734e13a9bd520901bbb91d4de890c6062579da9f054141c0783203dc915fd82ed76fdce60f11aebb1f", &(0x7f0000000000)="25413028b1f5db242eacaf7d58340592a4af1ebbf93bcedb0f72ce21a81065"}}, 0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/ipx\x00') read$snapshot(r1, 0x0, 0x2) write$rfkill(0xffffffffffffffff, &(0x7f0000000200)={0x6, 0x1, 0x1}, 0x8) 09:41:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(r0, 0x0, 0x2) r1 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r1, 0x8000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4007, @fd_index=0x5, 0x401, 0x9, 0x6, 0x8, 0x1, {0x1, r4}}, 0x3) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xa5cc725029aec284, 0x1}, 0x9) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000100)={{r5, r6+10000000}, {0x77359400}}, 0x0) 09:41:47 executing program 0: fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='$\x85!\x00+.\x8b\x13\x8a\xbfu\xf4\xb6+\x00=\xdc\xbe\x8d\x15\v\x97\x03\x1c\x9b\x04B\xac\x8em\xf9\x1f@h\x0e\xd0\x14\x00\x00\x00\x1a\xe3\x92\x83\xd0\xbf\x10\x8c\x9a M\xd8\x10W_]\xcd\xce{;\x93\xed\a\x80\xb9\'\xc2\x1b\xabe\x86\x98\xe8i\xec\xd4\x83\xd6\x11U*i\x19\r\x9d\xe3\xe7\x9d\x14\x19#\x84\xfa\xeb\x00N\b\x82\bY(\xef\x8fr\x0f\xea3\x03m,\\\xba\x81\x9d\xe0\xad\xee\xbd\xf4s\xa3k\xbd\x87\x14\x89', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff) fsopen(0x0, 0xb8cd83f4ea73d719) 09:41:47 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') write$sndseq(r0, 0x0, 0x0) 09:41:47 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x80000000000000) 09:41:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x3, 0x80, 0x1, 0x40, 0xea, 0xd5, 0x0, 0x3, 0x80000, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x87, 0x2, @perf_config_ext={0x9, 0x2}, 0x400, 0xfffffffffffffff9, 0x7, 0x5, 0xc323, 0x1, 0x40, 0x0, 0x8a3, 0x0, 0x5}) read$snapshot(r0, 0x0, 0x2) 09:41:47 executing program 3: r0 = fork() timer_create(0x3, &(0x7f0000000180)={0x0, 0x25, 0x2, @thr={&(0x7f00000000c0)="7e6afbab4f818a113d59bf43fc42ae763abeeba35165abad5218d758ad7104190f142e48bed724101cc27d1642cf95438a8c8d33adce35490000008000000000e1d73a6a7e11e8d812d8764646a8789752472a591c9e354a1015b3893b046c5c2062d23109d52d523c15d0734e13a9bd520901bbb91d4de890c6062579da9f054141c0783203dc915fd82ed76fdce60f11aebb1f", &(0x7f0000000000)="25413028b1f5db242eacaf7d58340592a4af1ebbf93bcedb0f72ce21a81065"}}, 0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/ipx\x00') read$snapshot(r1, 0x0, 0x2) write$rfkill(0xffffffffffffffff, &(0x7f0000000200)={0x6, 0x1, 0x1}, 0x8) 09:41:47 executing program 0: clock_gettime(0x5, &(0x7f0000000000)) fsopen(0x0, 0x0) 09:41:47 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000080)=[{0x38, 0x6, 0x23, 0x6, @tick=0xfff, {0x8, 0x6}, {0x7f, 0x3}, @raw8={"ffd3e96fd2acd1115845c2d2"}}, {0x7f, 0x81, 0x3, 0x7, @time={0x1, 0x3}, {0x9, 0x6}, {0xd0, 0x2}, @quote={{0x3, 0x7}, 0x5, &(0x7f0000000040)={0x1, 0x80, 0xfe, 0x8, @tick=0x80, {0x0, 0x2a}, {0x5, 0x3f}, @quote={{0x3, 0xf6}, 0xfffc, &(0x7f0000000000)={0x20, 0x80, 0x2, 0x4, @tick, {0x63, 0x5}, {0x3f, 0x10}, @quote={{0xc6}, 0x7}}}}}}, {0x7f, 0x0, 0x5, 0x20, @tick=0x7, {0x4, 0xab}, {0x6b, 0x5}, @addr={0x9, 0x8}}], 0x54) 09:41:47 executing program 1: r0 = syz_io_uring_setup(0x7c20, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x117}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f00004fe000/0x400000)=nil, 0x400000, 0xc, 0x8010, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x118, &(0x7f0000000000), 0x0, 0x4) fork() syz_io_uring_setup(0x5736, &(0x7f0000000040), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000140), &(0x7f00000000c0)) 09:41:47 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp6\x00') ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) fsopen(0x0, 0xb8cd83f4ea73d719) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@private2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="73797a746eec320000000000000006ae012a6ba603ff", @ANYRES32=r2, @ANYBLOB="0700002000000007000000094b17002c00670000062f907800000000ac1414bb880462038907d6e00000024408f1900000af929404000000"]}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc3f2a8783ebc61f}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r1, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xb9fd978239b1334f}, 0x4040000) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r3) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800005, 0x100010, r3, 0xff) 09:41:47 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x80ffff00000000) 09:41:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x11c, r1, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x90}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x27b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffecc}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x100, @private2, 0x1de3}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4000000}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1000}, 0x80) read$snapshot(r0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) 09:41:47 executing program 3: r0 = fork() timer_create(0x3, &(0x7f0000000180)={0x0, 0x25, 0x2, @thr={&(0x7f00000000c0)="7e6afbab4f818a113d59bf43fc42ae763abeeba35165abad5218d758ad7104190f142e48bed724101cc27d1642cf95438a8c8d33adce35490000008000000000e1d73a6a7e11e8d812d8764646a8789752472a591c9e354a1015b3893b046c5c2062d23109d52d523c15d0734e13a9bd520901bbb91d4de890c6062579da9f054141c0783203dc915fd82ed76fdce60f11aebb1f", &(0x7f0000000000)="25413028b1f5db242eacaf7d58340592a4af1ebbf93bcedb0f72ce21a81065"}}, 0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/ipx\x00') read$snapshot(r1, 0x0, 0x2) write$rfkill(0xffffffffffffffff, &(0x7f0000000200)={0x6, 0x1, 0x1}, 0x8) 09:41:47 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) r1 = syz_io_uring_complete(0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x8, 0x81, 0x6, 0x1f, @tick=0x2, {0x6, 0x6}, {0x2, 0x4}, @note={0xe9, 0x1f, 0x41}}, {0x40, 0x7f, 0x6, 0x9, @tick=0x7d2, {0x7c, 0x80}, {0x0, 0x8}, @note={0x4, 0x7f, 0x80, 0x40, 0x8}}, {0x1f, 0x0, 0xc0, 0x20, @tick=0x5, {0xa1, 0x7}, {0x3f, 0x80}, @addr={0x91, 0xc7}}, {0xe, 0x40, 0x99, 0x3, @time={0x622, 0x7}, {0x40, 0x1f}, {0x1, 0x42}, @raw32={[0x2400, 0x7, 0x200]}}, {0x2, 0x81, 0xfb, 0x88, @tick=0x80000001, {0x20, 0xf9}, {0xbd, 0x8}, @queue={0x1, {0x1f, 0x8}}}, {0x40, 0x2, 0x81, 0x8, @tick=0xce, {0x5, 0x2a}, {0x0, 0x6}, @time=@tick=0x1}, {0x70, 0x1f, 0x1f, 0x81, @tick=0x80, {0x2, 0x4}, {0xc, 0x3}, @quote={{0x9, 0x8}, 0x74, &(0x7f0000000000)={0x8, 0x0, 0x20, 0x1, @tick=0x100, {0x7, 0x80}, {0x20, 0x1}, @control={0xa0, 0x3ff, 0x2e9}}}}, {0x0, 0x81, 0xd2, 0x3, @time={0x80000001, 0x3}, {0x4, 0x4}, {0x2, 0x1c}, @ext={0x28, &(0x7f0000000040)="b00678cfd6057094b53d2159db850ea3f6fe30fa8ecedae0f719dddcbf2d615de84842e2e9ac9cd2"}}, {0x77, 0x8, 0x1f, 0x4, @tick=0x7, {0x4, 0x1f}, {0x8, 0x1}, @result={0x4, 0x56b4}}, {0x9, 0x1, 0x64, 0xc0, @time={0x0, 0x7}, {0x8f, 0x6}, {0x6, 0x3}, @ext={0xce, &(0x7f0000000080)="27078072194c9fbab1e44f54653344aa8741eeac5639351d1fdf355a5a0e641d1e0214fb0d21cbf72a567e8e2e9ad9c6afc5890d1e52d158a7ab60b1bd5e631d76183e324384ce98ad0ca3ab478a9a82c7ff236cec3d00800a756424d6567f85de088583ef402e155e1076d1e33574157222fdb3c8506c04b7287b4598a1087a970ac00551336fc3e54c8c01981cdaf2d9075772293c498f973aa256afd8ed4537b4471496635c5b1207a00922f5ad1bde5b8c5eb72ad44f294a360b957c29802c7faf0abf912e6c300e12c6ec94"}}], 0x118) 09:41:47 executing program 2: socket$inet(0x2, 0x3, 0x42d9) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) socketpair(0x27, 0x3, 0x9, &(0x7f0000000040)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) r3 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "bb412fd7f01035de4d8132b9cc8452ccb5882e85b5e5b7c445320526e485bdd4d80240de2f9abd0a57df812f101212f4a61fd161ba3dda5d5780a809959e1501"}, 0x48, 0xfffffffffffffffb) socket$inet(0x2, 0x3, 0x80000000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000280)='id_resolver\x00', &(0x7f0000000240)=@chain) keyctl$get_persistent(0x16, r2, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(r4, 0x0, 0x2) 09:41:47 executing program 3: r0 = fork() timer_create(0x3, &(0x7f0000000180)={0x0, 0x25, 0x2, @thr={&(0x7f00000000c0)="7e6afbab4f818a113d59bf43fc42ae763abeeba35165abad5218d758ad7104190f142e48bed724101cc27d1642cf95438a8c8d33adce35490000008000000000e1d73a6a7e11e8d812d8764646a8789752472a591c9e354a1015b3893b046c5c2062d23109d52d523c15d0734e13a9bd520901bbb91d4de890c6062579da9f054141c0783203dc915fd82ed76fdce60f11aebb1f", &(0x7f0000000000)="25413028b1f5db242eacaf7d58340592a4af1ebbf93bcedb0f72ce21a81065"}}, 0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) syz_open_procfs(r0, &(0x7f0000000040)='net/ipx\x00') r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) write$rfkill(r1, &(0x7f0000000200)={0x6, 0x1, 0x1}, 0x8) 09:41:47 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xa05f1e00000000) 09:41:47 executing program 0: r0 = fsopen(0x0, 0xb8cd83f4ea73d719) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='$\x00', &(0x7f0000000040)='*\x00', 0x0) 09:41:47 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r3) fsopen(&(0x7f0000000140)='ntfs\x00', 0x1) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000540)='lb_stats_refresh_intervaJ\x06\x81\xd8\xb1\xd08\xac0\xd7\xd1\x00\n\xfc]\x87\xecs5\x97P\x88\x0e\xae\x87h\xc9\x8e\x16%2\x15b\x8e\xf2A\xcc\xa4\xaf\x8b\x15\x1c(Z\x9f\xb7P\x7foX1\xb0\x8c\x1d\x9cf5\x94\x1d|\xbcI\x89\x1b\x87\xa0\xc6|\"%xMe]\xa88\xa1\x01GvRiP\x93=\x0fRo\xf5\xec\x8e\xd1t\xa6\x98\xff\xfe\xeb\v\xdd\x99\xcf\xcf\x971\xbc\x8f\x83\x11\x11\xb7\xa0\xe1bK:\x9f.\xd2?.\xb3!;PR\xd1\x9e\xaf\xbf\xc8\xc0jW\xa9\x85\n5\xa9b\xb5\xef\xf7\x00\xa7~\xbf\x9a\xbe\x9eXt\xfb0\x02&\xa0\xc0\x06\xfb\x03|Ft\x99\xdf\x96\x00\xe6E\xf6\x95\xb7\xc1\x9fNM\xab{\xc7\xc2\x8a\xa0\xc2z[\xfc\xb0v<\x18\x0f\x84\x05.\xea\x12\x8c\xaaqp\xb1\xd9\x91\xbd6\xedn\x10\x9b\xac\xd0\xa4v^\xfa| \xb6\xef\xf0\x18\xb7nB\xef\xeb\x86,r\x7f\xd5#3\xf6\x96\xd5\x0fuGa\x00\x1a\t8\x10\xf7\x8as\xb3\xa1^p\xbf[\x9d9\xb6\xd7\xd4\xa9\x04\x14\x84lF\xb9\xc8\xc5\xfb\xf6\xe9\x81D\xc3\xf5\\\x1a\xe8\xa0\xb1S\x8a\xc2j\xc3\xd2\xe31\xcf\xc2\xd9\x84\xe9\xf7\xe6H\x89\x1e\xa4', 0x0, r1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)='\x00\xee\xe83\xc8.l\xb0\x06\b\x00\x00\xcb\x87\xc4w\xaa\x99\xb7=\x9b\xb0\x98\x12\x18{\xc4R\xc0\xee\xabA\xf0\x10\xb1\x86>\x98\xa8a\xaa4J\xe0}\xd0L\xae\xea\x1d\x85f\xc8J{L;v\b\x9e\x80{Q\xf6', 0x0, r1) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000100)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x78bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x8080) write$sndseq(r0, 0x0, 0x0) 09:41:47 executing program 1: r0 = syz_io_uring_complete(0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x8, 0x80, 0x9, 0x9, {{0x8, 0x4, 0x2, 0xe, 0x20, 0x68, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x80000001, @loopback, {[@timestamp={0x44, 0x8, 0xc, 0x0, 0x4, [0x40]}, @noop, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x7, 0x700, 0x5, 0x3ca42705, {{0x12, 0x4, 0x1, 0x9, 0x48, 0x67, 0x0, 0x2, 0x2f, 0x0, @broadcast, @private=0xa010100, {[@cipso={0x86, 0x33, 0x3, [{0x7, 0xb, "cae60db9278c1afe81"}, {0x0, 0xa, "bcd4a052c468c1fe"}, {0x3, 0x5, "1757ee"}, {0x1, 0xd, "fe6466713b70fa171094a6"}, {0x6, 0x6, "bdea1f29"}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xeac2f88cd3629a4b}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x20c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6d69}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x5}, 0x1000) syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r3 = fsmount(r0, 0x1, 0x75) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000700)) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0x4) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:47 executing program 0: r0 = fsopen(0x0, 0xb8cd83f4ea73d719) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) fsmount(r0, 0x1, 0x82) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='\'\x06}(\x00', &(0x7f0000000040)='@@@!)+\'\x00', 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_create1(0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r3) 09:41:47 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/bnep\x00') read$snapshot(r1, 0x0, 0xffffffffffffff68) r2 = fork() sched_rr_get_interval(r2, &(0x7f0000000040)) 09:41:47 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xc0ffff00000000) 09:41:47 executing program 3: r0 = fork() timer_create(0x3, &(0x7f0000000180)={0x0, 0x25, 0x2, @thr={&(0x7f00000000c0)="7e6afbab4f818a113d59bf43fc42ae763abeeba35165abad5218d758ad7104190f142e48bed724101cc27d1642cf95438a8c8d33adce35490000008000000000e1d73a6a7e11e8d812d8764646a8789752472a591c9e354a1015b3893b046c5c2062d23109d52d523c15d0734e13a9bd520901bbb91d4de890c6062579da9f054141c0783203dc915fd82ed76fdce60f11aebb1f", &(0x7f0000000000)="25413028b1f5db242eacaf7d58340592a4af1ebbf93bcedb0f72ce21a81065"}}, 0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) write$rfkill(r1, &(0x7f0000000200)={0x6, 0x1, 0x1}, 0x8) 09:41:48 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000000, 0x80010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index=0x3, 0x100000000, 0x0, 0x9, 0x2}, 0x3f) fsopen(0x0, 0xb8cd83f4ea73d719) 09:41:48 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x3, 0xab, {0x0, r0}, 0xfc000000, 0x4, 0x1, {0x0, r1, r2}}, 0x6) write$sndseq(r0, 0x0, 0x0) 09:41:48 executing program 1: syz_io_uring_setup(0x18e6, &(0x7f0000000240)={0x0, 0xf7c6, 0x0, 0xfffffffe}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000a2f000/0x4000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:48 executing program 3: fork() timer_create(0x3, &(0x7f0000000180)={0x0, 0x25, 0x2, @thr={&(0x7f00000000c0)="7e6afbab4f818a113d59bf43fc42ae763abeeba35165abad5218d758ad7104190f142e48bed724101cc27d1642cf95438a8c8d33adce35490000008000000000e1d73a6a7e11e8d812d8764646a8789752472a591c9e354a1015b3893b046c5c2062d23109d52d523c15d0734e13a9bd520901bbb91d4de890c6062579da9f054141c0783203dc915fd82ed76fdce60f11aebb1f", &(0x7f0000000000)="25413028b1f5db242eacaf7d58340592a4af1ebbf93bcedb0f72ce21a81065"}}, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) write$rfkill(r0, &(0x7f0000000200)={0x6, 0x1, 0x1}, 0x8) 09:41:48 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x100000000000000) 09:41:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/exec\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0xf310, 0x6a5, 0x7fffffff, 0xfffffffd, 0xf046, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x81, 0x1, 0x4, {0x7, 0x40}, 0x9f6, 0x2}) 09:41:48 executing program 0: fsopen(0x0, 0x1) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='#))-\'[\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) 09:41:48 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x200000000000000) 09:41:48 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x5, @tid=r0}, 0x0) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x7, 0x42, 0x3, 0x5, 0xff, 0x9a13, 0x2d16, 0x4}, 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='\x00') read$snapshot(r0, 0x0, 0x2) 09:41:48 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x70, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0xc1}, 0x48885) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000125bc7000ffdbdf2502000000080009ddcd9e0f0008fa0d000000000000000100", @ANYRES32=0x0, @ANYBLOB="08000200010000000c00030000000000000000000800090003000000"], 0x48}, 0x1, 0x0, 0x0, 0x24040004}, 0x50) 09:41:48 executing program 0: r0 = fsopen(0x0, 0xb8cd83f4ea73d719) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='-\\\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c) 09:41:48 executing program 3: fork() r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) write$rfkill(r0, &(0x7f0000000200)={0x6, 0x1, 0x1}, 0x8) 09:41:48 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x400000000000000) 09:41:48 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x74, 0x0, 0x18, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4880}, 0x800) syz_io_uring_setup(0x8e2, &(0x7f0000000240)={0x0, 0xebab, 0xa}, &(0x7f00006f6000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r1 = fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000)=0x1, 0x0, 0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) syz_io_uring_setup(0x3a7e, &(0x7f00000001c0)={0x0, 0x5580, 0x1, 0x2, 0xa2, 0x0, r2}, &(0x7f00005e4000/0x2000)=nil, &(0x7f00005e1000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r3 = syz_open_procfs(r1, &(0x7f0000000040)='net/igmp\x00') fsmount(r3, 0x1, 0x70) 09:41:48 executing program 0: fsopen(0x0, 0xb8cd83f4ea73d719) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='(]-)#(-7\x00', &(0x7f0000000040)="fd150083a461829b6f1f561171a3b253e32883eaf1b5b8f5438b9a22e1a01c73d4556eea0bda4267c584746fe2318340f4753c0283e0414dc22d467ecaff2d36de9430bd244289dd22ac5637e585a122a174a1e2a662790f3af063145a81f63f7527e0860b379f50e7f7929334abd018151c4a3bcd37f5f181fbd8ae2a8ec7", 0x7f) 09:41:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) syz_io_uring_setup(0x20ee, &(0x7f0000000200)={0x0, 0x8e28, 0x10, 0x3, 0x229, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000000)) read$snapshot(r0, &(0x7f00000000c0)=""/253, 0xfd) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x40040, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000040)={0x2, 0x7}) 09:41:48 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) 09:41:48 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) write$rfkill(r0, &(0x7f0000000200)={0x6, 0x1, 0x1}, 0x8) 09:41:48 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xa00000000000000) 09:41:48 executing program 2: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x1000}, 0x4) r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='smaps_rollup\x00') socketpair(0x25, 0x3, 0x23, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x250, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9a}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ab3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xdf}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6a}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20dc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x80000001, @mcast2, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x3, @loopback}}}}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x20000081}, 0x44000) r3 = fsmount(r1, 0x1, 0x1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbdbdf25160000001c0003800800020007000000080003008d000000080001000080ffff3c0007800c000400010100eeff0b00040000080000000000000c00040000000000000000000800020002000000100004800900010073797a3101000000"], 0x7c}, 0x1, 0x0, 0x0, 0x8008004}, 0x54) timer_create(0x5, &(0x7f0000000400)={0x0, 0x2, 0x4, @tid=r0}, &(0x7f0000000440)) read$snapshot(r1, 0x0, 0x2) 09:41:48 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x6c, 0x401, 0xc, @private1, @remote, 0x7, 0x8, 0xdc8, 0x40}}) 09:41:48 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x8800, 0x10, 0x0, 0x0) fsopen(0x0, 0xb8cd83f4ea73d719) 09:41:48 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x141002, 0x0) write$rfkill(r0, &(0x7f0000000200)={0x6, 0x1, 0x1}, 0x8) 09:41:48 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r1 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r1, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = socket(0x28, 0x5, 0x2) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r4, 0x80, &(0x7f0000000000)=@generic={0x2a, "5f3deb8d28b5fa8bf4c847052aa886c3c863aec4cad4795c7b71a17a8aea0e937a4b170abd3988374d13292ab777764c3c1a79100a35410f80bd47a36bd4a71494421c4b1eb467a7afb5563523396eaaecf919f1454f91f73417e64dd31356712391696fb0d7990d8011e205ff0bccc5fe296ef3f2dd3f2f4dbbddf1521a"}}, 0x7) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r5) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r4) fork() r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '\x10\'\x00'}]}, 0x24}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8c101000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r8, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 09:41:48 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfbffffffffff0f00) 09:41:48 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) socketpair(0x22, 0x2, 0x4, &(0x7f0000000280)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@mcast1, @in=@local}}, {{}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000200)='timerslack_ns\x00') ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000240)) read$snapshot(r1, 0x0, 0x2) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000000)={0x400, 0x2f53e12}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) 09:41:48 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x141002, 0x0) write$rfkill(r0, &(0x7f0000000200)={0x6, 0x1, 0x1}, 0x8) 09:41:48 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) 09:41:48 executing program 0: r0 = fsopen(0x0, 0xb8cd83f4ea73d719) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) epoll_create1(0x80000) 09:41:48 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xff0ff05000000000) 09:41:48 executing program 0: fsopen(0x0, 0x8fa2e3d0a174ade8) 09:41:48 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000200)={0x133, 0x800, 0x80000001, 0x80000000, 0x0, 0x1}) io_uring_setup(0x68b6, &(0x7f0000000300)={0x0, 0xcf1, 0x1, 0x3, 0x2c, 0x0, r1}) socket$inet(0x2, 0x3, 0xd277) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000380)={{0x81, 0x4}, 'port0\x00', 0x8, 0x10020, 0x3, 0xffffffff, 0x9, 0x6, 0xc880, 0x0, 0x1, 0x4}) syz_io_uring_setup(0x68f8, &(0x7f0000000000)={0x0, 0xfa6, 0x0, 0x0, 0x105, 0x0, r0}, &(0x7f0000dd2000/0x3000)=nil, &(0x7f0000a31000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:48 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x141002, 0x0) write$rfkill(r0, &(0x7f0000000200)={0x6, 0x1, 0x1}, 0x8) 09:41:48 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000000c0)={{0x7, 0x6d}, 'port0\x00', 0x1, 0x10820, 0x3, 0x200, 0x800, 0x0, 0xfff, 0x0, 0x0, 0x26}) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='oom_score_adj\x00', 0x0, r0) write$sndseq(r0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22000, 0x0) 09:41:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/llc/core\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000001c0)='\x00\x00\x00\xf7E\xd2\xa9\xc1\x9a\x98\xe6\xb1\xe6\x83\xa1\xbf?\xce,\xf6\t\xd1n\xb5\xb8\xa7\x90\x04\xe5\xd4\xa5c\x8e\xf4\xebz\xf3\xaf\xc5\xc1\x9b\x9d\x935\x06l\x89\x05r\xaf\xe6\x01\x9e\xdd3\x13[\xd4', 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f0000000140), r1) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x88c0}, 0x40000) 09:41:48 executing program 0: keyctl$negate(0xd, 0x0, 0xffffffffffff9ffe, 0x0) fsopen(0x0, 0xb8cd83f4ea73d719) 09:41:48 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$rfkill(r0, &(0x7f0000000200)={0x6, 0x1, 0x1}, 0x8) 09:41:48 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xff3ff05000000000) 09:41:48 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x420, 0x0, 0x200, 0x70bd27, 0x0, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xfffff800, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}}}}]}, @TIPC_NLA_NODE={0x238, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6e, 0x3, "fe67662820d4f7dfb688c5f78a19fd04f653ab762b7f835d322bb05ca733529746b325c14a88c7622ce4ba5fbd1d39c20f56cdd554812b543b09112c581d5935222bb9926d113c38947c9709625c7316988d752fa0a50172ec219eb6226f423277f2522276119485dd4b"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "e2acc038cd0ee56a399638c75102751cd05e235676472d120697ef45"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "3b8a3353869d007f0399f96094a7db4c0583cf8987f731cdd3aff69e36f2e16e7b"}}, @TIPC_NLA_NODE_ID={0xe3, 0x3, "d5fceb6a2be9463cd25e023db8557802634b6b8a4f0a2dac16808d513612b469905546da6baa1b7ebbb5d21d93126b793ba8dd4ed5ed226143aafef779b4aa08ca81f36227c84f381b1aa4ac7d4b2773dc915602d04109474ef453b14c3d66fcd577ee9f7d60b31e1807e501bd14cff9217f941536e6b752ccd1e1156b17ab65d7d80b59ee60dd8744d96d64da934ebfe73e2e32ea5fc7ddc09eb8a2ff3e6bcb5ae870170e13e443bcaed0c6cea5cc60e1916f9d8f97f3f5d6f1b00af6bd8a0d1f16cda9997c678f16e8a03798e20732fec6f158f64ef2a7b4702e491fc1b3"}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "e176f3c72cea6f37b2eba85e975651e5f41e2f99c4fc9a2b850235"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x818}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7c00}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb1c8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x84}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x420}, 0x1, 0x0, 0x0, 0x4000}, 0x40) write$sndseq(r0, 0x0, 0x0) 09:41:48 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$rfkill(r0, &(0x7f0000000200)={0x6, 0x1, 0x1}, 0x8) 09:41:48 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000080), &(0x7f00005e1000/0x3000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000040)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refres~\x8finterval\x00', 0x0, r0) openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) 09:41:49 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xffffffff00000000) 09:41:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(r0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0x4, 0x5, 0xd, 0x1eb1, 0x5, 0x7f}) 09:41:49 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x7, 0x7f, 0x20, 0x0, 0x2, 0x2109, 0x11, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x777, 0x0, @perf_config_ext={0xffffffffffffff80, 0x9}, 0x0, 0x20, 0x8, 0x7, 0x1, 0x0, 0x200, 0x0, 0xeee, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) fsopen(0x0, 0xb8cd83f4ea73d719) 09:41:49 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)={0x0, 0xfffffffd}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) sysfs$2(0x2, 0xffffffff, &(0x7f00000000c0)=""/154) 09:41:49 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$rfkill(r0, &(0x7f0000000200)={0x6, 0x1, 0x1}, 0x8) 09:41:49 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r1 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r1, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = socket(0x28, 0x5, 0x2) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r4, 0x80, &(0x7f0000000000)=@generic={0x2a, "5f3deb8d28b5fa8bf4c847052aa886c3c863aec4cad4795c7b71a17a8aea0e937a4b170abd3988374d13292ab777764c3c1a79100a35410f80bd47a36bd4a71494421c4b1eb467a7afb5563523396eaaecf919f1454f91f73417e64dd31356712391696fb0d7990d8011e205ff0bccc5fe296ef3f2dd3f2f4dbbddf1521a"}}, 0x7) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r5) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r4) fork() r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '\x10\'\x00'}]}, 0x24}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8c101000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r8, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 09:41:49 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x8}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:49 executing program 5: clock_getres(0x0, &(0x7f0000000000)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f00000000c0)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:49 executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000200)={0x6, 0x1, 0x1}, 0x8) 09:41:49 executing program 0: r0 = fsopen(0x0, 0xb8cd83f4ea73d719) r1 = fsmount(r0, 0x0, 0x72) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r3, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r6 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r6, 0x8000000) syz_io_uring_submit(r8, r7, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, &(0x7f0000000380)="e376eb73fc2cb1f395d0c1442fd297c4f854c93227bc627854876168e54a7a0c18dfc1d2173ea957c8fd24ad352d5dd8028609386b9abaa6c3f2260605b208f84f09785e4564746631ede21960b1ef70b70498c577e8a9cd915b7540f1a3991f90caac0df56ceabbc44ddce9371d9936ca1118a8a9dd9240f031d0d291db89d6853bf636f7f6b96f6834fb620634b706204e5533b8998853539840a38c0a1f8981e49d861f38c42573518523847511c95596b5514761d4a562bc993e3b75873401", 0xc1, 0x10042, 0x1}, 0x7) fspick(r2, &(0x7f0000000000)='./file0\x00', 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) fspick(r9, &(0x7f0000000080)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x30, r1, 0x8000000) 09:41:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/exec\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0xf310, 0x6a5, 0x7fffffff, 0xfffffffd, 0xf046, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x81, 0x1, 0x4, {0x7, 0x40}, 0x9f6, 0x2}) 09:41:49 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:49 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000228bd7000ffdbdf2502000000080002000100000008000300080000004c00018008000600010000000600010002000000080003006401010114000400fe88000000000000000000000000010114000400fe8000000000000000000000000000bb080006000500000004000180"], 0x74}, 0x1, 0x0, 0x0, 0x4004810}, 0x4008010) syz_io_uring_setup(0x1003, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x1, 0x148}, &(0x7f00005e4000/0x2000)=nil, &(0x7f00005e7000/0x2000)=nil, &(0x7f00000002c0), 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) io_uring_setup(0x5cb3, &(0x7f0000000100)={0x0, 0xc4bc, 0x2a, 0x0, 0x0, 0x0, r1}) fork() r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x1d3500, 0x0) io_uring_setup(0x345a, &(0x7f0000000380)={0x0, 0xa00f, 0x2, 0x1, 0x210, 0x0, r2}) r3 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r3, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x11c, &(0x7f0000000040)=0x1, 0x0, 0x4) 09:41:49 executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000200)={0x6, 0x1, 0x1}, 0x8) 09:41:49 executing program 0: sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001200)={&(0x7f00000000c0)={0x1134, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x1120, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "acd6a3ede323d64d97679ffb4d6e0da132fd1d25ca957d"}}, @TIPC_NLA_NODE_ID={0x90, 0x3, "f87299b6ec2a48885905c3b202eb5d45845318351eddd4dbe53c17c918b775f9086560e04db8e7794d6c92363adb2017ff38272a1387e9879654f026b8c1d98b2510fd87231f1fe6a009ea8422133648979f6b77b58d93a7a60ce16a0fc28d7741f1fe69b85c45526826a0e38a902009b55099c775b9a5bbd0334ada49d35b71040ddfd5d86da0580fa0f47a"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "dc74659226a89a9868275d9641b25fe2e066b3663ea27b69a149febfad61ea9c8d235f3b8f32d7df38f9fc993d77744190c6a5d77719c42d4c748f8d86d581d9e08011ed44d18635a4bce6d111792c38e9dc848b10b5c380e1dba81a1393b7a3285bb3c85156fa452184b4eec913388ff05fec84447bced8008eceec3036c3e70b629094baefd510e12757ba79e40916d8bafaa1a4279c29cea1c37423a0201f4256ffc818c3998041bab0252c1d66a0cca30d552b885ad928a750ad34455fa1846f7bd9143831d50de60849a03d193246eae88731efb824ff42286af9e610eb07dd3ec5b7fa75edf13fc70659f5eabb45c55c922a62b24667b070e5b8528d60ae1e4ae3c539c224a815cf51da9e018f9ac8658d1b4921a9b6a4d3a9591dd437c9acc7e574fb1b792e820a2ce179fd123d56f7375ae42ebd9cd682b266aed32123807611c69dc31e47e9b893b815a0083956d18ce42d6a3e084dfca0d794015d102c9fa1fb223c65665304c22b20ae8c2585b7f97870a0dec9c77f556e9557cbc25a7545b57d1fe2aff73e58761edcb7bcfc970d3982fb35940dd1530c945fbf7155cf68e52acb2f137b78666107c4f76dd9bd9ec46632a62173b7ce4bf7b3e3b6f98ebc56b881cd72de947bf5bd9f6565367166375abc85ee4304e51d7b22554a1003a0fc2bf81d84e090e15273347c7d3e1819e5cefaae141c534fefe18c3eab6c7e1e6bb688c244efd38f059ff3964b33415d190dd0618f20ca5ce482440d7004d8271a938a12a71f5c2feeac85fad7ad3758067eb16b12f5f7c3d19d4a315c18a0ca93cbe93c9c71afef53bfbe73159e23092affe0f675a0a7590a5a207c7d9fe8f8357fc5d36665e33e523677e2c4c393dd43778cddaf6412b12415bc3caf84c0472c4f50d8d8c661bdcde3d7e8916831ec5f79aa6c563f84c42df7f7bc38cdeadbdfc0b8a0f17adfe3cc38cd489bf6e1e01ea8abac0bbc958bf919aaec5320a20ff4beab542bd66181e18386a343a37dd3372591825c40cbc5b1b9a4aac7f6cb2b560c6a9eac45fd7dc92791fb1045b2a7c79954c7bf4854b481729377d37c0630dd7e4e3b69c441806d568258e1b9c1aaa7c68fb16a959c08d465417705c70c55964be3de4797696a99fdb58bf7598b0917d3b88a55d0895615ff978dd71572ee527c6ba2aadafb51b9bb5890f7b9aaca2d451151ec0d576842e01f6c926081e942ec23890b44f182f70beaba45e32c044156287b783a0e3d5b266d408f8ba908d85ff0ba60b990f32b2128fa93a6bc1a2c5a0dedaf5a79c76ca004fa680879f7892398f2550fd33cdace003112095acf084afec0edee1ab677ce95dd753a97dd035a0e11ff0f7ec0aba8a5d0710b1a1b80959c751bab2bd016394e49fdb8e83250570740799a9841e38d7060a75f0404ae5142feac7d99091129e70351dfae97d292c9684237afb6bb466a0050901bca96102570af20928d7721393951707518622993028fff1092c574caa7ae772d44af53d0d1214c7d87e6bc53ff9cfbf9883410f03c6be5b1dbc94a7c15cbf02f58bc4c2a7fbefe2aeb3345f904fc75d71680b6085640bf9c5c0835766ba0d3be9af6134db3a9d6a1d6043c185bbe1d0b4798cb69d09bd56afdeae12145eec6e3af8689ca03af577d61917552851233714fe61596aa5f5f4acc862a141a998c11a3f76a190d92fc69dd97fb4b7dd0fb018f4ece1e6526d12c6dedeeb159a00818db548f38bd7511c1a2d668e454543252466bd06d753b7c69f9b3ee21e0b22fa448acfbc35e7ffe5fc639da49a82e913be4c466f234798b616542de7182fa33c0cc407d3fd424d8c2a9cf6532bd21f39f10884264514610a27410fec47ddcce43ac3df3abf0425bc4c14b6a1e929e79a2845119f27c171fca47ae78b863454ea3c12289d7b085bf99334e5cc14f92d1200cd70b879344007e9741b69edbbdbd207fdd106773ebddc771c149ac7c32ad2854e6daf1954b12413ad4b9c810b54a27221a5056bea0252b80fc826ef95b60b4352bf12c74ddaba9361de905493fbdfe9f94f86783b7b6c78daca697a67a1a7553901bf42552847e61e881b59161fd0043e6774a969f350e88945b2f40e54911f03a444998760605ecc4ff6277fb104d7fa179be1cd0b544d69ab8e98ae82b272e6b44ed186e523a3a95390c5cb28860442fc327e0229442d834d8bce7bd9210c3274e8e3ee4a3986e517436a4c93b0f1fa525b77ffd72e1b9ae5f48c235c50194044534258adb9ca74ebbcbc5f2a27e51d693189efab028dc70957b0a43f3e67554ebf119e734755479b95d12dfad9bb71cfd7b36b4d68df5b87befef4b33d682a87112f772fb6f8de58cf05bf360f1d8a8b6ab12e2c89a27f727b9650caed25b320a8dc1a45200f4ca78973ae98ab971825671eb730897dd7c17ee01bf17d37f569d4ea7425412cfc22311377a38b56c66decf9dfbf45a839e01dd74ae6c44980f5047e66b0932f869b5a11d06c8f8977a0547f8f0f4689661168474ab6d60349437231d7b1b81cb00aed28217facf1f9984528015d730d235e0b7dc58b418af134d294db14f012fc6e5325cf0d56e64525f0b0450a5466fd636c98ad61c827af0129bf3fc676c94a7cf3ffaf2da0dae90c7a4b424e9a2d5829864fa572d8743b8c8c7922a5b166bbbe118763d04c026f394c016f1aade44baac777e057fbd24fa804fc247564b9ef47df8cbbe8ee013765461555237bdbaf8041e8ed596e442f29a32c331ac0f499fb08bfeb4af70f5e50abb12813d854f518bc8290b0a97907c0aeab5ecf19fd8931af2abbfdf96b18fbe103a850ac5d4196f9f44e4a28c9b4658731ab03c2e2e3d671192bed68e5ee8650fe80b97892f7bd8aefc7ebafe2489a77a25a49a2b85806660c431a90df52cfbbbdbd343a82d7297554c9c8c4e603a8daaa50493391854ea7119d958f7ff265de4c982c0d7968af52517a601c6a8a99bf8820a56920a6f38aec59b249b23f4af2f6ba8403d064d905a2826190979f37de012065f23370f8ef51782b871b607dfa9ea266c334a4377c9d6084ec7e87582d2a5b98a1830b8f05040ba159f6249b1004c352810f9fd3c402e91c023e459aa7aeb30efdf0c76c4c9103153e7bad60b382c735a887fde1bbacff29a24c5e0d723a247f692fe09ae9da8d7a7c1b38df7419e8c7ae75853820a3ede95623e22a2b58336f498ab6009ca93a4d67b3451f26a55e34a642656f7cc1d419132c1697527b33a0c8c53a812129787382b807afb92ed2d3b77a79c6e681fdb052863927ba3fd2fe6136b5084cfcf8551f9b43e0a2aa5995f17d719315f20851df1074f6e4350d2b4b9414b2b132be09e9940aef094e87673edf320f4ac5932fc58305b17ccab87290c3db51f127123f538a2fd46fef5ea37315917c76b4dcb9b678403302c5a39289bfa2f75d3b9ac76b319478086234bfffaee66817b275c3c909075e4a5fcb4a1bdb7c93d3632089e6fb3acfd5e9ed5d2c562a4dbbe203eb897a0839e9d638889c64361f791f8d3b2c11759a1ed154d263b4dab802da32794ccbc34ddba88f5d718dbd64c4ec9ccbfa9d99283f708baf3af90af7e989f2989196dcf84b59c02f29303d7e1f580cdb28717cb2488a8f1bf5bdddf703c1ea21ec8a88a64b07edecc140ac18f1a28fe71b6b721a2b52908f5ba2cdaf0c8b47212ed400cb224dbe2c88e543e2bc31ef6147cd96c5e564ee75ce43419fa2892e6dec322e828153982a1f86d5a80b8dd0240f1852c16f29fef2f577ed50b6caefe7155732fa8eb0389234f854489e045a6c39a8ee2e8f9af1a11be26f0558d79bb721f5cb54003917add0969271546174bf760843fa4504e3df1a80a4723655d4c111762318d0f65fdf909d4f19af340d9b06e9f7f2c88c3cfbbd309ba2ace99479a9a36992c47a6a06556f43efbc1e8b8c7f7156e3429f0b105d11518167adf89efa302830d6f28f79aff2654798fc9f31143f07808b029f78a72721e91b1e81bf17768eeefc6d09f83be648c7c1813c564d256a0cb033df9c525688dcccdf9be61afd859d726eb1ea0a01a36a5846c8bed473e337707072646efe44c0b4904b028d5e54f9412915a73b08c472b92afca125e3d1e7a154274fa4995dcc39f93e32ba38300cf142186029ba802a5dbf100f825947d5a4e8563a1fb69b6a3a9656397caeafd2638cc64d4520a5103806d1854b3cd4d4a29790467d12a5dd36e7913a427bb9b0b50d7784a2f5d2a5995895285b315a82f82f99d2e52219c5ce7bfdc413572cfac87c1ec6bb5037f8ee47a0ffab4e2b7205092a59a54bd76ba221d2548586cfa1331dd916fbc9a524f49837ef8a35000e2ab44fabdfca4021399cd828bb2c78e156b39b2bdced36ab08a849bdd09d109db0413f6dad169e5ba1f40a8912006345a54f81511a1fbb4dc959ab8683a425c51e0e0dece314f99ce45aef5a45b16c3e8140afaba4ac6c6428c16b63740a109d73c0351b6518ffc834934ce93bae9a2cef9f30f88050a24f6eb9e0499e3c526b6f91c16402f7599ca5a4d03ee383246a135304df1f63a957ac2a07adf71374954751f2948086b047996674cdb779bf56283ab1bfdd52baa15b171b9052953d28eab3f07cfc80468960893faa8f8e2bd94330c1decb496aa7da18e8277d0175ac95ba2d2aa91a6580d089fec2e576a23bab1ca70af047bd2bdd26e1585cc97114a616fcf397a04beb8ac9694955bd4dd0f48a83e0492ed3ef553737df12a31f416d93bf486c789fe3849d21f3614a3fd5182a5794cce0f65a6a2d7089fa78e3b5d4a06fee626b9122fbc1e8a5c6bbe50cb79d87bdef586c8299839bf3995d31e74110b946c2c6958772aa7082e9f2e90d0a7db86101bde0b14970f98a1ea5bb4a50cf2b935f193d6f2efaa00b4723d9c4ca217bdb75b651b1d37e53b4a2d6baa4ea95b773dd64245df7f72c94fc4c0cb5be5d093dad450979629617aaa1995150ba5f8a66492b1ee4aa9949c5d882a23e6b03141a278caaa4387098b203c753c0c1996ad18566b3a54e305254d61cd3d9296bf7625b5e3aad97a21f39ffca4b44c34b63241d9624f4136e6133d4168a36121d9b9fe97a45e5341fe1b48ab03036009e5d790262e4a26b430b4b263fadd7bd7c6a6aa8a4717e2b259ccd418cbc34ee4283fcd0944ca88c4c820600ca1a16c3bdc75ba8179085cb23a172dac6ba1fb1074957782f79962f61bc4720123e989adc4c9623f9719e2fcc58511ffa90a95e49db5587a00992b5540a1b8a81eb6099e21035a31a56f6b8ca7123af7cf8e7d2d81e5ee07f43460cb2d8a9760f054be58a316c2039c84d1f635a909f1ce98085e3786e469d0d4e1caf8f43594bc640fffb581ab6fb7a8dae9ad2e8022afe01d03c7727118119504918af7c4528217723c6787a352ece5fcf45de49685aa22b3b2bf077f91b95c4040c6fd6a3bf10738f84fb3086d847800b2f0eb3c9114f74fa029a98102ff3a66e73ba7142b6997366c26d28c27d0acecb437a784cabec4381daa713850e25420829f88243f3c86751954d74449dc029cf7da4eedf81eeb03db0b16f0be4032b4f246d07201897ae9a44f782765c0ededd6740cefa3f539c3c5a24a90ec3ed063b41cfb99b5fdfa8c3a5dea8468dfa73c035de04846e37c000f9c082a1343d42b8a16037df8479b0755a85fdb75d01ecd998b661f6b7e6466caec0f432b5b14ae79fe644938819e3fe3e547a1c375e56bf1639adf9049627002b8eb723e45a99784e9"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "7ecdd7332ecce9ccd4242ffdd0c1ceb4a45ee598cc646ebeada9"}}]}]}, 0x1134}, 0x1, 0x0, 0x0, 0x10}, 0x4048043) r0 = fsopen(0x0, 0xb8cd83f4ea73d719) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='%/-%\r\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c) 09:41:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/exec\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0xf310, 0x6a5, 0x7fffffff, 0xfffffffd, 0xf046, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x81, 0x1, 0x4, {0x7, 0x40}, 0x9f6, 0x2}) 09:41:49 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)={0x0, 0xccc8, 0x1, 0x100000, 0x4}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:49 executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000200)={0x6, 0x1, 0x1}, 0x8) 09:41:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/exec\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0xf310, 0x6a5, 0x7fffffff, 0xfffffffd, 0xf046, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x81, 0x1, 0x4, {0x7, 0x40}, 0x9f6, 0x2}) 09:41:49 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x8}, &(0x7f0000a31000/0x4000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:49 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) set_thread_area(&(0x7f0000000200)={0x4, 0x20000800, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x1}) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:49 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0xfffffffe}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x6000001, 0x12, r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x20140, 0x0) syz_io_uring_setup(0x258e, &(0x7f0000000380)={0x0, 0x178f, 0x10, 0x3, 0x8e}, &(0x7f00005e4000/0x2000)=nil, &(0x7f00005e3000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x10, r3, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r4 = epoll_create1(0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r5) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f00000002c0)) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)='\x00', 0x0, r4) clock_gettime(0x7, &(0x7f00000000c0)) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x1) r6 = io_uring_setup(0x601a, &(0x7f0000000240)={0x0, 0xbac7, 0x1, 0x4, 0x1a7}) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 09:41:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/exec\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0xf310, 0x6a5, 0x7fffffff, 0xfffffffd, 0xf046, 0x4}) 09:41:49 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) write$rfkill(r0, 0x0, 0x0) 09:41:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/exec\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) 09:41:49 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) write$rfkill(r0, 0x0, 0x0) 09:41:49 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r1 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, 0x0) sched_rr_get_interval(r1, &(0x7f0000000100)) 09:41:49 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x0, 0x2, 0x100, {0x0, 0x42cb}, 0xfffffff7, 0x80000000}) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x29, 0x1, 0x7f, 0x80001000, 0x22, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x741, 0x80, 0xffffffff, 0x7ffffffb}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000400)={'gre0\x00', &(0x7f00000018c0)={'gretap0\x00', 0x0, 0x700, 0x8010, 0xfffffff7, 0x4, {{0x12, 0x4, 0x3, 0x26, 0x48, 0x64, 0x0, 0x3f, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64090105, {[@noop, @timestamp={0x44, 0xc, 0xbf, 0x0, 0xb, [0x37d, 0x6]}, @ssrr={0x89, 0xb, 0xcd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @timestamp={0x44, 0x1c, 0x7e, 0x0, 0x2, [0x8, 0x0, 0x7, 0x0, 0x81, 0x10000]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0x70, 0x1, 0xaf6, 0x42, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x20, 0x1, 0x7, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x8000, 0x80, 0x1f, 0x5ca, {{0x6, 0x4, 0x3, 0x1e, 0x18, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x11, 0x7, 0x7ff, 0x6, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x67, 0x0, 0x7, 0x2f, 0x0, @private=0xa010102, @remote, {[@timestamp_addr={0x44, 0x1c, 0x40, 0x1, 0x6, [{@multicast2}, {@local, 0x92a}, {@remote, 0x9}]}, @end, @timestamp={0x44, 0x14, 0x67, 0x0, 0x0, [0xc1b, 0x0, 0x7fffffff, 0x4]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x8, 0x7f, 0x78, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x40, 0x1, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000740)={'ip6_vti0\x00', 0x0, 0x2b, 0x7, 0x1, 0x2, 0x21, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x8, 0x200, 0x5}}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000800)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000900)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@private0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000000a40)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000001940)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="0020071000000002000100004e0800380064000009299078ffffffe4bd17b42bb6b2acffffffffffffffffffffffff7f000001ac1400000000000000000000000000000014bcd540554bf8a51c2dceb0725e8b376188a679dcd70bb625b32dbc5398ec76fcb3427e6ae1f8154d97378238a438cb290d8d277b96f9180dfe8539dafac9bf01"]}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000bc0)={'ip6tnl0\x00', &(0x7f0000000b40)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x5, 0x3, 0x78, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x80, 0x8111, 0x9, 0x7}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001840)={&(0x7f0000000c00)={0xc30, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r3}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x59c}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x250, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfb}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0xfffffffffffffd30}, {0x5}, {0x8, 0x4, r7}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x2, 0x9, 0x2, 0x9a6c}, {0x1, 0x7, 0x1, 0x7fff}, {0x40, 0xfa, 0x5, 0x3f}, {0x3, 0xdc, 0x7f}, {0x2, 0x1, 0x8, 0x81d}, {0x1, 0xca, 0x6, 0x41}, {0x100, 0x0, 0x40, 0x114}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0xffffffffffffffca, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x87}}}]}}, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5f, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r10}, {0x1bc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xf33, 0x5, 0x6, 0x6}]}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x3, 0x2, 0xffffffff}, {0x1, 0x80, 0x8, 0x50000}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xaa57}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xc30}}, 0x20000010) r15 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SNAPSHOT_FREE(r15, 0x3305) 09:41:49 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) set_thread_area(&(0x7f0000000200)={0x4, 0x20000800, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x1}) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:49 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r0 = fork() r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) r2 = syz_io_uring_setup(0x5736, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, r1}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005eb000/0x1000)=nil, 0x1000, 0x1, 0x2010, r2, 0x8000000) ptrace$getenv(0x4201, r0, 0x80, &(0x7f0000000080)) 09:41:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/exec\x00') read$snapshot(r0, 0x0, 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 09:41:49 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) write$rfkill(r0, 0x0, 0x0) 09:41:49 executing program 4: timer_create(0x2, &(0x7f0000000100)={0x0, 0x23, 0x0, @thr={&(0x7f0000000040)="953abff8be4067351ffac24261d46b1f2d5a4276f8622c16bfcf7299590d3f26c819b0", &(0x7f0000000080)="401834e5839c7fe315e5c0068fcd551b4e06aeda4ca781541912ac21b8e8c5e97f4c2818b49f8b8822ecf794d114ceacb6a2c442124cfd61debffd9eb4c6e9c9d46968255a8969fb7662adfe4f960480e67e19b2f76fb9828083089856e2721ca16318da23b0f22a35b306b31eb3b0eda7408f86fbdba38585b91239c3"}}, &(0x7f0000000140)=0x0) timer_delete(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x14, 0x4, @thr={&(0x7f0000000200)="fa4487b7681e2bfde27d1fd90aaea648b71961b49ee0b7d0490ee0205605936355b63be14d8df71fa79891db7c279b355e245313e5ac0104d046982f12569f8d869db149008c1eb664d800d61f5faff1392011ff78e1ee3c789548a22096ca5a6259d698d3f337f8470fefb5e28f00e1a389a8d5d9776c47f751aaf85da0415c435eee1f3f0d9d2ff63ac823190687227eccacb841cc8644f48ec30a4a439df9ce77a7ac743fd2e6ef4d34595c02fce92a793f5ff88e7a40b74e1d20a2364f6466ebecd5168cf8c038419a83f87bb3d8a35b45bc99d7845f", &(0x7f0000000380)="5d654c5e9b6c900241d074342cb0a41ff630e82c29a0df71708b0bdbd678750306326b65c31a57c37e38e3ba691f0f28dcf3459ed5d1ce8c4a85490456555fb81245bd1eba56bd4e80af07ec4fc310613bbb9156b0dff56784ae9001fcf838fa126b9de3dd590b31a0aef734e0277abf4f76340dd12a51485a5e603464f8529c3ca37d91cc26c24dead5a85e87bffe23d5b0c37b386cd3a52ad261e36499760ed4928c253dc16976b0b6349ea0b9708c874a742522a35ca302ab282a590c37d5ebb853c680e1be34e1d73b8ec8a5c8fae237a58514f130a4be6b43b26c40fc8c5a2175b33693a8ba5893dd1117c09b6402e1a9c5"}}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000004c0)) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='task\x00') 09:41:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/exec\x00') read$snapshot(r0, 0x0, 0x2) 09:41:49 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) set_thread_area(&(0x7f0000000200)={0x4, 0x20000800, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x1}) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f00000000c0)) clock_getres(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x1fd2, &(0x7f0000000040)) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x118, &(0x7f0000000100)=0x1, 0x0, 0x4) 09:41:49 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) write$rfkill(r0, &(0x7f0000000200)={0x0, 0x1, 0x1}, 0x8) 09:41:49 executing program 1: keyctl$negate(0xd, 0x0, 0x6, 0xfffffffffffffff9) syz_io_uring_setup(0x8000183e, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:49 executing program 2: read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') write$sndseq(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000040)) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000080)='\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c) 09:41:49 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) set_thread_area(&(0x7f0000000200)={0x4, 0x20000800, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x1}) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:50 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) write$rfkill(r0, &(0x7f0000000200)={0x0, 0x0, 0x1}, 0x8) 09:41:50 executing program 2: read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:50 executing program 5: r0 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000240)='/dev/rfkill\x00', 0x0, r2) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0x8000000) syz_io_uring_submit(r3, r1, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0xae, 0x0, 0x5, 0x0, 0x0, 0x8000, 0x4a0d, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x4800, 0x4b6, 0x10000, 0x0, 0x1, 0x80, 0x5, 0x0, 0x1, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x30b2, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd, 0x3, {0x0, r4}, 0x80000001, 0x0, 0x1, {0x0, r6, r7}}, 0x4) clock_getres(0x0, &(0x7f0000000000)) r8 = io_uring_setup(0x1fd2, &(0x7f0000000040)) clock_gettime(0x4, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) 09:41:50 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0xffffffff}, &(0x7f0000a30000/0x1000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f0000000000), 0x0) fork() r0 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0xc, &(0x7f0000000040), 0x0, 0x4) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:50 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) write$rfkill(r0, &(0x7f0000000200), 0x8) 09:41:50 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:50 executing program 2: read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:50 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="73797a746e6c3100000000000000000014f230b4fba2cc6467acb67388556cd5", @ANYRES32=0x0, @ANYBLOB="0043000700000401000000814d30007400650000082f9078e00000017f000001890737ac1e000194040000442cc7607fffffff00000009000000040000007f00000005000000020000000000000001000000b3000004014414f653ac141432000000e3ac1e0101000000064408a32000000005070bee00000000ac1414bb0000"]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000000)={0x9, 0x8, 0x0, {0x8, 0x7f}, 0x3, 0x1}) 09:41:50 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xe1}) syz_io_uring_setup(0x4ec6, &(0x7f0000000240)={0x0, 0x9c44, 0x4, 0x2, 0x21c}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005e2000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r1 = io_uring_setup(0x410c, &(0x7f00000000c0)={0x0, 0xf393, 0x4, 0x3, 0x52, 0x0, r0}) syz_io_uring_setup(0xc18, &(0x7f0000000140)={0x0, 0x1b28, 0x1, 0x3, 0x210, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005e2000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:50 executing program 3: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r0 = fork() r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) r2 = syz_io_uring_setup(0x5736, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, r1}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005eb000/0x1000)=nil, 0x1000, 0x1, 0x2010, r2, 0x8000000) ptrace$getenv(0x4201, r0, 0x80, &(0x7f0000000080)) 09:41:50 executing program 2: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:41:50 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:50 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000000)) syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:50 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = socket(0x5, 0x5, 0x4cdf1314) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x1, 0x200, 0x70, @ipv4={'\x00', '\xff\xff', @local}, @private1, 0x7, 0x8000, 0x8, 0x6}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x90, r3, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8b}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r3, 0x2, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) write$sndseq(r1, 0x0, 0x0) 09:41:50 executing program 5: clock_getres(0x5, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x216}) r1 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, 0x0) rt_sigqueueinfo(r1, 0x37, &(0x7f0000000280)={0x3e, 0x732, 0x5}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) socketpair(0x6, 0x0, 0x6, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000100)={0x8, 0x6, 0x9, 0x3, 0x4, 0x5bb9, 0x9, 0x7}, &(0x7f0000000140)={0x6, 0x1, 0x7, 0x8, 0x6, 0x3800000000000, 0x10000, 0x1}, &(0x7f0000000180)={0x9, 0x7, 0x5, 0x8, 0x3, 0x7ff, 0x0, 0x2}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x8]}, 0x8}) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_NOP={0x0, 0x3}, 0x7fff) pselect6(0x40, &(0x7f0000000340)={0xa2, 0x0, 0x4, 0xff, 0x10001, 0x401, 0xffffffff, 0x1de}, &(0x7f0000000380)={0x5, 0x41fb, 0x4, 0x7, 0x6, 0x7fff, 0xa5e, 0x975f}, &(0x7f00000003c0)={0x3, 0x7, 0xc4a, 0x1, 0x1000, 0x7, 0x2, 0x3}, &(0x7f0000000400), &(0x7f0000000480)={&(0x7f0000000440), 0x8}) 09:41:50 executing program 2: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:41:50 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) write$rfkill(r0, 0x0, 0x0) 09:41:50 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7b) write$sndseq(r0, 0x0, 0x0) 09:41:50 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:50 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) write$rfkill(r0, 0x0, 0x0) 09:41:50 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x20, 0x8, 0x1f, 0xfb, 0x0, 0x6, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xf45}, 0x6bc4, 0x8, 0x5, 0x9, 0x13524a57, 0x1ff, 0x5, 0x0, 0x3}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000001c0)) syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='timers\x00') ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) r1 = fork() ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000300)) ptrace$getenv(0x4201, r1, 0x5, &(0x7f0000000000)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:50 executing program 2: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:41:50 executing program 4: getitimer(0x2, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) 09:41:50 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:50 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)={0x0, 0x0, 0x20}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x77359400}, {r1, r2+10000000}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clock_gettime(0x3, &(0x7f0000000140)) 09:41:50 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) write$rfkill(r0, 0x0, 0x0) 09:41:50 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='attr/exec\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:50 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0)=0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = syz_io_uring_complete(r1) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000040)='/dev/vcs\x00', &(0x7f0000000080)='\x00', r3) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r4) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00006f6000/0x8000)=nil, 0x8000, 0x2a3e0a9cadb117df, 0x10, r4, 0x8000000) 09:41:50 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r1, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x732e, &(0x7f0000000000)={0x0, 0x4c33, 0x21, 0x1, 0x10e}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x8, &(0x7f0000000100)={0x0, 0x989680}}, 0xc39) 09:41:50 executing program 5: clock_getres(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) pselect6(0x40, &(0x7f00000005c0)={0x20, 0x842b, 0x3, 0x0, 0x2, 0x1, 0x4}, &(0x7f0000000600)={0x401, 0x0, 0x81, 0x81, 0x6, 0x100, 0x100}, &(0x7f0000000640)={0x9, 0x1, 0x3, 0xd7, 0x4, 0x6, 0x30e, 0x1}, &(0x7f00000006c0)={r0, r1+60000000}, &(0x7f0000000740)={&(0x7f0000000700)={[0x3]}, 0x8}) r2 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f00005e2000/0x2000)=nil, 0x2000, 0x0, 0x20010, r2, 0x8000000) r4 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r4, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) pselect6(0x40, &(0x7f0000000ec0), &(0x7f0000000f00), 0x0, &(0x7f0000000f80)={0x77359400}, &(0x7f0000001000)={&(0x7f0000000fc0)={[0x4da8]}, 0x8}) r7 = socket$unix(0x1, 0x1, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000580)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r7, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)=""/102, 0x66}, {&(0x7f0000000200)=""/192, 0xc0}, {&(0x7f00000002c0)=""/97, 0x61}, {&(0x7f0000000340)=""/113, 0x71}, {&(0x7f00000003c0)=""/57, 0x39}, {&(0x7f0000000400)=""/62, 0x3e}], 0x6, &(0x7f00000004c0)=""/78, 0x4e}, 0x0, 0x2000, 0x0, {0x2}}, 0xfffffffa) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f00000000c0)) 09:41:50 executing program 3: write$rfkill(0xffffffffffffffff, 0x0, 0x0) 09:41:50 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='attr/exec\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:50 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:50 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) 09:41:50 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) io_uring_setup(0xc83, &(0x7f0000000000)={0x0, 0x5d3d, 0x1, 0x1, 0x114, 0x0, r0}) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:50 executing program 3: write$rfkill(0xffffffffffffffff, 0x0, 0x0) 09:41:50 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='attr/exec\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:50 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:50 executing program 2: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:50 executing program 3: write$rfkill(0xffffffffffffffff, 0x0, 0x0) 09:41:51 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a0200) syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x600440) write$sndseq(r0, 0x0, 0x0) 09:41:51 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd1, &(0x7f0000000040)={0x0, 0x738b, 0x1, 0x10, 0x800004}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:51 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = getpgrp(0x0) rt_sigqueueinfo(r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0xffffffff}) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:51 executing program 4: set_thread_area(&(0x7f0000000080)={0x5, 0x1000, 0x2000, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$cgroup_type(r0, &(0x7f0000000000), 0x9) write$sndseq(r0, 0x0, 0x0) r1 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='attr/exec\x00') 09:41:51 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:51 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x141002, 0x0) write$rfkill(r0, 0x0, 0x0) 09:41:51 executing program 2: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) mmap$perf(&(0x7f0000a2e000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x5) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00006f6000/0x4000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) 09:41:51 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x141002, 0x0) write$rfkill(r0, 0x0, 0x0) 09:41:51 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x0) syz_io_uring_setup(0x3ac2, &(0x7f0000000100)={0x0, 0x4fa2, 0x0, 0x3, 0x141}, &(0x7f00005e2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0x3dcf6ce4) 09:41:51 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:51 executing program 2: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) mmap$perf(&(0x7f0000a2e000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x5) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00006f6000/0x4000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) 09:41:51 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x141002, 0x0) write$rfkill(r0, 0x0, 0x0) 09:41:51 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r0 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_complete(r2) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:51 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) write$sndseq(r0, 0x0, 0x0) 09:41:51 executing program 5: clock_getres(0x0, &(0x7f0000000000)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f00000000c0)) timer_settime(0x0, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, &(0x7f0000000140)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200000}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:51 executing program 0: fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:51 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$rfkill(r0, 0x0, 0x0) 09:41:51 executing program 2: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) mmap$perf(&(0x7f0000a2e000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x5) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00006f6000/0x4000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) 09:41:52 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000580)=0x0) rt_sigqueueinfo(r3, 0x3e, &(0x7f00000005c0)={0xe, 0xfffffff9, 0x2}) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000300)='-))-\x00', &(0x7f0000000380)="e8b9c01262da668a287df7a6a4591ef5b0df5d85d06e0368194163cd1823f7a90ae2b557f8e6aa17069abacc1e38b26031b0046885ab6560953387975fbffd56fe75db822ca5bf22964371eb23c55c51ac2e03a8ae95e7a83362259dfe853e72406f04c6d070403532f16b55956bd90c8f28468a43c01c600a63205b85f9c0b02b8a88743fcb3f5382c9e562f0cd891e6bf2a79b74e43238165fb29cdca6a84457cd609a7bcaf7dbb4ed636796c0c810f6153e651a7d65e363799297b86d4fba4b03c84c", 0xc4) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf2500000000081d39fa56d15564ffa30007007f000001080009", @ANYRES32=r1, @ANYBLOB="080009000200000008000100", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x80000}, 0x10) syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r4) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x34}}, 0x2) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r5) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) 09:41:52 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') r1 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x9, 0x3, 0x3, 0x80, 0x0, 0x1, 0x40000, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x7ff, 0x1}, 0x10, 0x3, 0x2, 0x2, 0x1, 0x20, 0x4, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, r0, 0xb) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000200)={0x6, 0x80, 0x0, 0x5, 0x0, 0x7, 0x0, 0x6, 0x10c01, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x4, 0x402}, 0x10010, 0x101, 0x45a2, 0x3, 0x64, 0x6, 0x88, 0x0, 0xb4b8, 0x0, 0x1}) write$sndseq(r0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') r3 = syz_io_uring_setup(0x30b2, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000840)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/42, 0x2a}, {&(0x7f00000002c0)=""/123, 0x7b}, {&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000400)=""/173, 0xad}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x5, &(0x7f0000000540)=""/14, 0xe}, 0x0, 0x2000, 0x0, {0x3, r4}}, 0x6) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r5) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x218400) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x80045301, &(0x7f0000000180)) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000080)='oom\xff\xff\x95Yc\xcf\x99,|\a\xb5\xd8[\x84\x15\xae\xc2\x0e\x95\xbcRK\xb8-\x04\xf01J\xb1\x95\n~\xbd\xa7\xc0\xeeV\xbc\x8a\xea\x1bv\xd0\x9b\x95\xed\xdc\xf8\xdd\xed\xc2\x88a%\xeb\xae\x85\xe1$\x95\xc2Z\xc8\x02\x01O\xb3\xdasK\xcf\xf8l\x86\x8f39\x1f\x98\xf3\xf8\x14\xce\x0e\xc7\bs\xd9\xc4\xf8', 0x0, r2) syz_genetlink_get_family_id$team(&(0x7f0000000600), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000880)=ANY=[@ANYBLOB="6c00000049a553eaede53cf67145812c65ec5471308ca382684efcef43c7c7026e013cdf3734181301505034eae1db1b41942055bccb92badddd9f27a5f093803d468e601eb5a1eb920b689e329306285f15cc7e04bb13c8cb6f1009c1", @ANYRES16=0x0, @ANYBLOB="120228bd7000fcdbdf25170000003c00078008000200890000000c00040008000000000000000c000300c7b00000000000000800020086000000080001000400000008000100010000000c000580080001007564700010000280040004000800020000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000680)=0xc) ptrace$setopts(0x4206, r8, 0x3, 0x100000) 09:41:52 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x2000)=nil, 0x2000, 0x2000000, 0x10010, r0, 0x0) 09:41:52 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$rfkill(r0, 0x0, 0x0) 09:41:52 executing program 2: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) mmap$perf(&(0x7f0000a2e000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x5) 09:41:52 executing program 0: fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:52 executing program 5: r0 = fork() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x14, 0x9, 0x3, 0x400, 0x7, 0x8, 0xffff, 0x7}, 0x0) clock_getres(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x1fd2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) 09:41:52 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xf8) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000000)) 09:41:52 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$rfkill(r0, 0x0, 0x0) 09:41:52 executing program 0: fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:52 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0)=0x0, 0x0) fork() r1 = syz_io_uring_complete(r0) syz_io_uring_setup(0x59cb, &(0x7f0000000000)={0x0, 0x3ea9, 0x20, 0x0, 0x289, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) r2 = syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r3 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r3, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1151, &(0x7f0000000300)={0x0, 0xc2c8, 0x0, 0x0, 0xfe, 0x0, r2}, &(0x7f00005e9000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000380)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000005c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000440)="68d6812b59509c28be0e295d032ae664b1237033b06824f0b413523e0faece0e02dbf08e43e8f21b237f8968a425e0541af77fb7b9f949606fbbf34d1872ad65e14ceb4de5d6d466076d2747fc169ed807b143be9ce3cdbd3ad5b501e073f40dd8110ee6d5922add62b75a44fea98caf453718e3f045ba59de0ce48e7dbf47feb1a7c054cf973928794732bafe779714c31c1a4e43aa8314111875c8200b64328bc436df5a5273e0bf0ec4497891859d1b26481509d0514281551cece4d93a0f96f30e6abdf948310756701f0d37b1a2e001a6f99a5c1ff71559767967bcfbbb59fc0e552eb82568cebf522f9557d65118de5a3dd6", 0xf5}], 0x1}, 0x0, 0x20040005}, 0x7fffffff) 09:41:52 executing program 2: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) 09:41:52 executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) 09:41:52 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') r1 = socket(0x2, 0x800, 0x7f) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x7800, 0x700, 0x10001, 0x1, {{0x21, 0x4, 0x1, 0x3b, 0x84, 0x68, 0x0, 0x8, 0x4, 0x0, @local, @local, {[@timestamp={0x44, 0x1c, 0xcd, 0x0, 0x6, [0x8001, 0x7, 0xd51, 0x7, 0x6, 0x7ff]}, @cipso={0x86, 0xb, 0x0, [{0x7, 0x3, "8c"}, {0x0, 0x2}]}, @rr={0x7, 0xf, 0x10, [@remote, @dev={0xac, 0x14, 0x14, 0x2c}, @dev={0xac, 0x14, 0x14, 0x24}]}, @rr={0x7, 0x1b, 0xbf, [@multicast1, @multicast2, @local, @multicast2, @loopback, @rand_addr=0x64010101]}, @generic={0x83, 0x6, "616f3a18"}, @ssrr={0x89, 0x17, 0xa0, [@multicast1, @local, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}}}) write$sndseq(r0, 0x0, 0x0) 09:41:52 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd_index=0x3, 0x1, 0x0, 0x9, 0x5, 0x1, {0x1}}, 0x3) 09:41:52 executing program 2: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) 09:41:52 executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) 09:41:52 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:52 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) r1 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, 0x0) timer_create(0x0, &(0x7f00000013c0)={0x0, 0x24, 0x1, @thr={&(0x7f0000000380)="42253a8f2689893e1fe19088a3b95c4b8116c18c21fd249f477cb006a391241125ebe85114a28a966f56189c28cc81a789f340d8a790a083f2d8d76316430eddb00b0b294ff434ea6d32d2cbe0f7a073b9fd5ae6c1e1eaae186b2b1ad2d519908c57f94f12218e1ce45f8b51e02d36f3d3026ba5bd858a59cae2476ff737d9de76363e3dc08d58109af911e26d6e7efa67230e2b8e30e355a8b8fa92e1fb4e01a33ced7f194f46dbc2409bedcc70dd22765e398155e21f7e78ee0fa4c45fe8e61cac8c5096913a39fe657631d8be3bf282240320b119b661ffda9c5832715921f533b127765c6e988d05ee66f75099c3f53ed9dcfdebd4f855132afa00b02bee1a4cae297d818954d0f67cdaf36e70539b3d914e36f3e49281a4fc184d409647e6aedb37406cfd9c7a8dda3192ad904b0a780e592d255cde6a0c672b32a047e6be947ebd31d21a8bb72ecf351b3b91d8fcc72cb480db9270b0060f596aef562e396bd3ea41e8977092edf9d582616b0bddf182768f4cf57c7b72923adfe59596efa321cb03d4bdcb305b80c08527ef147c76f28d0796dcf9566509a3844a10506df6cf68d631cbef1578f76d9d9c37872aff7ba60b81ee8f92ba0e4a91ff838e5a1fb25fe9eb20a9881f6a34ed5192071b998186d0e7551c283ad55742a07edb8cd0258f69999f9e6b16f0d81fc69bea0da7aeb466a7dd88e0e0f0b8a05274ac90b8179637dfb5ca536a7e6aa58440f0e59b1b3337d79f6d436f9864a161b681182ffb1349dd64e3e5cb10db41128db8bf85f1517635682b7fe198dc03d2d0d5dc2c315b3501a949f0831c46f4ea59ac82f016835b54c2b6f52c573fd07ac3d3fd3656523d091ab151408eb213c63bd744fbf8f5e86687deec43f49c66a77390f6c54297191ae264d2940fba06618d1f8a307cc95ca458b0a407be970393059f2087a042813c804a2b2830ea9b25beca4ec8dc9049c0dfe45a4092ca43b72cc3df244f8dc89a9ed3ef1e0cee77c8f35791c5c56fe57344ea8ccf8f626bc62f093d59d6421328f7f0163a1d42c6c19be6ff9afbb4bf4dee475765a8d2d36dc83e26fa26c803ad829fc87ccdbd287e74eb0aca396d78575e2db8630e43ca8d6b5c9d72ecb2c472109dd3baa17023dd5339a51c4fac2d003f64be8223424c9b3382ec71ad67aee5cdf6316e488f2c9d95c614b6092e470af9fe5d1b7e1cf620d974f831199305e4a892ac71074bad41ce5e108f848d46229c9c564d59dcf3a90e21861f333861e502016bc7748749f6f37d09051f70bc76f84c713ac0425a4e474cb408edad9b772f10de743ddad2956b01664c3c201d13ac31503a829ad9f253f83522b21d79e03072d25316142baec20ab5619adedabe161a468158ecd30d5ee3fab291c944a23f75460c90148a5adbac802fe6ded8ef214d551fdea18cd61209dcce02d2e58b3d04bf4fd3466e0af5f23ea2a13249f23d1559d7c65fbdac0cce0abd2923589900e64c2397fc945c9486f51ef8bd991a8f39d7a811e411a1b9df0acbacb946cc9faa7baf5a4209e886412a9b26130f8b6eaed62226e8e1a149257e2c4d410efcd54d68dc8624a03611bf101464516aa452eb0245d6a8ac64c2e78e0ca2cd6baa06826766299bef8062cda77771aa6ec91181e304a378591accd0aa3a61557165bfe9d08d80b52cb3fbca3cca8c48015e2d243c36b30d5596686838bd9e7a2a37c5fd71deed956115ca97f42e179b8400bf1db5c6f07cbc9e3fb9d0f7f8b4f8bd22e8ae563b5f4d602ce813767bee6d9c52e37c04a394a78ffafc332071671a593a4d76860979c64ba060d1b95f4c93c5709745521916fe9aced4178d2f69cce8c62c3466c53d27b0039d93d02d0e969d848cb6dc8502c3c465d2dfcc610be5900ba573f4ead7a6ad87b87a06806b073514f61023812db0d127ad3b51632ac0912a372aa4df4f66558d53efb899c5986c2a8db0761f50b10c93ae31fcc729c47b4126a6a4b6f986009d6804ddb8cfceaa0fc4048ba9763723034f3e54df1f8f3bc042ef2c93d015efe1e086b369a8606b631d044faa77d50528f3fb565e912da9f0da964381614e24f479f7bc4be49dc7d31c4bcbbbe03f6f3750b72767788086022be42a4d3a73af1c48bef067b52af10a94236f9896ae94ace1f1012417669cac3157badf76291290614870418f7bc78a8a87f921e36c1944d68283d7d82dc43842eb5b6745c4c0a48336b26b0a27e2020dae8d52994a8694fe50259971b1d512ca9847f00f5d9f70e502c5aa39fb07de61c4519577adb8b664877dd866f74439d446e36aef38a6c4654fdc83ad1cfda7840ef0049dfb7323981119dbf25f985377b14873b4ad469388cd2ab9604453b418ceb788c89b40e0a834b097ff9c6d558a735eceb25ebd642dea6468eeabfdea9665161475725f15600cd3f478a535b9ccf98b734baee6c4380860a7c9358095f3206cec2ec6100b82859a8ab68fa3493b837566aa60a23ddec728d1d5429208e52f88a3a7553f7fc6831f45d91be9dada22a324c44aa95fe9ac7d4a257594c0e9680bc7350d927bc91ee7eb6bc640c5fc68758f83f836b13805991f5bd8ece1ed08dcd723e40379757b2e6664c74acbb163eaeda0f9776fa875cb14060e04b98fce3cdb989f579ba406732cc592355455e7cecb5bc34e18871de6ca6b2b67db7e2660fa698a067adbf37f464f95e32adbebd32e2c4eff10b7683f28728fe3250a53364a3678121972542e369ff14ff8280cb98f2e7523f85baeb41c9e34b16465aef58c7e84866a9f7e4e8e2980d534143b44657bcaffb30518a5998de4cfc36a4319db25574195f635cf8a6b4476a63b97d666732f64790f603e6a58609e684dc62ceb9dcd64f17c33a748611102d5f711c358b996361f067aecc8a6457f07df2acc1af9ca729d5a3f0a0f77cf656e562dea6d1559010b738569cc88329a5d10c72455cff33086685f6c119fe1da17c61856164ad3004c3865e2e39055d1dfee20fc809b35a65860a999e27aa2bb361049aeb305aa2fb8e4144703a78d1dbfdc4f09b1377507259a0bf5bef73063a9c7d98da5bf2a2f89b08d5f896e3298f1d9683d6c78b2e2fd61dd01b0da47a2adbe514446a8d5e8f81b38ff6831a7d0b1bd79a2313de62c877fd9861a13e26e85aa4918e4c42449ebb97c02fbab26285a42053fe260eeee97c41ef497f825384674b2b6cd886beac96220ef30cebff98f75f31f9f01b3100cadbff73d07c6b628dcac94df495b3191dce19b95f45ffb993a0d2638cb18ab962bda6f646edbfe4b006a9d17c8e08faaa5bae7d445f864598fc31a1933266484900e10205c2c7cd5e0862eceb671300f4e9131425332e9c0464ebcfd6c8953c6cf58aabcff7a30ac019245c1ca45949004def4be580e63a49e1c10e3c09726f9d7cb00b3c9e852192851de8daa6d263f2a332a5097e31151b2a3b1b18ac3a4a404dff3c350b9fe4955c355de66f0228b732cf107bfdf01317cfb2cdce5ff718cff8f65c5fb67fb26988b45fef48bfeb4a466a3f2467bbeedac0a44826fca9f24df39c252918f51034516336b305fffa6ff03476627db4b429aabfced469b855d1e91568e211eb7219c2f824e1424ac6cba61db9672b82a1cd6d1381364cfc5d1102a6fc416c99310d47f73a103cacbb0afd173fc493e9f688e1946c26f097585df75445318bb9ea0f066298d4897a074e4cf786981fa95c99c0c71cb9c1a63ad42f6da92545607e1d10aa77594a2a95a41bc2050017e810fd6ceac3f8b3ce2eed00fee6c8dbe7db9d18889263cc2a2997e419889e6644563e14da7ae80daf48f9f9745ca3271fad86a08bafc858a0fdc09e7c384192198ed6a5143f1130d4882350c0f6ca97a15117b2aae318715b855a146920d521827d875a23d7c73fcb098bf99249a22aa2485c73ab003ac9e5450b23ec2318529802a6c8382ac1e125d608400b422aec9890993def2a4c22e94a0951df98836f2cf749b3e60bf3441ab2c45417cef78e13dd466efb6fc38adbb7f4d12251beb3e23d6161461d390f26290cfa3696c228284131b45e6cf2e59d3d8a5cea51312114b149310052b4059a34d33dc0d7f2f3723727530ecba26cdac3f8ede8bcef150ef42eff842728e4039d534b0218f2cffca827a73e6751f1be788a9b8e33364f2170c7deba1bc4da14633a78f61f4b6623a26e90f1b5e20b1ea4321d1d998fd1c32412626062686d851df34b4a4c2ff4ace9a80b0120e36a79d4d6129cb687a0c1eb42d8c0e6fc8ad0e9021a1fa5bf5a531502a542fe7ea9a3cdacceaeabb7e34fbd72879eb3ac65042592fa60212ea8373d5eec261e89d409ed08d76087301affb0504c0bad7a433bb932ffbe3f4ef32186800e03c554b33f55092e933c26a37ceeadfaa7126c7d7d29ab81065b6ab3d4169ec4a8091338f986194170a91486dc41fbf18322d6ab3b7f169fc5dc732ca33e743155e1a50edc55eaf0f737f385953fa44ad44508aec9fbd69fda3a2988561c4c1629a463d59f0e9a7a7ac6bcdcb68589bc036557f94a0c7feed0bfcef02930872a779ea54ed152b0220f9e2ef4b2cd6325adbb879835e2c39fc642def04fd044bce9c9ac93032939b5504a541815aa4692def9e4b19956d5d4f955926f7c6f03cb7b24b316b478dd1b92be0c03b08139dd202afc2df2adc7111b51c2d790c66e0e27571c5d62c4c41f32b1b348371de2731b474f5e5c3d3dd9de2b1ee16c17630b3f242ed5d895ddac108360d170a8d0b3d5cb051fbccb4eab784566c8fbc962490ad1ec41b2884d97b42eae02b68aeec6ff79fa491f01d624839b85ad17658fdb1bdf45bff544d0f638494b9023fce25a3d5935bfc190a9f2bffec61762eb9e9fbaa7cfd466cedcf8e198fe0bc5c77d922362a389feac08d1114ceed52df849d829064af536c4696a3011e0e3a16261978d2ba43f83a49080fa0281913bea2071e15028525c2ec0bc5cb557ddf46edfc8e402ada02056743bde431a50b03d4174fa20eb933a23f254082f94b3d0444dcde7300ed789eee1d33aee143fa61f122b9302261ac234cad4baab2385fbb338de609fc4a17b56100e5b62a66021ef18e3a40eb1b933324fda8055dbe0ccaef033e22baeffbedaaffd41dfedb3f6835e23a25474b8ed6989fd473028b6867e50f10cb746e0775572bdb8e2c6d540156714d5794df42627d936abc3a6856d67b18b888612817928348f25874c6d26b3fae61f820c6504cacf3d3ed69232f600d645b217154cfe025fe3445c4cd222549c159b469b9d1017ed797a25c3bb2719e9cd0affa186644d643f46b33e84121593c789223a70856ea597b8fd8826d0d02504b6e9fee25e32beaaf6763dbdea3084f96d47d84cbecac0fef28b1fc0e649e954da422a35afaa02c313d71fcde4677eb55c9c8ed02a4a10e16159e2c70d0944cfd71aaa6bfd95c48117999b7366307012981d22c7daa51b6058bf7acc0a7871e7dd88c04b101907492012b5585fd07a6b68a54263789bf642ab5dd39e3520607e4eae726766a48aa54f1a07c97ce47c88481904a9b53b74b56f7c2b0df32288825c14d7aa3163f1a751caa5129cd062e0bfb75bfb2746d455029658cd160767c0b124a1c92053763772a5af9dfc6849d1279e68d7c54baa0401e26f035d011b8b9f858fba9ee63c71050fd2db20b6f4f59c50bfa6cb3543ac7882536280f46fd110bee1fc113f6165867f04eb027f7fdfac76ce55b12b2ba033f471f38567d2a85c00d1d6e8c79bd", &(0x7f0000001380)="03db92022125b2537510a090442e504bab13055fefbe"}}, &(0x7f0000001400)=0x0) timer_gettime(r2, &(0x7f0000001440)) tgkill(r0, r1, 0x3a) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0xc8, 0x0, 0x5, 0x0, 0x2a0c0c9e, 0x4422a, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x41010, 0x7, 0x3ff, 0x0, 0x2, 0x10000, 0x80, 0x0, 0x5, 0x0, 0x20}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000300)={{r3, r4+60000000}, {0x0, 0x989680}}, &(0x7f0000000340)) 09:41:52 executing program 5: clock_getres(0x0, &(0x7f0000000000)) clock_getres(0x7, &(0x7f00000000c0)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)={0x0, 0x0, 0x4}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = getpid() sched_rr_get_interval(r1, &(0x7f0000000100)) 09:41:52 executing program 4: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) capget(&(0x7f0000000080)={0x19980330, r0}, &(0x7f0000000040)={0xfffff8f2, 0x6, 0x6, 0x100, 0xfff, 0x6}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') timer_create(0x3, &(0x7f0000000180)={0x0, 0x33, 0x4, @tid=r0}, &(0x7f0000000340)) r2 = syz_io_uring_complete(0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x130, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ed1}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5fbd}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe49}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb97}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8339}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x18}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4001}, 0x20020000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xeca) write$sndseq(r1, 0x0, 0x0) 09:41:52 executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) 09:41:52 executing program 2: fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) 09:41:52 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:52 executing program 2: fsopen(0x0, 0x0) 09:41:52 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:52 executing program 3: fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:52 executing program 5: clock_getres(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f00000000c0)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') write$sndseq(r0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x208101, 0x0) 09:41:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(r0, 0x0, 0x2) read$snapshot(r0, &(0x7f00000000c0)=""/4096, 0x1000) 09:41:52 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_snmp6\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x128, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8b10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9b}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x96}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x43c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40081}, 0x4000000) syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r1 = fork() getpgid(r1) 09:41:52 executing program 0: syz_io_uring_setup(0x7c00, 0x0, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:52 executing program 2: fsopen(0x0, 0x0) 09:41:52 executing program 5: clock_getres(0x0, &(0x7f00000000c0)) clock_getres(0x1, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f0000000000)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) sched_getattr(0xffffffffffffffff, &(0x7f0000000240)={0x38}, 0x38, 0x0) clock_getres(0x2, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000140)={0x8, 0xf99b, 0x0, {0x600, 0x2c24}, 0x9, 0x200}) r2 = io_uring_setup(0x2d42, &(0x7f0000000040)={0x0, 0x0, 0x21, 0x3, 0x79, 0x0, r1}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) 09:41:52 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) write$sndseq(r0, 0x0, 0x0) 09:41:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(r0, 0x0, 0x2) read$snapshot(r0, &(0x7f00000000c0)=""/4096, 0x1000) 09:41:52 executing program 5: ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:52 executing program 0: syz_io_uring_setup(0x7c00, 0x0, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:52 executing program 2: fsopen(0x0, 0x0) 09:41:52 executing program 5: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) clock_getres(0x0, &(0x7f0000000000)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x3f) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:52 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f0000000000), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(r0, 0x0, 0x2) read$snapshot(r0, &(0x7f00000000c0)=""/4096, 0x1000) 09:41:52 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)='oom_score_adj\x00', 0x0, r0) write$sndseq(0xffffffffffffffff, 0x0, 0x22) 09:41:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) accept$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r3) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000000)='-^\x00', 0x0, r4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000100)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) 09:41:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(r0, &(0x7f00000000c0)=""/4096, 0x1000) 09:41:53 executing program 0: syz_io_uring_setup(0x7c00, 0x0, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:53 executing program 4: r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/pid\x00') r1 = syz_open_procfs(r0, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r1, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000040)={0x3, 0xa, 0xffff, 0x1c, 0xfffffff9, 0xe1}) 09:41:53 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)={0x0, 0x400000, 0x0, 0x2}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x0, 0x0, r1, &(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x1, 0x6000, 0x1}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:53 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) ptrace$getenv(0x4201, r0, 0x2, &(0x7f0000000000)) 09:41:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) accept$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r3) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000000)='-^\x00', 0x0, r4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000100)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) 09:41:53 executing program 3: read$snapshot(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000) 09:41:53 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:53 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34b53ca2", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fbdbdf2506000000080002000500000008000700e000000208000700ac1e010106000b002a000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 09:41:53 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x36a4, &(0x7f00000000c0)={0x0, 0x9c7d, 0x0, 0x3, 0x13}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00005e5000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 09:41:53 executing program 3: read$snapshot(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000) 09:41:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) accept$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r3) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000000)='-^\x00', 0x0, r4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000100)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) 09:41:53 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = getpid() sched_rr_get_interval(r0, &(0x7f0000000240)) r1 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x5, 0x7fffffff, 0xffffffffffffe9b5, 0x2, 0x7f66, 0x7, 0x7fffffff, 0x6fbf}, &(0x7f0000000100)={0xffffffffffffff26, 0x5, 0x22c7, 0x800, 0x7, 0xa221, 0x2000000, 0x5}, &(0x7f0000000140)={0x0, 0x9, 0x4, 0xa1, 0x4, 0x8, 0x101, 0x7fffffff}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x724]}, 0x8}) 09:41:53 executing program 4: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='task\x00') write$cgroup_type(r1, &(0x7f0000000000), 0x9) write$sndseq(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0) 09:41:53 executing program 3: read$snapshot(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000) 09:41:53 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0xd165}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f0000a31000/0x1000)=nil, &(0x7f00000002c0), 0x0) r0 = fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r1 = syz_open_procfs(r0, &(0x7f0000000000)='mountstats\x00') setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x1}, 0x4) 09:41:53 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) accept$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r3) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000000)='-^\x00', 0x0, r4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000100)) 09:41:53 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x10001fd2, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x307}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/schedstat\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00005e5000/0x2000)=nil, 0x2000, 0x5000002, 0x10, r1, 0x0) 09:41:53 executing program 3: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, &(0x7f00000000c0)=""/4096, 0x1000) 09:41:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) accept$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r3) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000000)='-^\x00', 0x0, r4) 09:41:53 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000040)={0x7fff, 0x0, {0x1, 0x1, 0xfffffffd, 0x0, 0xffffff3b}, 0x4}) 09:41:53 executing program 3: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, &(0x7f00000000c0)=""/4096, 0x1000) 09:41:53 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:53 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x4, 0x4, 0x80, 0x80000000, 0x1, @mcast2, @remote, 0x8, 0x7f1, 0x0, 0x200}}) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:53 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) syz_io_uring_setup(0x3e7c, &(0x7f0000000180)={0x0, 0xb04e, 0x0, 0x2, 0x4d}, &(0x7f00005e2000/0x2000)=nil, &(0x7f00005e2000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) accept$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r3) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) 09:41:53 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') write$sndseq(r0, 0x0, 0x0) 09:41:53 executing program 3: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, &(0x7f00000000c0)=""/4096, 0x1000) 09:41:53 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000000)) 09:41:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) accept$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r3) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 09:41:53 executing program 5: clock_getres(0x0, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) io_uring_setup(0x2833, &(0x7f00000000c0)={0x0, 0xe3f6, 0x8, 0x2, 0x3a3, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:53 executing program 3: syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000) 09:41:53 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:53 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) 09:41:53 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_vif\x00') write$sndseq(r0, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000000)="844022f659679c71287acf6524ecbdd00df3a3b180414aa967811facfae884c0323aa4f4ffe9d2bd6bfd3b0b87432e70ad005fa29f33e9b2d384039980cb98b3d0a66ce078c0840ff0cd8ebe54eca1d9f3b45a94d0ea2850157e31a0cc", 0x5d) 09:41:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) accept$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r3) 09:41:53 executing program 3: syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000) 09:41:53 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000140)={0x7, 0x6, 0x7fffffff, 0x9, 0xd329, 0x8}) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000000c0)={0x7ff, 0x832, 0xffff, {0x4, 0x7}, 0x41, 0x4}) r1 = io_uring_setup(0x1fd2, &(0x7f0000000040)={0x0, 0x3384}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) 09:41:53 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:53 executing program 1: r0 = fork() sched_getparam(r0, &(0x7f0000000000)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:53 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000000)={0x4, 0x7, 0x1, {0x5, 0xffffff33}, 0x401, 0xffff66db}) 09:41:53 executing program 3: syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000) 09:41:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) accept$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 09:41:54 executing program 5: clock_getres(0x0, &(0x7f0000000000)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f00000000c0)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x0) 09:41:54 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:54 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000000)) 09:41:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(r0, 0x0, 0x0) 09:41:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) accept$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) 09:41:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c020000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fddbdf2504000000080002000700000014000600fe800000000000000000000000000035"], 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x44080) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="10002dbd200000000000f4010000"], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) clock_getres(0x0, &(0x7f0000000000)) r3 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 09:41:54 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x8, 0x8, 0x800, 0xb3, {{0x3c, 0x4, 0x0, 0x3c, 0xf0, 0x64, 0x0, 0x2, 0x0, 0x0, @multicast2, @private=0xa010101, {[@cipso={0x86, 0x3f, 0xffffffffffffffff, [{0x2, 0xc, "c488cc71cf4f83273a81"}, {0x3, 0x6, "d5ffe8a4"}, {0x0, 0x12, "9934cc8128970377dd0e2f6170a5c325"}, {0x6, 0x4, "8b6f"}, {0x6, 0x11, "df416f8075ae88d8b3dcc02cf774a0"}]}, @timestamp_prespec={0x44, 0x44, 0xc2, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@remote, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@rand_addr=0x64010102}, {@multicast2, 0x9}, {@private=0xa010102, 0x6}, {@broadcast, 0x3ff}, {@remote, 0x58}]}, @timestamp={0x44, 0x18, 0xb6, 0x0, 0x5, [0x1, 0x8, 0x7ff, 0x5, 0x2]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x4, "cb95"}, @lsrr={0x83, 0x1b, 0x52, [@multicast1, @remote, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_addr={0x44, 0x14, 0x7b, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x800}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe}]}, @cipso={0x86, 0x6, 0x2}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1cc, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x801}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x30000004}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x85dc645bbbd69fbb, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}]}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4c054}, 0x20044800) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x0, &(0x7f0000000000)=0x1, 0x0, 0x4) r4 = syz_io_uring_setup(0x3623, &(0x7f0000000040)={0x0, 0xb914, 0x8, 0x2, 0xdd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00005e9000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000c, 0x11, r4, 0x0) 09:41:54 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='gid_map\x00') io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) write$sndseq(r0, 0x0, 0x0) 09:41:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(r0, 0x0, 0x0) 09:41:54 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, 0x0, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) accept$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 09:41:54 executing program 5: clock_getres(0x3, &(0x7f0000000000)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = syz_io_uring_setup(0x30b2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x80000000}, &(0x7f00005e4000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0xcf6, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff], 0x6, 0x0, 0x1, {0x0, r3}}, 0x1) r4 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6000002, 0x110, r4, 0x0) timer_delete(0x0) clock_gettime(0x1, &(0x7f0000000180)={0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e3000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r4, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x2, 0x100000000, 0x3, 0x1, 0x1000, 0x7, 0x4}, &(0x7f0000000100)={0x4, 0xfffffffffffffff7, 0xffff, 0x4cb6, 0x3, 0x7, 0x9, 0x8}, &(0x7f0000000140)={0x3ff, 0xc351, 0x9, 0xdee, 0x5, 0x24000000, 0x7465, 0x100}, &(0x7f00000001c0)={r5, r6+10000000}, &(0x7f0000000240)={&(0x7f0000000200)={[0xf7]}, 0x8}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r7) write$cgroup_type(r7, &(0x7f0000000280), 0x9) r8 = getpgid(0xffffffffffffffff) sched_rr_get_interval(r8, &(0x7f00000002c0)) 09:41:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) accept$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) 09:41:54 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x40080) write$sndseq(r0, 0x0, 0x0) 09:41:54 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, 0x0, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$snapshot(r0, 0x0, 0x0) 09:41:54 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:54 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x10f3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r2, 0x0, 0x0) 09:41:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) 09:41:54 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='gid_map\x00') io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) write$sndseq(r0, 0x0, 0x0) 09:41:54 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, 0x0, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$snapshot(r0, 0x0, 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 09:41:54 executing program 1: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, &(0x7f0000000000)=0x600, 0x0, 0x4) syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r0 = fork() rt_sigqueueinfo(r0, 0x5, &(0x7f0000000040)={0x2e, 0x6, 0xff}) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:54 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) 09:41:54 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='gid_map\x00') io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) write$sndseq(r0, 0x0, 0x0) 09:41:54 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') r1 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r1, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x7f08, &(0x7f0000000000)={0x0, 0xffc3, 0x2, 0x1, 0x3b7, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x335d, &(0x7f0000000140)={0x0, 0xad0e, 0x0, 0x2, 0x136, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x2}, 0x7) write$sndseq(r0, 0x0, 0x0) 09:41:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$snapshot(r0, 0x0, 0x2) 09:41:54 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, 0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:54 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='gid_map\x00') io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) write$sndseq(r0, 0x0, 0x0) 09:41:54 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="24007300240000082bbd7000fddbd925030023000600030000007a267504a92f6fe60000"], 0x24}, 0x1, 0x0, 0x0, 0x400480c4}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000c, 0x11, r0, 0x0) fork() r1 = fork() r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc080}, 0x40080) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, 0x0) getpgrp(r1) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r2, 0x0, 0x0) 09:41:54 executing program 2: read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:54 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='gid_map\x00') write$sndseq(r0, 0x0, 0x0) 09:41:54 executing program 5: clock_getres(0x4, &(0x7f00000000c0)) r0 = io_uring_setup(0x30c9, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x20c, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "8cad5a486e13d9b830aa375297ba602b0f3db85659a5633068a603c5f1"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x2f, 0x3, "8b013977a6264ed79c9bba35d9fe429cd2dd80cd1b6c8b384d9eb30c3e6f6fb5bb913360552662790ac37c"}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa5, 0x3, "791eef9e170ece75270c881b6bef7deee88b55a2b1d82498a686cf8557df1fe7f63f693c9c2dc9555de0df85144f7015c9aa964f8ba64cd3a34d4155a7e2ff77ee4496903631609a86b9d949448b41b2f3ed6298379ce8878c1d9ee2bec767a7d2335e036c1d75634a22b8e5a850a8bc9a3f88b2a41cbceb1b254a3c90c95ec05ce7a044171098cc12045f3d7ee807825683c145ce259a62355493be9d50ee88c4"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "619d9b11e5bd72ca6aa0dce14ed469c324adb58dca5eef40"}}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x88c}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40d5}, 0x8040) 09:41:54 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, 0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:54 executing program 2: read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:54 executing program 5: clock_getres(0x4, &(0x7f0000000000)) io_uring_setup(0x1e0b, &(0x7f0000000040)={0x0, 0x8000000, 0x4, 0xffffffff, 0x3}) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000000c0)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 09:41:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r2, 0x0, 0x0) 09:41:54 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r0 = fork() r1 = syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) ptrace$getsig(0x4202, r0, 0x7, &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000004, 0x40010, r1, 0x8000000) 09:41:54 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) 09:41:55 executing program 2: read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') write$sndseq(r2, 0x0, 0x0) 09:41:55 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfffffffffffffffb, 0x3, 0x100000000, 0x4, 0x4, 0x2, 0xfffffffffffffffd}, &(0x7f0000000100)={0x19e, 0x6, 0x5, 0x8, 0x431, 0x5, 0x63cdd0ab, 0x101}, &(0x7f0000000140)={0x8001, 0x7, 0xfffffffffffffff9, 0x3f, 0xb3a, 0x7fff, 0x7, 0x4}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x7]}, 0x8}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x0) 09:41:55 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, 0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:55 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) 09:41:55 executing program 2: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:41:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') 09:41:55 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) 09:41:55 executing program 5: clock_getres(0x0, &(0x7f0000000000)) clock_gettime(0x5, &(0x7f00000000c0)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:55 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x6c46, &(0x7f0000000000)={0x0, 0x7e06, 0x10, 0x2, 0x1fe, 0x0, r0}, &(0x7f00005e4000/0x4000)=nil, &(0x7f00005e9000/0x14000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:55 executing program 2: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:41:55 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:55 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='gid_map\x00') write$sndseq(r0, 0x0, 0x0) 09:41:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:55 executing program 5: socketpair(0x8, 0x3, 0x1, &(0x7f0000000180)) clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r0, 0x0) r1 = io_uring_setup(0x6012, &(0x7f0000000100)={0x0, 0x99e8, 0x10, 0x2, 0x22e, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e3000/0x3000)=nil, 0x3000, 0x6, 0x810, r1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) 09:41:55 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) write$sndseq(r0, 0x0, 0x0) 09:41:55 executing program 2: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:41:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:55 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:55 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) r2 = fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r3 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r3}, 0x0) tgkill(r3, r2, 0x10) 09:41:55 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) write$sndseq(r0, 0x0, 0x0) 09:41:55 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:55 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:55 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) write$sndseq(r0, 0x0, 0x0) 09:41:55 executing program 5: clock_getres(0x7, &(0x7f00000000c0)) r0 = syz_io_uring_complete(0x0) fspick(r0, &(0x7f0000000000)='./file0\x00', 0x1) io_uring_setup(0x1fd2, &(0x7f0000000040)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) 09:41:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:55 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:55 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='gid_map\x00') write$sndseq(0xffffffffffffffff, 0x0, 0x0) 09:41:55 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:55 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) perf_event_open(&(0x7f0000000b80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:55 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_setup(0x1c80, &(0x7f0000000000)={0x0, 0x651b, 0x10, 0x1, 0x15a}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) syz_io_uring_setup(0x3e5d, &(0x7f00000001c0)={0x0, 0xa5b8, 0x20, 0x3, 0x2b6, 0x0, r0}, &(0x7f00005e6000/0x4000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000300)=0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x9) r3 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r3, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r6 = syz_io_uring_setup(0x30b2, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) syz_io_uring_submit(r5, r1, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x2007, @fd_index=0x3, 0x3, 0x20, 0x5, 0xa, 0x0, {0x0, r7}}, 0x80) 09:41:55 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:55 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='gid_map\x00') write$sndseq(0xffffffffffffffff, 0x0, 0x0) 09:41:55 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x62ce, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:55 executing program 5: clock_getres(0x0, &(0x7f0000000000)) clock_getres(0x2, &(0x7f0000000180)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000100)={0x1f, 0x81, 0x0, 0x9, 0x1ff, 0x400}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x8000000) r2 = getpgrp(0xffffffffffffffff) sched_rr_get_interval(r2, &(0x7f00000000c0)) 09:41:55 executing program 2: r0 = fork() sched_getparam(r0, &(0x7f0000000000)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:55 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='gid_map\x00') write$sndseq(0xffffffffffffffff, 0x0, 0x0) 09:41:55 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x62ce, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) accept$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r3) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000000)='-^\x00', 0x0, r4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000100)) 09:41:55 executing program 2: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x9558, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:55 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getuid() sendmsg$nl_xfrm(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=@acquire={0x298, 0x17, 0x8, 0x70bd2b, 0x25dfdbfd, {{@in=@broadcast, 0x4d2, 0xff}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x0, 0x4e22, 0x0, 0xa, 0x80, 0x80, 0x1, 0x0, 0xee01}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x30}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x4e23, 0xfe5d, 0x4e24, 0xfffd, 0xa, 0x20, 0x20, 0x6c, 0x0, 0xffffffffffffffff}, {0x7fffffff, 0x3, 0x81, 0x2, 0x2, 0x7, 0x4, 0x1}, {0xff, 0x3, 0xffffffffffffff88, 0x2}, 0x101, 0x0, 0x1, 0x0, 0x3, 0x2}, 0x3ff00000, 0x0, 0xcb, 0x70bd28}, [@sa={0xe4, 0x6, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@empty, 0x4e23, 0x8000, 0x4e20, 0x0, 0xa, 0x20, 0x20, 0x11, 0x0, r2}, {@in6=@private0, 0x4d6, 0x3c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x8, 0x1, 0x2, 0xac00000000000000, 0x1, 0x9, 0x4}, {0x9, 0x0, 0x8, 0x8acc}, {0x8, 0x80000001, 0x1}, 0x70bd2d, 0x3504, 0x2, 0x2, 0x0, 0x11}}, @srcaddr={0x14, 0xd, @in=@broadcast}, @coaddr={0x14, 0xe, @in6=@mcast2}, @replay_thresh={0x8, 0xb, 0x1}, @algo_crypt={0x48, 0x2, {{'lrw-serpent-sse2\x00'}}}, @lastused={0xc, 0xf, 0x9}, @extra_flags={0x8, 0x18, 0x8}]}, 0x298}, 0x1, 0x0, 0x0, 0x10}, 0x800) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0xf, 0x12, r0, 0x0) 09:41:55 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sco\x00') ioctl$SNAPSHOT_S2RAM(r0, 0x330b) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='net/ip6_tables_matches\x00', 0x0, r2) read$snapshot(r0, 0x0, 0x2) 09:41:56 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r0, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:56 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r1 = fork() r2 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r2, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000014c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd_index=0xa, 0x800, &(0x7f0000001480)=[{&(0x7f0000000300)="5f629a1ea9120966faefe173b31a62a613675026df1118c5cb68c4c1b6b9561b17c0e99c3f63b3f483f076b2e1ca9ff71094b8ced2b9da451e6f956fecba41147daf58e609659082c802435b5101f9500d91a4d1cce47924d8a230aa3a4120a2a88bb081eb6731b9d2e1244b60d86788ffb234ff066d0a7d023f070ee8cf8d3f09fc178b9166509c5974676254", 0x8d}, {&(0x7f00000003c0)="d32b6fb83438b1b9ed57fb91993fc82f59d34d8a5efbb7b8ab2d44d91a0af23445e36ca043016b547414df65990fc46973405fcc1ea936f888084e76f25d320d17ad566fd41598611a45f20485bc6e8340efc1fae7cee5c524e59475d5e806c0c72816431a8cf5c5ed88ed3f754f9d25d8d34999b155300203b7ccec7f70b74faa169f92ea46913cdaf5c3693ce3c2587e4dd86dd64ec751bcfc3b13d711b16f5faa91c72a63e42817a41757", 0xac}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000200)="aac5c787330b5b719c14fb", 0xb}], 0x4, 0x0, 0x1, {0x0, r6}}, 0x8) ptrace$setopts(0x4200, r1, 0x6, 0xc) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:56 executing program 2: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r1 = io_uring_setup(0x61f4, &(0x7f0000000000)={0x0, 0x73fb, 0x2, 0x3, 0x2ca, 0x0, r0}) io_uring_setup(0x5964, &(0x7f00000001c0)={0x0, 0x8d3d, 0x10, 0x2, 0x3d0, 0x0, r1}) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:56 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x62ce, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:56 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sco\x00') ioctl$SNAPSHOT_S2RAM(r0, 0x330b) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='net/ip6_tables_matches\x00', 0x0, r2) read$snapshot(r0, 0x0, 0x2) 09:41:56 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r0, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:56 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = fsmount(0xffffffffffffffff, 0x0, 0xf4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}]}, 0x44}}, 0x24000000) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r3) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stdtso_intervIl\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, r2) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x108, 0x70bd29, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x2, 0x3, 0x18, @empty, @remote, 0x707, 0x8000, 0x4, 0x9}}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', r4, 0x6, 0x4, 0x7, 0x8, 0x42, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x20, 0x710, 0x5, 0x7}}) r5 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x2, 0x0, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r5, 0x0) 09:41:56 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sco\x00') ioctl$SNAPSHOT_S2RAM(r0, 0x330b) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='net/ip6_tables_matches\x00', 0x0, r2) read$snapshot(r0, 0x0, 0x2) 09:41:56 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/ip_mr_vif\x00') read$snapshot(r1, 0x0, 0x2) 09:41:56 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r1 = fork() r2 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r2, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000014c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd_index=0xa, 0x800, &(0x7f0000001480)=[{&(0x7f0000000300)="5f629a1ea9120966faefe173b31a62a613675026df1118c5cb68c4c1b6b9561b17c0e99c3f63b3f483f076b2e1ca9ff71094b8ced2b9da451e6f956fecba41147daf58e609659082c802435b5101f9500d91a4d1cce47924d8a230aa3a4120a2a88bb081eb6731b9d2e1244b60d86788ffb234ff066d0a7d023f070ee8cf8d3f09fc178b9166509c5974676254", 0x8d}, {&(0x7f00000003c0)="d32b6fb83438b1b9ed57fb91993fc82f59d34d8a5efbb7b8ab2d44d91a0af23445e36ca043016b547414df65990fc46973405fcc1ea936f888084e76f25d320d17ad566fd41598611a45f20485bc6e8340efc1fae7cee5c524e59475d5e806c0c72816431a8cf5c5ed88ed3f754f9d25d8d34999b155300203b7ccec7f70b74faa169f92ea46913cdaf5c3693ce3c2587e4dd86dd64ec751bcfc3b13d711b16f5faa91c72a63e42817a41757", 0xac}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000200)="aac5c787330b5b719c14fb", 0xb}], 0x4, 0x0, 0x1, {0x0, r6}}, 0x8) ptrace$setopts(0x4200, r1, 0x6, 0xc) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:56 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r0, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:56 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x0, 0x11, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:56 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0x97}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:56 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/ip_mr_vif\x00') read$snapshot(r1, 0x0, 0x2) 09:41:56 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sco\x00') ioctl$SNAPSHOT_S2RAM(r0, 0x330b) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) read$snapshot(r0, 0x0, 0x2) 09:41:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:56 executing program 5: socket$inet(0x2, 0x4, 0x80000001) clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x2, 0x1c}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:56 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r1 = fork() r2 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r2, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000014c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd_index=0xa, 0x800, &(0x7f0000001480)=[{&(0x7f0000000300)="5f629a1ea9120966faefe173b31a62a613675026df1118c5cb68c4c1b6b9561b17c0e99c3f63b3f483f076b2e1ca9ff71094b8ced2b9da451e6f956fecba41147daf58e609659082c802435b5101f9500d91a4d1cce47924d8a230aa3a4120a2a88bb081eb6731b9d2e1244b60d86788ffb234ff066d0a7d023f070ee8cf8d3f09fc178b9166509c5974676254", 0x8d}, {&(0x7f00000003c0)="d32b6fb83438b1b9ed57fb91993fc82f59d34d8a5efbb7b8ab2d44d91a0af23445e36ca043016b547414df65990fc46973405fcc1ea936f888084e76f25d320d17ad566fd41598611a45f20485bc6e8340efc1fae7cee5c524e59475d5e806c0c72816431a8cf5c5ed88ed3f754f9d25d8d34999b155300203b7ccec7f70b74faa169f92ea46913cdaf5c3693ce3c2587e4dd86dd64ec751bcfc3b13d711b16f5faa91c72a63e42817a41757", 0xac}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000200)="aac5c787330b5b719c14fb", 0xb}], 0x4, 0x0, 0x1, {0x0, r6}}, 0x8) ptrace$setopts(0x4200, r1, 0x6, 0xc) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:56 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/ip_mr_vif\x00') read$snapshot(r1, 0x0, 0x2) 09:41:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:56 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x62ce, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x167}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:56 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000000c0)=0x0) sched_rr_get_interval(r3, &(0x7f0000000100)) io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) 09:41:56 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:56 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sco\x00') ioctl$SNAPSHOT_S2RAM(r0, 0x330b) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:41:56 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r1 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r1, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000014c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd_index=0xa, 0x800, &(0x7f0000001480)=[{&(0x7f0000000300)="5f629a1ea9120966faefe173b31a62a613675026df1118c5cb68c4c1b6b9561b17c0e99c3f63b3f483f076b2e1ca9ff71094b8ced2b9da451e6f956fecba41147daf58e609659082c802435b5101f9500d91a4d1cce47924d8a230aa3a4120a2a88bb081eb6731b9d2e1244b60d86788ffb234ff066d0a7d023f070ee8cf8d3f09fc178b9166509c5974676254", 0x8d}, {&(0x7f00000003c0)="d32b6fb83438b1b9ed57fb91993fc82f59d34d8a5efbb7b8ab2d44d91a0af23445e36ca043016b547414df65990fc46973405fcc1ea936f888084e76f25d320d17ad566fd41598611a45f20485bc6e8340efc1fae7cee5c524e59475d5e806c0c72816431a8cf5c5ed88ed3f754f9d25d8d34999b155300203b7ccec7f70b74faa169f92ea46913cdaf5c3693ce3c2587e4dd86dd64ec751bcfc3b13d711b16f5faa91c72a63e42817a41757", 0xac}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000200)="aac5c787330b5b719c14fb", 0xb}], 0x4, 0x0, 0x1, {0x0, r5}}, 0x8) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:56 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:56 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x0) clock_getres(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x1fd2, &(0x7f0000000040)) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) 09:41:56 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sco\x00') ioctl$SNAPSHOT_S2RAM(r0, 0x330b) read$snapshot(r0, 0x0, 0x2) 09:41:56 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x62ce, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 09:41:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:56 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r1 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r1, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:56 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:56 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sco\x00') read$snapshot(r0, 0x0, 0x2) 09:41:56 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 09:41:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:56 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x62ce, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, 0x0, &(0x7f00000001c0)) 09:41:56 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r1 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r1, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_vif\x00') read$snapshot(r0, 0x0, 0x2) 09:41:56 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') read$snapshot(r0, 0x0, 0x2) 09:41:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:56 executing program 5: clock_getres(0x0, &(0x7f0000000000)) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000280)) pselect6(0x40, &(0x7f00000000c0)={0x2, 0xc7b, 0x4, 0xe0cc, 0x8, 0x8001, 0xb6, 0xcdf4}, &(0x7f0000000100)={0x100, 0x3f, 0x6, 0x8, 0x9, 0x8, 0x0, 0x2}, &(0x7f0000000140)={0x10001, 0x1ff, 0x401, 0x2, 0x2d, 0x0, 0x1000, 0x3ff}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x400]}, 0x8}) clock_gettime(0x7, &(0x7f0000000080)) r0 = io_uring_setup(0x5378, &(0x7f00000004c0)={0x0, 0xfffffffc, 0xca9ed5781f9ea2cf, 0x1, 0x39a}) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000480)) clock_getres(0x7, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, 0xffffffffffffffff) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f00005e5000/0x1000)=nil, 0x1000, 0xbb7fea285d20b3d0, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x1, &(0x7f0000000440)) pselect6(0x40, &(0x7f00000002c0)={0x9, 0x2, 0x3, 0xfffffffffffffffa, 0x7, 0x5, 0x40c9013d, 0x100000001}, &(0x7f0000000300)={0x7, 0x3, 0x9, 0xbf23, 0x7ab82972, 0x4, 0xffff, 0xfffffffffffffe01}, &(0x7f0000000340)={0x6, 0x100000000, 0x401, 0xd426, 0x0, 0x4, 0x8, 0x2}, &(0x7f0000000380)={0x0, 0x3938700}, &(0x7f0000000400)={&(0x7f00000003c0), 0x8}) 09:41:56 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x62ce, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, 0x0, &(0x7f00000001c0)) 09:41:56 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:56 executing program 2: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:41:56 executing program 3: read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:57 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:57 executing program 5: ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) r1 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, 0x0) sched_rr_get_interval(r1, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:57 executing program 2: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:41:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:57 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x62ce, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, 0x0, &(0x7f00000001c0)) 09:41:57 executing program 3: read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:57 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:57 executing program 5: r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x3, 0x37a}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:57 executing program 2: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:41:57 executing program 3: read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:57 executing program 5: clock_getres(0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040)={0x1, 0xd36, 0x4, 0x8, 0x9, 0x200, 0x20, 0x8292}, &(0x7f0000000080)={0x1, 0x2, 0x20, 0x200, 0x100000001, 0xfffffffffffffffe, 0x2, 0xffff}, &(0x7f0000000380)={0x4, 0x5, 0x5, 0x8, 0x1, 0x5, 0x1f, 0x1000}, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000440)={&(0x7f0000000400)={[0x3]}, 0x8}) r0 = io_uring_setup(0x1fd2, &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x0) timer_create(0x5, &(0x7f0000000280)={0x0, 0x40, 0x5, @thr={&(0x7f00000000c0)="83a62310037a33bc9937d53b7c72f3e8d63514a85d2d4cc8bd4042d44805842c737343181f7993b1f73018ff71c1fc64ec992e06e99eb0c9b1f38951a09b1a112b18c341511161493c011c641805c6178496702ae66bb866bbab3b630ee41937900885305a3ed945faf2db98ac25fcc7e872277b796a226e69f620e100ae79e9ca383155e00ab9497bd97f181cffa5c70c169ea3bdcee5568b0cabbac6d7885d42f4d8fb12152fb036a0474f755628ffeec10d5b2bde8560b98e478289fb51c2a604e9be3499daa98de5297050", &(0x7f00000001c0)="392695e4534f17b3dd492909298bd91791c9bf3356b40c9c6f977d33467bfbf01eb75f76825c169254d42555b9a60c6c089b51014d2b66226a64c28d27b5063d84ec3b1b655564964fd4dca9fcee4bed42ba9fdbb64f8de7eb12322afb56da66bc61dd26274707b3438642fc59f64d84148795aff930dabef086b528100f34dacd86cfb27bb155ee3843db23bcba96c6bdb8519ebb4f7278b58fbc377299a92d63f81a94ddeef55821f211d3c3"}}, &(0x7f00000002c0)) 09:41:57 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x62ce, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), 0x0) 09:41:57 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$snapshot(r0, 0x0, 0x2) 09:41:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0xc0) 09:41:57 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_vif\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:57 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r1 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r1, 0x8000000) syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:57 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r2 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) perf_event_open(&(0x7f0000000b80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65a60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r2, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r5 = fsmount(0xffffffffffffffff, 0x1, 0x80) write$cgroup_type(r5, &(0x7f0000000100), 0x9) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4}, 0x10000) 09:41:57 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$snapshot(r0, 0x0, 0x2) 09:41:57 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_vif\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0xc0) 09:41:57 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x62ce, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), 0x0) 09:41:57 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:57 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$snapshot(r0, 0x0, 0x2) 09:41:57 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_vif\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:57 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)={0x0, 0x0, 0x2}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0xc0) 09:41:57 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x62ce, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f6000/0x4000)=nil, &(0x7f0000000080), 0x0) 09:41:57 executing program 5: clock_getres(0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x9, 0x4, 0xff, 0x101, 0x8, 0x4, 0x6}, &(0x7f0000000140)={0x7fff, 0x4, 0x80000000, 0x7, 0x0, 0xda7, 0x2, 0x40}, &(0x7f0000000180)={0x80000, 0x0, 0x80000001, 0x0, 0x5ce, 0x0, 0xbd1, 0x100000001}, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8a00, 0x0) io_uring_setup(0x1fd2, &(0x7f0000000040)={0x0, 0xd57f, 0x10}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2) r1 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, 0x0) ptrace$getenv(0x4201, r1, 0x6ec, &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r0, 0x0) 09:41:57 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') read$snapshot(r0, 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) fsmount(0xffffffffffffffff, 0x0, 0xc33fca8c358c5000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) write$rfkill(r1, &(0x7f0000000080)={0x3, 0x2, 0x3, 0x1}, 0x8) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = socket$inet(0x2, 0x5, 0xcea6) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 09:41:57 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:57 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0xc0) 09:41:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') read$snapshot(r0, 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) fsmount(0xffffffffffffffff, 0x0, 0xc33fca8c358c5000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) write$rfkill(r1, &(0x7f0000000080)={0x3, 0x2, 0x3, 0x1}, 0x8) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = socket$inet(0x2, 0x5, 0xcea6) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 09:41:57 executing program 0: fsopen(0x0, 0xb8cd83f4ea73d719) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c) r1 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r1, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r4, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x5, 0x4004, @fd_index=0x2, 0x6, &(0x7f0000000200)=[{&(0x7f0000000080)="d89949ab99", 0x5}, {&(0x7f00000000c0)="9e67b1c3922f40d3275d34df4be6a8ccf9ff6b5c0fe3c8af6e3471ee26961db0c02365b9691b45ad5f8fda4788017fda85c38c085d1e723c433898b48a51c5decf261e55d75600c902ae864e1fdbbeafa26fd309e43a1ffae6b2a3e667a650027a3d12911a53c2a53f4f31429e43a8b759eb8c32996f196a0decbd6066c3f9f636d54ec5753399e9a0c8432e55939eaa6de2ba2a819d00000bc49180b05c4fe4c5ccd472ad56b8d90b7e1555a87476739e7e84068d9582b4cc513e32de27e53bcc1fdd9d8e64ce32ba0caa8d3fae36430c1eacdd8d53e9", 0xd7}, {&(0x7f00000001c0)="3d6575722111f70bf6946bc2a892254e5ba89f3147b8b14b17c6719cae88dc47645b7bbfa177222767722480", 0x2c}], 0x3, 0x2, 0x0, {0x1}}, 0xff) 09:41:57 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) getuid() sched_rr_get_interval(0x0, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@empty, @in6=@empty}}, {{@in=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000200)=0xe8) 09:41:57 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:57 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0xc0) 09:41:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') read$snapshot(r0, 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) fsmount(0xffffffffffffffff, 0x0, 0xc33fca8c358c5000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) write$rfkill(r1, &(0x7f0000000080)={0x3, 0x2, 0x3, 0x1}, 0x8) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = socket$inet(0x2, 0x5, 0xcea6) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 09:41:57 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = fork() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x1b1001) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000180)={0x9, 0x1000, 0x7, {0x8, 0x7}, 0x6, 0x400}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) waitid(0x2, r0, &(0x7f00000000c0), 0x8, 0x0) r2 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) 09:41:57 executing program 0: fsopen(0x0, 0xb8cd83f4ea73d719) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c) r1 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r1, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r4, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x5, 0x4004, @fd_index=0x2, 0x6, &(0x7f0000000200)=[{&(0x7f0000000080)="d89949ab99", 0x5}, {&(0x7f00000000c0)="9e67b1c3922f40d3275d34df4be6a8ccf9ff6b5c0fe3c8af6e3471ee26961db0c02365b9691b45ad5f8fda4788017fda85c38c085d1e723c433898b48a51c5decf261e55d75600c902ae864e1fdbbeafa26fd309e43a1ffae6b2a3e667a650027a3d12911a53c2a53f4f31429e43a8b759eb8c32996f196a0decbd6066c3f9f636d54ec5753399e9a0c8432e55939eaa6de2ba2a819d00000bc49180b05c4fe4c5ccd472ad56b8d90b7e1555a87476739e7e84068d9582b4cc513e32de27e53bcc1fdd9d8e64ce32ba0caa8d3fae36430c1eacdd8d53e9", 0xd7}, {&(0x7f00000001c0)="3d6575722111f70bf6946bc2a892254e5ba89f3147b8b14b17c6719cae88dc47645b7bbfa177222767722480", 0x2c}], 0x3, 0x2, 0x0, {0x1}}, 0xff) 09:41:57 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:57 executing program 3: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() r1 = getpgrp(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = fork() r4 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) fork() r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r4, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r7, 0x8000000) syz_io_uring_submit(r9, r8, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x6, 0x1, &(0x7f0000000380)="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", 0x2, 0x0, 0x1, {0x1}}, 0x9) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ptrace$setopts(0x4206, r3, 0x5, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ptrace$setopts(0x4206, r1, 0x7, 0x100005) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0xc0) 09:41:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') read$snapshot(r0, 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) fsmount(0xffffffffffffffff, 0x0, 0xc33fca8c358c5000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) write$rfkill(r1, &(0x7f0000000080)={0x3, 0x2, 0x3, 0x1}, 0x8) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = socket$inet(0x2, 0x5, 0xcea6) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) 09:41:58 executing program 5: clock_getres(0x2, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000000c0)={0x1ff, 0x3, 0x7fff, 0xc34, 0xfffffffffffffffb, 0x7fffffff, 0x0, 0x6}, &(0x7f0000000100)={0x3, 0x5ff8, 0x7f, 0x1, 0x5b, 0x1f, 0x3, 0x8}, &(0x7f0000000140)={0x1, 0x0, 0x33d, 0x4, 0x7, 0x1bb980000000000, 0x4, 0x8}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x2]}, 0x8}) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e3000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x0) 09:41:58 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0xc0) 09:41:58 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() r1 = getpgrp(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = fork() r4 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) fork() r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r4, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r7, 0x8000000) syz_io_uring_submit(r9, r8, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x6, 0x1, &(0x7f0000000380)="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", 0x2, 0x0, 0x1, {0x1}}, 0x9) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ptrace$setopts(0x4206, r3, 0x5, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ptrace$setopts(0x4206, r1, 0x7, 0x100005) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') read$snapshot(r0, 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) fsmount(0xffffffffffffffff, 0x0, 0xc33fca8c358c5000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) write$rfkill(r1, &(0x7f0000000080)={0x3, 0x2, 0x3, 0x1}, 0x8) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) socket$inet(0x2, 0x5, 0xcea6) 09:41:58 executing program 3: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() r1 = getpgrp(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = fork() r4 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) fork() r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r4, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r7, 0x8000000) syz_io_uring_submit(r9, r8, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x6, 0x1, &(0x7f0000000380)="d752a77353fb91368d56a46bc68af4eca3916cfbacdb45dd35fee8bb5fde4b370da480ca9d197a189857506d9efe7bb08b4735a9b3532aa4a85a50911bb168c862991b251b89012055f04c3a36007b280b296e9fdecedcb61da76331d65f82a887f4861701021e4cbb4d84f1cebedab0f56f2798da08d5e3370108fa7d60e1cfbb136bb9902de45b2232bf05840ffe360847f20f77f423698b88d261c0a86e50bcac67454cf5b429f867fe5a50c270252d7ddf19deea926dfb29febd7cc89719c0a6032a76763b9eeb7b3dc6948a3a03f73a1bf34764010d8825acd4c6454572d76d2d9876a848519bc69e6d8f35551d774bbf3d34d604a3b77289", 0x2, 0x0, 0x1, {0x1}}, 0x9) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ptrace$setopts(0x4206, r3, 0x5, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ptrace$setopts(0x4206, r1, 0x7, 0x100005) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0xc0) 09:41:58 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x78e0, &(0x7f0000000040)={0x0, 0x7a5f}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) 09:41:58 executing program 1: fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') read$snapshot(r0, 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) fsmount(0xffffffffffffffff, 0x0, 0xc33fca8c358c5000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) write$rfkill(r1, &(0x7f0000000080)={0x3, 0x2, 0x3, 0x1}, 0x8) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) 09:41:58 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x6598, &(0x7f0000000040)={0x0, 0x757c, 0x20, 0xfffffffe}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:58 executing program 3: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() r1 = getpgrp(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = fork() r4 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) fork() r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r4, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r7, 0x8000000) syz_io_uring_submit(r9, r8, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x6, 0x1, &(0x7f0000000380)="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", 0x2, 0x0, 0x1, {0x1}}, 0x9) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ptrace$setopts(0x4206, r3, 0x5, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ptrace$setopts(0x4206, r1, 0x7, 0x100005) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0xc0) 09:41:58 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() r1 = getpgrp(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = fork() r4 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) fork() r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r4, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r7, 0x8000000) syz_io_uring_submit(r9, r8, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x6, 0x1, &(0x7f0000000380)="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", 0x2, 0x0, 0x1, {0x1}}, 0x9) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ptrace$setopts(0x4206, r3, 0x5, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ptrace$setopts(0x4206, r1, 0x7, 0x100005) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:58 executing program 5: clock_getres(0x0, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4007, @fd_index=0x5, 0x3, 0xad2d, 0x0, 0x10, 0x1, {0x1}}, 0x5) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4959) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x450080, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) 09:41:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') read$snapshot(r0, 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) fsmount(0xffffffffffffffff, 0x0, 0xc33fca8c358c5000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) write$rfkill(r1, &(0x7f0000000080)={0x3, 0x2, 0x3, 0x1}, 0x8) 09:41:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:58 executing program 1: fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') read$snapshot(r0, 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) fsmount(0xffffffffffffffff, 0x0, 0xc33fca8c358c5000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 09:41:58 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:58 executing program 3: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() r1 = getpgrp(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = fork() r4 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) fork() r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r4, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r7, 0x8000000) syz_io_uring_submit(r9, r8, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x6, 0x1, &(0x7f0000000380)="d752a77353fb91368d56a46bc68af4eca3916cfbacdb45dd35fee8bb5fde4b370da480ca9d197a189857506d9efe7bb08b4735a9b3532aa4a85a50911bb168c862991b251b89012055f04c3a36007b280b296e9fdecedcb61da76331d65f82a887f4861701021e4cbb4d84f1cebedab0f56f2798da08d5e3370108fa7d60e1cfbb136bb9902de45b2232bf05840ffe360847f20f77f423698b88d261c0a86e50bcac67454cf5b429f867fe5a50c270252d7ddf19deea926dfb29febd7cc89719c0a6032a76763b9eeb7b3dc6948a3a03f73a1bf34764010d8825acd4c6454572d76d2d9876a848519bc69e6d8f35551d774bbf3d34d604a3b77289", 0x2, 0x0, 0x1, {0x1}}, 0x9) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ptrace$setopts(0x4206, r3, 0x5, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ptrace$setopts(0x4206, r1, 0x7, 0x100005) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:58 executing program 1: fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:58 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() r1 = getpgrp(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = fork() r4 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) fork() r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r4, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r7, 0x8000000) syz_io_uring_submit(r9, r8, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x6, 0x1, &(0x7f0000000380)="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", 0x2, 0x0, 0x1, {0x1}}, 0x9) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ptrace$setopts(0x4206, r3, 0x5, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ptrace$setopts(0x4206, r1, 0x7, 0x100005) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0xb03, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:58 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x235}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') read$snapshot(r0, 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) fsmount(0xffffffffffffffff, 0x0, 0xc33fca8c358c5000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 09:41:58 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') read$snapshot(r0, 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) fsmount(0xffffffffffffffff, 0x0, 0xc33fca8c358c5000) 09:41:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') read$snapshot(r0, 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) 09:41:58 executing program 5: clock_gettime(0x1, &(0x7f00000000c0)) clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) r1 = gettid() sched_rr_get_interval(r1, &(0x7f0000000100)) sched_getscheduler(r1) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x30, r0, 0x0) syz_io_uring_complete(r2) 09:41:58 executing program 3: r0 = fork() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) r1 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='cpuset\x00') timer_gettime(0x0, &(0x7f0000000200)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) tgkill(r1, r3, 0x18) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) timer_delete(0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = fsopen(&(0x7f0000000240)='sysfs\x00', 0x1) r6 = syz_open_procfs(r1, &(0x7f0000000180)='environ\x00') fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000100)='lb_statsVesh_tnt\"rval\x00'/37, 0x0, r5) read$snapshot(0xffffffffffffffff, 0x0, 0x0) 09:41:58 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() r1 = getpgrp(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = fork() r4 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) fork() r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r4, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r7, 0x8000000) syz_io_uring_submit(r9, r8, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x6, 0x1, &(0x7f0000000380)="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", 0x2, 0x0, 0x1, {0x1}}, 0x9) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ptrace$setopts(0x4206, r3, 0x5, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ptrace$setopts(0x4206, r1, 0x7, 0x100005) 09:41:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') read$snapshot(r0, 0x0, 0x2) 09:41:58 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:58 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:59 executing program 2: read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:59 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() getpgrp(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = fork() r3 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) fork() r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r3, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r6 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r6, 0x8000000) syz_io_uring_submit(r8, r7, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x6, 0x1, &(0x7f0000000380)="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", 0x2, 0x0, 0x1, {0x1}}, 0x9) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r2}, 0x0) ptrace$setopts(0x4206, r2, 0x5, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) 09:41:59 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r1, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x208f, &(0x7f0000000100)={0x0, 0xe0d2, 0x4, 0x0, 0x1b8}, &(0x7f00005e4000/0x2000)=nil, &(0x7f00005e5000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r5 = syz_io_uring_setup(0x30b2, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x7fff) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) sched_rr_get_interval(0x0, &(0x7f00000000c0)) 09:41:59 executing program 2: read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0xb03, 0x0, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:59 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:59 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:59 executing program 2: read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:59 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="80008000000000400000000943c0008c0068000000069078ffffffffac1e0001940401004424ece1e0000001000280000a010102000001ff7f00000100000080ac14141200000009890b360a010101ffffffff9404030044241a537f00000100000400ffffffff00000081ac1e000100000001ac1414aa000002d20707b90a010101861400000002010a8a9458bc15afafc7060f5cdd2d60"]}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000041}, 0x41) r2 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) syz_io_uring_setup(0x2328, &(0x7f0000000400)={0x0, 0xc2ed, 0x1, 0x3, 0xbd}, &(0x7f00005e2000/0x2000)=nil, &(0x7f00005e5000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000480)) syz_io_uring_submit(r3, 0x0, &(0x7f00000004c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0x1) 09:41:59 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0xb03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x68}}, 0xc0) 09:41:59 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() getpgrp(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = fork() r3 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) fork() r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r3, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r6 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r6, 0x8000000) syz_io_uring_submit(r8, r7, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x6, 0x1, &(0x7f0000000380)="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", 0x2, 0x0, 0x1, {0x1}}, 0x9) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r2}, 0x0) ptrace$setopts(0x4206, r2, 0x5, 0x8) 09:41:59 executing program 1: r0 = syz_io_uring_setup(0x7c00, 0x0, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:59 executing program 2: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:41:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0xb03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x60}}, 0xc0) 09:41:59 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) accept$unix(r0, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) r1 = io_uring_setup(0x1fd2, &(0x7f0000000040)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f00005e4000/0x3000)=nil, 0x3000, 0x0, 0x40010, r1, 0x8000000) syz_io_uring_setup(0x5cd3, &(0x7f0000000240)={0x0, 0x2057, 0x10, 0x1, 0x1aa, 0x0, r1}, &(0x7f00005e6000/0x4000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=0x0) r4 = syz_io_uring_setup(0x30b2, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x4, 0x0, 0x0, 0x2, 0x1, 0x1, {0x0, r5, r1}}, 0xf10) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) 09:41:59 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:59 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() getpgrp(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = fork() r3 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) fork() r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r3, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r6 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r6, 0x8000000) syz_io_uring_submit(r8, r7, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x6, 0x1, &(0x7f0000000380)="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", 0x2, 0x0, 0x1, {0x1}}, 0x9) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r2}, 0x0) 09:41:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0xb03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x58}}, 0xc0) 09:41:59 executing program 1: r0 = syz_io_uring_setup(0x7c00, 0x0, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:59 executing program 2: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:41:59 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:59 executing program 1: r0 = syz_io_uring_setup(0x7c00, 0x0, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:59 executing program 5: clock_getres(0x0, &(0x7f0000000000)) io_uring_setup(0x1fd5, &(0x7f0000000040)={0x0, 0xadae, 0x0, 0x0, 0x100000}) sched_rr_get_interval(0x0, &(0x7f00000000c0)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_io_uring_setup(0x436d, &(0x7f0000000140)={0x0, 0xee8e, 0x8, 0x2, 0x309, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 09:41:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0xb03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x50}}, 0xc0) 09:41:59 executing program 2: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:41:59 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:59 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x61e7, &(0x7f0000000040)={0x0, 0x44d1, 0x4}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0xb03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}]}, 0x48}}, 0xc0) 09:41:59 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() getpgrp(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) fork() r2 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) fork() r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r2, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r5, 0x8000000) syz_io_uring_submit(r7, r6, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x6, 0x1, &(0x7f0000000380)="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", 0x2, 0x0, 0x1, {0x1}}, 0x9) 09:41:59 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:59 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:59 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:59 executing program 5: clock_getres(0x0, &(0x7f0000000000)) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000180)={0x7ff, 0x942, 0x3, 0x0, 0x4, 0x0, 0x80, 0x400}, &(0x7f00000001c0)={0x100, 0x9, 0x800, 0x5, 0x5, 0xffffffffffff8001, 0x400, 0x4}, &(0x7f0000000200)={0x2, 0x40, 0x80, 0x4, 0x4, 0x8, 0x3ff, 0x2}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x10000]}, 0x8}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:41:59 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r1, 0xb03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x40}}, 0xc0) 09:41:59 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:59 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() getpgrp(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) fork() r2 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) fork() r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r2, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r5, 0x8000000) syz_io_uring_submit(r7, r6, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 09:41:59 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:41:59 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f00005d7000/0xe000)=nil, 0xe000, 0x2, 0x110, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x172b, &(0x7f00000000c0)={0x0, 0xdd49, 0x8, 0x2, 0x2a4}, &(0x7f00005d9000/0x4000)=nil, &(0x7f00005d7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) r3 = request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='\\#&^][}+\x00', 0xfffffffffffffff8) keyctl$setperm(0x5, r3, 0x2013500) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xd11) 09:41:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0xb03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x38}}, 0xc0) 09:41:59 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:41:59 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:00 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1ff2, &(0x7f00000000c0)={0x0, 0x2ba6, 0x0, 0xfffffffb, 0xfffffffe}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clock_gettime(0x2, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000080)={0xcd, 0x22, 0x1, 0x6, 0x0, 0x40, 0x5d, 0xfffffffffffffffe}, &(0x7f0000000140)={0xadd, 0xb0, 0x3ff, 0x6, 0x7, 0x0, 0x2, 0xfffffffffffffffb}, &(0x7f0000000180)={0x6b, 0x26, 0x0, 0xc62a, 0x1f, 0x7b7, 0x40, 0x400}, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000240)={&(0x7f0000000200)={[0x8]}, 0x8}) 09:42:00 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0xb03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x30}}, 0xc0) 09:42:00 executing program 3: fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:00 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:00 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) io_uring_setup(0x43dd, &(0x7f00000000c0)={0x0, 0x1e1f, 0x21, 0x3, 0x342}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:42:00 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() getpgrp(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) fork() r2 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) fork() r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r2, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r5, 0x8000000) 09:42:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0xb03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'oom_score_adj\x00'}]}, 0x28}}, 0xc0) 09:42:00 executing program 2: r0 = fork() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) r1 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='cpuset\x00') timer_gettime(0x0, &(0x7f0000000200)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) tgkill(r1, r3, 0x18) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) timer_delete(0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = fsopen(&(0x7f0000000240)='sysfs\x00', 0x1) r6 = syz_open_procfs(r1, &(0x7f0000000180)='environ\x00') fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000100)='lb_statsVesh_tnt\"rval\x00'/37, 0x0, r5) read$snapshot(0xffffffffffffffff, 0x0, 0x0) 09:42:00 executing program 3: fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:00 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0xb03}, 0x14}}, 0xc0) 09:42:00 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) syz_io_uring_setup(0x5755, &(0x7f00000000c0)={0x0, 0x7412, 0x0, 0x3, 0x239, 0x0, r0}, &(0x7f00005e5000/0x1000)=nil, &(0x7f00005e2000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)) mmap$IORING_OFF_CQ_RING(&(0x7f00005e4000/0x4000)=nil, 0x4000, 0x3, 0x30, r0, 0x8000000) syz_io_uring_complete(r1) 09:42:00 executing program 3: fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:00 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') read$snapshot(r0, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) 09:42:00 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() getpgrp(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) fork() r2 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) fork() r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r2, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:00 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0xb03}, 0x14}}, 0x0) 09:42:00 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x3504, 0x100000001, 0xf2b1, 0x1, 0x100, 0x5, 0x6}, &(0x7f0000000100)={0x3ff, 0x101, 0x2, 0x7a, 0x7ff, 0xe5d, 0x6, 0x7}, &(0x7f0000000140)={0x0, 0x1000, 0xfffffffffffffff7, 0xffffffff, 0x2, 0x4, 0x3, 0x2}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x100000001]}, 0x8}) 09:42:00 executing program 3: r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:00 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') read$snapshot(r0, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) 09:42:00 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() getpgrp(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) fork() r2 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) fork() r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r2, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 09:42:00 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, 0x0, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:00 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') read$snapshot(r0, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) 09:42:00 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r0 = fork() r1 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, 0x0) ptrace$getsig(0x4202, r1, 0x9, &(0x7f0000000040)) getpgid(r0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:00 executing program 3: r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:00 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x33f5, &(0x7f00000000c0)={0x0, 0x5cb9, 0x8, 0x1, 0x190}, &(0x7f00005e3000/0x4000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) r3 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r3}, 0x0) sched_rr_get_interval(r3, &(0x7f00000001c0)) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r4, 0x330f, 0x9) r5 = getpid() ptrace(0x4207, r5) 09:42:00 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') read$snapshot(r0, 0x0, 0x2) 09:42:00 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, 0x0, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:00 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() getpgrp(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) fork() r2 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) fork() mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r2, 0x8000000) 09:42:00 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r0 = fork() r1 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, 0x0) ptrace$getsig(0x4202, r1, 0x9, &(0x7f0000000040)) getpgid(r0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:00 executing program 3: r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:00 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:00 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0x38, 0xe7, 0x9, 0x2, @remote, @private0, 0x7800, 0x7800, 0x6, 0x42dd}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="34100e02", @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf25040000000800020006000000080003000000000008000200070000000800028b1355aeeb"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x10) clock_getres(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x7954, &(0x7f0000000300)={0x0, 0xfffffffc, 0x0, 0x0, 0x15d}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) 09:42:00 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:00 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, 0x0, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:00 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:00 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() getpgrp(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) fork() 09:42:00 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r0 = fork() r1 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, 0x0) ptrace$getsig(0x4202, r1, 0x9, &(0x7f0000000040)) getpgid(r0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:00 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:01 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x332d, &(0x7f0000000280), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r1, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_setup(0x30b2, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000100)) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r4, 0x9, 0x0, 0x8, 0x3, 0x1, {0x0, r6}}, 0x2) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x7) 09:42:01 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:01 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:01 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() getpgrp(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:01 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:01 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') read$snapshot(r0, 0x0, 0x2) 09:42:01 executing program 5: clock_getres(0x0, &(0x7f0000000000)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) r0 = io_uring_setup(0x687b, &(0x7f0000000140)={0x0, 0x0, 0x10, 0x0, 0xfffffffe}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:42:01 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) r0 = fork() r1 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, 0x0) ptrace$getsig(0x4202, r1, 0x9, &(0x7f0000000040)) getpgid(r0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:01 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xb89a, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:01 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() getpgrp(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:01 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') read$snapshot(r0, 0x0, 0x2) 09:42:01 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000000100)) r1 = io_uring_setup(0x1fc2, &(0x7f0000000040)={0x0, 0x0, 0x1}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x11c, &(0x7f0000000140)=0x1, 0x0, 0x4) clock_gettime(0x4, &(0x7f00000000c0)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f00005e1000/0x2000)=nil, 0x2000, 0x2, 0x80010, r1, 0x0) syz_io_uring_complete(r3) 09:42:01 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0xb89, 0x0, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:01 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\b\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000fedbdf2506000000050001000000000006000b000f00000008000c0003000000080008000a01010014000500fc00000000000000000000000000000014000500fc010000000000000000000000000000080001002b28260008000700e000000106000b0021000000080008007f000001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c040}, 0x24000) clock_getres(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x1fd2, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000000c0)={0x20, 0x8000, 0x0, {0xffffffc0, 0x80}, 0x89ee, 0x8001}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e5000/0x1000)=nil, 0x1000, 0x0, 0x2b012, r1, 0x0) pselect6(0x40, &(0x7f0000000340)={0x7f, 0x7, 0x7bb5, 0x1, 0x7fffffff, 0xffff, 0x4, 0x8}, &(0x7f0000000380)={0x3, 0x3, 0x7, 0x4, 0x0, 0x6, 0x5, 0x7}, &(0x7f00000003c0)={0x52b8a577, 0x16d5, 0x860, 0x811, 0xfffffffffffffe01, 0x100, 0xb7, 0x3}, &(0x7f0000000400), &(0x7f0000000480)={&(0x7f0000000440)={[0x7ce3]}, 0x8}) r2 = add_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$negate(0xd, r2, 0x6, 0xfffffffffffffff9) 09:42:01 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) ptrace$getsig(0x4202, r0, 0x9, &(0x7f0000000040)) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:01 executing program 2: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:42:01 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0xb89, 0x0, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:01 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:01 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() getpgrp(r0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:01 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:01 executing program 2: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:42:01 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) r1 = io_uring_setup(0x18cd, &(0x7f00000000c0)={0x0, 0x83b6, 0x2, 0x3, 0x1e8, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f00005e3000/0x2000)=nil, 0x2000, 0xa, 0x11, r1, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:42:01 executing program 2: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:42:01 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0xb89, 0x0, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:01 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x30b2, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) mmap$IORING_OFF_CQ_RING(&(0x7f00005e4000/0x3000)=nil, 0x3000, 0x1000000, 0x100010, r0, 0x8000000) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r3, 0x0, 0x0, 0x1000, 0x0, 0x0, {0x0, r2, r0}}, 0xffffff81) 09:42:01 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:01 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:01 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:01 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:01 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() getpgrp(r0) syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:01 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:01 executing program 5: clock_getres(0x0, &(0x7f0000000000)) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000050}, 0xc0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xffffffff, 0x0, 0x3, 0x5, 0x8, 0x8}, &(0x7f0000000100)={0x7, 0x7f, 0x5, 0x3, 0xa0a, 0x800, 0x100000001, 0x8}, &(0x7f0000000140)={0x0, 0x7, 0x9, 0x2800000000000000, 0x7, 0x1, 0xfffffffffffffff7, 0x2}, &(0x7f00000001c0)={r0, r1+10000000}, &(0x7f0000000240)={&(0x7f0000000200)={[0x3]}, 0x8}) r2 = io_uring_setup(0x1fd2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) 09:42:01 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:01 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:01 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:01 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:01 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:01 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:02 executing program 2: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() r0 = fork() getpgrp(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) fork() r2 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) fork() mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r2, 0x8000000) 09:42:02 executing program 5: clock_getres(0x5, &(0x7f00000000c0)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)={0x0, 0x2a874, 0x0, 0x0, 0x3}) r1 = getpid() sched_rr_get_interval(r1, &(0x7f0000001440)) getgid() r2 = mmap$IORING_OFF_SQ_RING(&(0x7f00005e3000/0x1000)=nil, 0x1000, 0x0, 0x110, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r3, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002480)={&(0x7f0000000200)=@tipc=@id, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/178, 0xb2}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000100)=""/151, 0x97}], 0x3, &(0x7f0000001480)=""/4096, 0x1000}, 0x0, 0x0, 0x0, {0x3, r6}}, 0x4b) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) 09:42:02 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xce, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:02 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:02 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:02 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:02 executing program 5: arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7) clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:42:02 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:02 executing program 2: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) io_uring_setup(0x63ba, &(0x7f0000000000)={0x0, 0xc29b, 0x1, 0x1, 0xb6, 0x0, r0}) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) fork() 09:42:02 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:02 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:02 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:02 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x300}) clock_gettime(0x3, &(0x7f00000000c0)) clock_gettime(0x4, &(0x7f0000000100)) pselect6(0x40, &(0x7f0000000140)={0x2, 0x9, 0x5ba0, 0x5, 0xffffffffffffff30, 0x9, 0x0, 0x8}, &(0x7f0000000180)={0x100000000, 0x5, 0x10001, 0x3f, 0x46, 0x2, 0xe513, 0x2}, &(0x7f00000001c0)={0x3, 0x7, 0x3, 0x730, 0x0, 0x7ff, 0x0, 0x1000}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x8]}, 0x8}) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:42:02 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:02 executing program 2: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) io_uring_setup(0x63ba, &(0x7f0000000000)={0x0, 0xc29b, 0x1, 0x1, 0xb6, 0x0, r0}) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) fork() 09:42:02 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:02 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:02 executing program 5: clock_getres(0x0, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000140)) r0 = io_uring_setup(0x1fd6, &(0x7f0000000040)={0x0, 0xea3a, 0x20}) r1 = fsmount(0xffffffffffffffff, 0x1, 0x80) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000000c0)='\x00', &(0x7f0000000100)='./file0\x00', r2) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:42:02 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:02 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:02 executing program 2: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) io_uring_setup(0x63ba, &(0x7f0000000000)={0x0, 0xc29b, 0x1, 0x1, 0xb6, 0x0, r0}) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) fork() 09:42:02 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:02 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:02 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x2}) r1 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x81, 0x5, 0x80, 0x3f, 0x0, 0x3, 0x60002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x4802, 0x5, 0x3, 0x0, 0xffffffff00000001, 0x9, 0xfffd, 0x0, 0x9, 0x0, 0x5fa}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1) mmap$perf(&(0x7f00005e4000/0x3000)=nil, 0x3000, 0x0, 0x20010, r1, 0x5efe) r2 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, @thr={&(0x7f00000001c0)="603c94ebae5f709574670adbecb25d150dbd4e79ff5f3a3ecc78d5bae6fb994238686d5f3df16ddffb27a3d3e749c57ee2e321429e58ef880f1bde63db5113df98477a9de5628a55252277684ac3ff01af119ac84a2cd79896065277e16074e5c51bfb0a9c0bfad0fe53b357d621dbdf61bde2a5bcf5435c4fd233ac9b807d4130992ba68372a25369b80c02d50ef0398b363952461409f7b4f7106980318948e6cb6ad818d3e0a512789391fa048d9a1e70142ac494", &(0x7f0000000280)="8cd1369181a4d5e452d63457e63122cb46f2c22bbc6656e288731d8bf5914ed9183416187c805da851e40f01fe3e73bad74ca1a68f232b39a662"}}, 0x0) sched_rr_get_interval(r2, &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:42:02 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:02 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:02 executing program 2: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) io_uring_setup(0x63ba, &(0x7f0000000000)={0x0, 0xc29b, 0x1, 0x1, 0xb6, 0x0, r0}) fork() fork() 09:42:02 executing program 4: fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:02 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:02 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:02 executing program 5: clock_getres(0x0, &(0x7f0000000000)) syz_io_uring_setup(0x4bcc, &(0x7f00000000c0)={0x0, 0x4cfc, 0x24, 0x0, 0x99}, &(0x7f00005e2000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r1 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x80) fsmount(r3, 0x1, 0x3) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r1, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r0, r2, &(0x7f00000011c0)=@IORING_OP_WRITE={0x17, 0x2, 0x4007, @fd_index=0x2, 0x0, &(0x7f00000001c0)="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", 0x1000, 0x2}, 0x80000000) r5 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) 09:42:02 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:02 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:02 executing program 4: fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:02 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:02 executing program 2: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) io_uring_setup(0x63ba, &(0x7f0000000000)={0x0, 0xc29b, 0x1, 0x1, 0xb6, 0x0, r0}) fork() fork() 09:42:02 executing program 5: clock_getres(0x0, &(0x7f0000000000)) io_uring_setup(0x1fd2, &(0x7f0000000040)={0x0, 0xcf07}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/softnet_stat\x00') getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x200000d, 0x80010, r1, 0x0) 09:42:02 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:02 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:02 executing program 2: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) io_uring_setup(0x63ba, &(0x7f0000000000)={0x0, 0xc29b, 0x1, 0x1, 0xb6, 0x0, r0}) fork() fork() 09:42:02 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) r1 = io_uring_setup(0x7b65, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) 09:42:02 executing program 4: fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:02 executing program 0: fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:03 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x5736, 0x0, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:03 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:03 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:03 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = syz_io_uring_setup(0xb4, &(0x7f00000000c0)={0x0, 0xad02, 0x8, 0x0, 0xa7}, &(0x7f00005dd000/0xf000)=nil, &(0x7f00005e8000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x1fd2, &(0x7f0000000040)) prctl$PR_SET_FP_MODE(0x2d, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) 09:42:03 executing program 0: fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:03 executing program 2: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) io_uring_setup(0x63ba, &(0x7f0000000000)={0x0, 0xc29b, 0x1, 0x1, 0xb6, 0x0, r0}) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) fork() 09:42:03 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x5736, 0x0, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:03 executing program 0: fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:03 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e5000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 09:42:03 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, 0x0, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:03 executing program 2: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) io_uring_setup(0x63ba, &(0x7f0000000000)={0x0, 0xc29b, 0x1, 0x1, 0xb6, 0x0, r0}) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) fork() 09:42:03 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:03 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x5736, 0x0, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:03 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x61e3, &(0x7f0000000040)={0x0, 0x4a4, 0x10, 0x4004, 0x376}) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x2bc, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff00000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xef}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x749a00e}]}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc50}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfa86}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x671dd350}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @loopback, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @private0, 0x4}}}}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb69}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4}, 0x40000) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast1, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) 09:42:03 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:03 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:03 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, 0x0, &(0x7f00000000c0)) 09:42:03 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, 0x0, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:03 executing program 4: syz_io_uring_setup(0x7caa, 0x0, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:03 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, 0x0, &(0x7f00000000c0)) 09:42:03 executing program 5: clock_getres(0x0, &(0x7f0000000000)) r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) sched_rr_get_interval(r0, &(0x7f00000000c0)) r1 = io_uring_setup(0x1fd2, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) 09:42:03 executing program 2: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) io_uring_setup(0x63ba, &(0x7f0000000000)={0x0, 0xc29b, 0x1, 0x1, 0xb6, 0x0, r0}) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) fork() 09:42:03 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:03 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, 0x0, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:03 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, 0x0, &(0x7f00000000c0)) 09:42:03 executing program 2: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) fork() 09:42:03 executing program 5: clock_getres(0x7, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000180)='\x00', &(0x7f00000001c0)="990570608173dc2f24a1f9df03fdb5229a4dec1646f88772528117c5ee7906099b6aa212a517936d1b5b91321ecf9a74716eded48854e5628f590a684563ceaa08cc2ca5c604e445b2ebd2fa0acd76978cdd57c683325586f593df4d046d0fb9a2eea3435e468676b70e29d2bf2ace0f11517aa87084caf0ef93b42ae0855236e973331c990bd101827386dabddd3e3ff705237b7d07d0f54678ddc2006605ecc26801ba23e04cce8827adb36c789b698008d4c17c58e6c354550f694ad169f7f57b217093e0eeef42c7a6b58401581cd55e8fdd566f29581d76ff158943c1cc65b3105f7639b40447a6b22f0420235f1617cf06e23332a461", 0xf9) prctl$PR_GET_DUMPABLE(0x3) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x0, 0x4000000}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_CAPBSET_READ(0x17, 0x5) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000100), &(0x7f0000000140)=0x4) clock_gettime(0x2, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:42:03 executing program 4: syz_io_uring_setup(0x7caa, 0x0, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:03 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:03 executing program 5: clock_getres(0x0, &(0x7f0000000000)) keyctl$link(0x8, 0x0, 0xfffffffffffffff9) r0 = io_uring_setup(0x1fd2, &(0x7f0000000040)) keyctl$setperm(0x5, 0x0, 0x100800) mmap$IORING_OFF_SQ_RING(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 09:42:03 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) 09:42:03 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, 0x0, &(0x7f00000000c0)) 09:42:03 executing program 0: syz_io_uring_setup(0x7c00, 0x0, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:03 executing program 2: fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) fork() 09:42:03 executing program 4: syz_io_uring_setup(0x7caa, 0x0, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:03 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:03 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) 09:42:03 executing program 2: fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) fork() 09:42:03 executing program 0: syz_io_uring_setup(0x7c00, 0x0, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:03 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, 0x0, &(0x7f00000000c0)) 09:42:04 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) 09:42:04 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:04 executing program 2: fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) fork() 09:42:04 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) 09:42:04 executing program 0: syz_io_uring_setup(0x7c00, 0x0, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:04 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:04 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, 0x0, &(0x7f00000000c0)) 09:42:04 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) 09:42:04 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) fork() 09:42:04 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) 09:42:04 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:04 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) 09:42:04 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:04 executing program 3: read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:04 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) fork() 09:42:04 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:04 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) 09:42:04 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:04 executing program 3: read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:04 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:04 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) fork() 09:42:04 executing program 3: read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:04 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:04 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) 09:42:04 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:04 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:04 executing program 2: syz_io_uring_setup(0x7c00, 0x0, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) fork() 09:42:04 executing program 3: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:42:04 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:04 executing program 3: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:42:04 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:04 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x5736, 0x0, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:04 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:04 executing program 3: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:42:04 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r1, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x86a, &(0x7f0000000000)={0x0, 0x5268, 0x10, 0x2, 0x223, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r6) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x7, 0x6, 0x0, 0xfffffffa, 0x4, 0x0, {0x0, r5}}, 0x6) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r5) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r7) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="73797a746e6c3000000000000000e57e47aded0000", @ANYRES32=0x0, @ANYBLOB="00108048000000060000003f421600880066000001299078ac14143de000000194040100890baeac141412e000000144140d310a0101020000000764010102000100018651ffffffff020b3e23248df85421ed9e05020610d04cdef27de6e401e6cdecfaebfa000e9e0200713bc41f0c5ac9f6b001114f9ddb1f9064451c0b19172271c7f4010f45ab33501dc2178846c9325309"]}) mmap$IORING_OFF_CQ_RING(&(0x7f00005e5000/0x2000)=nil, 0x2000, 0x2000003, 0x40010, r7, 0x8000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x1, 0x3ff, {{0x20, 0x4, 0x3, 0x0, 0x80, 0x65, 0x0, 0x7f, 0x4, 0x0, @local, @multicast1, {[@lsrr={0x83, 0x7, 0x75, [@multicast1]}, @rr={0x7, 0x7, 0x18, [@broadcast]}, @rr={0x7, 0x27, 0x67, [@dev={0xac, 0x14, 0x14, 0x22}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast1, @local, @remote, @broadcast]}, @timestamp_prespec={0x44, 0x2c, 0xc8, 0x3, 0xf, [{@remote}, {@private=0xa010102, 0x5}, {@multicast2, 0xb3}, {@empty, 0x5}, {@local, 0x7fff}]}, @generic={0x44, 0x7, "d745f8bc6f"}, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x90, r8, 0x138, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x81}, 0x10) 09:42:04 executing program 2: syz_io_uring_setup(0x7c00, 0x0, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) fork() 09:42:04 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:05 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x5736, 0x0, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:05 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:05 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:05 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:05 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r1, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x86a, &(0x7f0000000000)={0x0, 0x5268, 0x10, 0x2, 0x223, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r6) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x7, 0x6, 0x0, 0xfffffffa, 0x4, 0x0, {0x0, r5}}, 0x6) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r5) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r7) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="73797a746e6c3000000000000000e57e47aded0000", @ANYRES32=0x0, @ANYBLOB="00108048000000060000003f421600880066000001299078ac14143de000000194040100890baeac141412e000000144140d310a0101020000000764010102000100018651ffffffff020b3e23248df85421ed9e05020610d04cdef27de6e401e6cdecfaebfa000e9e0200713bc41f0c5ac9f6b001114f9ddb1f9064451c0b19172271c7f4010f45ab33501dc2178846c9325309"]}) mmap$IORING_OFF_CQ_RING(&(0x7f00005e5000/0x2000)=nil, 0x2000, 0x2000003, 0x40010, r7, 0x8000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x1, 0x3ff, {{0x20, 0x4, 0x3, 0x0, 0x80, 0x65, 0x0, 0x7f, 0x4, 0x0, @local, @multicast1, {[@lsrr={0x83, 0x7, 0x75, [@multicast1]}, @rr={0x7, 0x7, 0x18, [@broadcast]}, @rr={0x7, 0x27, 0x67, [@dev={0xac, 0x14, 0x14, 0x22}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast1, @local, @remote, @broadcast]}, @timestamp_prespec={0x44, 0x2c, 0xc8, 0x3, 0xf, [{@remote}, {@private=0xa010102, 0x5}, {@multicast2, 0xb3}, {@empty, 0x5}, {@local, 0x7fff}]}, @generic={0x44, 0x7, "d745f8bc6f"}, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x90, r8, 0x138, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x81}, 0x10) 09:42:05 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:05 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x5736, 0x0, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:05 executing program 2: syz_io_uring_setup(0x7c00, 0x0, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) fork() 09:42:05 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:05 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:05 executing program 5: fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:05 executing program 1: r0 = syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r1, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x86a, &(0x7f0000000000)={0x0, 0x5268, 0x10, 0x2, 0x223, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r6) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x7, 0x6, 0x0, 0xfffffffa, 0x4, 0x0, {0x0, r5}}, 0x6) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r5) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r7) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="73797a746e6c3000000000000000e57e47aded0000", @ANYRES32=0x0, @ANYBLOB="00108048000000060000003f421600880066000001299078ac14143de000000194040100890baeac141412e000000144140d310a0101020000000764010102000100018651ffffffff020b3e23248df85421ed9e05020610d04cdef27de6e401e6cdecfaebfa000e9e0200713bc41f0c5ac9f6b001114f9ddb1f9064451c0b19172271c7f4010f45ab33501dc2178846c9325309"]}) mmap$IORING_OFF_CQ_RING(&(0x7f00005e5000/0x2000)=nil, 0x2000, 0x2000003, 0x40010, r7, 0x8000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x1, 0x3ff, {{0x20, 0x4, 0x3, 0x0, 0x80, 0x65, 0x0, 0x7f, 0x4, 0x0, @local, @multicast1, {[@lsrr={0x83, 0x7, 0x75, [@multicast1]}, @rr={0x7, 0x7, 0x18, [@broadcast]}, @rr={0x7, 0x27, 0x67, [@dev={0xac, 0x14, 0x14, 0x22}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast1, @local, @remote, @broadcast]}, @timestamp_prespec={0x44, 0x2c, 0xc8, 0x3, 0xf, [{@remote}, {@private=0xa010102, 0x5}, {@multicast2, 0xb3}, {@empty, 0x5}, {@local, 0x7fff}]}, @generic={0x44, 0x7, "d745f8bc6f"}, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x90, r8, 0x138, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x81}, 0x10) 09:42:05 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) 09:42:05 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:05 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1460.912420][ T1788] FAULT_INJECTION: forcing a failure. [ 1460.912420][ T1788] name failslab, interval 1, probability 0, space 0, times 0 [ 1460.925061][ T1788] CPU: 1 PID: 1788 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 1460.933401][ T1788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1460.943466][ T1788] Call Trace: [ 1460.946808][ T1788] dump_stack+0x137/0x19d [ 1460.951261][ T1788] should_fail+0x23c/0x250 [ 1460.955665][ T1788] __should_failslab+0x81/0x90 [ 1460.960545][ T1788] should_failslab+0x5/0x20 [ 1460.965052][ T1788] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1460.970834][ T1788] ? mntput+0x45/0x70 [ 1460.974806][ T1788] ? __kmalloc_node+0x30/0x40 [ 1460.979570][ T1788] ? terminate_walk+0x261/0x270 [ 1460.984420][ T1788] __kmalloc_node+0x30/0x40 [ 1460.988918][ T1788] kvmalloc_node+0x81/0xf0 [ 1460.993363][ T1788] seq_read_iter+0x145/0x910 [ 1460.997941][ T1788] seq_read+0x221/0x260 [ 1461.002155][ T1788] ? seq_open+0xf0/0xf0 [ 1461.006294][ T1788] proc_reg_read+0x119/0x1b0 09:42:05 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, 0x0, &(0x7f00000000c0)) 09:42:05 executing program 5: fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:05 executing program 2: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) fork() [ 1461.010910][ T1788] ? proc_reg_get_unmapped_area+0x220/0x220 [ 1461.017049][ T1788] vfs_read+0x154/0x5d0 [ 1461.021192][ T1788] ? __fget_light+0x21b/0x260 [ 1461.025896][ T1788] ? __cond_resched+0x11/0x40 [ 1461.030564][ T1788] ksys_read+0xce/0x180 [ 1461.034716][ T1788] __x64_sys_read+0x3e/0x50 [ 1461.039224][ T1788] do_syscall_64+0x44/0x80 [ 1461.043684][ T1788] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1461.049623][ T1788] RIP: 0033:0x4665d9 09:42:05 executing program 5: fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) [ 1461.053511][ T1788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1461.073200][ T1788] RSP: 002b:00007fc62ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1461.081613][ T1788] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1461.089574][ T1788] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 1461.097538][ T1788] RBP: 00007fc62ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1461.105492][ T1788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 09:42:05 executing program 1 (fault-call:3 fault-nth:0): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) [ 1461.113539][ T1788] R13: 00007fff6367170f R14: 00007fc62ce04300 R15: 0000000000022000 09:42:05 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:05 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:05 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, 0x0, &(0x7f00000000c0)) 09:42:05 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000340)) [ 1461.279782][ T1823] FAULT_INJECTION: forcing a failure. [ 1461.279782][ T1823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1461.292863][ T1823] CPU: 0 PID: 1823 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1461.301203][ T1823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1461.311258][ T1823] Call Trace: [ 1461.314532][ T1823] dump_stack+0x137/0x19d [ 1461.318858][ T1823] should_fail+0x23c/0x250 [ 1461.323265][ T1823] should_fail_usercopy+0x16/0x20 [ 1461.328309][ T1823] _copy_from_user+0x1c/0xd0 [ 1461.332900][ T1823] __x64_sys_io_uring_setup+0x4b/0x120 [ 1461.338436][ T1823] ? fput+0x2d/0x130 [ 1461.342411][ T1823] ? ksys_write+0x157/0x180 [ 1461.346908][ T1823] ? fpregs_assert_state_consistent+0x7d/0x90 [ 1461.352967][ T1823] ? exit_to_user_mode_prepare+0x65/0x190 [ 1461.358690][ T1823] do_syscall_64+0x44/0x80 [ 1461.363104][ T1823] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1461.369034][ T1823] RIP: 0033:0x4665d9 09:42:05 executing program 3 (fault-call:1 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) 09:42:05 executing program 2: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) fork() 09:42:05 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) [ 1461.372917][ T1823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1461.392600][ T1823] RSP: 002b:00007f1897f58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1461.401043][ T1823] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1461.409019][ T1823] RDX: 0000000020a2e000 RSI: 0000000020000140 RDI: 0000000000005736 [ 1461.416988][ T1823] RBP: 0000000020000140 R08: 00000000200000c0 R09: 00000000200000c0 [ 1461.424949][ T1823] R10: 0000000020000100 R11: 0000000000000202 R12: 00000000200000c0 [ 1461.432911][ T1823] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 [ 1461.454696][ T1849] FAULT_INJECTION: forcing a failure. [ 1461.454696][ T1849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1461.467755][ T1849] CPU: 0 PID: 1849 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 09:42:05 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, 0x0, &(0x7f00000000c0)) [ 1461.476154][ T1849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1461.486269][ T1849] Call Trace: [ 1461.489554][ T1849] dump_stack+0x137/0x19d [ 1461.494055][ T1849] should_fail+0x23c/0x250 [ 1461.498462][ T1849] should_fail_usercopy+0x16/0x20 [ 1461.503485][ T1849] _copy_to_iter+0x17c/0xdd0 [ 1461.508068][ T1849] ? strlen+0x1b/0x40 [ 1461.512071][ T1849] ? seq_puts+0x96/0xb0 [ 1461.516223][ T1849] ? check_stack_object+0x61/0x70 [ 1461.521248][ T1849] ? __virt_addr_valid+0x15a/0x1a0 [ 1461.526354][ T1849] ? __check_object_size+0x253/0x310 [ 1461.531677][ T1849] seq_read_iter+0x7f0/0x910 [ 1461.536254][ T1849] seq_read+0x221/0x260 [ 1461.540398][ T1849] ? seq_open+0xf0/0xf0 [ 1461.544625][ T1849] proc_reg_read+0x119/0x1b0 [ 1461.549589][ T1849] ? proc_reg_get_unmapped_area+0x220/0x220 [ 1461.555570][ T1849] vfs_read+0x154/0x5d0 [ 1461.559738][ T1849] ? __fget_light+0x21b/0x260 [ 1461.564442][ T1849] ? __cond_resched+0x11/0x40 [ 1461.569116][ T1849] ksys_read+0xce/0x180 [ 1461.573316][ T1849] __x64_sys_read+0x3e/0x50 09:42:06 executing program 2: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) fork() [ 1461.577873][ T1849] do_syscall_64+0x44/0x80 [ 1461.582349][ T1849] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1461.588261][ T1849] RIP: 0033:0x4665d9 [ 1461.592187][ T1849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1461.611827][ T1849] RSP: 002b:00007fc62ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1461.620228][ T1849] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 09:42:06 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) [ 1461.628196][ T1849] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 1461.636169][ T1849] RBP: 00007fc62ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1461.644144][ T1849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1461.652166][ T1849] R13: 00007fff6367170f R14: 00007fc62ce04300 R15: 0000000000022000 09:42:06 executing program 3 (fault-call:1 fault-nth:2): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) 09:42:06 executing program 1 (fault-call:3 fault-nth:1): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:06 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) 09:42:06 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000340)) [ 1461.762298][ T1884] FAULT_INJECTION: forcing a failure. [ 1461.762298][ T1884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1461.775388][ T1884] CPU: 0 PID: 1884 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 1461.783823][ T1884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1461.794076][ T1884] Call Trace: [ 1461.797352][ T1884] dump_stack+0x137/0x19d [ 1461.799827][ T1886] FAULT_INJECTION: forcing a failure. [ 1461.799827][ T1886] name failslab, interval 1, probability 0, space 0, times 0 [ 1461.801708][ T1884] should_fail+0x23c/0x250 [ 1461.818793][ T1884] should_fail_usercopy+0x16/0x20 [ 1461.823828][ T1884] _copy_to_user+0x1c/0x90 [ 1461.828405][ T1884] simple_read_from_buffer+0xab/0x120 [ 1461.833780][ T1884] proc_fail_nth_read+0xf6/0x140 [ 1461.838709][ T1884] ? rw_verify_area+0x136/0x250 [ 1461.843568][ T1884] ? proc_fault_inject_write+0x200/0x200 [ 1461.849281][ T1884] vfs_read+0x154/0x5d0 [ 1461.853429][ T1884] ? __fget_light+0x21b/0x260 [ 1461.858095][ T1884] ? __cond_resched+0x11/0x40 [ 1461.862756][ T1884] ksys_read+0xce/0x180 [ 1461.866902][ T1884] __x64_sys_read+0x3e/0x50 [ 1461.871434][ T1884] do_syscall_64+0x44/0x80 [ 1461.875958][ T1884] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1461.882073][ T1884] RIP: 0033:0x41935c [ 1461.885948][ T1884] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1461.905535][ T1884] RSP: 002b:00007fc62ce04170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1461.913927][ T1884] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041935c [ 1461.921917][ T1884] RDX: 000000000000000f RSI: 00007fc62ce041e0 RDI: 0000000000000004 [ 1461.930735][ T1884] RBP: 00007fc62ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1461.938686][ T1884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1461.946652][ T1884] R13: 00007fff6367170f R14: 00007fc62ce04300 R15: 0000000000022000 [ 1461.954700][ T1886] CPU: 1 PID: 1886 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1461.963548][ T1886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1461.973602][ T1886] Call Trace: [ 1461.976964][ T1886] dump_stack+0x137/0x19d [ 1461.981301][ T1886] should_fail+0x23c/0x250 [ 1461.986169][ T1886] __should_failslab+0x81/0x90 [ 1461.991080][ T1886] ? io_uring_create+0x120/0x18d0 [ 1461.996123][ T1886] should_failslab+0x5/0x20 [ 1462.000625][ T1886] kmem_cache_alloc_trace+0x49/0x310 [ 1462.006079][ T1886] io_uring_create+0x120/0x18d0 [ 1462.011021][ T1886] ? vfs_write+0x50c/0x770 [ 1462.015695][ T1886] ? should_fail+0xd6/0x250 [ 1462.020371][ T1886] __x64_sys_io_uring_setup+0xe1/0x120 [ 1462.025917][ T1886] do_syscall_64+0x44/0x80 [ 1462.030335][ T1886] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1462.036400][ T1886] RIP: 0033:0x4665d9 [ 1462.040278][ T1886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:42:06 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) 09:42:06 executing program 2: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) fork() 09:42:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) [ 1462.059889][ T1886] RSP: 002b:00007f1897f58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1462.068333][ T1886] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1462.076299][ T1886] RDX: 0000000020a2e000 RSI: 0000000020000140 RDI: 0000000000005736 [ 1462.084263][ T1886] RBP: 0000000020000140 R08: 00000000200000c0 R09: 00000000200000c0 [ 1462.092246][ T1886] R10: 0000000020000100 R11: 0000000000000202 R12: 00000000200000c0 [ 1462.100218][ T1886] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 09:42:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x4) 09:42:06 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000340)) 09:42:06 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:06 executing program 2: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, 0x0, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) fork() 09:42:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2f) 09:42:06 executing program 4: syz_io_uring_setup(0x7caa, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) 09:42:06 executing program 1 (fault-call:3 fault-nth:2): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:06 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x7ffff000) 09:42:06 executing program 2: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, 0x0, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) fork() 09:42:06 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), 0x0) 09:42:06 executing program 4: syz_io_uring_setup(0x0, 0x0, &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) [ 1462.483975][ T1954] FAULT_INJECTION: forcing a failure. [ 1462.483975][ T1954] name failslab, interval 1, probability 0, space 0, times 0 [ 1462.496751][ T1954] CPU: 1 PID: 1954 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1462.505080][ T1954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1462.515234][ T1954] Call Trace: [ 1462.518621][ T1954] dump_stack+0x137/0x19d [ 1462.522980][ T1954] should_fail+0x23c/0x250 [ 1462.527394][ T1954] ? io_uring_create+0x190/0x18d0 [ 1462.532416][ T1954] __should_failslab+0x81/0x90 [ 1462.537217][ T1954] should_failslab+0x5/0x20 [ 1462.541737][ T1954] __kmalloc+0x66/0x340 [ 1462.546025][ T1954] ? kmem_cache_alloc_trace+0x20f/0x310 [ 1462.551737][ T1954] ? io_uring_create+0x120/0x18d0 [ 1462.556757][ T1954] io_uring_create+0x190/0x18d0 [ 1462.561644][ T1954] ? vfs_write+0x50c/0x770 [ 1462.566244][ T1954] ? should_fail+0xd6/0x250 [ 1462.571027][ T1954] __x64_sys_io_uring_setup+0xe1/0x120 [ 1462.576487][ T1954] do_syscall_64+0x44/0x80 [ 1462.581000][ T1954] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1462.587001][ T1954] RIP: 0033:0x4665d9 [ 1462.591238][ T1954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1462.610832][ T1954] RSP: 002b:00007f1897f58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1462.619466][ T1954] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 09:42:07 executing program 2: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, 0x0, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) fork() 09:42:07 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:07 executing program 4: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000340)) 09:42:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x7ffffffff000) 09:42:07 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), 0x0) [ 1462.627428][ T1954] RDX: 0000000020a2e000 RSI: 0000000020000140 RDI: 0000000000005736 [ 1462.635496][ T1954] RBP: 0000000020000140 R08: 00000000200000c0 R09: 00000000200000c0 [ 1462.643575][ T1954] R10: 0000000020000100 R11: 0000000000000202 R12: 00000000200000c0 [ 1462.651604][ T1954] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 09:42:07 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:07 executing program 1 (fault-call:3 fault-nth:3): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0xffffffffffffffff) 09:42:07 executing program 4: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:07 executing program 2: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, 0x0, &(0x7f00000000c0)) fork() 09:42:07 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), 0x0) [ 1462.885725][ T2006] FAULT_INJECTION: forcing a failure. [ 1462.885725][ T2006] name failslab, interval 1, probability 0, space 0, times 0 [ 1462.898625][ T2006] CPU: 1 PID: 2006 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1462.907378][ T2006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1462.917585][ T2006] Call Trace: [ 1462.920857][ T2006] dump_stack+0x137/0x19d [ 1462.925183][ T2006] should_fail+0x23c/0x250 [ 1462.929731][ T2006] ? io_uring_create+0x190/0x18d0 [ 1462.934794][ T2006] __should_failslab+0x81/0x90 [ 1462.939556][ T2006] should_failslab+0x5/0x20 [ 1462.944122][ T2006] __kmalloc+0x66/0x340 [ 1462.948291][ T2006] ? kmem_cache_alloc_trace+0x20f/0x310 [ 1462.953887][ T2006] ? io_uring_create+0x120/0x18d0 [ 1462.958918][ T2006] io_uring_create+0x190/0x18d0 [ 1462.963850][ T2006] ? vfs_write+0x50c/0x770 [ 1462.968356][ T2006] ? should_fail+0xd6/0x250 [ 1462.972863][ T2006] __x64_sys_io_uring_setup+0xe1/0x120 [ 1462.978328][ T2006] do_syscall_64+0x44/0x80 09:42:07 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x5736, 0x0, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:07 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:07 executing program 2: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, 0x0, &(0x7f00000000c0)) fork() 09:42:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) ioctl$SNAPSHOT_FREE(r0, 0x3305) [ 1462.982797][ T2006] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1462.988837][ T2006] RIP: 0033:0x4665d9 [ 1462.992768][ T2006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1463.012463][ T2006] RSP: 002b:00007f1897f58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1463.020905][ T2006] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 09:42:07 executing program 3: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r1, 0x0, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 09:42:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) ioctl$SNAPSHOT_FREE(r0, 0x3305) [ 1463.029559][ T2006] RDX: 0000000020a2e000 RSI: 0000000020000140 RDI: 0000000000005736 [ 1463.037624][ T2006] RBP: 0000000020000140 R08: 00000000200000c0 R09: 00000000200000c0 [ 1463.045602][ T2006] R10: 0000000020000100 R11: 0000000000000202 R12: 00000000200000c0 [ 1463.054672][ T2006] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 09:42:07 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x5736, 0x0, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:07 executing program 1 (fault-call:3 fault-nth:4): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:07 executing program 2: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, 0x0, &(0x7f00000000c0)) fork() 09:42:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) ioctl$SNAPSHOT_FREE(r0, 0x3305) 09:42:07 executing program 0 (fault-call:3 fault-nth:0): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') write$rfkill(r0, &(0x7f0000000040)={0x3f, 0x1, 0x3}, 0x8) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r1) read$snapshot(r0, 0x0, 0x2) 09:42:07 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x5736, 0x0, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) [ 1463.325831][ T2066] FAULT_INJECTION: forcing a failure. [ 1463.325831][ T2066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1463.332155][ T2073] FAULT_INJECTION: forcing a failure. [ 1463.332155][ T2073] name failslab, interval 1, probability 0, space 0, times 0 [ 1463.339115][ T2066] CPU: 1 PID: 2066 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1463.360478][ T2066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1463.371225][ T2066] Call Trace: [ 1463.374506][ T2066] dump_stack+0x137/0x19d [ 1463.378896][ T2066] should_fail+0x23c/0x250 [ 1463.383292][ T2066] should_fail_usercopy+0x16/0x20 [ 1463.388416][ T2066] _copy_from_user+0x1c/0xd0 [ 1463.393050][ T2066] __x64_sys_io_uring_setup+0x4b/0x120 [ 1463.398510][ T2066] ? fput+0x2d/0x130 [ 1463.402473][ T2066] ? ksys_write+0x157/0x180 [ 1463.406964][ T2066] ? fpregs_assert_state_consistent+0x7d/0x90 [ 1463.413027][ T2066] ? exit_to_user_mode_prepare+0x65/0x190 [ 1463.418728][ T2066] do_syscall_64+0x44/0x80 [ 1463.423128][ T2066] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1463.429084][ T2066] RIP: 0033:0x4665d9 [ 1463.432956][ T2066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1463.452974][ T2066] RSP: 002b:00007f1ed1226108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1463.461390][ T2066] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1463.469345][ T2066] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 000000000000332a [ 1463.477398][ T2066] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 1463.485353][ T2066] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 1463.493321][ T2066] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1463.501278][ T2073] CPU: 0 PID: 2073 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1463.509603][ T2073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1463.519656][ T2073] Call Trace: [ 1463.522929][ T2073] dump_stack+0x137/0x19d [ 1463.527477][ T2073] should_fail+0x23c/0x250 [ 1463.531896][ T2073] __should_failslab+0x81/0x90 [ 1463.536738][ T2073] ? io_uring_create+0x1e1/0x18d0 [ 1463.541754][ T2073] should_failslab+0x5/0x20 [ 1463.546277][ T2073] kmem_cache_alloc_trace+0x49/0x310 [ 1463.551679][ T2073] ? io_uring_create+0x190/0x18d0 [ 1463.556702][ T2073] io_uring_create+0x1e1/0x18d0 [ 1463.561546][ T2073] ? vfs_write+0x50c/0x770 [ 1463.565952][ T2073] ? should_fail+0xd6/0x250 [ 1463.570445][ T2073] __x64_sys_io_uring_setup+0xe1/0x120 [ 1463.575895][ T2073] do_syscall_64+0x44/0x80 [ 1463.580310][ T2073] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1463.586219][ T2073] RIP: 0033:0x4665d9 [ 1463.590099][ T2073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1463.609693][ T2073] RSP: 002b:00007f1897f58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1463.618098][ T2073] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 09:42:08 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:08 executing program 2: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) ioctl$SNAPSHOT_FREE(r0, 0x3305) 09:42:08 executing program 0 (fault-call:3 fault-nth:1): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1463.626144][ T2073] RDX: 0000000020a2e000 RSI: 0000000020000140 RDI: 0000000000005736 [ 1463.634103][ T2073] RBP: 0000000020000140 R08: 00000000200000c0 R09: 00000000200000c0 [ 1463.642062][ T2073] R10: 0000000020000100 R11: 0000000000000202 R12: 00000000200000c0 [ 1463.650026][ T2073] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 09:42:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) 09:42:08 executing program 3: r0 = fork() r1 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, 0x0) sched_setattr(r1, &(0x7f0000000080)={0x38, 0x3, 0x40, 0x81, 0x6, 0x100, 0x39, 0x95, 0x800, 0x9bd}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='net/mcfilter\x00') read$snapshot(r2, 0x0, 0x0) 09:42:08 executing program 1 (fault-call:3 fault-nth:5): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:08 executing program 2 (fault-call:3 fault-nth:0): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:08 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, 0x0, &(0x7f00000000c0)) [ 1463.762262][ T2098] FAULT_INJECTION: forcing a failure. [ 1463.762262][ T2098] name failslab, interval 1, probability 0, space 0, times 0 [ 1463.774971][ T2098] CPU: 1 PID: 2098 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1463.783282][ T2098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1463.793344][ T2098] Call Trace: [ 1463.796619][ T2098] dump_stack+0x137/0x19d [ 1463.800976][ T2098] should_fail+0x23c/0x250 [ 1463.805412][ T2098] __should_failslab+0x81/0x90 09:42:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) [ 1463.810177][ T2098] ? io_uring_create+0x120/0x18d0 [ 1463.815243][ T2098] should_failslab+0x5/0x20 [ 1463.819747][ T2098] kmem_cache_alloc_trace+0x49/0x310 [ 1463.825029][ T2098] io_uring_create+0x120/0x18d0 [ 1463.829905][ T2098] ? vfs_write+0x50c/0x770 [ 1463.834318][ T2098] ? should_fail+0xd6/0x250 [ 1463.838807][ T2098] __x64_sys_io_uring_setup+0xe1/0x120 [ 1463.844262][ T2098] do_syscall_64+0x44/0x80 [ 1463.848679][ T2098] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1463.854577][ T2098] RIP: 0033:0x4665d9 [ 1463.858464][ T2098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1463.878063][ T2098] RSP: 002b:00007f1ed1226108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1463.886471][ T2098] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1463.894528][ T2098] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 000000000000332a [ 1463.902560][ T2098] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 09:42:08 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, 0x0, &(0x7f00000000c0)) [ 1463.910528][ T2098] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 1463.918485][ T2098] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 09:42:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) [ 1463.972456][ T2139] FAULT_INJECTION: forcing a failure. [ 1463.972456][ T2139] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1463.985695][ T2139] CPU: 1 PID: 2139 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1463.994108][ T2139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1464.004159][ T2139] Call Trace: [ 1464.007436][ T2139] dump_stack+0x137/0x19d [ 1464.011757][ T2139] should_fail+0x23c/0x250 [ 1464.016253][ T2139] __alloc_pages+0x102/0x320 [ 1464.020834][ T2139] alloc_pages+0x21d/0x310 [ 1464.025326][ T2139] __get_free_pages+0x8/0x30 [ 1464.029908][ T2139] io_uring_create+0x887/0x18d0 [ 1464.034760][ T2139] ? should_fail+0xd6/0x250 [ 1464.039300][ T2139] __x64_sys_io_uring_setup+0xe1/0x120 [ 1464.044788][ T2139] do_syscall_64+0x44/0x80 [ 1464.049214][ T2139] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1464.049222][ T2146] FAULT_INJECTION: forcing a failure. [ 1464.049222][ T2146] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.067648][ T2139] RIP: 0033:0x4665d9 [ 1464.071534][ T2139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1464.091138][ T2139] RSP: 002b:00007f1897f58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1464.099610][ T2139] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1464.107570][ T2139] RDX: 0000000020a2e000 RSI: 0000000020000140 RDI: 0000000000005736 [ 1464.115523][ T2139] RBP: 0000000020000140 R08: 00000000200000c0 R09: 00000000200000c0 [ 1464.123472][ T2139] R10: 0000000020000100 R11: 0000000000000202 R12: 00000000200000c0 [ 1464.131481][ T2139] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 [ 1464.139432][ T2146] CPU: 0 PID: 2146 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1464.147866][ T2146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1464.157948][ T2146] Call Trace: [ 1464.161220][ T2146] dump_stack+0x137/0x19d [ 1464.165575][ T2146] should_fail+0x23c/0x250 [ 1464.169983][ T2146] __should_failslab+0x81/0x90 [ 1464.174745][ T2146] should_failslab+0x5/0x20 [ 1464.179243][ T2146] kmem_cache_alloc_node+0x58/0x2b0 [ 1464.184481][ T2146] ? dup_task_struct+0x63/0x630 [ 1464.189312][ T2146] dup_task_struct+0x63/0x630 [ 1464.193976][ T2146] ? kstrtoull+0x30e/0x350 [ 1464.198369][ T2146] copy_process+0x3ff/0x2e00 [ 1464.202952][ T2146] ? __fsnotify_parent+0x32f/0x430 [ 1464.208088][ T2146] ? get_pid_task+0x8b/0xc0 [ 1464.212567][ T2146] kernel_clone+0x14b/0x680 [ 1464.217043][ T2146] ? __fget_light+0x21b/0x260 [ 1464.221697][ T2146] __do_sys_fork+0x3a/0x60 [ 1464.226092][ T2146] do_syscall_64+0x44/0x80 [ 1464.230508][ T2146] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1464.236440][ T2146] RIP: 0033:0x4665d9 [ 1464.240319][ T2146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1464.259915][ T2146] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 09:42:08 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, 0x0, &(0x7f00000000c0)) 09:42:08 executing program 0 (fault-call:3 fault-nth:2): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0x2) 09:42:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) 09:42:08 executing program 1 (fault-call:3 fault-nth:6): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) [ 1464.268325][ T2146] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1464.276278][ T2146] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1464.284235][ T2146] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1464.292187][ T2146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1464.300255][ T2146] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 09:42:08 executing program 2 (fault-call:3 fault-nth:1): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() [ 1464.421496][ T2177] FAULT_INJECTION: forcing a failure. [ 1464.421496][ T2177] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.434748][ T2177] CPU: 1 PID: 2177 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1464.443208][ T2177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1464.453351][ T2177] Call Trace: [ 1464.456287][ T2178] FAULT_INJECTION: forcing a failure. [ 1464.456287][ T2178] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1464.456646][ T2177] dump_stack+0x137/0x19d [ 1464.475126][ T2177] should_fail+0x23c/0x250 [ 1464.479611][ T2177] ? prepare_creds+0x2a/0x3f0 [ 1464.484476][ T2177] __should_failslab+0x81/0x90 [ 1464.489251][ T2177] should_failslab+0x5/0x20 [ 1464.493846][ T2177] kmem_cache_alloc+0x46/0x2e0 [ 1464.498599][ T2177] ? __mod_lruvec_page_state+0xfc/0x130 [ 1464.504203][ T2177] prepare_creds+0x2a/0x3f0 [ 1464.508701][ T2177] copy_creds+0xe4/0x340 [ 1464.512966][ T2177] copy_process+0x616/0x2e00 [ 1464.517550][ T2177] ? __fsnotify_parent+0x32f/0x430 [ 1464.523402][ T2177] ? get_pid_task+0x8b/0xc0 [ 1464.527888][ T2177] kernel_clone+0x14b/0x680 [ 1464.532379][ T2177] ? __fget_light+0x21b/0x260 [ 1464.537041][ T2177] __do_sys_fork+0x3a/0x60 [ 1464.542770][ T2177] do_syscall_64+0x44/0x80 [ 1464.547178][ T2177] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1464.553092][ T2177] RIP: 0033:0x4665d9 [ 1464.556979][ T2177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1464.576713][ T2177] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1464.585120][ T2177] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1464.593086][ T2177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1464.601038][ T2177] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1464.608986][ T2177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1464.616943][ T2177] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1464.624956][ T2178] CPU: 0 PID: 2178 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1464.633280][ T2178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1464.643348][ T2178] Call Trace: [ 1464.646625][ T2178] dump_stack+0x137/0x19d [ 1464.650973][ T2178] should_fail+0x23c/0x250 [ 1464.655417][ T2178] __alloc_pages+0x102/0x320 [ 1464.660006][ T2178] alloc_pages+0x21d/0x310 [ 1464.664428][ T2178] __get_free_pages+0x8/0x30 [ 1464.669003][ T2178] io_uring_create+0x9b9/0x18d0 [ 1464.673852][ T2178] ? should_fail+0xd6/0x250 [ 1464.678447][ T2178] __x64_sys_io_uring_setup+0xe1/0x120 [ 1464.683949][ T2178] do_syscall_64+0x44/0x80 [ 1464.685411][ T2180] FAULT_INJECTION: forcing a failure. [ 1464.685411][ T2180] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.688374][ T2178] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1464.688432][ T2178] RIP: 0033:0x4665d9 [ 1464.711112][ T2178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1464.730711][ T2178] RSP: 002b:00007f1897f58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1464.739102][ T2178] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1464.747313][ T2178] RDX: 0000000020a2e000 RSI: 0000000020000140 RDI: 0000000000005736 [ 1464.755398][ T2178] RBP: 0000000020000140 R08: 00000000200000c0 R09: 00000000200000c0 [ 1464.763441][ T2178] R10: 0000000020000100 R11: 0000000000000202 R12: 00000000200000c0 09:42:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) r1 = fsmount(r0, 0x0, 0xf0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000040)) io_uring_setup(0x2454, &(0x7f0000000080)={0x0, 0x67f4, 0x10, 0x1, 0x2cf}) 09:42:09 executing program 4: read$snapshot(0xffffffffffffffff, 0x0, 0x2) read$snapshot(0xffffffffffffffff, &(0x7f0000000040)=""/72, 0x48) [ 1464.771488][ T2178] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 [ 1464.779453][ T2180] CPU: 1 PID: 2180 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1464.787878][ T2180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1464.797928][ T2180] Call Trace: [ 1464.801200][ T2180] dump_stack+0x137/0x19d [ 1464.805554][ T2180] should_fail+0x23c/0x250 [ 1464.809983][ T2180] ? io_uring_create+0x190/0x18d0 [ 1464.815029][ T2180] __should_failslab+0x81/0x90 09:42:09 executing program 1 (fault-call:3 fault-nth:7): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:09 executing program 2 (fault-call:3 fault-nth:2): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() [ 1464.819886][ T2180] should_failslab+0x5/0x20 [ 1464.824424][ T2180] __kmalloc+0x66/0x340 [ 1464.828576][ T2180] ? kmem_cache_alloc_trace+0x20f/0x310 [ 1464.834185][ T2180] ? io_uring_create+0x120/0x18d0 [ 1464.839207][ T2180] io_uring_create+0x190/0x18d0 [ 1464.844058][ T2180] ? vfs_write+0x50c/0x770 [ 1464.848472][ T2180] ? should_fail+0xd6/0x250 [ 1464.852974][ T2180] __x64_sys_io_uring_setup+0xe1/0x120 [ 1464.858441][ T2180] do_syscall_64+0x44/0x80 [ 1464.862848][ T2180] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1464.870358][ T2180] RIP: 0033:0x4665d9 [ 1464.874235][ T2180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1464.894008][ T2180] RSP: 002b:00007f1ed1226108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1464.902505][ T2180] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1464.910500][ T2180] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 000000000000332a [ 1464.918460][ T2180] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 1464.925433][ T2202] FAULT_INJECTION: forcing a failure. [ 1464.925433][ T2202] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.926447][ T2180] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 1464.926460][ T2180] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1464.955071][ T2202] CPU: 0 PID: 2202 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1464.963392][ T2202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1464.973659][ T2202] Call Trace: [ 1464.976946][ T2202] dump_stack+0x137/0x19d [ 1464.981281][ T2202] should_fail+0x23c/0x250 [ 1464.985721][ T2202] __should_failslab+0x81/0x90 [ 1464.990476][ T2202] should_failslab+0x5/0x20 [ 1464.995001][ T2202] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1465.000723][ T2202] ? __get_vm_area_node+0x11b/0x260 [ 1465.005960][ T2202] ? mod_node_page_state+0x18/0xa0 [ 1465.011107][ T2202] __get_vm_area_node+0x11b/0x260 [ 1465.016176][ T2202] __vmalloc_node_range+0xb6/0x580 [ 1465.021365][ T2202] ? copy_process+0x3ff/0x2e00 [ 1465.026116][ T2202] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 1465.031576][ T2202] dup_task_struct+0x470/0x630 [ 1465.032124][ T2210] FAULT_INJECTION: forcing a failure. [ 1465.032124][ T2210] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1465.036437][ T2202] ? copy_process+0x3ff/0x2e00 [ 1465.036456][ T2202] ? kstrtoull+0x30e/0x350 [ 1465.058743][ T2202] copy_process+0x3ff/0x2e00 [ 1465.063499][ T2202] ? __fsnotify_parent+0x32f/0x430 [ 1465.068610][ T2202] ? get_pid_task+0x8b/0xc0 [ 1465.073093][ T2202] kernel_clone+0x14b/0x680 [ 1465.077577][ T2202] ? __fget_light+0x21b/0x260 [ 1465.082284][ T2202] __do_sys_fork+0x3a/0x60 [ 1465.086700][ T2202] do_syscall_64+0x44/0x80 [ 1465.091179][ T2202] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1465.097100][ T2202] RIP: 0033:0x4665d9 [ 1465.100990][ T2202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1465.121224][ T2202] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1465.129799][ T2202] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1465.137767][ T2202] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1465.145864][ T2202] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1465.153812][ T2202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1465.161764][ T2202] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1465.169824][ T2210] CPU: 1 PID: 2210 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1465.169877][ T2202] warn_alloc: 3 callbacks suppressed [ 1465.169886][ T2202] syz-executor.2: vmalloc size 16384 allocation failure: vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1465.178174][ T2210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1465.178185][ T2210] Call Trace: [ 1465.178190][ T2210] dump_stack+0x137/0x19d [ 1465.183452][ T2202] ,cpuset= [ 1465.198602][ T2210] should_fail+0x23c/0x250 [ 1465.198622][ T2210] __alloc_pages+0x102/0x320 [ 1465.208661][ T2202] / [ 1465.211906][ T2210] alloc_pages+0x21d/0x310 [ 1465.216227][ T2202] ,mems_allowed=0 [ 1465.219213][ T2210] __get_free_pages+0x8/0x30 [ 1465.223631][ T2202] [ 1465.228190][ T2210] io_uring_create+0x887/0x18d0 [ 1465.250248][ T2210] ? should_fail+0xd6/0x250 [ 1465.254753][ T2210] __x64_sys_io_uring_setup+0xe1/0x120 [ 1465.260378][ T2210] do_syscall_64+0x44/0x80 [ 1465.264881][ T2210] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1465.270759][ T2210] RIP: 0033:0x4665d9 [ 1465.274720][ T2210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1465.294474][ T2210] RSP: 002b:00007f1897f37108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1465.302891][ T2210] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9 [ 1465.310842][ T2210] RDX: 0000000020a2e000 RSI: 0000000020000140 RDI: 0000000000005736 [ 1465.318881][ T2210] RBP: 0000000020000140 R08: 00000000200000c0 R09: 00000000200000c0 [ 1465.326837][ T2210] R10: 0000000020000100 R11: 0000000000000202 R12: 00000000200000c0 [ 1465.334864][ T2210] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 [ 1465.342924][ T2202] CPU: 0 PID: 2202 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1465.351250][ T2202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1465.361469][ T2202] Call Trace: [ 1465.364744][ T2202] dump_stack+0x137/0x19d [ 1465.369139][ T2202] warn_alloc+0x105/0x160 [ 1465.373458][ T2202] __vmalloc_node_range+0x201/0x580 [ 1465.378651][ T2202] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 1465.384119][ T2202] dup_task_struct+0x470/0x630 [ 1465.388910][ T2202] ? copy_process+0x3ff/0x2e00 [ 1465.393746][ T2202] ? kstrtoull+0x30e/0x350 [ 1465.398171][ T2202] copy_process+0x3ff/0x2e00 [ 1465.402770][ T2202] ? __fsnotify_parent+0x32f/0x430 [ 1465.407897][ T2202] ? get_pid_task+0x8b/0xc0 [ 1465.412398][ T2202] kernel_clone+0x14b/0x680 [ 1465.416896][ T2202] ? __fget_light+0x21b/0x260 [ 1465.421694][ T2202] __do_sys_fork+0x3a/0x60 09:42:09 executing program 4: read$snapshot(0xffffffffffffffff, 0x0, 0x2) read$snapshot(0xffffffffffffffff, &(0x7f0000000040)=""/72, 0x48) 09:42:09 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat6\x00') ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) read$snapshot(r0, 0x0, 0x2) r1 = fsmount(r0, 0x1, 0x70) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000100)={0x3ff, 0x8}) r2 = fsmount(r1, 0x0, 0x88) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000000)) fspick(r1, &(0x7f0000000080)='./file0\x00', 0x0) 09:42:09 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) 09:42:09 executing program 0 (fault-call:3 fault-nth:3): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1465.426126][ T2202] do_syscall_64+0x44/0x80 [ 1465.430537][ T2202] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1465.436517][ T2202] RIP: 0033:0x4665d9 [ 1465.440406][ T2202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1465.460008][ T2202] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1465.468459][ T2202] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1465.476510][ T2202] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1465.484568][ T2202] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1465.493310][ T2202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1465.501266][ T2202] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1465.510579][ T2202] Mem-Info: [ 1465.513733][ T2202] active_anon:71 inactive_anon:93564 isolated_anon:0 09:42:10 executing program 1 (fault-call:3 fault-nth:8): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) [ 1465.513733][ T2202] active_file:8417 inactive_file:29207 isolated_file:0 [ 1465.513733][ T2202] unevictable:0 dirty:495 writeback:0 [ 1465.513733][ T2202] slab_reclaimable:8173 slab_unreclaimable:36744 [ 1465.513733][ T2202] mapped:62268 shmem:4689 pagetables:104390 bounce:0 [ 1465.513733][ T2202] free:232660 free_pcp:902 free_cma:0 09:42:10 executing program 4: read$snapshot(0xffffffffffffffff, 0x0, 0x2) read$snapshot(0xffffffffffffffff, &(0x7f0000000040)=""/72, 0x48) [ 1465.551411][ T2202] Node 0 active_anon:284kB inactive_anon:374024kB active_file:33668kB inactive_file:116828kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:249072kB dirty:1980kB writeback:0kB shmem:18756kB writeback_tmp:0kB kernel_stack:60496kB pagetables:417328kB all_unreclaimable? no [ 1465.578294][ T2202] Node 0 DMA free:15360kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1465.604620][ T2202] lowmem_reserve[]: 0 2938 7916 7916 [ 1465.610011][ T2202] Node 0 DMA32 free:714624kB min:4220kB low:7228kB high:10236kB reserved_highatomic:0KB active_anon:0kB inactive_anon:28184kB active_file:748kB inactive_file:108kB unevictable:0kB writepending:8kB present:3129332kB managed:3013528kB mlocked:0kB bounce:0kB free_pcp:2628kB local_pcp:1324kB free_cma:0kB [ 1465.638473][ T2202] lowmem_reserve[]: 0 0 4978 4978 [ 1465.643538][ T2202] Node 0 Normal free:200388kB min:7152kB low:12248kB high:17344kB reserved_highatomic:0KB active_anon:284kB inactive_anon:346188kB active_file:32920kB inactive_file:116720kB unevictable:0kB writepending:1972kB present:5242880kB managed:5098252kB mlocked:0kB bounce:0kB free_pcp:792kB local_pcp:564kB free_cma:0kB [ 1465.672889][ T2202] lowmem_reserve[]: 0 0 0 0 [ 1465.677405][ T2202] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1465.683747][ T2231] FAULT_INJECTION: forcing a failure. [ 1465.683747][ T2231] name failslab, interval 1, probability 0, space 0, times 0 [ 1465.690017][ T2202] Node 0 DMA32: 904*4kB (UME) 196*8kB (UME) [ 1465.702690][ T2231] CPU: 1 PID: 2231 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1465.702691][ T2202] 84*16kB [ 1465.708675][ T2231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1465.716997][ T2202] (UME) [ 1465.719979][ T2231] Call Trace: [ 1465.719987][ T2231] dump_stack+0x137/0x19d [ 1465.730033][ T2202] 32*32kB [ 1465.732844][ T2231] should_fail+0x23c/0x250 [ 1465.736114][ T2202] (UME) 8*64kB [ 1465.740601][ T2231] __should_failslab+0x81/0x90 [ 1465.743607][ T2202] (UME) 2*128kB [ 1465.748103][ T2231] ? io_uring_create+0x13f7/0x18d0 [ 1465.751543][ T2202] (U) [ 1465.756278][ T2231] should_failslab+0x5/0x20 [ 1465.759883][ T2202] 3*256kB (UME) [ 1465.764979][ T2231] kmem_cache_alloc_trace+0x49/0x310 [ 1465.767641][ T2202] 2*512kB (UE) 2*1024kB (UM) 3*2048kB (UME) 168*4096kB (M) = 706432kB [ 1465.767674][ T2202] Node 0 Normal: 2*4kB (UE) [ 1465.772149][ T2231] ? alloc_pages+0x21d/0x310 [ 1465.775703][ T2202] 3700*8kB [ 1465.780953][ T2231] io_uring_create+0x13f7/0x18d0 [ 1465.789098][ T2202] (UM) 2305*16kB (UME) 1933*32kB (UME) 527*64kB (UME) 185*128kB (UM) 46*256kB (UM) 2*512kB (ME) 1*1024kB (M) 0*2048kB 0*4096kB = 199576kB [ 1465.793771][ T2231] ? should_fail+0xd6/0x250 [ 1465.798297][ T2202] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1465.798310][ T2202] 23598 total pagecache pages [ 1465.798314][ T2202] 0 pages in swap cache [ 1465.798318][ T2202] Swap cache stats: add 0, delete 0, find 0/0 [ 1465.798326][ T2202] Free swap = 0kB [ 1465.798330][ T2202] Total swap = 0kB [ 1465.798334][ T2202] 2097051 pages RAM [ 1465.798337][ T2202] 0 pages HighMem/MovableOnly [ 1465.798341][ T2202] 65266 pages reserved [ 1465.847314][ T2243] FAULT_INJECTION: forcing a failure. [ 1465.847314][ T2243] name failslab, interval 1, probability 0, space 0, times 0 [ 1465.850081][ T2231] __x64_sys_io_uring_setup+0xe1/0x120 [ 1465.888035][ T2231] do_syscall_64+0x44/0x80 [ 1465.892441][ T2231] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1465.898472][ T2231] RIP: 0033:0x4665d9 [ 1465.902355][ T2231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1465.922025][ T2231] RSP: 002b:00007f1897f58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1465.930513][ T2231] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1465.938493][ T2231] RDX: 0000000020a2e000 RSI: 0000000020000140 RDI: 0000000000005736 [ 1465.946463][ T2231] RBP: 0000000020000140 R08: 00000000200000c0 R09: 00000000200000c0 [ 1465.954592][ T2231] R10: 0000000020000100 R11: 0000000000000202 R12: 00000000200000c0 [ 1465.962541][ T2231] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 09:42:10 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) 09:42:10 executing program 1 (fault-call:3 fault-nth:9): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) [ 1465.970629][ T2243] CPU: 0 PID: 2243 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1465.979064][ T2243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1465.989237][ T2243] Call Trace: [ 1465.992515][ T2243] dump_stack+0x137/0x19d [ 1465.997145][ T2243] should_fail+0x23c/0x250 [ 1466.001629][ T2243] ? io_uring_create+0x190/0x18d0 [ 1466.006648][ T2243] __should_failslab+0x81/0x90 [ 1466.011426][ T2243] should_failslab+0x5/0x20 [ 1466.015944][ T2243] __kmalloc+0x66/0x340 [ 1466.020104][ T2243] ? kmem_cache_alloc_trace+0x20f/0x310 [ 1466.025660][ T2243] ? io_uring_create+0x120/0x18d0 [ 1466.030684][ T2243] io_uring_create+0x190/0x18d0 [ 1466.035597][ T2243] ? vfs_write+0x50c/0x770 [ 1466.040006][ T2243] ? should_fail+0xd6/0x250 [ 1466.044698][ T2243] __x64_sys_io_uring_setup+0xe1/0x120 [ 1466.050150][ T2243] do_syscall_64+0x44/0x80 [ 1466.054595][ T2243] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1466.060484][ T2243] RIP: 0033:0x4665d9 [ 1466.064438][ T2243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1466.084045][ T2243] RSP: 002b:00007f1ed1226108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1466.092444][ T2243] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1466.093250][ T2258] FAULT_INJECTION: forcing a failure. [ 1466.093250][ T2258] name failslab, interval 1, probability 0, space 0, times 0 [ 1466.100408][ T2243] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 000000000000332a [ 1466.100423][ T2243] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 1466.100435][ T2243] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 1466.136980][ T2243] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1466.144935][ T2258] CPU: 1 PID: 2258 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1466.153303][ T2258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1466.163346][ T2258] Call Trace: [ 1466.166610][ T2258] dump_stack+0x137/0x19d [ 1466.170990][ T2258] should_fail+0x23c/0x250 [ 1466.175393][ T2258] __should_failslab+0x81/0x90 [ 1466.180190][ T2258] ? percpu_ref_init+0x9e/0x210 [ 1466.185099][ T2258] should_failslab+0x5/0x20 [ 1466.189593][ T2258] kmem_cache_alloc_trace+0x49/0x310 [ 1466.194879][ T2258] percpu_ref_init+0x9e/0x210 [ 1466.199573][ T2258] ? __io_register_rsrc_update+0x1260/0x1260 [ 1466.205542][ T2258] io_uring_create+0x1419/0x18d0 [ 1466.210470][ T2258] ? should_fail+0xd6/0x250 [ 1466.214974][ T2258] __x64_sys_io_uring_setup+0xe1/0x120 [ 1466.220494][ T2258] do_syscall_64+0x44/0x80 [ 1466.224957][ T2258] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1466.230980][ T2258] RIP: 0033:0x4665d9 [ 1466.234862][ T2258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1466.254494][ T2258] RSP: 002b:00007f1897f58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1466.262900][ T2258] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1466.270867][ T2258] RDX: 0000000020a2e000 RSI: 0000000020000140 RDI: 0000000000005736 09:42:10 executing program 2 (fault-call:3 fault-nth:3): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:10 executing program 0 (fault-call:3 fault-nth:4): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:10 executing program 4: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) 09:42:10 executing program 3: r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp\x00') read$snapshot(r1, 0x0, 0x2) read$snapshot(r1, &(0x7f0000000040)=""/121, 0x79) 09:42:10 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) [ 1466.278845][ T2258] RBP: 0000000020000140 R08: 00000000200000c0 R09: 00000000200000c0 [ 1466.286806][ T2258] R10: 0000000020000100 R11: 0000000000000202 R12: 00000000200000c0 [ 1466.294763][ T2258] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 [ 1466.339258][ T2279] FAULT_INJECTION: forcing a failure. [ 1466.339258][ T2279] name failslab, interval 1, probability 0, space 0, times 0 [ 1466.351897][ T2279] CPU: 1 PID: 2279 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1466.360219][ T2279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1466.370542][ T2279] Call Trace: [ 1466.373808][ T2279] dump_stack+0x137/0x19d [ 1466.378136][ T2279] should_fail+0x23c/0x250 [ 1466.382544][ T2279] __should_failslab+0x81/0x90 [ 1466.387381][ T2279] should_failslab+0x5/0x20 [ 1466.391875][ T2279] kmem_cache_alloc_node+0x58/0x2b0 [ 1466.397111][ T2279] ? alloc_vmap_area+0x202/0x1340 [ 1466.402143][ T2279] alloc_vmap_area+0x202/0x1340 [ 1466.407027][ T2279] ? kmem_cache_alloc_node_trace+0x1f0/0x2e0 [ 1466.413013][ T2279] __get_vm_area_node+0x165/0x260 [ 1466.414599][ T2276] FAULT_INJECTION: forcing a failure. [ 1466.414599][ T2276] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1466.418095][ T2279] __vmalloc_node_range+0xb6/0x580 [ 1466.436343][ T2279] ? copy_process+0x3ff/0x2e00 [ 1466.441090][ T2279] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 1466.446564][ T2279] dup_task_struct+0x470/0x630 [ 1466.451329][ T2279] ? copy_process+0x3ff/0x2e00 [ 1466.456080][ T2279] ? kstrtoull+0x30e/0x350 [ 1466.460481][ T2279] copy_process+0x3ff/0x2e00 [ 1466.465059][ T2279] ? __fsnotify_parent+0x32f/0x430 [ 1466.470159][ T2279] ? get_pid_task+0x8b/0xc0 [ 1466.474646][ T2279] kernel_clone+0x14b/0x680 [ 1466.479164][ T2279] ? __fget_light+0x21b/0x260 [ 1466.483827][ T2279] __do_sys_fork+0x3a/0x60 [ 1466.488226][ T2279] do_syscall_64+0x44/0x80 [ 1466.492627][ T2279] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1466.498601][ T2279] RIP: 0033:0x4665d9 [ 1466.502474][ T2279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1466.522164][ T2279] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1466.530572][ T2279] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 09:42:10 executing program 4: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) [ 1466.538648][ T2279] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1466.546705][ T2279] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1466.554817][ T2279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1466.562777][ T2279] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1466.570732][ T2276] CPU: 0 PID: 2276 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1466.579054][ T2276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1466.589134][ T2276] Call Trace: [ 1466.592430][ T2276] dump_stack+0x137/0x19d [ 1466.596822][ T2276] should_fail+0x23c/0x250 [ 1466.601233][ T2276] __alloc_pages+0x102/0x320 [ 1466.605821][ T2276] kmem_getpages+0x1a/0xd0 [ 1466.610228][ T2276] cache_grow_begin+0x4c/0x1a0 [ 1466.615054][ T2276] cache_alloc_refill+0x326/0x3d0 [ 1466.620073][ T2276] ? should_fail+0xd6/0x250 [ 1466.624571][ T2276] ? io_uring_create+0x190/0x18d0 [ 1466.629598][ T2276] __kmalloc+0x2b4/0x340 [ 1466.633883][ T2276] ? io_uring_create+0x190/0x18d0 [ 1466.638894][ T2276] io_uring_create+0x190/0x18d0 [ 1466.643730][ T2276] ? vfs_write+0x50c/0x770 [ 1466.648210][ T2276] ? should_fail+0xd6/0x250 [ 1466.652703][ T2276] __x64_sys_io_uring_setup+0xe1/0x120 [ 1466.658186][ T2276] do_syscall_64+0x44/0x80 [ 1466.662605][ T2276] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1466.668648][ T2276] RIP: 0033:0x4665d9 09:42:11 executing program 2 (fault-call:3 fault-nth:4): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:11 executing program 4: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) [ 1466.672513][ T2276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1466.692328][ T2276] RSP: 002b:00007f1ed1226108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1466.700711][ T2276] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1466.708672][ T2276] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 000000000000332a [ 1466.716615][ T2276] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 1466.724572][ T2276] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 1466.732513][ T2276] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 09:42:11 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat6\x00') ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) read$snapshot(r0, 0x0, 0x2) r1 = fsmount(r0, 0x1, 0x70) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000100)={0x3ff, 0x8}) r2 = fsmount(r1, 0x0, 0x88) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000000)) fspick(r1, &(0x7f0000000080)='./file0\x00', 0x0) 09:42:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) 09:42:11 executing program 1 (fault-call:3 fault-nth:10): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) [ 1466.793055][ T2296] FAULT_INJECTION: forcing a failure. [ 1466.793055][ T2296] name failslab, interval 1, probability 0, space 0, times 0 [ 1466.805757][ T2296] CPU: 0 PID: 2296 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1466.814071][ T2296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1466.824144][ T2296] Call Trace: [ 1466.827413][ T2296] dump_stack+0x137/0x19d [ 1466.831740][ T2296] should_fail+0x23c/0x250 [ 1466.836174][ T2296] __should_failslab+0x81/0x90 09:42:11 executing program 3: timer_create(0x2, 0x0, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') timer_gettime(r0, &(0x7f0000000040)) read$snapshot(r1, 0x0, 0x2) [ 1466.840947][ T2296] should_failslab+0x5/0x20 [ 1466.845464][ T2296] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1466.851183][ T2296] ? __kmalloc_node+0x30/0x40 [ 1466.855858][ T2296] ? __get_vm_area_node+0x226/0x260 [ 1466.861041][ T2296] __kmalloc_node+0x30/0x40 [ 1466.865535][ T2296] __vmalloc_node_range+0x229/0x580 [ 1466.870808][ T2296] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 1466.876305][ T2296] dup_task_struct+0x470/0x630 [ 1466.881063][ T2296] ? copy_process+0x3ff/0x2e00 [ 1466.885810][ T2296] ? kstrtoull+0x30e/0x350 09:42:11 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat6\x00') ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) read$snapshot(r0, 0x0, 0x2) r1 = fsmount(r0, 0x1, 0x70) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000100)={0x3ff, 0x8}) r2 = fsmount(r1, 0x0, 0x88) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000000)) fspick(r1, &(0x7f0000000080)='./file0\x00', 0x0) [ 1466.890206][ T2296] copy_process+0x3ff/0x2e00 [ 1466.894802][ T2296] ? __fsnotify_parent+0x32f/0x430 [ 1466.900039][ T2296] ? get_pid_task+0x8b/0xc0 [ 1466.904533][ T2296] kernel_clone+0x14b/0x680 [ 1466.909020][ T2296] ? __fget_light+0x21b/0x260 [ 1466.913707][ T2296] __do_sys_fork+0x3a/0x60 [ 1466.918113][ T2296] do_syscall_64+0x44/0x80 [ 1466.922521][ T2296] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1466.926228][ T2315] FAULT_INJECTION: forcing a failure. [ 1466.926228][ T2315] name failslab, interval 1, probability 0, space 0, times 0 [ 1466.928407][ T2296] RIP: 0033:0x4665d9 [ 1466.928422][ T2296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1466.964592][ T2296] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1466.972983][ T2296] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1466.981025][ T2296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1466.988974][ T2296] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1466.996980][ T2296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1467.005119][ T2296] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1467.013069][ T2315] CPU: 1 PID: 2315 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1467.021394][ T2315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1467.031438][ T2315] Call Trace: [ 1467.034699][ T2315] dump_stack+0x137/0x19d [ 1467.039015][ T2315] should_fail+0x23c/0x250 [ 1467.043455][ T2315] ? sock_alloc_inode+0x23/0x90 [ 1467.048299][ T2315] __should_failslab+0x81/0x90 [ 1467.053064][ T2315] ? sockfs_init_fs_context+0x70/0x70 [ 1467.058457][ T2315] should_failslab+0x5/0x20 [ 1467.062984][ T2315] kmem_cache_alloc+0x46/0x2e0 [ 1467.067746][ T2315] ? selinux_socket_create+0x7c/0x170 [ 1467.073122][ T2315] ? sockfs_init_fs_context+0x70/0x70 [ 1467.078490][ T2315] sock_alloc_inode+0x23/0x90 [ 1467.083156][ T2315] ? sockfs_init_fs_context+0x70/0x70 [ 1467.088524][ T2315] new_inode_pseudo+0x38/0x1c0 [ 1467.093361][ T2315] __sock_create+0x122/0x4f0 [ 1467.097986][ T2315] ? should_fail+0xd6/0x250 [ 1467.102487][ T2315] sock_create_kern+0x34/0x40 [ 1467.107176][ T2315] io_uring_create+0x15e5/0x18d0 [ 1467.112132][ T2315] ? should_fail+0xd6/0x250 [ 1467.116679][ T2315] __x64_sys_io_uring_setup+0xe1/0x120 [ 1467.122128][ T2315] do_syscall_64+0x44/0x80 [ 1467.126538][ T2315] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1467.132448][ T2315] RIP: 0033:0x4665d9 [ 1467.136339][ T2315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1467.155926][ T2315] RSP: 002b:00007f1897f58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1467.164372][ T2315] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1467.172399][ T2315] RDX: 0000000020a2e000 RSI: 0000000020000140 RDI: 0000000000005736 [ 1467.180433][ T2315] RBP: 0000000020000140 R08: 00000000200000c0 R09: 00000000200000c0 09:42:11 executing program 0 (fault-call:3 fault-nth:5): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:11 executing program 2 (fault-call:3 fault-nth:5): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) 09:42:11 executing program 3: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r1, 0x0, 0x2) [ 1467.188405][ T2315] R10: 0000000020000100 R11: 0000000000000202 R12: 00000000200000c0 [ 1467.196357][ T2315] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 [ 1467.204363][ T2315] socket: no more sockets [ 1467.253218][ T2339] FAULT_INJECTION: forcing a failure. [ 1467.253218][ T2339] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1467.266449][ T2339] CPU: 1 PID: 2339 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1467.274867][ T2339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1467.284912][ T2339] Call Trace: [ 1467.287490][ T2337] FAULT_INJECTION: forcing a failure. [ 1467.287490][ T2337] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1467.288195][ T2339] dump_stack+0x137/0x19d [ 1467.305818][ T2339] should_fail+0x23c/0x250 [ 1467.310223][ T2339] __alloc_pages+0x102/0x320 [ 1467.314865][ T2339] alloc_pages+0x21d/0x310 [ 1467.319331][ T2339] __get_free_pages+0x8/0x30 [ 1467.323913][ T2339] io_uring_create+0x887/0x18d0 [ 1467.328786][ T2339] ? should_fail+0xd6/0x250 [ 1467.333270][ T2339] __x64_sys_io_uring_setup+0xe1/0x120 [ 1467.338708][ T2339] do_syscall_64+0x44/0x80 [ 1467.343115][ T2339] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1467.349008][ T2339] RIP: 0033:0x4665d9 [ 1467.352921][ T2339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1467.372504][ T2339] RSP: 002b:00007f1ed1226108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1467.380893][ T2339] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1467.388901][ T2339] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 000000000000332a 09:42:11 executing program 5: timer_create(0x2, 0x0, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') timer_gettime(r0, &(0x7f0000000040)) read$snapshot(r1, 0x0, 0x2) [ 1467.396875][ T2339] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 1467.404825][ T2339] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 1467.412783][ T2339] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1467.420731][ T2337] CPU: 0 PID: 2337 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1467.429205][ T2337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1467.439248][ T2337] Call Trace: [ 1467.442509][ T2337] dump_stack+0x137/0x19d [ 1467.446887][ T2337] should_fail+0x23c/0x250 09:42:11 executing program 1 (fault-call:3 fault-nth:11): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) 09:42:11 executing program 0 (fault-call:3 fault-nth:6): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1467.451308][ T2337] __alloc_pages+0x102/0x320 [ 1467.455887][ T2337] __vmalloc_node_range+0x2f9/0x580 [ 1467.461111][ T2337] dup_task_struct+0x470/0x630 [ 1467.465864][ T2337] ? copy_process+0x3ff/0x2e00 [ 1467.470703][ T2337] ? kstrtoull+0x30e/0x350 [ 1467.475203][ T2337] copy_process+0x3ff/0x2e00 [ 1467.479781][ T2337] ? __fsnotify_parent+0x32f/0x430 [ 1467.485326][ T2337] ? get_pid_task+0x8b/0xc0 [ 1467.489817][ T2337] kernel_clone+0x14b/0x680 [ 1467.494308][ T2337] ? __fget_light+0x21b/0x260 [ 1467.498982][ T2337] __do_sys_fork+0x3a/0x60 09:42:12 executing program 5: timer_create(0x2, 0x0, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') timer_gettime(r0, &(0x7f0000000040)) read$snapshot(r1, 0x0, 0x2) [ 1467.503740][ T2337] do_syscall_64+0x44/0x80 [ 1467.508156][ T2337] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1467.514109][ T2337] RIP: 0033:0x4665d9 [ 1467.518027][ T2337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1467.537620][ T2337] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1467.546060][ T2337] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1467.554034][ T2337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1467.562116][ T2337] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1467.570083][ T2337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1467.578152][ T2337] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 09:42:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4007, @fd=r0, 0x8, &(0x7f0000000140)=""/217, 0xd9, 0x10}, 0x1f) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt_cache\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/tty/drivers\x00', 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r3) ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) socket$inet(0x2, 0x4, 0x615cb866) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index, 0x5, 0x0, 0x8001, 0x0, 0x0, {0x0, r4}}, 0x1) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x5) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) io_uring_setup(0x4e18, &(0x7f0000000040)={0x0, 0x1061, 0x0, 0x3, 0x300, 0x0, r1}) [ 1467.622311][ T2360] FAULT_INJECTION: forcing a failure. [ 1467.622311][ T2360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1467.635417][ T2360] CPU: 0 PID: 2360 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1467.643748][ T2360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1467.653853][ T2360] Call Trace: [ 1467.657120][ T2360] dump_stack+0x137/0x19d [ 1467.658459][ T2361] FAULT_INJECTION: forcing a failure. [ 1467.658459][ T2361] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1467.661447][ T2360] should_fail+0x23c/0x250 [ 1467.661469][ T2360] should_fail_usercopy+0x16/0x20 [ 1467.684017][ T2360] _copy_to_user+0x1c/0x90 [ 1467.688424][ T2360] io_uring_create+0x159f/0x18d0 [ 1467.693342][ T2360] ? should_fail+0xd6/0x250 [ 1467.697819][ T2360] __x64_sys_io_uring_setup+0xe1/0x120 [ 1467.703256][ T2360] do_syscall_64+0x44/0x80 [ 1467.707728][ T2360] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1467.713659][ T2360] RIP: 0033:0x4665d9 [ 1467.717529][ T2360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1467.737122][ T2360] RSP: 002b:00007f1897f58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1467.745508][ T2360] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1467.753468][ T2360] RDX: 0000000020a2e000 RSI: 0000000020000140 RDI: 0000000000005736 [ 1467.761415][ T2360] RBP: 0000000020000140 R08: 00000000200000c0 R09: 00000000200000c0 [ 1467.769361][ T2360] R10: 0000000020000100 R11: 0000000000000202 R12: 00000000200000c0 [ 1467.777328][ T2360] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 [ 1467.785276][ T2361] CPU: 1 PID: 2361 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1467.793595][ T2361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1467.803673][ T2361] Call Trace: [ 1467.806982][ T2361] dump_stack+0x137/0x19d [ 1467.811334][ T2361] should_fail+0x23c/0x250 [ 1467.815762][ T2361] __alloc_pages+0x102/0x320 [ 1467.820362][ T2361] alloc_pages+0x21d/0x310 [ 1467.824836][ T2361] __get_free_pages+0x8/0x30 [ 1467.829419][ T2361] io_uring_create+0x9b9/0x18d0 [ 1467.834264][ T2361] ? should_fail+0xd6/0x250 [ 1467.838805][ T2361] __x64_sys_io_uring_setup+0xe1/0x120 [ 1467.844253][ T2361] do_syscall_64+0x44/0x80 [ 1467.848666][ T2361] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1467.854552][ T2361] RIP: 0033:0x4665d9 09:42:12 executing program 1 (fault-call:3 fault-nth:12): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:12 executing program 5: timer_create(0x2, 0x0, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') timer_gettime(r0, &(0x7f0000000040)) read$snapshot(r1, 0x0, 0x2) 09:42:12 executing program 2 (fault-call:3 fault-nth:6): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) read$snapshot(0xffffffffffffffff, &(0x7f0000000040)=""/72, 0x48) [ 1467.858430][ T2361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1467.878023][ T2361] RSP: 002b:00007f1ed1226108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1467.886421][ T2361] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1467.886438][ T2361] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 000000000000332a [ 1467.886450][ T2361] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 09:42:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) read$snapshot(0xffffffffffffffff, &(0x7f0000000040)=""/72, 0x48) [ 1467.886462][ T2361] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 09:42:12 executing program 1 (fault-call:3 fault-nth:13): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:12 executing program 5: timer_create(0x2, 0x0, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, &(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') timer_gettime(r0, &(0x7f0000000040)) 09:42:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) read$snapshot(0xffffffffffffffff, &(0x7f0000000040)=""/72, 0x48) 09:42:12 executing program 0 (fault-call:3 fault-nth:7): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1467.886474][ T2361] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1467.972949][ T2389] FAULT_INJECTION: forcing a failure. [ 1467.972949][ T2389] name failslab, interval 1, probability 0, space 0, times 0 09:42:12 executing program 2 (fault-call:3 fault-nth:7): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) read$snapshot(r0, 0x0, 0x0) [ 1467.972970][ T2389] CPU: 1 PID: 2389 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1467.973023][ T2389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1467.973034][ T2389] Call Trace: [ 1467.973061][ T2389] dump_stack+0x137/0x19d [ 1467.973100][ T2389] should_fail+0x23c/0x250 [ 1467.973121][ T2389] ? sk_prot_alloc+0x41/0x190 [ 1467.973144][ T2389] __should_failslab+0x81/0x90 [ 1467.973167][ T2389] should_failslab+0x5/0x20 [ 1467.973184][ T2389] kmem_cache_alloc+0x46/0x2e0 [ 1467.973261][ T2389] sk_prot_alloc+0x41/0x190 [ 1467.973277][ T2389] sk_alloc+0x2e/0x220 [ 1467.973292][ T2389] unix_create1+0x74/0x3c0 [ 1467.973309][ T2389] unix_create+0xdc/0x100 [ 1467.973326][ T2389] __sock_create+0x2c7/0x4f0 [ 1467.973343][ T2389] sock_create_kern+0x34/0x40 [ 1467.973376][ T2389] io_uring_create+0x15e5/0x18d0 [ 1467.973394][ T2389] ? should_fail+0xd6/0x250 [ 1467.973410][ T2389] __x64_sys_io_uring_setup+0xe1/0x120 [ 1467.973428][ T2389] do_syscall_64+0x44/0x80 [ 1467.973472][ T2389] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1467.973568][ T2389] RIP: 0033:0x4665d9 [ 1467.973578][ T2389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1467.973594][ T2389] RSP: 002b:00007f1897f58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1467.973623][ T2389] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1467.973634][ T2389] RDX: 0000000020a2e000 RSI: 0000000020000140 RDI: 0000000000005736 [ 1467.973645][ T2389] RBP: 0000000020000140 R08: 00000000200000c0 R09: 00000000200000c0 [ 1467.973653][ T2389] R10: 0000000020000100 R11: 0000000000000202 R12: 00000000200000c0 [ 1467.973698][ T2389] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 [ 1468.018344][ T2393] FAULT_INJECTION: forcing a failure. [ 1468.018344][ T2393] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.018373][ T2393] CPU: 1 PID: 2393 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1468.018389][ T2393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1468.018398][ T2393] Call Trace: [ 1468.018406][ T2393] dump_stack+0x137/0x19d [ 1468.018428][ T2393] should_fail+0x23c/0x250 [ 1468.018521][ T2393] __should_failslab+0x81/0x90 [ 1468.018543][ T2393] should_failslab+0x5/0x20 [ 1468.018575][ T2393] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1468.018599][ T2393] ? __kmalloc_node+0x30/0x40 [ 1468.018618][ T2393] __kmalloc_node+0x30/0x40 [ 1468.018637][ T2393] kvmalloc_node+0x81/0xf0 [ 1468.018677][ T2393] alloc_fdtable+0x112/0x1b0 [ 1468.018697][ T2393] dup_fd+0x548/0x6e0 [ 1468.018776][ T2393] copy_process+0xb59/0x2e00 [ 1468.018794][ T2393] kernel_clone+0x14b/0x680 [ 1468.018810][ T2393] ? __fget_light+0x21b/0x260 [ 1468.018831][ T2393] __do_sys_fork+0x3a/0x60 [ 1468.018848][ T2393] do_syscall_64+0x44/0x80 [ 1468.018870][ T2393] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1468.018948][ T2393] RIP: 0033:0x4665d9 [ 1468.018961][ T2393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1468.018977][ T2393] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1468.018992][ T2393] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1468.019002][ T2393] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1468.019014][ T2393] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1468.019024][ T2393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1468.019033][ T2393] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1468.121412][ T2417] FAULT_INJECTION: forcing a failure. [ 1468.121412][ T2417] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.121432][ T2417] CPU: 1 PID: 2417 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1468.121447][ T2417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1468.121454][ T2417] Call Trace: [ 1468.121460][ T2417] dump_stack+0x137/0x19d [ 1468.121485][ T2417] should_fail+0x23c/0x250 [ 1468.121570][ T2417] ? sk_prot_alloc+0x41/0x190 [ 1468.121588][ T2417] __should_failslab+0x81/0x90 [ 1468.121607][ T2417] should_failslab+0x5/0x20 [ 1468.121620][ T2417] kmem_cache_alloc+0x46/0x2e0 [ 1468.121636][ T2417] sk_prot_alloc+0x41/0x190 [ 1468.121721][ T2417] sk_alloc+0x2e/0x220 [ 1468.121735][ T2417] unix_create1+0x74/0x3c0 [ 1468.121750][ T2417] unix_create+0xdc/0x100 [ 1468.121762][ T2417] __sock_create+0x2c7/0x4f0 [ 1468.121775][ T2417] sock_create_kern+0x34/0x40 [ 1468.121791][ T2417] io_uring_create+0x15e5/0x18d0 [ 1468.121860][ T2417] ? should_fail+0xd6/0x250 [ 1468.121959][ T2417] __x64_sys_io_uring_setup+0xe1/0x120 [ 1468.121973][ T2417] do_syscall_64+0x44/0x80 [ 1468.121989][ T2417] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1468.122014][ T2417] RIP: 0033:0x4665d9 [ 1468.122024][ T2417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1468.122038][ T2417] RSP: 002b:00007f1897f58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1468.122054][ T2417] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1468.122143][ T2417] RDX: 0000000020a2e000 RSI: 0000000020000140 RDI: 0000000000005736 [ 1468.122155][ T2417] RBP: 0000000020000140 R08: 00000000200000c0 R09: 00000000200000c0 [ 1468.122241][ T2417] R10: 0000000020000100 R11: 0000000000000202 R12: 00000000200000c0 [ 1468.122250][ T2417] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 [ 1468.157753][ T2425] FAULT_INJECTION: forcing a failure. [ 1468.157753][ T2425] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1468.157778][ T2425] CPU: 0 PID: 2425 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1468.157793][ T2425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1468.157800][ T2425] Call Trace: [ 1468.157807][ T2425] dump_stack+0x137/0x19d [ 1468.157827][ T2425] should_fail+0x23c/0x250 [ 1468.157850][ T2425] __alloc_pages+0x102/0x320 [ 1468.157869][ T2425] __vmalloc_node_range+0x2f9/0x580 [ 1468.157886][ T2425] dup_task_struct+0x470/0x630 [ 1468.157971][ T2425] ? copy_process+0x3ff/0x2e00 [ 1468.157984][ T2425] ? kstrtoull+0x30e/0x350 [ 1468.157998][ T2425] copy_process+0x3ff/0x2e00 [ 1468.158092][ T2425] ? __fsnotify_parent+0x32f/0x430 [ 1468.158106][ T2425] ? get_pid_task+0x8b/0xc0 [ 1468.158125][ T2425] kernel_clone+0x14b/0x680 [ 1468.158142][ T2425] ? __fget_light+0x21b/0x260 [ 1468.158163][ T2425] __do_sys_fork+0x3a/0x60 [ 1468.158177][ T2425] do_syscall_64+0x44/0x80 [ 1468.158193][ T2425] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1468.158218][ T2425] RIP: 0033:0x4665d9 [ 1468.158305][ T2425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1468.158318][ T2425] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1468.158350][ T2425] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1468.158444][ T2425] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1468.158456][ T2425] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1468.158469][ T2425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1468.158481][ T2425] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1468.195138][ T2421] FAULT_INJECTION: forcing a failure. [ 1468.195138][ T2421] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.195186][ T2421] CPU: 1 PID: 2421 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1468.195199][ T2421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1468.195207][ T2421] Call Trace: [ 1468.195212][ T2421] dump_stack+0x137/0x19d [ 1468.195232][ T2421] should_fail+0x23c/0x250 [ 1468.195323][ T2421] __should_failslab+0x81/0x90 [ 1468.195356][ T2421] ? io_uring_create+0x13f7/0x18d0 [ 1468.195381][ T2421] should_failslab+0x5/0x20 [ 1468.195399][ T2421] kmem_cache_alloc_trace+0x49/0x310 [ 1468.195421][ T2421] ? alloc_pages+0x21d/0x310 [ 1468.195492][ T2421] io_uring_create+0x13f7/0x18d0 [ 1468.195506][ T2421] ? should_fail+0xd6/0x250 [ 1468.195524][ T2421] __x64_sys_io_uring_setup+0xe1/0x120 [ 1468.195608][ T2421] do_syscall_64+0x44/0x80 [ 1468.195625][ T2421] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1468.195648][ T2421] RIP: 0033:0x4665d9 [ 1468.195661][ T2421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:42:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') read$snapshot(r0, 0x0, 0x2) set_thread_area(&(0x7f0000000040)={0x1, 0x1000, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}) 09:42:13 executing program 5: timer_create(0x2, 0x0, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, &(0x7f0000000380)) timer_gettime(r0, &(0x7f0000000040)) 09:42:13 executing program 1 (fault-call:3 fault-nth:14): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) read$snapshot(r0, 0x0, 0x0) 09:42:13 executing program 2 (fault-call:3 fault-nth:8): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:13 executing program 0 (fault-call:3 fault-nth:8): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1468.195678][ T2421] RSP: 002b:00007f1ed1226108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1469.000901][ T2421] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1469.000914][ T2421] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 000000000000332a [ 1469.025297][ T2421] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 1469.033240][ T2421] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 1469.041195][ T2421] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1469.145195][ T2451] FAULT_INJECTION: forcing a failure. [ 1469.145195][ T2451] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1469.153239][ T2450] FAULT_INJECTION: forcing a failure. [ 1469.153239][ T2450] name failslab, interval 1, probability 0, space 0, times 0 [ 1469.158466][ T2451] CPU: 0 PID: 2451 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1469.179340][ T2451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1469.189421][ T2451] Call Trace: [ 1469.192681][ T2451] dump_stack+0x137/0x19d [ 1469.196997][ T2451] should_fail+0x23c/0x250 [ 1469.201389][ T2451] __alloc_pages+0x102/0x320 [ 1469.206005][ T2451] __vmalloc_node_range+0x2f9/0x580 [ 1469.211184][ T2451] dup_task_struct+0x470/0x630 [ 1469.215924][ T2451] ? copy_process+0x3ff/0x2e00 [ 1469.220673][ T2451] ? kstrtoull+0x30e/0x350 [ 1469.225066][ T2451] copy_process+0x3ff/0x2e00 [ 1469.229642][ T2451] ? __fsnotify_parent+0x32f/0x430 [ 1469.234835][ T2451] ? get_pid_task+0x8b/0xc0 [ 1469.239336][ T2451] kernel_clone+0x14b/0x680 [ 1469.243851][ T2451] ? __fget_light+0x21b/0x260 [ 1469.248553][ T2451] __do_sys_fork+0x3a/0x60 [ 1469.252959][ T2451] do_syscall_64+0x44/0x80 [ 1469.257367][ T2451] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1469.263311][ T2451] RIP: 0033:0x4665d9 [ 1469.267191][ T2451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1469.286910][ T2451] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1469.295309][ T2451] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1469.303361][ T2451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1469.311387][ T2451] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1469.319365][ T2451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1469.327333][ T2451] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1469.335284][ T2450] CPU: 1 PID: 2450 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1469.343618][ T2450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1469.350723][ T2461] FAULT_INJECTION: forcing a failure. [ 1469.350723][ T2461] name failslab, interval 1, probability 0, space 0, times 0 [ 1469.353674][ T2450] Call Trace: [ 1469.369627][ T2450] dump_stack+0x137/0x19d [ 1469.374014][ T2450] should_fail+0x23c/0x250 [ 1469.378415][ T2450] __should_failslab+0x81/0x90 [ 1469.383263][ T2450] ? selinux_sk_alloc_security+0x70/0xf0 [ 1469.388893][ T2450] should_failslab+0x5/0x20 [ 1469.393404][ T2450] kmem_cache_alloc_trace+0x49/0x310 [ 1469.398727][ T2450] selinux_sk_alloc_security+0x70/0xf0 [ 1469.404299][ T2450] security_sk_alloc+0x45/0x90 [ 1469.409049][ T2450] sk_prot_alloc+0xd2/0x190 [ 1469.413542][ T2450] sk_alloc+0x2e/0x220 [ 1469.417603][ T2450] unix_create1+0x74/0x3c0 [ 1469.422000][ T2450] unix_create+0xdc/0x100 [ 1469.426307][ T2450] __sock_create+0x2c7/0x4f0 [ 1469.430920][ T2450] sock_create_kern+0x34/0x40 [ 1469.435569][ T2450] io_uring_create+0x15e5/0x18d0 [ 1469.440570][ T2450] ? should_fail+0xd6/0x250 [ 1469.445087][ T2450] __x64_sys_io_uring_setup+0xe1/0x120 [ 1469.450583][ T2450] do_syscall_64+0x44/0x80 [ 1469.454987][ T2450] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1469.460898][ T2450] RIP: 0033:0x4665d9 [ 1469.464777][ T2450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1469.484367][ T2450] RSP: 002b:00007f1897f58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1469.492827][ T2450] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1469.500816][ T2450] RDX: 0000000020a2e000 RSI: 0000000020000140 RDI: 0000000000005736 [ 1469.508780][ T2450] RBP: 0000000020000140 R08: 00000000200000c0 R09: 00000000200000c0 [ 1469.516778][ T2450] R10: 0000000020000100 R11: 0000000000000202 R12: 00000000200000c0 [ 1469.524723][ T2450] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 [ 1469.532693][ T2461] CPU: 0 PID: 2461 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1469.541025][ T2461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1469.551077][ T2461] Call Trace: [ 1469.554341][ T2461] dump_stack+0x137/0x19d [ 1469.558668][ T2461] should_fail+0x23c/0x250 [ 1469.563066][ T2461] __should_failslab+0x81/0x90 [ 1469.567923][ T2461] ? percpu_ref_init+0x9e/0x210 [ 1469.572757][ T2461] should_failslab+0x5/0x20 [ 1469.577257][ T2461] kmem_cache_alloc_trace+0x49/0x310 [ 1469.582676][ T2461] percpu_ref_init+0x9e/0x210 [ 1469.587418][ T2461] ? __io_register_rsrc_update+0x1260/0x1260 [ 1469.593500][ T2461] io_uring_create+0x1419/0x18d0 [ 1469.598410][ T2461] ? should_fail+0xd6/0x250 [ 1469.602893][ T2461] __x64_sys_io_uring_setup+0xe1/0x120 [ 1469.608438][ T2461] do_syscall_64+0x44/0x80 [ 1469.612838][ T2461] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1469.618787][ T2461] RIP: 0033:0x4665d9 [ 1469.622693][ T2461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:42:14 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) r1 = fsmount(0xffffffffffffffff, 0xfbb6efdd480cc939, 0x70) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000040)='\x00', &(0x7f0000000100)="408b4ea86f8e041690a6bfe2f8b1cd32302cae51cb891f6fa191b74a63ed7672afb77a102ddfb731b71f4c5ec5ce7b4abb1feea3767a16fe2e6a49ce26de8aa8d24f6079912d9aae81c1abaa317ca7a1897c6febb32fcf15e534d1b345582634582ac22f08c2d9dcfc100914b7c78150ac622b672853b9220957cfa6a1cb1dd57eb994aa9d", 0x85) r2 = syz_open_procfs(r0, &(0x7f00000000c0)='net/rt6_stats\x00') read$snapshot(r2, 0x0, 0x2) 09:42:14 executing program 5: timer_create(0x2, 0x0, &(0x7f0000000080)=0x0) timer_gettime(r0, &(0x7f0000000040)) 09:42:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) read$snapshot(r0, 0x0, 0x0) [ 1469.642331][ T2461] RSP: 002b:00007f1ed1205108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1469.650755][ T2461] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9 [ 1469.658699][ T2461] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 000000000000332a [ 1469.666643][ T2461] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 1469.674589][ T2461] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 1469.682533][ T2461] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 09:42:14 executing program 0 (fault-call:3 fault-nth:9): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:14 executing program 2 (fault-call:3 fault-nth:9): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:14 executing program 1 (fault-call:3 fault-nth:15): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x18, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x20000040) 09:42:14 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) r1 = fsmount(0xffffffffffffffff, 0xfbb6efdd480cc939, 0x70) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000040)='\x00', &(0x7f0000000100)="408b4ea86f8e041690a6bfe2f8b1cd32302cae51cb891f6fa191b74a63ed7672afb77a102ddfb731b71f4c5ec5ce7b4abb1feea3767a16fe2e6a49ce26de8aa8d24f6079912d9aae81c1abaa317ca7a1897c6febb32fcf15e534d1b345582634582ac22f08c2d9dcfc100914b7c78150ac622b672853b9220957cfa6a1cb1dd57eb994aa9d", 0x85) r2 = syz_open_procfs(r0, &(0x7f00000000c0)='net/rt6_stats\x00') read$snapshot(r2, 0x0, 0x2) 09:42:14 executing program 5: timer_create(0x2, 0x0, &(0x7f0000000080)=0x0) timer_gettime(r0, &(0x7f0000000040)) [ 1469.856743][ T2483] FAULT_INJECTION: forcing a failure. [ 1469.856743][ T2483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1469.869905][ T2483] CPU: 1 PID: 2483 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1469.878220][ T2483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1469.888257][ T2483] Call Trace: [ 1469.891526][ T2483] dump_stack+0x137/0x19d [ 1469.895866][ T2483] should_fail+0x23c/0x250 [ 1469.900353][ T2483] should_fail_usercopy+0x16/0x20 [ 1469.905378][ T2483] _copy_to_user+0x1c/0x90 [ 1469.909812][ T2483] io_uring_create+0x159f/0x18d0 [ 1469.914780][ T2483] ? should_fail+0xd6/0x250 [ 1469.919360][ T2483] __x64_sys_io_uring_setup+0xe1/0x120 [ 1469.924831][ T2483] do_syscall_64+0x44/0x80 [ 1469.929267][ T2483] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1469.935288][ T2483] RIP: 0033:0x4665d9 09:42:14 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) r1 = fsmount(0xffffffffffffffff, 0xfbb6efdd480cc939, 0x70) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000040)='\x00', &(0x7f0000000100)="408b4ea86f8e041690a6bfe2f8b1cd32302cae51cb891f6fa191b74a63ed7672afb77a102ddfb731b71f4c5ec5ce7b4abb1feea3767a16fe2e6a49ce26de8aa8d24f6079912d9aae81c1abaa317ca7a1897c6febb32fcf15e534d1b345582634582ac22f08c2d9dcfc100914b7c78150ac622b672853b9220957cfa6a1cb1dd57eb994aa9d", 0x85) r2 = syz_open_procfs(r0, &(0x7f00000000c0)='net/rt6_stats\x00') read$snapshot(r2, 0x0, 0x2) [ 1469.939181][ T2483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1469.959061][ T2483] RSP: 002b:00007f1ed1226108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1469.967472][ T2483] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1469.975462][ T2483] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 000000000000332a [ 1469.976033][ T2503] FAULT_INJECTION: forcing a failure. [ 1469.976033][ T2503] name failslab, interval 1, probability 0, space 0, times 0 [ 1469.983429][ T2483] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 09:42:14 executing program 5: timer_create(0x2, 0x0, &(0x7f0000000080)=0x0) timer_gettime(r0, &(0x7f0000000040)) 09:42:14 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) r1 = fsmount(0xffffffffffffffff, 0xfbb6efdd480cc939, 0x70) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000040)='\x00', &(0x7f0000000100)="408b4ea86f8e041690a6bfe2f8b1cd32302cae51cb891f6fa191b74a63ed7672afb77a102ddfb731b71f4c5ec5ce7b4abb1feea3767a16fe2e6a49ce26de8aa8d24f6079912d9aae81c1abaa317ca7a1897c6febb32fcf15e534d1b345582634582ac22f08c2d9dcfc100914b7c78150ac622b672853b9220957cfa6a1cb1dd57eb994aa9d", 0x85) r2 = syz_open_procfs(r0, &(0x7f00000000c0)='net/rt6_stats\x00') read$snapshot(r2, 0x0, 0x2) [ 1469.983444][ T2483] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 1469.983454][ T2483] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1470.019977][ T2503] CPU: 0 PID: 2503 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1470.028291][ T2503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1470.038410][ T2503] Call Trace: [ 1470.041672][ T2503] dump_stack+0x137/0x19d [ 1470.046082][ T2503] should_fail+0x23c/0x250 [ 1470.050647][ T2503] __should_failslab+0x81/0x90 [ 1470.055480][ T2503] ? selinux_sk_alloc_security+0x70/0xf0 [ 1470.061108][ T2503] should_failslab+0x5/0x20 [ 1470.065637][ T2503] kmem_cache_alloc_trace+0x49/0x310 [ 1470.070922][ T2503] selinux_sk_alloc_security+0x70/0xf0 [ 1470.070950][ T2503] security_sk_alloc+0x45/0x90 [ 1470.071017][ T2503] sk_prot_alloc+0xd2/0x190 [ 1470.071038][ T2503] sk_alloc+0x2e/0x220 [ 1470.071056][ T2503] unix_create1+0x74/0x3c0 [ 1470.071074][ T2503] unix_create+0xdc/0x100 [ 1470.071091][ T2503] __sock_create+0x2c7/0x4f0 [ 1470.071171][ T2503] sock_create_kern+0x34/0x40 09:42:14 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r0 = fsmount(0xffffffffffffffff, 0xfbb6efdd480cc939, 0x70) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='\x00', &(0x7f0000000100)="408b4ea86f8e041690a6bfe2f8b1cd32302cae51cb891f6fa191b74a63ed7672afb77a102ddfb731b71f4c5ec5ce7b4abb1feea3767a16fe2e6a49ce26de8aa8d24f6079912d9aae81c1abaa317ca7a1897c6febb32fcf15e534d1b345582634582ac22f08c2d9dcfc100914b7c78150ac622b672853b9220957cfa6a1cb1dd57eb994aa9d", 0x85) read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) syz_io_uring_setup(0x5e29, &(0x7f0000000040)={0x0, 0x5e3c, 0x10, 0x0, 0x17b, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) [ 1470.107901][ T2503] io_uring_create+0x15e5/0x18d0 [ 1470.112857][ T2503] ? should_fail+0xd6/0x250 [ 1470.117399][ T2503] __x64_sys_io_uring_setup+0xe1/0x120 [ 1470.122858][ T2503] do_syscall_64+0x44/0x80 [ 1470.127319][ T2503] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1470.133308][ T2503] RIP: 0033:0x4665d9 [ 1470.135756][ T2505] FAULT_INJECTION: forcing a failure. [ 1470.135756][ T2505] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1470.137180][ T2503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1470.137198][ T2503] RSP: 002b:00007f1897f58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1470.178418][ T2503] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1470.186365][ T2503] RDX: 0000000020a2e000 RSI: 0000000020000140 RDI: 0000000000005736 [ 1470.194310][ T2503] RBP: 0000000020000140 R08: 00000000200000c0 R09: 00000000200000c0 [ 1470.202326][ T2503] R10: 0000000020000100 R11: 0000000000000202 R12: 00000000200000c0 [ 1470.210289][ T2503] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 [ 1470.218257][ T2505] CPU: 1 PID: 2505 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1470.226696][ T2505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1470.236733][ T2505] Call Trace: [ 1470.239992][ T2505] dump_stack+0x137/0x19d [ 1470.244331][ T2505] should_fail+0x23c/0x250 [ 1470.248764][ T2505] __alloc_pages+0x102/0x320 [ 1470.253423][ T2505] __vmalloc_node_range+0x2f9/0x580 [ 1470.258608][ T2505] dup_task_struct+0x470/0x630 [ 1470.263374][ T2505] ? copy_process+0x3ff/0x2e00 [ 1470.268126][ T2505] ? kstrtoull+0x30e/0x350 [ 1470.272655][ T2505] copy_process+0x3ff/0x2e00 [ 1470.277231][ T2505] ? __fsnotify_parent+0x32f/0x430 [ 1470.282333][ T2505] ? get_pid_task+0x8b/0xc0 [ 1470.286824][ T2505] kernel_clone+0x14b/0x680 [ 1470.291347][ T2505] ? __fget_light+0x21b/0x260 [ 1470.296030][ T2505] __do_sys_fork+0x3a/0x60 [ 1470.300440][ T2505] do_syscall_64+0x44/0x80 [ 1470.304864][ T2505] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1470.310798][ T2505] RIP: 0033:0x4665d9 [ 1470.314689][ T2505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1470.334303][ T2505] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1470.343059][ T2505] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1470.351022][ T2505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 09:42:14 executing program 1 (fault-call:3 fault-nth:16): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:14 executing program 0 (fault-call:3 fault-nth:10): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1470.358984][ T2505] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1470.366939][ T2505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1470.374897][ T2505] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1470.399476][ T2536] FAULT_INJECTION: forcing a failure. [ 1470.399476][ T2536] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.412170][ T2536] CPU: 1 PID: 2536 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1470.420480][ T2536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1470.430610][ T2536] Call Trace: [ 1470.433875][ T2536] dump_stack+0x137/0x19d [ 1470.438193][ T2536] should_fail+0x23c/0x250 [ 1470.442601][ T2536] ? sock_alloc_inode+0x23/0x90 [ 1470.447441][ T2536] __should_failslab+0x81/0x90 [ 1470.452222][ T2536] ? sockfs_init_fs_context+0x70/0x70 [ 1470.457591][ T2536] should_failslab+0x5/0x20 [ 1470.462151][ T2536] kmem_cache_alloc+0x46/0x2e0 [ 1470.466965][ T2536] ? selinux_socket_create+0x7c/0x170 [ 1470.472341][ T2536] ? sockfs_init_fs_context+0x70/0x70 [ 1470.475060][ T2539] FAULT_INJECTION: forcing a failure. [ 1470.475060][ T2539] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.477705][ T2536] sock_alloc_inode+0x23/0x90 [ 1470.494925][ T2536] ? sockfs_init_fs_context+0x70/0x70 [ 1470.500327][ T2536] new_inode_pseudo+0x38/0x1c0 [ 1470.505096][ T2536] __sock_create+0x122/0x4f0 [ 1470.509667][ T2536] ? should_fail+0xd6/0x250 [ 1470.514226][ T2536] sock_create_kern+0x34/0x40 [ 1470.518878][ T2536] io_uring_create+0x15e5/0x18d0 [ 1470.523797][ T2536] ? should_fail+0xd6/0x250 [ 1470.528285][ T2536] __x64_sys_io_uring_setup+0xe1/0x120 [ 1470.533790][ T2536] do_syscall_64+0x44/0x80 [ 1470.538311][ T2536] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1470.544220][ T2536] RIP: 0033:0x4665d9 [ 1470.548191][ T2536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1470.567942][ T2536] RSP: 002b:00007f1ed1226108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1470.576454][ T2536] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1470.584400][ T2536] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 000000000000332a [ 1470.592432][ T2536] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 1470.600378][ T2536] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 1470.608416][ T2536] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1470.616399][ T2539] CPU: 0 PID: 2539 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1470.616431][ T2536] socket: no more sockets [ 1470.624717][ T2539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1470.624730][ T2539] Call Trace: [ 1470.624736][ T2539] dump_stack+0x137/0x19d [ 1470.646615][ T2539] should_fail+0x23c/0x250 [ 1470.651111][ T2539] ? __alloc_file+0x2e/0x1a0 [ 1470.655703][ T2539] __should_failslab+0x81/0x90 [ 1470.660479][ T2539] should_failslab+0x5/0x20 [ 1470.664984][ T2539] kmem_cache_alloc+0x46/0x2e0 [ 1470.669836][ T2539] __alloc_file+0x2e/0x1a0 [ 1470.674238][ T2539] alloc_empty_file+0xcd/0x1c0 [ 1470.678994][ T2539] alloc_file+0x3a/0x280 [ 1470.683235][ T2539] alloc_file_pseudo+0xe2/0x130 [ 1470.688081][ T2539] anon_inode_getfile+0x9f/0x120 [ 1470.693015][ T2539] io_uring_create+0x163b/0x18d0 09:42:15 executing program 2 (fault-call:3 fault-nth:10): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:15 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000040)) 09:42:15 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r0 = fsmount(0xffffffffffffffff, 0xfbb6efdd480cc939, 0x70) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='\x00', &(0x7f0000000100)="408b4ea86f8e041690a6bfe2f8b1cd32302cae51cb891f6fa191b74a63ed7672afb77a102ddfb731b71f4c5ec5ce7b4abb1feea3767a16fe2e6a49ce26de8aa8d24f6079912d9aae81c1abaa317ca7a1897c6febb32fcf15e534d1b345582634582ac22f08c2d9dcfc100914b7c78150ac622b672853b9220957cfa6a1cb1dd57eb994aa9d", 0x85) read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:15 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)={0x458, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe66b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x68, 0x3, "85309b7509df8a41f8ecd7e204921a28d54229be722b4da44a95d9384f6769f74635ea60a3e9748d9038f3292949a289b59c7f210f55ef4cd2aa60d63af9cd5192e21e1d35c32e89acbaea24516ed2362249dafa21485545d813af13ded9eeee45ba2e51"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_ID={0x6b, 0x3, "2540098e027ad4d611e956c2ab7cfb5589abc45ef30df60132886332117878923b5727eb6c68fc0566463a4630a52476cf5597c35ceaadfd3d2d8b99aae839af7daf9e7fa78d64542a6e17da1580efa52b4b7eea8e6307ffdcd808ea28d7c28a955e258815972e"}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x340b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcba}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2a}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_NODE={0x230, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "4489d0f578c6dc37e2bdde8f6ef5ff9364e3454395e7fdd5d3afc3"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "8c9bf6fd0a8a7dfa004e67fb9023dda7c4156dbe7585a1eba48c6389e3c4592bbb26"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_ID={0x1b, 0x3, "88c6a4fc96d8b71e8c2fe07755609a91f156aa532be3d4"}, @TIPC_NLA_NODE_ID={0x5e, 0x3, "4339995d1d01f187e86f6521a2fea1016883ffd8d20663f773c3f0cd2a920447d0d40f462788ecbd47e5fc8abbefbaabb1b42f25d981f2e847876a7ae94ecd5cb697ea0c36d914182d3e3423feccfedf64aa354ceecec9eace93"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "8e1ace63a061af9eb7c1a150196c0ba95020e32ad146627e6500e3ec226ac874"}}, @TIPC_NLA_NODE_ID={0xbe, 0x3, "7da8b2cdadf0715c7061bf932301729621070f4d62a417486e5e058e99dbc01185e78d9c429588181e765d6fbc0c471415ff9c3091749bad7c153bc80ba352aa3e589099f7493b29ffe4613ff313ddabe2f4328edd5dbad643827ed2bb7f51f62a12135bb45272eaf7621f28013e3738edffa28bf42ce6de9b9be0c2967a2123817a97dc4e1910f087ced3444657b06e3687ee0dae0652cb707f5e1459c2ab8f43f2ad7f313191e120d8bf371eea13821c6d6d1222ea8f09b9e6"}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x79}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2b}]}]}, 0x458}, 0x1, 0x0, 0x0, 0x8000}, 0x4) read$snapshot(r0, 0x0, 0x2) 09:42:15 executing program 0 (fault-call:3 fault-nth:11): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1470.697986][ T2539] ? should_fail+0xd6/0x250 [ 1470.702536][ T2539] __x64_sys_io_uring_setup+0xe1/0x120 [ 1470.708046][ T2539] do_syscall_64+0x44/0x80 [ 1470.712453][ T2539] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1470.718389][ T2539] RIP: 0033:0x4665d9 [ 1470.722289][ T2539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1470.741955][ T2539] RSP: 002b:00007f1897f58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1470.754429][ T2539] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1470.762388][ T2539] RDX: 0000000020a2e000 RSI: 0000000020000140 RDI: 0000000000005736 [ 1470.770349][ T2539] RBP: 0000000020000140 R08: 00000000200000c0 R09: 00000000200000c0 [ 1470.778316][ T2539] R10: 0000000020000100 R11: 0000000000000202 R12: 00000000200000c0 [ 1470.786282][ T2539] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 [ 1470.789605][ T2552] FAULT_INJECTION: forcing a failure. 09:42:15 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000040)) 09:42:15 executing program 0 (fault-call:3 fault-nth:12): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1470.789605][ T2552] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.807033][ T2552] CPU: 1 PID: 2552 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1470.815344][ T2552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1470.825482][ T2552] Call Trace: 09:42:15 executing program 2 (fault-call:3 fault-nth:11): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:15 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r0 = fsmount(0xffffffffffffffff, 0xfbb6efdd480cc939, 0x70) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='\x00', &(0x7f0000000100)="408b4ea86f8e041690a6bfe2f8b1cd32302cae51cb891f6fa191b74a63ed7672afb77a102ddfb731b71f4c5ec5ce7b4abb1feea3767a16fe2e6a49ce26de8aa8d24f6079912d9aae81c1abaa317ca7a1897c6febb32fcf15e534d1b345582634582ac22f08c2d9dcfc100914b7c78150ac622b672853b9220957cfa6a1cb1dd57eb994aa9d", 0x85) read$snapshot(0xffffffffffffffff, 0x0, 0x2) [ 1470.825489][ T2552] dump_stack+0x137/0x19d [ 1470.825597][ T2552] should_fail+0x23c/0x250 [ 1470.825627][ T2552] ? kzalloc+0x1d/0x30 09:42:15 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000040)) [ 1470.825647][ T2552] __should_failslab+0x81/0x90 [ 1470.825745][ T2552] should_failslab+0x5/0x20 [ 1470.825772][ T2552] __kmalloc+0x66/0x340 [ 1470.825853][ T2552] kzalloc+0x1d/0x30 [ 1470.825873][ T2552] security_prepare_creds+0x44/0x1a0 [ 1470.825888][ T2552] prepare_creds+0x2d4/0x3f0 [ 1470.825904][ T2552] copy_creds+0xe4/0x340 [ 1470.825953][ T2552] copy_process+0x616/0x2e00 09:42:15 executing program 1 (fault-call:3 fault-nth:17): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:15 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) fsmount(0xffffffffffffffff, 0xfbb6efdd480cc939, 0x70) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/rt6_stats\x00') read$snapshot(r1, 0x0, 0x2) 09:42:15 executing program 2 (fault-call:3 fault-nth:12): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:15 executing program 0 (fault-call:3 fault-nth:13): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:15 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, &(0x7f0000000380)) timer_gettime(r0, &(0x7f0000000040)) [ 1470.825970][ T2552] ? __fsnotify_parent+0x32f/0x430 [ 1470.825988][ T2552] ? get_pid_task+0x8b/0xc0 [ 1470.826004][ T2552] kernel_clone+0x14b/0x680 [ 1470.826034][ T2552] ? __fget_light+0x21b/0x260 [ 1470.826057][ T2552] __do_sys_fork+0x3a/0x60 [ 1470.826114][ T2552] do_syscall_64+0x44/0x80 [ 1470.826132][ T2552] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1470.826157][ T2552] RIP: 0033:0x4665d9 [ 1470.826169][ T2552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1470.826182][ T2552] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1470.826196][ T2552] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1470.826205][ T2552] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1470.826213][ T2552] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1470.826222][ T2552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1470.826231][ T2552] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1470.843008][ T2551] FAULT_INJECTION: forcing a failure. [ 1470.843008][ T2551] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.843027][ T2551] CPU: 0 PID: 2551 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1470.843041][ T2551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1470.843050][ T2551] Call Trace: [ 1470.843055][ T2551] dump_stack+0x137/0x19d [ 1470.843169][ T2551] should_fail+0x23c/0x250 [ 1470.843187][ T2551] ? security_inode_alloc+0x30/0x180 [ 1470.843204][ T2551] __should_failslab+0x81/0x90 [ 1470.843222][ T2551] should_failslab+0x5/0x20 [ 1470.843257][ T2551] kmem_cache_alloc+0x46/0x2e0 [ 1470.843328][ T2551] security_inode_alloc+0x30/0x180 [ 1470.843340][ T2551] inode_init_always+0x20b/0x420 [ 1470.843357][ T2551] ? sockfs_init_fs_context+0x70/0x70 [ 1470.843377][ T2551] new_inode_pseudo+0x73/0x1c0 [ 1470.843442][ T2551] __sock_create+0x122/0x4f0 [ 1470.843454][ T2551] ? should_fail+0xd6/0x250 [ 1470.843486][ T2551] sock_create_kern+0x34/0x40 [ 1470.843499][ T2551] io_uring_create+0x15e5/0x18d0 [ 1470.843596][ T2551] ? should_fail+0xd6/0x250 [ 1470.843614][ T2551] __x64_sys_io_uring_setup+0xe1/0x120 [ 1470.843691][ T2551] do_syscall_64+0x44/0x80 [ 1470.843708][ T2551] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1470.843727][ T2551] RIP: 0033:0x4665d9 [ 1470.843739][ T2551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1470.843796][ T2551] RSP: 002b:00007f1ed1226108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1470.843813][ T2551] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1470.843825][ T2551] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 000000000000332a [ 1470.843837][ T2551] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 1470.843848][ T2551] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 1470.843859][ T2551] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1470.843878][ T2551] socket: no more sockets [ 1470.941828][ T2569] FAULT_INJECTION: forcing a failure. [ 1470.941828][ T2569] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.941848][ T2569] CPU: 0 PID: 2569 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1470.941861][ T2569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1470.941903][ T2569] Call Trace: [ 1470.941909][ T2569] dump_stack+0x137/0x19d [ 1470.941995][ T2569] should_fail+0x23c/0x250 [ 1470.942010][ T2569] ? dup_mm+0x2e/0x210 [ 1470.942026][ T2569] __should_failslab+0x81/0x90 [ 1470.942049][ T2569] should_failslab+0x5/0x20 [ 1470.942067][ T2569] kmem_cache_alloc+0x46/0x2e0 [ 1470.942103][ T2569] dup_mm+0x2e/0x210 [ 1470.942118][ T2569] copy_process+0x11ec/0x2e00 [ 1470.942132][ T2569] kernel_clone+0x14b/0x680 [ 1470.942144][ T2569] ? __fget_light+0x21b/0x260 [ 1470.942161][ T2569] __do_sys_fork+0x3a/0x60 [ 1470.942174][ T2569] do_syscall_64+0x44/0x80 [ 1470.942223][ T2569] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1470.942258][ T2569] RIP: 0033:0x4665d9 [ 1470.942274][ T2569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1470.942287][ T2569] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1470.942300][ T2569] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1470.942309][ T2569] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1470.942375][ T2569] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1470.942383][ T2569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1470.942391][ T2569] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1470.968957][ T2568] FAULT_INJECTION: forcing a failure. [ 1470.968957][ T2568] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.968976][ T2568] CPU: 1 PID: 2568 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1470.968994][ T2568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1470.969004][ T2568] Call Trace: [ 1470.969019][ T2568] dump_stack+0x137/0x19d [ 1470.969044][ T2568] should_fail+0x23c/0x250 [ 1470.969078][ T2568] ? security_inode_alloc+0x30/0x180 [ 1470.969096][ T2568] __should_failslab+0x81/0x90 [ 1470.969189][ T2568] should_failslab+0x5/0x20 [ 1470.969221][ T2568] kmem_cache_alloc+0x46/0x2e0 [ 1470.969274][ T2568] security_inode_alloc+0x30/0x180 [ 1470.969291][ T2568] inode_init_always+0x20b/0x420 [ 1470.969306][ T2568] ? sockfs_init_fs_context+0x70/0x70 [ 1470.969321][ T2568] new_inode_pseudo+0x73/0x1c0 [ 1470.969334][ T2568] __sock_create+0x122/0x4f0 [ 1470.969355][ T2568] ? should_fail+0xd6/0x250 [ 1470.969373][ T2568] sock_create_kern+0x34/0x40 [ 1470.969457][ T2568] io_uring_create+0x15e5/0x18d0 [ 1470.969480][ T2568] ? should_fail+0xd6/0x250 [ 1470.969499][ T2568] __x64_sys_io_uring_setup+0xe1/0x120 [ 1470.969514][ T2568] do_syscall_64+0x44/0x80 [ 1470.969570][ T2568] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1470.969634][ T2568] RIP: 0033:0x4665d9 [ 1470.969644][ T2568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1470.969662][ T2568] RSP: 002b:00007f1ed1226108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1470.969682][ T2568] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1470.969696][ T2568] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 000000000000332a [ 1470.969709][ T2568] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 1470.969722][ T2568] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 1470.969735][ T2568] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1470.969833][ T2568] socket: no more sockets [ 1471.097841][ T2590] FAULT_INJECTION: forcing a failure. [ 1471.097841][ T2590] name failslab, interval 1, probability 0, space 0, times 0 [ 1471.097863][ T2590] CPU: 0 PID: 2590 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1471.097881][ T2590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1471.097892][ T2590] Call Trace: [ 1471.097899][ T2590] dump_stack+0x137/0x19d [ 1471.097965][ T2590] should_fail+0x23c/0x250 [ 1471.097979][ T2590] ? dup_mmap+0x38e/0x9c0 [ 1471.097991][ T2590] __should_failslab+0x81/0x90 [ 1471.098009][ T2590] should_failslab+0x5/0x20 [ 1471.098027][ T2590] kmem_cache_alloc+0x46/0x2e0 [ 1471.098052][ T2590] dup_mmap+0x38e/0x9c0 [ 1471.098068][ T2590] ? alloc_pages+0x21d/0x310 [ 1471.098109][ T2590] ? __list_add_valid+0x28/0x90 [ 1471.098123][ T2590] ? pgd_alloc+0x120/0x140 [ 1471.098134][ T2590] ? __init_rwsem+0x59/0x70 [ 1471.098145][ T2590] dup_mm+0x7c/0x210 [ 1471.098155][ T2590] copy_process+0x11ec/0x2e00 [ 1471.098172][ T2590] kernel_clone+0x14b/0x680 [ 1471.098186][ T2590] ? __fget_light+0x21b/0x260 [ 1471.098237][ T2590] __do_sys_fork+0x3a/0x60 [ 1471.098252][ T2590] do_syscall_64+0x44/0x80 [ 1471.098272][ T2590] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1471.098290][ T2590] RIP: 0033:0x4665d9 [ 1471.098301][ T2590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1471.098325][ T2590] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1471.098343][ T2590] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1471.098354][ T2590] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1471.098365][ T2590] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1471.098435][ T2590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1471.098443][ T2590] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1471.119106][ T2591] FAULT_INJECTION: forcing a failure. [ 1471.119106][ T2591] name failslab, interval 1, probability 0, space 0, times 0 [ 1471.119126][ T2591] CPU: 0 PID: 2591 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1471.119140][ T2591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1471.119149][ T2591] Call Trace: [ 1471.119157][ T2591] dump_stack+0x137/0x19d [ 1471.119193][ T2591] should_fail+0x23c/0x250 [ 1471.119212][ T2591] ? security_file_alloc+0x30/0x190 [ 1471.119230][ T2591] __should_failslab+0x81/0x90 [ 1471.119278][ T2591] should_failslab+0x5/0x20 [ 1471.119291][ T2591] kmem_cache_alloc+0x46/0x2e0 [ 1471.119311][ T2591] security_file_alloc+0x30/0x190 [ 1471.119328][ T2591] __alloc_file+0x83/0x1a0 [ 1471.119345][ T2591] alloc_empty_file+0xcd/0x1c0 [ 1471.119363][ T2591] alloc_file+0x3a/0x280 [ 1471.119379][ T2591] alloc_file_pseudo+0xe2/0x130 [ 1471.119440][ T2591] anon_inode_getfile+0x9f/0x120 [ 1471.119461][ T2591] io_uring_create+0x163b/0x18d0 [ 1471.119481][ T2591] ? should_fail+0xd6/0x250 [ 1471.119506][ T2591] __x64_sys_io_uring_setup+0xe1/0x120 [ 1471.119526][ T2591] do_syscall_64+0x44/0x80 [ 1471.119572][ T2591] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1471.119663][ T2591] RIP: 0033:0x4665d9 [ 1471.119673][ T2591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1471.119687][ T2591] RSP: 002b:00007f1897f58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1471.119705][ T2591] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1471.119752][ T2591] RDX: 0000000020a2e000 RSI: 0000000020000140 RDI: 0000000000005736 [ 1471.119766][ T2591] RBP: 0000000020000140 R08: 00000000200000c0 R09: 00000000200000c0 [ 1471.119779][ T2591] R10: 0000000020000100 R11: 0000000000000202 R12: 00000000200000c0 [ 1471.119792][ T2591] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 [ 1471.149106][ T2593] FAULT_INJECTION: forcing a failure. [ 1471.149106][ T2593] name failslab, interval 1, probability 0, space 0, times 0 [ 1471.149141][ T2593] CPU: 1 PID: 2593 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1471.149159][ T2593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1471.149194][ T2593] Call Trace: [ 1471.149199][ T2593] dump_stack+0x137/0x19d [ 1471.149217][ T2593] should_fail+0x23c/0x250 [ 1471.149232][ T2593] __should_failslab+0x81/0x90 [ 1471.149251][ T2593] ? selinux_sk_alloc_security+0x70/0xf0 [ 1471.149290][ T2593] should_failslab+0x5/0x20 [ 1471.149302][ T2593] kmem_cache_alloc_trace+0x49/0x310 [ 1471.149317][ T2593] selinux_sk_alloc_security+0x70/0xf0 [ 1471.149364][ T2593] security_sk_alloc+0x45/0x90 [ 1471.149402][ T2593] sk_prot_alloc+0xd2/0x190 [ 1471.149492][ T2593] sk_alloc+0x2e/0x220 [ 1471.149512][ T2593] unix_create1+0x74/0x3c0 [ 1471.149554][ T2593] unix_create+0xdc/0x100 [ 1471.149569][ T2593] __sock_create+0x2c7/0x4f0 [ 1471.149585][ T2593] sock_create_kern+0x34/0x40 [ 1471.149604][ T2593] io_uring_create+0x15e5/0x18d0 [ 1471.149639][ T2593] ? should_fail+0xd6/0x250 [ 1471.149659][ T2593] __x64_sys_io_uring_setup+0xe1/0x120 [ 1471.149674][ T2593] do_syscall_64+0x44/0x80 [ 1471.149695][ T2593] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1471.149722][ T2593] RIP: 0033:0x4665d9 09:42:16 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r1 = fsmount(r0, 0x0, 0x6) read$snapshot(r1, 0x0, 0x0) 09:42:16 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/rt6_stats\x00') read$snapshot(r1, 0x0, 0x2) 09:42:16 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, &(0x7f0000000380)) timer_gettime(r0, &(0x7f0000000040)) 09:42:16 executing program 2 (fault-call:3 fault-nth:13): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:16 executing program 1 (fault-call:3 fault-nth:18): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:16 executing program 0 (fault-call:3 fault-nth:14): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1471.149787][ T2593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1471.149803][ T2593] RSP: 002b:00007f1ed1226108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1471.149823][ T2593] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1471.149836][ T2593] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 000000000000332a [ 1471.149849][ T2593] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 1471.149862][ T2593] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 1471.149872][ T2593] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1472.435702][ T2618] FAULT_INJECTION: forcing a failure. [ 1472.435702][ T2618] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.445704][ T2622] FAULT_INJECTION: forcing a failure. [ 1472.445704][ T2622] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.448459][ T2618] CPU: 1 PID: 2618 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1472.469446][ T2618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1472.479484][ T2618] Call Trace: [ 1472.482751][ T2618] dump_stack+0x137/0x19d [ 1472.487090][ T2618] should_fail+0x23c/0x250 [ 1472.491496][ T2618] ? dup_mmap+0x38e/0x9c0 [ 1472.495899][ T2618] __should_failslab+0x81/0x90 [ 1472.500659][ T2618] should_failslab+0x5/0x20 [ 1472.505209][ T2618] kmem_cache_alloc+0x46/0x2e0 [ 1472.509956][ T2618] ? __vma_link_rb+0x3c2/0x3e0 [ 1472.514703][ T2618] ? up_write+0x25/0xc0 [ 1472.518834][ T2618] dup_mmap+0x38e/0x9c0 [ 1472.522965][ T2618] dup_mm+0x7c/0x210 [ 1472.526847][ T2618] copy_process+0x11ec/0x2e00 [ 1472.531497][ T2618] kernel_clone+0x14b/0x680 [ 1472.536066][ T2618] ? __fget_light+0x21b/0x260 [ 1472.540774][ T2618] __do_sys_fork+0x3a/0x60 [ 1472.545163][ T2618] do_syscall_64+0x44/0x80 [ 1472.549557][ T2618] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1472.555565][ T2618] RIP: 0033:0x4665d9 [ 1472.559468][ T2618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1472.579056][ T2618] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1472.587463][ T2618] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1472.595556][ T2618] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1472.603665][ T2618] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1472.611739][ T2618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1472.619689][ T2618] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1472.627664][ T2622] CPU: 0 PID: 2622 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 09:42:17 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, &(0x7f0000000380)) timer_gettime(r0, &(0x7f0000000040)) [ 1472.635992][ T2622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1472.646068][ T2622] Call Trace: [ 1472.649342][ T2622] dump_stack+0x137/0x19d [ 1472.653695][ T2622] should_fail+0x23c/0x250 [ 1472.658249][ T2622] ? security_file_alloc+0x30/0x190 [ 1472.663438][ T2622] __should_failslab+0x81/0x90 [ 1472.668213][ T2622] should_failslab+0x5/0x20 [ 1472.672708][ T2622] kmem_cache_alloc+0x46/0x2e0 [ 1472.677470][ T2622] security_file_alloc+0x30/0x190 [ 1472.682487][ T2622] __alloc_file+0x83/0x1a0 09:42:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') read$snapshot(r0, 0x0, 0x2) [ 1472.686888][ T2622] alloc_empty_file+0xcd/0x1c0 [ 1472.691698][ T2622] alloc_file+0x3a/0x280 [ 1472.695939][ T2622] alloc_file_pseudo+0xe2/0x130 [ 1472.700781][ T2622] anon_inode_getfile+0x9f/0x120 [ 1472.705763][ T2622] io_uring_create+0x163b/0x18d0 [ 1472.710687][ T2622] ? should_fail+0xd6/0x250 [ 1472.715189][ T2622] __x64_sys_io_uring_setup+0xe1/0x120 [ 1472.720637][ T2622] do_syscall_64+0x44/0x80 [ 1472.725056][ T2622] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1472.731025][ T2622] RIP: 0033:0x4665d9 [ 1472.734984][ T2622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1472.754600][ T2622] RSP: 002b:00007f1897f58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1472.757321][ T2623] FAULT_INJECTION: forcing a failure. [ 1472.757321][ T2623] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.763075][ T2622] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1472.763088][ T2622] RDX: 0000000020a2e000 RSI: 0000000020000140 RDI: 0000000000005736 [ 1472.763098][ T2622] RBP: 0000000020000140 R08: 00000000200000c0 R09: 00000000200000c0 [ 1472.763108][ T2622] R10: 0000000020000100 R11: 0000000000000202 R12: 00000000200000c0 [ 1472.763117][ T2622] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 [ 1472.815517][ T2623] CPU: 1 PID: 2623 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1472.824016][ T2623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1472.834111][ T2623] Call Trace: [ 1472.837417][ T2623] dump_stack+0x137/0x19d [ 1472.841739][ T2623] should_fail+0x23c/0x250 [ 1472.846148][ T2623] ? __d_alloc+0x36/0x370 [ 1472.850470][ T2623] __should_failslab+0x81/0x90 [ 1472.855225][ T2623] should_failslab+0x5/0x20 [ 1472.859731][ T2623] kmem_cache_alloc+0x46/0x2e0 [ 1472.864513][ T2623] __d_alloc+0x36/0x370 [ 1472.868663][ T2623] d_alloc_pseudo+0x1a/0x50 [ 1472.873160][ T2623] alloc_file_pseudo+0x63/0x130 [ 1472.878023][ T2623] anon_inode_getfile+0x9f/0x120 [ 1472.882600][ T2639] FAULT_INJECTION: forcing a failure. [ 1472.882600][ T2639] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.883064][ T2623] io_uring_create+0x163b/0x18d0 [ 1472.900564][ T2623] ? should_fail+0xd6/0x250 [ 1472.905053][ T2623] __x64_sys_io_uring_setup+0xe1/0x120 [ 1472.910508][ T2623] do_syscall_64+0x44/0x80 [ 1472.914909][ T2623] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1472.920898][ T2623] RIP: 0033:0x4665d9 [ 1472.924780][ T2623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1472.944362][ T2623] RSP: 002b:00007f1ed1226108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1472.952771][ T2623] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1472.960782][ T2623] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 000000000000332a [ 1472.968907][ T2623] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 1472.976946][ T2623] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 09:42:17 executing program 4: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:42:17 executing program 2 (fault-call:3 fault-nth:14): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() [ 1472.984897][ T2623] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1472.992851][ T2639] CPU: 0 PID: 2639 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1473.001202][ T2639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1473.011275][ T2639] Call Trace: [ 1473.014807][ T2639] dump_stack+0x137/0x19d [ 1473.019245][ T2639] should_fail+0x23c/0x250 [ 1473.023659][ T2639] __should_failslab+0x81/0x90 [ 1473.028447][ T2639] should_failslab+0x5/0x20 [ 1473.032937][ T2639] kmem_cache_alloc_node_trace+0x58/0x2e0 09:42:17 executing program 0 (fault-call:3 fault-nth:15): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipx\x00') read$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000080)) read$snapshot(r0, &(0x7f0000000040)=""/27, 0x1b) syz_open_dev$ttys(0xc, 0x2, 0x1) 09:42:17 executing program 5: timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000040)) [ 1473.038654][ T2639] ? __kmalloc_node+0x30/0x40 [ 1473.043351][ T2639] __kmalloc_node+0x30/0x40 [ 1473.048055][ T2639] kvmalloc_node+0x81/0xf0 [ 1473.052514][ T2639] alloc_fdtable+0x112/0x1b0 [ 1473.057100][ T2639] dup_fd+0x548/0x6e0 [ 1473.061069][ T2639] copy_process+0xb59/0x2e00 [ 1473.065658][ T2639] kernel_clone+0x14b/0x680 [ 1473.070157][ T2639] ? __fget_light+0x21b/0x260 [ 1473.074826][ T2639] __do_sys_fork+0x3a/0x60 [ 1473.079231][ T2639] do_syscall_64+0x44/0x80 09:42:17 executing program 1 (fault-call:3 fault-nth:19): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) [ 1473.083647][ T2639] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1473.089531][ T2639] RIP: 0033:0x4665d9 [ 1473.093415][ T2639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1473.113088][ T2639] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1473.121495][ T2639] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1473.129458][ T2639] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1473.137425][ T2639] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1473.145635][ T2639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1473.153630][ T2639] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 09:42:17 executing program 5: timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000040)) 09:42:17 executing program 4: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) [ 1473.220482][ T2660] FAULT_INJECTION: forcing a failure. [ 1473.220482][ T2660] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.233123][ T2660] CPU: 0 PID: 2660 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1473.241500][ T2660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1473.251545][ T2660] Call Trace: [ 1473.254874][ T2660] dump_stack+0x137/0x19d [ 1473.259210][ T2660] should_fail+0x23c/0x250 [ 1473.263677][ T2660] ? __d_alloc+0x36/0x370 [ 1473.268004][ T2660] __should_failslab+0x81/0x90 [ 1473.272761][ T2660] should_failslab+0x5/0x20 [ 1473.277280][ T2660] kmem_cache_alloc+0x46/0x2e0 [ 1473.282042][ T2660] __d_alloc+0x36/0x370 [ 1473.286229][ T2660] d_alloc_pseudo+0x1a/0x50 [ 1473.290725][ T2660] alloc_file_pseudo+0x63/0x130 [ 1473.295572][ T2660] anon_inode_getfile+0x9f/0x120 [ 1473.300541][ T2660] io_uring_create+0x163b/0x18d0 [ 1473.305478][ T2660] ? should_fail+0xd6/0x250 [ 1473.309979][ T2660] __x64_sys_io_uring_setup+0xe1/0x120 [ 1473.315425][ T2660] do_syscall_64+0x44/0x80 [ 1473.319840][ T2660] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1473.325750][ T2660] RIP: 0033:0x4665d9 [ 1473.329635][ T2660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1473.330880][ T2661] FAULT_INJECTION: forcing a failure. [ 1473.330880][ T2661] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.349230][ T2660] RSP: 002b:00007f1ed1226108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1473.349253][ T2660] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1473.349264][ T2660] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 000000000000332a [ 1473.349277][ T2660] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 1473.394264][ T2660] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 1473.402217][ T2660] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1473.410174][ T2661] CPU: 1 PID: 2661 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1473.418536][ T2661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1473.428582][ T2661] Call Trace: [ 1473.431854][ T2661] dump_stack+0x137/0x19d [ 1473.436208][ T2661] should_fail+0x23c/0x250 [ 1473.440661][ T2661] ? xas_create+0x96b/0xb30 [ 1473.445251][ T2661] __should_failslab+0x81/0x90 [ 1473.450022][ T2661] should_failslab+0x5/0x20 [ 1473.454515][ T2661] kmem_cache_alloc+0x46/0x2e0 [ 1473.459270][ T2661] ? xas_create+0x96b/0xb30 [ 1473.463801][ T2661] xas_create+0x96b/0xb30 [ 1473.468134][ T2661] xas_store+0x70/0xca0 [ 1473.472337][ T2661] ? selinux_file_alloc_security+0x9c/0xb0 [ 1473.478221][ T2661] ? security_file_alloc+0x12e/0x190 [ 1473.483501][ T2661] ? percpu_counter_add_batch+0x69/0xd0 [ 1473.489048][ T2661] __xa_store+0xcb/0x320 [ 1473.493290][ T2661] xa_store+0x30/0x70 [ 1473.497306][ T2661] io_uring_add_task_file+0x111/0x200 [ 1473.502732][ T2661] io_uring_create+0x1734/0x18d0 [ 1473.507813][ T2661] ? should_fail+0xd6/0x250 [ 1473.512390][ T2661] __x64_sys_io_uring_setup+0xe1/0x120 [ 1473.517868][ T2661] do_syscall_64+0x44/0x80 [ 1473.522287][ T2661] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1473.528213][ T2661] RIP: 0033:0x4665d9 [ 1473.532091][ T2661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1473.552122][ T2661] RSP: 002b:00007f1897f58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1473.560650][ T2661] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 09:42:17 executing program 0 (fault-call:3 fault-nth:16): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:18 executing program 4: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:42:18 executing program 2 (fault-call:3 fault-nth:15): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:18 executing program 5: timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000040)) [ 1473.568621][ T2661] RDX: 0000000020a2e000 RSI: 0000000020000140 RDI: 0000000000005736 [ 1473.576580][ T2661] RBP: 0000000020000140 R08: 00000000200000c0 R09: 00000000200000c0 [ 1473.584545][ T2661] R10: 0000000020000100 R11: 0000000000000202 R12: 00000000200000c0 [ 1473.592502][ T2661] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 09:42:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x4, 0x6, 0x9, 0x4, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x23}, 0x7800, 0x700, 0x6, 0xda8c}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x70, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040050}, 0x8010) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f00000002c0)={0x41d286e5}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r3) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000040)={0x6, 0xbbf2}) [ 1473.640850][ T2681] FAULT_INJECTION: forcing a failure. [ 1473.640850][ T2681] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.653502][ T2681] CPU: 1 PID: 2681 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1473.662174][ T2681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1473.672309][ T2681] Call Trace: [ 1473.675594][ T2681] dump_stack+0x137/0x19d [ 1473.679925][ T2681] should_fail+0x23c/0x250 [ 1473.684341][ T2681] ? security_file_alloc+0x30/0x190 [ 1473.689560][ T2681] __should_failslab+0x81/0x90 [ 1473.694330][ T2681] should_failslab+0x5/0x20 [ 1473.698835][ T2681] kmem_cache_alloc+0x46/0x2e0 [ 1473.703744][ T2681] security_file_alloc+0x30/0x190 [ 1473.708778][ T2681] __alloc_file+0x83/0x1a0 [ 1473.713236][ T2681] alloc_empty_file+0xcd/0x1c0 [ 1473.718100][ T2681] alloc_file+0x3a/0x280 [ 1473.722336][ T2681] alloc_file_pseudo+0xe2/0x130 [ 1473.725053][ T2687] FAULT_INJECTION: forcing a failure. [ 1473.725053][ T2687] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.727176][ T2681] anon_inode_getfile+0x9f/0x120 [ 1473.727200][ T2681] io_uring_create+0x163b/0x18d0 [ 1473.749569][ T2681] ? should_fail+0xd6/0x250 [ 1473.754060][ T2681] __x64_sys_io_uring_setup+0xe1/0x120 [ 1473.759508][ T2681] do_syscall_64+0x44/0x80 [ 1473.763952][ T2681] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1473.769828][ T2681] RIP: 0033:0x4665d9 [ 1473.773701][ T2681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1473.793287][ T2681] RSP: 002b:00007f1ed1226108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1473.801712][ T2681] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1473.809663][ T2681] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 000000000000332a [ 1473.817629][ T2681] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 1473.825590][ T2681] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 1473.833540][ T2681] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1473.841600][ T2687] CPU: 0 PID: 2687 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1473.849922][ T2687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1473.859972][ T2687] Call Trace: [ 1473.863241][ T2687] dump_stack+0x137/0x19d [ 1473.867578][ T2687] should_fail+0x23c/0x250 [ 1473.872088][ T2687] __should_failslab+0x81/0x90 [ 1473.876980][ T2687] should_failslab+0x5/0x20 [ 1473.881469][ T2687] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1473.887181][ T2687] ? __kmalloc_node+0x30/0x40 09:42:18 executing program 5: timer_create(0x2, 0x0, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000380)) timer_gettime(r0, &(0x7f0000000040)) 09:42:18 executing program 4: syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:18 executing program 0 (fault-call:3 fault-nth:17): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1473.891847][ T2687] __kmalloc_node+0x30/0x40 [ 1473.896392][ T2687] kvmalloc_node+0x81/0xf0 [ 1473.900798][ T2687] alloc_fdtable+0x112/0x1b0 [ 1473.905440][ T2687] dup_fd+0x548/0x6e0 [ 1473.909453][ T2687] copy_process+0xb59/0x2e00 [ 1473.914038][ T2687] kernel_clone+0x14b/0x680 [ 1473.918536][ T2687] ? __fget_light+0x21b/0x260 09:42:18 executing program 5: timer_create(0x2, 0x0, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000380)) timer_gettime(r0, &(0x7f0000000040)) 09:42:18 executing program 1 (fault-call:3 fault-nth:20): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) [ 1473.918557][ T2687] __do_sys_fork+0x3a/0x60 09:42:18 executing program 2 (fault-call:3 fault-nth:16): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() [ 1473.918571][ T2687] do_syscall_64+0x44/0x80 09:42:18 executing program 4: syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:18 executing program 5: timer_create(0x2, 0x0, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000380)) timer_gettime(r0, &(0x7f0000000040)) [ 1473.918629][ T2687] entry_SYSCALL_64_after_hwframe+0x44/0xae 09:42:18 executing program 2 (fault-call:3 fault-nth:17): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:18 executing program 4: syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:18 executing program 5: timer_create(0x2, 0x0, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0) timer_gettime(r0, &(0x7f0000000040)) [ 1473.918656][ T2687] RIP: 0033:0x4665d9 [ 1473.918668][ T2687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1473.918682][ T2687] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1473.918697][ T2687] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1473.918707][ T2687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1473.918717][ T2687] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1473.918726][ T2687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1473.918736][ T2687] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1474.036290][ T2712] FAULT_INJECTION: forcing a failure. [ 1474.036290][ T2712] name failslab, interval 1, probability 0, space 0, times 0 [ 1474.036312][ T2712] CPU: 0 PID: 2712 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1474.036327][ T2712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1474.036355][ T2712] Call Trace: [ 1474.036363][ T2712] dump_stack+0x137/0x19d [ 1474.036389][ T2712] should_fail+0x23c/0x250 [ 1474.036461][ T2712] ? copy_process+0xd12/0x2e00 [ 1474.036478][ T2712] __should_failslab+0x81/0x90 [ 1474.036518][ T2712] should_failslab+0x5/0x20 [ 1474.036532][ T2712] kmem_cache_alloc+0x46/0x2e0 [ 1474.036550][ T2712] ? path_get+0x3c/0x50 [ 1474.036567][ T2712] copy_process+0xd12/0x2e00 [ 1474.036631][ T2712] kernel_clone+0x14b/0x680 [ 1474.036648][ T2712] ? __fget_light+0x21b/0x260 [ 1474.036717][ T2712] __do_sys_fork+0x3a/0x60 [ 1474.036732][ T2712] do_syscall_64+0x44/0x80 [ 1474.036778][ T2712] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1474.036809][ T2712] RIP: 0033:0x4665d9 [ 1474.036821][ T2712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1474.036837][ T2712] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1474.036858][ T2712] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1474.036871][ T2712] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1474.036881][ T2712] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1474.036891][ T2712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1474.036902][ T2712] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1474.077246][ T2710] FAULT_INJECTION: forcing a failure. [ 1474.077246][ T2710] name failslab, interval 1, probability 0, space 0, times 0 [ 1474.077271][ T2710] CPU: 1 PID: 2710 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1474.077288][ T2710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1474.077303][ T2710] Call Trace: [ 1474.077311][ T2710] dump_stack+0x137/0x19d [ 1474.077413][ T2710] should_fail+0x23c/0x250 [ 1474.077430][ T2710] ? security_file_alloc+0x30/0x190 [ 1474.077448][ T2710] __should_failslab+0x81/0x90 [ 1474.077473][ T2710] should_failslab+0x5/0x20 [ 1474.077489][ T2710] kmem_cache_alloc+0x46/0x2e0 [ 1474.077510][ T2710] security_file_alloc+0x30/0x190 [ 1474.077605][ T2710] __alloc_file+0x83/0x1a0 [ 1474.077649][ T2710] alloc_empty_file+0xcd/0x1c0 [ 1474.077669][ T2710] alloc_file+0x3a/0x280 [ 1474.077686][ T2710] alloc_file_pseudo+0xe2/0x130 [ 1474.077705][ T2710] anon_inode_getfile+0x9f/0x120 [ 1474.077725][ T2710] io_uring_create+0x163b/0x18d0 [ 1474.077746][ T2710] ? should_fail+0xd6/0x250 [ 1474.077772][ T2710] __x64_sys_io_uring_setup+0xe1/0x120 [ 1474.077789][ T2710] do_syscall_64+0x44/0x80 [ 1474.077849][ T2710] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1474.077874][ T2710] RIP: 0033:0x4665d9 [ 1474.077922][ T2710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1474.077940][ T2710] RSP: 002b:00007f1ed1226108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1474.077956][ T2710] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1474.077966][ T2710] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 000000000000332a [ 1474.077976][ T2710] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 1474.077986][ T2710] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 1474.077996][ T2710] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1474.081736][ T2722] FAULT_INJECTION: forcing a failure. [ 1474.081736][ T2722] name failslab, interval 1, probability 0, space 0, times 0 [ 1474.081762][ T2722] CPU: 0 PID: 2722 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1474.081848][ T2722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1474.081856][ T2722] Call Trace: [ 1474.081861][ T2722] dump_stack+0x137/0x19d [ 1474.081882][ T2722] should_fail+0x23c/0x250 [ 1474.081898][ T2722] ? xas_create+0x96b/0xb30 [ 1474.081925][ T2722] __should_failslab+0x81/0x90 [ 1474.081944][ T2722] should_failslab+0x5/0x20 [ 1474.081960][ T2722] kmem_cache_alloc+0x46/0x2e0 [ 1474.081982][ T2722] ? xas_create+0x96b/0xb30 [ 1474.082004][ T2722] xas_create+0x96b/0xb30 [ 1474.082076][ T2722] xas_store+0x70/0xca0 [ 1474.082098][ T2722] ? selinux_file_alloc_security+0x9c/0xb0 [ 1474.082119][ T2722] ? security_file_alloc+0x12e/0x190 [ 1474.082138][ T2722] ? percpu_counter_add_batch+0x69/0xd0 [ 1474.082195][ T2722] __xa_store+0xcb/0x320 [ 1474.082213][ T2722] xa_store+0x30/0x70 [ 1474.082229][ T2722] io_uring_add_task_file+0x111/0x200 [ 1474.082251][ T2722] io_uring_create+0x1734/0x18d0 [ 1474.082280][ T2722] ? should_fail+0xd6/0x250 [ 1474.082295][ T2722] __x64_sys_io_uring_setup+0xe1/0x120 [ 1474.082314][ T2722] do_syscall_64+0x44/0x80 [ 1474.082339][ T2722] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1474.082368][ T2722] RIP: 0033:0x4665d9 [ 1474.082438][ T2722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1474.082456][ T2722] RSP: 002b:00007f1897f58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1474.082471][ T2722] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1474.082480][ T2722] RDX: 0000000020a2e000 RSI: 0000000020000140 RDI: 0000000000005736 [ 1474.082490][ T2722] RBP: 0000000020000140 R08: 00000000200000c0 R09: 00000000200000c0 [ 1474.082499][ T2722] R10: 0000000020000100 R11: 0000000000000202 R12: 00000000200000c0 [ 1474.082509][ T2722] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 [ 1474.119275][ T2728] FAULT_INJECTION: forcing a failure. [ 1474.119275][ T2728] name failslab, interval 1, probability 0, space 0, times 0 [ 1474.119331][ T2728] CPU: 0 PID: 2728 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1474.119347][ T2728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1474.119355][ T2728] Call Trace: [ 1474.119362][ T2728] dump_stack+0x137/0x19d [ 1474.119382][ T2728] should_fail+0x23c/0x250 [ 1474.119397][ T2728] ? copy_process+0xe67/0x2e00 [ 1474.119415][ T2728] __should_failslab+0x81/0x90 [ 1474.119517][ T2728] should_failslab+0x5/0x20 [ 1474.119534][ T2728] kmem_cache_alloc+0x46/0x2e0 [ 1474.119611][ T2728] ? copy_process+0xd12/0x2e00 [ 1474.119627][ T2728] copy_process+0xe67/0x2e00 [ 1474.119644][ T2728] kernel_clone+0x14b/0x680 [ 1474.119659][ T2728] ? __fget_light+0x21b/0x260 [ 1474.119741][ T2728] __do_sys_fork+0x3a/0x60 [ 1474.119757][ T2728] do_syscall_64+0x44/0x80 [ 1474.119815][ T2728] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1474.119838][ T2728] RIP: 0033:0x4665d9 [ 1474.119850][ T2728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1474.119867][ T2728] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1474.119987][ T2728] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1474.119999][ T2728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 09:42:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000140)='-\x00', 0x0, r0) r1 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x43e7, &(0x7f0000000040)={0x0, 0xb923, 0x10, 0x0, 0x219, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 09:42:19 executing program 1 (fault-call:3 fault-nth:21): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:19 executing program 2 (fault-call:3 fault-nth:18): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:19 executing program 0 (fault-call:3 fault-nth:18): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') read$snapshot(r0, 0x0, 0x2) set_thread_area(&(0x7f0000000040)={0x1, 0x1000, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}) 09:42:19 executing program 5: timer_create(0x2, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000040)) [ 1474.120010][ T2728] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1474.120021][ T2728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1474.120032][ T2728] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1475.037536][ T2752] FAULT_INJECTION: forcing a failure. [ 1475.037536][ T2752] name failslab, interval 1, probability 0, space 0, times 0 [ 1475.050192][ T2752] CPU: 0 PID: 2752 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1475.056556][ T2756] FAULT_INJECTION: forcing a failure. [ 1475.056556][ T2756] name failslab, interval 1, probability 0, space 0, times 0 [ 1475.058866][ T2752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1475.058877][ T2752] Call Trace: [ 1475.058884][ T2752] dump_stack+0x137/0x19d [ 1475.089345][ T2752] should_fail+0x23c/0x250 [ 1475.093909][ T2752] ? dup_mm+0x2e/0x210 [ 1475.097990][ T2752] __should_failslab+0x81/0x90 [ 1475.102761][ T2752] should_failslab+0x5/0x20 [ 1475.107247][ T2752] kmem_cache_alloc+0x46/0x2e0 [ 1475.112093][ T2752] dup_mm+0x2e/0x210 [ 1475.116076][ T2752] copy_process+0x11ec/0x2e00 [ 1475.120743][ T2752] kernel_clone+0x14b/0x680 [ 1475.125273][ T2752] ? __fget_light+0x21b/0x260 [ 1475.129950][ T2752] __do_sys_fork+0x3a/0x60 [ 1475.134372][ T2752] do_syscall_64+0x44/0x80 [ 1475.138828][ T2752] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1475.144707][ T2752] RIP: 0033:0x4665d9 [ 1475.148584][ T2752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1475.168295][ T2752] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1475.176694][ T2752] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 09:42:19 executing program 5: timer_create(0x2, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0) timer_gettime(0x0, 0x0) [ 1475.184671][ T2752] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1475.192630][ T2752] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1475.200662][ T2752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1475.208609][ T2752] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1475.216561][ T2756] CPU: 1 PID: 2756 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1475.224909][ T2756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1475.234978][ T2756] Call Trace: 09:42:19 executing program 5: timer_create(0x2, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0) timer_gettime(0x0, 0x0) [ 1475.238257][ T2756] dump_stack+0x137/0x19d [ 1475.242607][ T2756] should_fail+0x23c/0x250 [ 1475.247049][ T2756] ? xas_create+0x96b/0xb30 [ 1475.252013][ T2756] __should_failslab+0x81/0x90 [ 1475.256783][ T2756] should_failslab+0x5/0x20 [ 1475.261290][ T2756] kmem_cache_alloc+0x46/0x2e0 [ 1475.266249][ T2756] ? xas_create+0x96b/0xb30 [ 1475.270808][ T2756] xas_create+0x96b/0xb30 [ 1475.275242][ T2756] xas_store+0x70/0xca0 [ 1475.279536][ T2756] ? selinux_file_alloc_security+0x9c/0xb0 09:42:19 executing program 2 (fault-call:3 fault-nth:19): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() [ 1475.285424][ T2756] ? security_file_alloc+0x12e/0x190 [ 1475.290716][ T2756] ? percpu_counter_add_batch+0x69/0xd0 [ 1475.296260][ T2756] __xa_store+0xcb/0x320 [ 1475.300501][ T2756] xa_store+0x30/0x70 [ 1475.304470][ T2756] io_uring_add_task_file+0x111/0x200 [ 1475.309909][ T2756] io_uring_create+0x1734/0x18d0 [ 1475.314846][ T2756] ? should_fail+0xd6/0x250 [ 1475.319349][ T2756] __x64_sys_io_uring_setup+0xe1/0x120 [ 1475.324826][ T2756] do_syscall_64+0x44/0x80 [ 1475.329356][ T2756] entry_SYSCALL_64_after_hwframe+0x44/0xae 09:42:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') read$snapshot(r0, 0x0, 0x2) set_thread_area(&(0x7f0000000040)={0x1, 0x1000, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}) [ 1475.335703][ T2756] RIP: 0033:0x4665d9 [ 1475.339580][ T2756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1475.359581][ T2756] RSP: 002b:00007f1897f58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1475.367995][ T2756] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1475.374166][ T2765] FAULT_INJECTION: forcing a failure. [ 1475.374166][ T2765] name failslab, interval 1, probability 0, space 0, times 0 [ 1475.375957][ T2756] RDX: 0000000020a2e000 RSI: 0000000020000140 RDI: 0000000000005736 [ 1475.375970][ T2756] RBP: 0000000020000140 R08: 00000000200000c0 R09: 00000000200000c0 [ 1475.375982][ T2756] R10: 0000000020000100 R11: 0000000000000202 R12: 00000000200000c0 [ 1475.375991][ T2756] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 [ 1475.411186][ T2776] FAULT_INJECTION: forcing a failure. [ 1475.411186][ T2776] name failslab, interval 1, probability 0, space 0, times 0 [ 1475.412527][ T2765] CPU: 0 PID: 2765 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1475.441435][ T2765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1475.451804][ T2765] Call Trace: [ 1475.455078][ T2765] dump_stack+0x137/0x19d [ 1475.459411][ T2765] should_fail+0x23c/0x250 [ 1475.463847][ T2765] __should_failslab+0x81/0x90 [ 1475.468589][ T2765] ? io_uring_alloc_task_context+0x49/0x2b0 [ 1475.474583][ T2765] should_failslab+0x5/0x20 [ 1475.479128][ T2765] kmem_cache_alloc_trace+0x49/0x310 [ 1475.484397][ T2765] ? errseq_sample+0x2b/0x40 [ 1475.488966][ T2765] ? _find_next_bit+0x16a/0x190 [ 1475.493802][ T2765] io_uring_alloc_task_context+0x49/0x2b0 [ 1475.499534][ T2765] ? alloc_fd+0x388/0x3e0 [ 1475.505981][ T2765] io_uring_add_task_file+0x68/0x200 [ 1475.511260][ T2765] io_uring_create+0x1734/0x18d0 [ 1475.516286][ T2765] ? should_fail+0xd6/0x250 [ 1475.520766][ T2765] __x64_sys_io_uring_setup+0xe1/0x120 [ 1475.526294][ T2765] do_syscall_64+0x44/0x80 [ 1475.530758][ T2765] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1475.536639][ T2765] RIP: 0033:0x4665d9 [ 1475.540519][ T2765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1475.560414][ T2765] RSP: 002b:00007f1ed1205108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1475.568828][ T2765] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9 [ 1475.576795][ T2765] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 000000000000332a [ 1475.584749][ T2765] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 1475.592956][ T2765] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 1475.600907][ T2765] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1475.608858][ T2776] CPU: 1 PID: 2776 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1475.617259][ T2776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1475.627309][ T2776] Call Trace: [ 1475.630575][ T2776] dump_stack+0x137/0x19d [ 1475.634905][ T2776] should_fail+0x23c/0x250 09:42:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') read$snapshot(r0, 0x0, 0x2) set_thread_area(&(0x7f0000000040)={0x1, 0x1000, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}) [ 1475.639342][ T2776] ? copy_process+0xe67/0x2e00 [ 1475.644157][ T2776] __should_failslab+0x81/0x90 [ 1475.648955][ T2776] should_failslab+0x5/0x20 [ 1475.653497][ T2776] kmem_cache_alloc+0x46/0x2e0 [ 1475.658254][ T2776] ? copy_process+0xd12/0x2e00 [ 1475.663064][ T2776] copy_process+0xe67/0x2e00 [ 1475.667644][ T2776] kernel_clone+0x14b/0x680 [ 1475.672139][ T2776] ? __fget_light+0x21b/0x260 [ 1475.676870][ T2776] __do_sys_fork+0x3a/0x60 [ 1475.681291][ T2776] do_syscall_64+0x44/0x80 09:42:20 executing program 0 (fault-call:3 fault-nth:19): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1475.685792][ T2776] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1475.691699][ T2776] RIP: 0033:0x4665d9 [ 1475.695606][ T2776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1475.715380][ T2776] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1475.723851][ T2776] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1475.731817][ T2776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1475.739777][ T2776] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1475.747783][ T2776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1475.751045][ T2781] FAULT_INJECTION: forcing a failure. [ 1475.751045][ T2781] name failslab, interval 1, probability 0, space 0, times 0 [ 1475.755736][ T2776] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1475.776397][ T2781] CPU: 0 PID: 2781 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1475.784808][ T2781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1475.794848][ T2781] Call Trace: [ 1475.798205][ T2781] dump_stack+0x137/0x19d [ 1475.802533][ T2781] should_fail+0x23c/0x250 [ 1475.806976][ T2781] ? xas_create+0x96b/0xb30 [ 1475.811495][ T2781] __should_failslab+0x81/0x90 [ 1475.816543][ T2781] should_failslab+0x5/0x20 [ 1475.821211][ T2781] kmem_cache_alloc+0x46/0x2e0 [ 1475.826286][ T2781] ? xas_create+0x96b/0xb30 [ 1475.830866][ T2781] xas_create+0x96b/0xb30 [ 1475.835190][ T2781] xas_store+0x70/0xca0 [ 1475.839369][ T2781] ? selinux_file_alloc_security+0x9c/0xb0 [ 1475.845238][ T2781] ? security_file_alloc+0x12e/0x190 [ 1475.850607][ T2781] ? percpu_counter_add_batch+0x69/0xd0 [ 1475.856261][ T2781] __xa_store+0xcb/0x320 [ 1475.860498][ T2781] xa_store+0x30/0x70 [ 1475.864467][ T2781] io_uring_add_task_file+0x111/0x200 [ 1475.869949][ T2781] io_uring_create+0x1734/0x18d0 [ 1475.874877][ T2781] ? should_fail+0xd6/0x250 [ 1475.879370][ T2781] __x64_sys_io_uring_setup+0xe1/0x120 [ 1475.884925][ T2781] do_syscall_64+0x44/0x80 [ 1475.889352][ T2781] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1475.895267][ T2781] RIP: 0033:0x4665d9 [ 1475.899193][ T2781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1475.918884][ T2781] RSP: 002b:00007f1ed1226108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1475.927305][ T2781] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1475.935266][ T2781] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 000000000000332a [ 1475.943230][ T2781] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 1475.943253][ T2799] FAULT_INJECTION: forcing a failure. [ 1475.943253][ T2799] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1475.951204][ T2781] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 1475.951218][ T2781] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1475.980389][ T2799] CPU: 1 PID: 2799 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1475.988725][ T2799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1475.998771][ T2799] Call Trace: [ 1476.002038][ T2799] dump_stack+0x137/0x19d [ 1476.006371][ T2799] should_fail+0x23c/0x250 [ 1476.010784][ T2799] __alloc_pages+0x102/0x320 [ 1476.015366][ T2799] alloc_pages+0x21d/0x310 [ 1476.018511][ T2802] FAULT_INJECTION: forcing a failure. [ 1476.018511][ T2802] name failslab, interval 1, probability 0, space 0, times 0 [ 1476.019806][ T2799] __get_free_pages+0x8/0x30 [ 1476.019827][ T2799] pgd_alloc+0x1d/0x140 [ 1476.041214][ T2799] mm_init+0x2df/0x470 [ 1476.045278][ T2799] dup_mm+0x68/0x210 [ 1476.049172][ T2799] copy_process+0x11ec/0x2e00 [ 1476.053827][ T2799] kernel_clone+0x14b/0x680 [ 1476.058310][ T2799] ? __fget_light+0x21b/0x260 [ 1476.063040][ T2799] __do_sys_fork+0x3a/0x60 [ 1476.067467][ T2799] do_syscall_64+0x44/0x80 [ 1476.071871][ T2799] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1476.077903][ T2799] RIP: 0033:0x4665d9 [ 1476.081849][ T2799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1476.101581][ T2799] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1476.110170][ T2799] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1476.118134][ T2799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1476.126084][ T2799] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1476.134049][ T2799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 09:42:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='net/mcfilter\x00', &(0x7f0000000080)=',\x84:\x00', 0x0) 09:42:20 executing program 1 (fault-call:3 fault-nth:22): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') read$snapshot(r0, 0x0, 0x2) 09:42:20 executing program 2 (fault-call:3 fault-nth:20): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:20 executing program 5: timer_create(0x2, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0) timer_gettime(0x0, 0x0) [ 1476.141999][ T2799] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1476.150118][ T2802] CPU: 0 PID: 2802 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1476.158447][ T2802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1476.168574][ T2802] Call Trace: [ 1476.171851][ T2802] dump_stack+0x137/0x19d [ 1476.176372][ T2802] should_fail+0x23c/0x250 [ 1476.180876][ T2802] ? xas_create+0x96b/0xb30 [ 1476.185455][ T2802] __should_failslab+0x81/0x90 09:42:20 executing program 4: read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:20 executing program 2 (fault-call:3 fault-nth:21): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() [ 1476.190262][ T2802] should_failslab+0x5/0x20 [ 1476.194760][ T2802] kmem_cache_alloc+0x46/0x2e0 [ 1476.199672][ T2802] ? xas_create+0x96b/0xb30 [ 1476.204182][ T2802] xas_create+0x96b/0xb30 [ 1476.208590][ T2802] xas_store+0x70/0xca0 [ 1476.212765][ T2802] ? selinux_file_alloc_security+0x9c/0xb0 [ 1476.218571][ T2802] ? security_file_alloc+0x12e/0x190 [ 1476.223940][ T2802] ? percpu_counter_add_batch+0x69/0xd0 [ 1476.229560][ T2802] __xa_store+0xcb/0x320 [ 1476.233812][ T2802] xa_store+0x30/0x70 [ 1476.237789][ T2802] io_uring_add_task_file+0x111/0x200 09:42:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') read$snapshot(r0, 0x0, 0x2) 09:42:20 executing program 4: read$snapshot(0xffffffffffffffff, 0x0, 0x2) [ 1476.243158][ T2802] io_uring_create+0x1734/0x18d0 [ 1476.248123][ T2802] ? should_fail+0xd6/0x250 [ 1476.252798][ T2802] __x64_sys_io_uring_setup+0xe1/0x120 [ 1476.258324][ T2802] do_syscall_64+0x44/0x80 [ 1476.262768][ T2802] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1476.268669][ T2802] RIP: 0033:0x4665d9 [ 1476.272561][ T2802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:42:20 executing program 0 (fault-call:3 fault-nth:20): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:20 executing program 4: read$snapshot(0xffffffffffffffff, 0x0, 0x2) [ 1476.292247][ T2802] RSP: 002b:00007f1897f58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1476.300664][ T2802] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1476.308723][ T2802] RDX: 0000000020a2e000 RSI: 0000000020000140 RDI: 0000000000005736 [ 1476.316693][ T2802] RBP: 0000000020000140 R08: 00000000200000c0 R09: 00000000200000c0 [ 1476.324659][ T2802] R10: 0000000020000100 R11: 0000000000000202 R12: 00000000200000c0 [ 1476.332621][ T2802] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 [ 1476.403094][ T2824] FAULT_INJECTION: forcing a failure. [ 1476.403094][ T2824] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1476.416409][ T2824] CPU: 0 PID: 2824 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1476.424746][ T2824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1476.434871][ T2824] Call Trace: [ 1476.438140][ T2824] dump_stack+0x137/0x19d [ 1476.442467][ T2824] should_fail+0x23c/0x250 [ 1476.446895][ T2824] __alloc_pages+0x102/0x320 [ 1476.451582][ T2824] alloc_pages+0x21d/0x310 [ 1476.455995][ T2824] get_zeroed_page+0x13/0x40 [ 1476.459031][ T2826] FAULT_INJECTION: forcing a failure. [ 1476.459031][ T2826] name failslab, interval 1, probability 0, space 0, times 0 [ 1476.460579][ T2824] __pud_alloc+0x44/0x190 [ 1476.460597][ T2824] copy_page_range+0x73a/0x8e0 [ 1476.482898][ T2824] ? vma_interval_tree_augment_rotate+0x100/0x100 [ 1476.489312][ T2824] ? vma_interval_tree_augment_rotate+0xe9/0x100 [ 1476.495623][ T2824] ? __rb_insert_augmented+0x22e/0x350 [ 1476.501060][ T2824] ? up_write+0x25/0xc0 [ 1476.506513][ T2824] dup_mmap+0x6ab/0x9c0 [ 1476.510661][ T2824] dup_mm+0x7c/0x210 [ 1476.514558][ T2824] copy_process+0x11ec/0x2e00 [ 1476.519217][ T2824] kernel_clone+0x14b/0x680 [ 1476.523698][ T2824] ? __fget_light+0x21b/0x260 [ 1476.528367][ T2824] __do_sys_fork+0x3a/0x60 [ 1476.532761][ T2824] do_syscall_64+0x44/0x80 [ 1476.537157][ T2824] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1476.543030][ T2824] RIP: 0033:0x4665d9 [ 1476.546902][ T2824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1476.566487][ T2824] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1476.574891][ T2824] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1476.582841][ T2824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1476.590790][ T2824] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 09:42:21 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') 09:42:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') read$snapshot(r0, 0x0, 0x2) [ 1476.598735][ T2824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1476.606683][ T2824] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1476.614631][ T2826] CPU: 1 PID: 2826 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1476.622952][ T2826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1476.632992][ T2826] Call Trace: [ 1476.636249][ T2826] dump_stack+0x137/0x19d [ 1476.640569][ T2826] should_fail+0x23c/0x250 [ 1476.644981][ T2826] ? xas_create+0x96b/0xb30 [ 1476.649497][ T2826] __should_failslab+0x81/0x90 09:42:21 executing program 1 (fault-call:3 fault-nth:23): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:21 executing program 4: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:42:21 executing program 2 (fault-call:3 fault-nth:22): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() [ 1476.654274][ T2826] should_failslab+0x5/0x20 [ 1476.658765][ T2826] kmem_cache_alloc+0x46/0x2e0 [ 1476.663515][ T2826] ? xas_create+0x96b/0xb30 [ 1476.668126][ T2826] xas_create+0x96b/0xb30 [ 1476.672451][ T2826] xas_store+0x70/0xca0 [ 1476.676606][ T2826] ? selinux_file_alloc_security+0x9c/0xb0 [ 1476.682403][ T2826] ? security_file_alloc+0x12e/0x190 [ 1476.687719][ T2826] ? percpu_counter_add_batch+0x69/0xd0 [ 1476.693370][ T2826] __xa_store+0xcb/0x320 [ 1476.697687][ T2826] xa_store+0x30/0x70 [ 1476.701654][ T2826] io_uring_add_task_file+0x111/0x200 [ 1476.707024][ T2826] io_uring_create+0x1734/0x18d0 [ 1476.712260][ T2826] ? should_fail+0xd6/0x250 [ 1476.716784][ T2826] __x64_sys_io_uring_setup+0xe1/0x120 [ 1476.722240][ T2826] do_syscall_64+0x44/0x80 [ 1476.725117][ T2837] FAULT_INJECTION: forcing a failure. [ 1476.725117][ T2837] name failslab, interval 1, probability 0, space 0, times 0 [ 1476.726726][ T2826] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1476.726755][ T2826] RIP: 0033:0x4665d9 [ 1476.749048][ T2826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1476.768757][ T2826] RSP: 002b:00007f1ed1226108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1476.777150][ T2826] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1476.785144][ T2826] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 000000000000332a [ 1476.793095][ T2826] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 1476.801113][ T2826] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 1476.810291][ T2826] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1476.818247][ T2837] CPU: 0 PID: 2837 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1476.826637][ T2837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1476.836763][ T2837] Call Trace: [ 1476.840034][ T2837] dump_stack+0x137/0x19d [ 1476.844357][ T2837] should_fail+0x23c/0x250 [ 1476.848762][ T2837] ? xas_create+0x96b/0xb30 09:42:21 executing program 4: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:42:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') read$snapshot(r0, 0x0, 0x2) [ 1476.853278][ T2837] __should_failslab+0x81/0x90 [ 1476.858041][ T2837] should_failslab+0x5/0x20 [ 1476.862579][ T2837] kmem_cache_alloc+0x46/0x2e0 [ 1476.862601][ T2837] ? xas_create+0x96b/0xb30 09:42:21 executing program 2 (fault-call:3 fault-nth:23): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') read$snapshot(r0, 0x0, 0x2) [ 1476.862621][ T2837] xas_create+0x96b/0xb30 [ 1476.862643][ T2837] xas_store+0x70/0xca0 [ 1476.862702][ T2837] ? selinux_file_alloc_security+0x9c/0xb0 [ 1476.862723][ T2837] ? security_file_alloc+0x12e/0x190 09:42:21 executing program 1 (fault-call:3 fault-nth:24): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) [ 1476.862741][ T2837] ? percpu_counter_add_batch+0x69/0xd0 [ 1476.862757][ T2837] __xa_store+0xcb/0x320 [ 1476.862769][ T2837] xa_store+0x30/0x70 [ 1476.862780][ T2837] io_uring_add_task_file+0x111/0x200 [ 1476.862799][ T2837] io_uring_create+0x1734/0x18d0 [ 1476.862829][ T2837] ? should_fail+0xd6/0x250 [ 1476.862847][ T2837] __x64_sys_io_uring_setup+0xe1/0x120 [ 1476.862865][ T2837] do_syscall_64+0x44/0x80 [ 1476.862904][ T2837] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1476.862923][ T2837] RIP: 0033:0x4665d9 09:42:21 executing program 0 (fault-call:3 fault-nth:21): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:21 executing program 4: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) [ 1476.862934][ T2837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1476.862950][ T2837] RSP: 002b:00007f1897f58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1476.862993][ T2837] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1476.863002][ T2837] RDX: 0000000020a2e000 RSI: 0000000020000140 RDI: 0000000000005736 [ 1476.863011][ T2837] RBP: 0000000020000140 R08: 00000000200000c0 R09: 00000000200000c0 [ 1476.863020][ T2837] R10: 0000000020000100 R11: 0000000000000202 R12: 00000000200000c0 [ 1476.863029][ T2837] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 [ 1476.917568][ T2844] FAULT_INJECTION: forcing a failure. [ 1476.917568][ T2844] name failslab, interval 1, probability 0, space 0, times 0 [ 1476.917589][ T2844] CPU: 1 PID: 2844 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1476.917661][ T2844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1476.917669][ T2844] Call Trace: [ 1476.917675][ T2844] dump_stack+0x137/0x19d [ 1476.917699][ T2844] should_fail+0x23c/0x250 [ 1476.917717][ T2844] ? dup_mmap+0x38e/0x9c0 [ 1476.917759][ T2844] __should_failslab+0x81/0x90 [ 1476.917782][ T2844] should_failslab+0x5/0x20 [ 1476.917806][ T2844] kmem_cache_alloc+0x46/0x2e0 [ 1476.917827][ T2844] ? __vma_link_rb+0x3c2/0x3e0 [ 1476.917843][ T2844] ? up_write+0x25/0xc0 [ 1476.917860][ T2844] dup_mmap+0x38e/0x9c0 [ 1476.917877][ T2844] dup_mm+0x7c/0x210 [ 1476.917889][ T2844] copy_process+0x11ec/0x2e00 [ 1476.917902][ T2844] kernel_clone+0x14b/0x680 [ 1476.917918][ T2844] ? __fget_light+0x21b/0x260 [ 1476.917958][ T2844] __do_sys_fork+0x3a/0x60 [ 1476.917977][ T2844] do_syscall_64+0x44/0x80 [ 1476.918130][ T2844] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1476.918150][ T2844] RIP: 0033:0x4665d9 [ 1476.918160][ T2844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1476.918174][ T2844] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1476.918191][ T2844] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1476.918205][ T2844] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1476.918217][ T2844] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1476.918226][ T2844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1476.918235][ T2844] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1477.051044][ T2862] FAULT_INJECTION: forcing a failure. [ 1477.051044][ T2862] name failslab, interval 1, probability 0, space 0, times 0 [ 1477.051068][ T2862] CPU: 1 PID: 2862 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1477.051159][ T2862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1477.051170][ T2862] Call Trace: [ 1477.051177][ T2862] dump_stack+0x137/0x19d [ 1477.051201][ T2862] should_fail+0x23c/0x250 [ 1477.051216][ T2862] ? anon_vma_clone+0x8d/0x380 [ 1477.051246][ T2862] __should_failslab+0x81/0x90 [ 1477.051268][ T2862] should_failslab+0x5/0x20 [ 1477.051316][ T2862] kmem_cache_alloc+0x46/0x2e0 [ 1477.051333][ T2862] ? avc_has_perm_noaudit+0x19a/0x240 [ 1477.051353][ T2862] anon_vma_clone+0x8d/0x380 [ 1477.051445][ T2862] anon_vma_fork+0x54/0x2b0 [ 1477.051466][ T2862] dup_mmap+0x49c/0x9c0 [ 1477.051530][ T2862] dup_mm+0x7c/0x210 [ 1477.051543][ T2862] copy_process+0x11ec/0x2e00 [ 1477.051574][ T2862] kernel_clone+0x14b/0x680 [ 1477.051589][ T2862] ? __fget_light+0x21b/0x260 [ 1477.051612][ T2862] __do_sys_fork+0x3a/0x60 [ 1477.051631][ T2862] do_syscall_64+0x44/0x80 [ 1477.051655][ T2862] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1477.051677][ T2862] RIP: 0033:0x4665d9 [ 1477.051746][ T2862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1477.051765][ T2862] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1477.051783][ T2862] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1477.051793][ T2862] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1477.051815][ T2862] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1477.051824][ T2862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1477.051834][ T2862] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1477.074099][ T2864] FAULT_INJECTION: forcing a failure. [ 1477.074099][ T2864] name failslab, interval 1, probability 0, space 0, times 0 [ 1477.197618][ T2872] FAULT_INJECTION: forcing a failure. [ 1477.197618][ T2872] name failslab, interval 1, probability 0, space 0, times 0 [ 1477.199581][ T2864] CPU: 0 PID: 2864 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1477.552645][ T2864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1477.562783][ T2864] Call Trace: [ 1477.566040][ T2864] dump_stack+0x137/0x19d [ 1477.570369][ T2864] should_fail+0x23c/0x250 [ 1477.574866][ T2864] ? xas_create+0x96b/0xb30 [ 1477.579516][ T2864] __should_failslab+0x81/0x90 [ 1477.584374][ T2864] should_failslab+0x5/0x20 [ 1477.588879][ T2864] kmem_cache_alloc+0x46/0x2e0 [ 1477.593661][ T2864] ? xas_create+0x96b/0xb30 [ 1477.598209][ T2864] xas_create+0x96b/0xb30 [ 1477.604567][ T2864] xas_store+0x70/0xca0 [ 1477.608752][ T2864] ? selinux_file_alloc_security+0x9c/0xb0 [ 1477.614539][ T2864] ? security_file_alloc+0x12e/0x190 [ 1477.619835][ T2864] ? percpu_counter_add_batch+0x69/0xd0 [ 1477.625367][ T2864] __xa_store+0xcb/0x320 [ 1477.629602][ T2864] xa_store+0x30/0x70 [ 1477.633576][ T2864] io_uring_add_task_file+0x111/0x200 [ 1477.639089][ T2864] io_uring_create+0x1734/0x18d0 [ 1477.644007][ T2864] ? should_fail+0xd6/0x250 [ 1477.648663][ T2864] __x64_sys_io_uring_setup+0xe1/0x120 [ 1477.654104][ T2864] do_syscall_64+0x44/0x80 [ 1477.658528][ T2864] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1477.664535][ T2864] RIP: 0033:0x4665d9 [ 1477.668649][ T2864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1477.688442][ T2864] RSP: 002b:00007f1897f58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1477.697007][ T2864] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1477.705114][ T2864] RDX: 0000000020a2e000 RSI: 0000000020000140 RDI: 0000000000005736 [ 1477.713330][ T2864] RBP: 0000000020000140 R08: 00000000200000c0 R09: 00000000200000c0 [ 1477.721294][ T2864] R10: 0000000020000100 R11: 0000000000000202 R12: 00000000200000c0 [ 1477.729296][ T2864] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 [ 1477.737260][ T2872] CPU: 1 PID: 2872 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1477.745671][ T2872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1477.755720][ T2872] Call Trace: [ 1477.758991][ T2872] dump_stack+0x137/0x19d [ 1477.763333][ T2872] should_fail+0x23c/0x250 [ 1477.767762][ T2872] ? xas_create+0x96b/0xb30 [ 1477.772304][ T2872] __should_failslab+0x81/0x90 [ 1477.777106][ T2872] should_failslab+0x5/0x20 [ 1477.781648][ T2872] kmem_cache_alloc+0x46/0x2e0 [ 1477.786464][ T2872] ? xas_create+0x96b/0xb30 [ 1477.786533][ T2872] xas_create+0x96b/0xb30 [ 1477.786622][ T2872] xas_store+0x70/0xca0 [ 1477.786643][ T2872] ? selinux_file_alloc_security+0x9c/0xb0 [ 1477.786736][ T2872] ? security_file_alloc+0x12e/0x190 [ 1477.786754][ T2872] ? percpu_counter_add_batch+0x69/0xd0 [ 1477.786770][ T2872] __xa_store+0xcb/0x320 [ 1477.786781][ T2872] xa_store+0x30/0x70 [ 1477.786792][ T2872] io_uring_add_task_file+0x111/0x200 [ 1477.786874][ T2872] io_uring_create+0x1734/0x18d0 [ 1477.786890][ T2872] ? should_fail+0xd6/0x250 [ 1477.786908][ T2872] __x64_sys_io_uring_setup+0xe1/0x120 [ 1477.786933][ T2872] do_syscall_64+0x44/0x80 [ 1477.786955][ T2872] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1477.787001][ T2872] RIP: 0033:0x4665d9 [ 1477.787013][ T2872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:42:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000000100)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stats_refr_interval\x00', 0x0, r3) openat$cgroup_type(r3, &(0x7f0000000140), 0x2, 0x0) r4 = fsmount(r1, 0x0, 0x9) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x13c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5cf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8004) r5 = fsopen(&(0x7f00000004c0)='v7\x00', 0x1) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000540), 0x400000, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000500)='{\x00', 0x0, r6) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) r7 = socket(0x23, 0x5, 0x10001) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000580)='{\x00', &(0x7f00000005c0)="634c77bce08369eb4bde67703607471c949ed15c2edcbd9f276f6f8249f4f749266b7559542cc16cf01c6db0e6a380a30117435413d47f6eaec9ba9570e0bb9b32ad1e0476dfdf66de8fcbae9960ada280d2f5f4c037d6707c8426ad269c93ba3ea3d81972cee74810b5e5e60ed1d9f67d52615e981fdc61e8f722352d819b6c", 0x80) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x7c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x986}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 09:42:22 executing program 5: read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:22 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:22 executing program 1 (fault-call:3 fault-nth:25): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:22 executing program 2 (fault-call:3 fault-nth:24): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:22 executing program 0 (fault-call:3 fault-nth:22): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1477.787033][ T2872] RSP: 002b:00007f1ed1226108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1477.787050][ T2872] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1477.787060][ T2872] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 000000000000332a [ 1477.787070][ T2872] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 1477.787079][ T2872] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 1477.787091][ T2872] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 09:42:22 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:22 executing program 5: read$snapshot(0xffffffffffffffff, 0x0, 0x2) [ 1478.046450][ T2892] FAULT_INJECTION: forcing a failure. [ 1478.046450][ T2892] name failslab, interval 1, probability 0, space 0, times 0 [ 1478.046707][ T2891] FAULT_INJECTION: forcing a failure. [ 1478.046707][ T2891] name failslab, interval 1, probability 0, space 0, times 0 [ 1478.059094][ T2892] CPU: 1 PID: 2892 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1478.059113][ T2892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1478.059121][ T2892] Call Trace: [ 1478.059127][ T2892] dump_stack+0x137/0x19d [ 1478.097706][ T2892] should_fail+0x23c/0x250 [ 1478.102119][ T2892] ? anon_vma_clone+0x8d/0x380 [ 1478.106875][ T2892] __should_failslab+0x81/0x90 [ 1478.111645][ T2892] should_failslab+0x5/0x20 [ 1478.116136][ T2892] kmem_cache_alloc+0x46/0x2e0 [ 1478.120906][ T2892] ? avc_has_perm_noaudit+0x19a/0x240 [ 1478.126282][ T2892] anon_vma_clone+0x8d/0x380 [ 1478.130882][ T2892] anon_vma_fork+0x54/0x2b0 [ 1478.135410][ T2892] dup_mmap+0x49c/0x9c0 [ 1478.139551][ T2892] dup_mm+0x7c/0x210 [ 1478.143432][ T2892] copy_process+0x11ec/0x2e00 [ 1478.148089][ T2892] kernel_clone+0x14b/0x680 [ 1478.152572][ T2892] ? __fget_light+0x21b/0x260 [ 1478.157232][ T2892] __do_sys_fork+0x3a/0x60 [ 1478.161648][ T2892] do_syscall_64+0x44/0x80 [ 1478.166101][ T2892] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1478.172077][ T2892] RIP: 0033:0x4665d9 [ 1478.175954][ T2892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1478.195637][ T2892] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1478.204027][ T2892] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1478.212020][ T2892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1478.219976][ T2892] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1478.227960][ T2892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1478.236233][ T2892] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1478.244195][ T2891] CPU: 0 PID: 2891 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1478.252568][ T2891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1478.262679][ T2891] Call Trace: [ 1478.265950][ T2891] dump_stack+0x137/0x19d [ 1478.270340][ T2891] should_fail+0x23c/0x250 [ 1478.274777][ T2891] ? xas_create+0x96b/0xb30 [ 1478.279302][ T2891] __should_failslab+0x81/0x90 [ 1478.284189][ T2891] should_failslab+0x5/0x20 [ 1478.288686][ T2891] kmem_cache_alloc+0x46/0x2e0 09:42:22 executing program 5: read$snapshot(0xffffffffffffffff, 0x0, 0x2) [ 1478.293457][ T2891] ? xas_create+0x96b/0xb30 [ 1478.297983][ T2891] xas_create+0x96b/0xb30 [ 1478.302311][ T2891] xas_store+0x70/0xca0 [ 1478.306541][ T2891] ? selinux_file_alloc_security+0x9c/0xb0 [ 1478.312458][ T2891] ? security_file_alloc+0x12e/0x190 [ 1478.317803][ T2891] ? percpu_counter_add_batch+0x69/0xd0 [ 1478.323340][ T2891] __xa_store+0xcb/0x320 [ 1478.327624][ T2891] xa_store+0x30/0x70 [ 1478.331593][ T2891] io_uring_add_task_file+0x111/0x200 [ 1478.336961][ T2891] io_uring_create+0x1734/0x18d0 [ 1478.341994][ T2891] ? should_fail+0xd6/0x250 [ 1478.346497][ T2891] __x64_sys_io_uring_setup+0xe1/0x120 [ 1478.348147][ T2893] FAULT_INJECTION: forcing a failure. [ 1478.348147][ T2893] name failslab, interval 1, probability 0, space 0, times 0 [ 1478.352302][ T2891] do_syscall_64+0x44/0x80 [ 1478.369355][ T2891] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1478.375247][ T2891] RIP: 0033:0x4665d9 [ 1478.379160][ T2891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1478.398747][ T2891] RSP: 002b:00007f1ed1226108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1478.407143][ T2891] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1478.415106][ T2891] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 000000000000332a [ 1478.423170][ T2891] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 1478.431296][ T2891] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 1478.439337][ T2891] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1478.447571][ T2893] CPU: 1 PID: 2893 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1478.455901][ T2893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1478.466130][ T2893] Call Trace: [ 1478.469418][ T2893] dump_stack+0x137/0x19d [ 1478.473770][ T2893] should_fail+0x23c/0x250 [ 1478.478195][ T2893] ? vm_area_alloc+0x28/0xa0 [ 1478.482835][ T2893] __should_failslab+0x81/0x90 [ 1478.487671][ T2893] should_failslab+0x5/0x20 [ 1478.492380][ T2893] kmem_cache_alloc+0x46/0x2e0 [ 1478.497164][ T2893] vm_area_alloc+0x28/0xa0 [ 1478.501794][ T2893] mmap_region+0x721/0x13e0 [ 1478.506315][ T2893] ? security_mmap_addr+0x78/0x90 [ 1478.511384][ T2893] do_mmap+0x77d/0xc90 [ 1478.515459][ T2893] vm_mmap_pgoff+0xf9/0x1d0 [ 1478.519963][ T2893] ksys_mmap_pgoff+0x2a8/0x380 [ 1478.524762][ T2893] do_syscall_64+0x44/0x80 [ 1478.529212][ T2893] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1478.535114][ T2893] RIP: 0033:0x466622 09:42:23 executing program 0 (fault-call:3 fault-nth:23): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:23 executing program 2 (fault-call:3 fault-nth:25): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:23 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) [ 1478.539008][ T2893] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1478.539025][ T2893] RSP: 002b:00007f1897f580f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1478.539041][ T2893] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466622 [ 1478.539080][ T2893] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000205e1000 [ 1478.539093][ T2893] RBP: 00000000205e1000 R08: 0000000000000006 R09: 0000000000000000 [ 1478.539106][ T2893] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 1478.539118][ T2893] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 [ 1478.635701][ T2921] FAULT_INJECTION: forcing a failure. [ 1478.635701][ T2921] name failslab, interval 1, probability 0, space 0, times 0 [ 1478.656021][ T2922] FAULT_INJECTION: forcing a failure. [ 1478.656021][ T2922] name failslab, interval 1, probability 0, space 0, times 0 [ 1478.661312][ T2921] CPU: 0 PID: 2921 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1478.702808][ T2921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1478.702820][ T2921] Call Trace: [ 1478.702826][ T2921] dump_stack+0x137/0x19d [ 1478.702874][ T2921] should_fail+0x23c/0x250 [ 1478.702889][ T2921] ? anon_vma_clone+0x8d/0x380 [ 1478.702907][ T2921] __should_failslab+0x81/0x90 [ 1478.702926][ T2921] should_failslab+0x5/0x20 [ 1478.702939][ T2921] kmem_cache_alloc+0x46/0x2e0 [ 1478.702989][ T2921] ? avc_has_perm_noaudit+0x19a/0x240 [ 1478.703007][ T2921] anon_vma_clone+0x8d/0x380 [ 1478.703023][ T2921] anon_vma_fork+0x54/0x2b0 [ 1478.703038][ T2921] dup_mmap+0x49c/0x9c0 [ 1478.703107][ T2921] dup_mm+0x7c/0x210 [ 1478.703119][ T2921] copy_process+0x11ec/0x2e00 [ 1478.703132][ T2921] kernel_clone+0x14b/0x680 [ 1478.703144][ T2921] ? __fget_light+0x21b/0x260 [ 1478.703160][ T2921] __do_sys_fork+0x3a/0x60 [ 1478.703173][ T2921] do_syscall_64+0x44/0x80 [ 1478.703251][ T2921] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1478.703270][ T2921] RIP: 0033:0x4665d9 [ 1478.703280][ T2921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1478.703329][ T2921] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1478.703343][ T2921] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1478.703352][ T2921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1478.703360][ T2921] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1478.703425][ T2921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1478.703434][ T2921] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1478.703445][ T2922] CPU: 1 PID: 2922 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1478.703464][ T2922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1478.703473][ T2922] Call Trace: [ 1478.703476][ T2922] dump_stack+0x137/0x19d [ 1478.703495][ T2922] should_fail+0x23c/0x250 [ 1478.703545][ T2922] ? vm_area_dup+0x44/0x120 [ 1478.703559][ T2922] __should_failslab+0x81/0x90 [ 1478.703577][ T2922] should_failslab+0x5/0x20 [ 1478.703595][ T2922] kmem_cache_alloc+0x46/0x2e0 [ 1478.703611][ T2922] ? _find_next_bit+0x188/0x190 [ 1478.703711][ T2922] vm_area_dup+0x44/0x120 [ 1478.703724][ T2922] ? kmem_cache_alloc+0x1fb/0x2e0 [ 1478.703747][ T2922] ? xas_create+0x96b/0xb30 [ 1478.703787][ T2922] ? xas_create+0xae3/0xb30 [ 1478.703820][ T2922] __split_vma+0x82/0x320 [ 1478.703841][ T2922] ? vmacache_find+0x313/0x320 [ 1478.703864][ T2922] __do_munmap+0x27c/0x1330 [ 1478.703898][ T2922] ? __xas_nomem+0xfc/0x270 [ 1478.703916][ T2922] mmap_region+0x58a/0x13e0 [ 1478.703932][ T2922] ? security_mmap_addr+0x78/0x90 [ 1478.703948][ T2922] do_mmap+0x77d/0xc90 [ 1478.703972][ T2922] vm_mmap_pgoff+0xf9/0x1d0 [ 1478.703994][ T2922] ksys_mmap_pgoff+0x2a8/0x380 [ 1478.704015][ T2922] do_syscall_64+0x44/0x80 [ 1478.704049][ T2922] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1478.704084][ T2922] RIP: 0033:0x466622 [ 1478.704098][ T2922] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1478.704118][ T2922] RSP: 002b:00007f1ed12260f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1478.704139][ T2922] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466622 [ 1478.704153][ T2922] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffc000 [ 1478.704167][ T2922] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000000000000 [ 1478.704181][ T2922] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000340 09:42:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') 09:42:23 executing program 5: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:42:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) 09:42:23 executing program 1 (fault-call:3 fault-nth:26): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:23 executing program 0 (fault-call:3 fault-nth:24): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:23 executing program 2 (fault-call:3 fault-nth:26): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() [ 1478.704191][ T2922] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1479.138177][ T2938] FAULT_INJECTION: forcing a failure. [ 1479.138177][ T2938] name failslab, interval 1, probability 0, space 0, times 0 [ 1479.150897][ T2938] CPU: 0 PID: 2938 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1479.159327][ T2938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1479.169386][ T2938] Call Trace: [ 1479.172723][ T2938] dump_stack+0x137/0x19d [ 1479.177061][ T2938] should_fail+0x23c/0x250 [ 1479.178310][ T2939] FAULT_INJECTION: forcing a failure. [ 1479.178310][ T2939] name failslab, interval 1, probability 0, space 0, times 0 [ 1479.181564][ T2938] ? anon_vma_clone+0x8d/0x380 [ 1479.198980][ T2938] __should_failslab+0x81/0x90 [ 1479.203800][ T2938] should_failslab+0x5/0x20 [ 1479.208293][ T2938] kmem_cache_alloc+0x46/0x2e0 [ 1479.213046][ T2938] anon_vma_clone+0x8d/0x380 [ 1479.217624][ T2938] anon_vma_fork+0x54/0x2b0 [ 1479.222170][ T2938] dup_mmap+0x49c/0x9c0 [ 1479.226315][ T2938] dup_mm+0x7c/0x210 [ 1479.230198][ T2938] copy_process+0x11ec/0x2e00 [ 1479.234858][ T2938] kernel_clone+0x14b/0x680 [ 1479.239452][ T2938] ? __fget_light+0x21b/0x260 [ 1479.244161][ T2938] __do_sys_fork+0x3a/0x60 [ 1479.248578][ T2938] do_syscall_64+0x44/0x80 [ 1479.252982][ T2938] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1479.258957][ T2938] RIP: 0033:0x4665d9 [ 1479.262851][ T2938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1479.282530][ T2938] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1479.290938][ T2938] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1479.298981][ T2938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1479.306949][ T2938] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1479.314922][ T2938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1479.322968][ T2938] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 09:42:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) 09:42:23 executing program 2 (fault-call:3 fault-nth:27): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() [ 1479.331011][ T2939] CPU: 1 PID: 2939 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1479.339376][ T2939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1479.349491][ T2939] Call Trace: [ 1479.352772][ T2939] dump_stack+0x137/0x19d [ 1479.357166][ T2939] should_fail+0x23c/0x250 [ 1479.361584][ T2939] ? vm_area_alloc+0x28/0xa0 [ 1479.366163][ T2939] __should_failslab+0x81/0x90 [ 1479.371022][ T2939] should_failslab+0x5/0x20 [ 1479.375551][ T2939] kmem_cache_alloc+0x46/0x2e0 [ 1479.380363][ T2939] vm_area_alloc+0x28/0xa0 [ 1479.384798][ T2939] mmap_region+0x721/0x13e0 09:42:23 executing program 5: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) [ 1479.389516][ T2939] ? security_mmap_addr+0x78/0x90 [ 1479.394656][ T2939] do_mmap+0x77d/0xc90 [ 1479.398786][ T2939] vm_mmap_pgoff+0xf9/0x1d0 [ 1479.403296][ T2939] ksys_mmap_pgoff+0x2a8/0x380 [ 1479.408056][ T2939] do_syscall_64+0x44/0x80 [ 1479.412988][ T2939] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1479.418904][ T2939] RIP: 0033:0x466622 [ 1479.422850][ T2939] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1479.442452][ T2939] RSP: 002b:00007f1897f580f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1479.451326][ T2939] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466622 [ 1479.459339][ T2939] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000205e1000 [ 1479.466106][ T2950] FAULT_INJECTION: forcing a failure. [ 1479.466106][ T2950] name failslab, interval 1, probability 0, space 0, times 0 [ 1479.467327][ T2939] RBP: 00000000205e1000 R08: 0000000000000006 R09: 0000000000000000 [ 1479.467342][ T2939] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 1479.495992][ T2939] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 [ 1479.504007][ T2950] CPU: 0 PID: 2950 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1479.512348][ T2950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1479.522394][ T2950] Call Trace: [ 1479.525789][ T2950] dump_stack+0x137/0x19d [ 1479.530202][ T2950] should_fail+0x23c/0x250 [ 1479.534665][ T2950] ? xas_create+0x96b/0xb30 [ 1479.539220][ T2950] __should_failslab+0x81/0x90 [ 1479.544049][ T2950] should_failslab+0x5/0x20 [ 1479.548338][ T2955] FAULT_INJECTION: forcing a failure. [ 1479.548338][ T2955] name failslab, interval 1, probability 0, space 0, times 0 [ 1479.548552][ T2950] kmem_cache_alloc+0x46/0x2e0 [ 1479.566256][ T2950] xas_create+0x96b/0xb30 [ 1479.570664][ T2950] xas_store+0x70/0xca0 [ 1479.574815][ T2950] ? kmem_cache_alloc_node_trace+0x1f0/0x2e0 [ 1479.580855][ T2950] __xa_store+0xcb/0x320 [ 1479.585138][ T2950] xa_store+0x30/0x70 [ 1479.589101][ T2950] io_uring_add_task_file+0x111/0x200 [ 1479.594463][ T2950] io_uring_create+0x1734/0x18d0 [ 1479.599440][ T2950] ? should_fail+0xd6/0x250 [ 1479.603932][ T2950] __x64_sys_io_uring_setup+0xe1/0x120 [ 1479.609379][ T2950] do_syscall_64+0x44/0x80 [ 1479.613785][ T2950] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1479.619668][ T2950] RIP: 0033:0x4665d9 [ 1479.623547][ T2950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1479.643163][ T2950] RSP: 002b:00007f1ed1205108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1479.651559][ T2950] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9 [ 1479.659581][ T2950] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 000000000000332a [ 1479.667537][ T2950] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 1479.675611][ T2950] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 09:42:24 executing program 5: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) [ 1479.683566][ T2950] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1479.691523][ T2955] CPU: 1 PID: 2955 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1479.699941][ T2955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1479.710102][ T2955] Call Trace: [ 1479.713377][ T2955] dump_stack+0x137/0x19d [ 1479.717710][ T2955] should_fail+0x23c/0x250 [ 1479.722134][ T2955] ? anon_vma_clone+0x8d/0x380 [ 1479.726904][ T2955] __should_failslab+0x81/0x90 [ 1479.731680][ T2955] should_failslab+0x5/0x20 [ 1479.736436][ T2955] kmem_cache_alloc+0x46/0x2e0 09:42:24 executing program 5: syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) [ 1479.741254][ T2955] anon_vma_clone+0x8d/0x380 [ 1479.745931][ T2955] anon_vma_fork+0x54/0x2b0 [ 1479.750532][ T2955] dup_mmap+0x49c/0x9c0 [ 1479.754758][ T2955] dup_mm+0x7c/0x210 [ 1479.758718][ T2955] copy_process+0x11ec/0x2e00 [ 1479.763392][ T2955] kernel_clone+0x14b/0x680 [ 1479.767898][ T2955] ? __fget_light+0x21b/0x260 [ 1479.772699][ T2955] __do_sys_fork+0x3a/0x60 [ 1479.777128][ T2955] do_syscall_64+0x44/0x80 [ 1479.781662][ T2955] entry_SYSCALL_64_after_hwframe+0x44/0xae 09:42:24 executing program 5: syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) [ 1479.787578][ T2955] RIP: 0033:0x4665d9 [ 1479.791727][ T2955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1479.811334][ T2955] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1479.820108][ T2955] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1479.828273][ T2955] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 09:42:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') ioctl$SNAPSHOT_S2RAM(r0, 0x330b) read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$SNAPSHOT_FREE(r1, 0x3305) 09:42:24 executing program 1 (fault-call:3 fault-nth:27): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:24 executing program 0 (fault-call:3 fault-nth:25): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1479.836290][ T2955] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1479.844257][ T2955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1479.852230][ T2955] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 09:42:24 executing program 5: syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) [ 1479.898741][ T2968] FAULT_INJECTION: forcing a failure. [ 1479.898741][ T2968] name failslab, interval 1, probability 0, space 0, times 0 [ 1479.911552][ T2968] CPU: 1 PID: 2968 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1479.919918][ T2968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1479.930057][ T2968] Call Trace: [ 1479.933353][ T2968] dump_stack+0x137/0x19d [ 1479.937817][ T2968] should_fail+0x23c/0x250 [ 1479.942292][ T2968] ? anon_vma_clone+0x8d/0x380 09:42:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) [ 1479.947060][ T2968] __should_failslab+0x81/0x90 [ 1479.951937][ T2968] should_failslab+0x5/0x20 [ 1479.956501][ T2968] kmem_cache_alloc+0x46/0x2e0 [ 1479.961368][ T2968] anon_vma_clone+0x8d/0x380 [ 1479.966005][ T2968] __split_vma+0x134/0x320 [ 1479.970547][ T2968] ? vmacache_find+0x2df/0x320 [ 1479.975482][ T2968] __do_munmap+0x27c/0x1330 [ 1479.980084][ T2968] ? up_write+0x25/0xc0 [ 1479.984251][ T2968] ? vma_link+0x188/0x1a0 [ 1479.988584][ T2968] mmap_region+0x58a/0x13e0 [ 1479.993172][ T2968] ? security_mmap_addr+0x78/0x90 [ 1479.993191][ T2968] do_mmap+0x77d/0xc90 [ 1479.993209][ T2968] vm_mmap_pgoff+0xf9/0x1d0 [ 1479.993225][ T2968] ksys_mmap_pgoff+0x2a8/0x380 [ 1479.993238][ T2968] do_syscall_64+0x44/0x80 [ 1479.993256][ T2968] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1479.993355][ T2968] RIP: 0033:0x466622 09:42:24 executing program 4: read$snapshot(0xffffffffffffffff, &(0x7f0000000040)=""/72, 0x48) 09:42:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0x2) [ 1480.026225][ T2968] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 09:42:24 executing program 2 (fault-call:3 fault-nth:28): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:24 executing program 1 (fault-call:3 fault-nth:28): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:24 executing program 0 (fault-call:3 fault-nth:26): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0x2) 09:42:24 executing program 4: read$snapshot(0xffffffffffffffff, &(0x7f0000000040)=""/72, 0x48) [ 1480.026245][ T2968] RSP: 002b:00007f1897f580f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1480.026260][ T2968] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466622 [ 1480.026271][ T2968] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020a2e000 [ 1480.026281][ T2968] RBP: 0000000020a2e000 R08: 0000000000000006 R09: 0000000010000000 [ 1480.026290][ T2968] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 1480.026304][ T2968] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 [ 1480.073402][ T2975] FAULT_INJECTION: forcing a failure. 09:42:24 executing program 3: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) r1 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, 0x0) r2 = fork() r3 = syz_open_procfs(r2, &(0x7f0000000040)='net/mcfilter\x00') read$snapshot(r3, 0x0, 0x2) 09:42:24 executing program 4: read$snapshot(0xffffffffffffffff, &(0x7f0000000040)=""/72, 0x48) 09:42:24 executing program 1 (fault-call:3 fault-nth:29): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:24 executing program 0 (fault-call:3 fault-nth:27): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0x2) [ 1480.073402][ T2975] name failslab, interval 1, probability 0, space 0, times 0 [ 1480.073429][ T2975] CPU: 0 PID: 2975 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1480.073517][ T2975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1480.073529][ T2975] Call Trace: [ 1480.073536][ T2975] dump_stack+0x137/0x19d [ 1480.073563][ T2975] should_fail+0x23c/0x250 [ 1480.073582][ T2975] ? vm_area_alloc+0x28/0xa0 [ 1480.073652][ T2975] __should_failslab+0x81/0x90 [ 1480.073680][ T2975] should_failslab+0x5/0x20 [ 1480.073695][ T2975] kmem_cache_alloc+0x46/0x2e0 [ 1480.073713][ T2975] vm_area_alloc+0x28/0xa0 [ 1480.073724][ T2975] mmap_region+0x721/0x13e0 [ 1480.073757][ T2975] ? security_mmap_addr+0x78/0x90 [ 1480.073777][ T2975] do_mmap+0x77d/0xc90 [ 1480.073870][ T2975] vm_mmap_pgoff+0xf9/0x1d0 [ 1480.073886][ T2975] ksys_mmap_pgoff+0x2a8/0x380 [ 1480.073900][ T2975] do_syscall_64+0x44/0x80 [ 1480.073925][ T2975] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1480.073952][ T2975] RIP: 0033:0x466622 [ 1480.073966][ T2975] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1480.073985][ T2975] RSP: 002b:00007f1ed12260f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1480.074029][ T2975] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466622 [ 1480.074039][ T2975] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffc000 [ 1480.074048][ T2975] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000000000000 [ 1480.074058][ T2975] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000340 [ 1480.074067][ T2975] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1480.191770][ T3004] FAULT_INJECTION: forcing a failure. [ 1480.191770][ T3004] name failslab, interval 1, probability 0, space 0, times 0 [ 1480.191865][ T3004] CPU: 1 PID: 3004 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1480.191885][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1480.191975][ T3004] Call Trace: [ 1480.191983][ T3004] dump_stack+0x137/0x19d [ 1480.192028][ T3004] should_fail+0x23c/0x250 [ 1480.192049][ T3004] ? vm_area_dup+0x44/0x120 [ 1480.192077][ T3004] __should_failslab+0x81/0x90 [ 1480.192102][ T3004] should_failslab+0x5/0x20 [ 1480.192119][ T3004] kmem_cache_alloc+0x46/0x2e0 [ 1480.192136][ T3004] ? pagerange_is_ram_callback+0xb6/0xd0 [ 1480.192183][ T3004] vm_area_dup+0x44/0x120 [ 1480.192199][ T3004] ? pgprot_writethrough+0x20/0x20 [ 1480.192221][ T3004] ? perf_event_mmap+0x14c/0xd00 [ 1480.192237][ T3004] ? pfn_modify_allowed+0x87/0x190 [ 1480.192306][ T3004] ? remap_pfn_range_notrack+0x71c/0x770 [ 1480.192323][ T3004] __split_vma+0x82/0x320 [ 1480.192398][ T3004] ? vmacache_find+0x2df/0x320 [ 1480.192417][ T3004] __do_munmap+0x27c/0x1330 [ 1480.192513][ T3004] ? up_write+0x25/0xc0 [ 1480.192585][ T3004] ? vma_link+0x188/0x1a0 [ 1480.192598][ T3004] mmap_region+0x58a/0x13e0 [ 1480.192612][ T3004] ? security_mmap_addr+0x78/0x90 [ 1480.192676][ T3004] do_mmap+0x77d/0xc90 [ 1480.192695][ T3004] vm_mmap_pgoff+0xf9/0x1d0 [ 1480.192713][ T3004] ksys_mmap_pgoff+0x2a8/0x380 [ 1480.192738][ T3004] do_syscall_64+0x44/0x80 [ 1480.192760][ T3004] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1480.192784][ T3004] RIP: 0033:0x466622 [ 1480.192797][ T3004] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1480.192835][ T3004] RSP: 002b:00007f1897f580f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1480.192850][ T3004] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466622 [ 1480.192860][ T3004] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020a2e000 [ 1480.192869][ T3004] RBP: 0000000020a2e000 R08: 0000000000000006 R09: 0000000010000000 [ 1480.192878][ T3004] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 1480.192887][ T3004] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 [ 1480.196370][ T3003] FAULT_INJECTION: forcing a failure. [ 1480.196370][ T3003] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1480.196394][ T3003] CPU: 1 PID: 3003 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1480.196418][ T3003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1480.196427][ T3003] Call Trace: [ 1480.196432][ T3003] dump_stack+0x137/0x19d [ 1480.196452][ T3003] should_fail+0x23c/0x250 [ 1480.196467][ T3003] __alloc_pages+0x102/0x320 [ 1480.196483][ T3003] alloc_pages+0x21d/0x310 [ 1480.196547][ T3003] pte_alloc_one+0x29/0xb0 [ 1480.196566][ T3003] __pte_alloc+0x2f/0x210 [ 1480.196615][ T3003] remap_pfn_range_notrack+0x5b7/0x770 [ 1480.196631][ T3003] remap_pfn_range+0x87/0xe0 [ 1480.196652][ T3003] io_uring_mmap+0x23b/0x260 [ 1480.196686][ T3003] mmap_region+0xbb6/0x13e0 [ 1480.196706][ T3003] do_mmap+0x77d/0xc90 [ 1480.196730][ T3003] vm_mmap_pgoff+0xf9/0x1d0 [ 1480.196827][ T3003] ksys_mmap_pgoff+0x2a8/0x380 [ 1480.196842][ T3003] do_syscall_64+0x44/0x80 [ 1480.196861][ T3003] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1480.196956][ T3003] RIP: 0033:0x466622 [ 1480.196966][ T3003] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1480.196982][ T3003] RSP: 002b:00007f1ed12260f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1480.197002][ T3003] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466622 [ 1480.197015][ T3003] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffc000 [ 1480.197028][ T3003] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000000000000 [ 1480.197040][ T3003] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000340 [ 1480.197054][ T3003] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1480.270875][ T3017] FAULT_INJECTION: forcing a failure. [ 1480.270875][ T3017] name failslab, interval 1, probability 0, space 0, times 0 [ 1480.386035][ T3026] FAULT_INJECTION: forcing a failure. [ 1480.386035][ T3026] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1480.388776][ T3017] CPU: 0 PID: 3017 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1480.388792][ T3017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1480.899775][ T3017] Call Trace: [ 1480.903042][ T3017] dump_stack+0x137/0x19d [ 1480.907377][ T3017] should_fail+0x23c/0x250 [ 1480.911779][ T3017] ? anon_vma_fork+0xb1/0x2b0 [ 1480.916457][ T3017] __should_failslab+0x81/0x90 [ 1480.921380][ T3017] should_failslab+0x5/0x20 [ 1480.925988][ T3017] kmem_cache_alloc+0x46/0x2e0 [ 1480.930736][ T3017] anon_vma_fork+0xb1/0x2b0 [ 1480.935536][ T3017] dup_mmap+0x49c/0x9c0 [ 1480.939673][ T3017] dup_mm+0x7c/0x210 [ 1480.943548][ T3017] copy_process+0x11ec/0x2e00 [ 1480.948332][ T3017] kernel_clone+0x14b/0x680 [ 1480.957681][ T3017] ? __fget_light+0x21b/0x260 [ 1480.962345][ T3017] __do_sys_fork+0x3a/0x60 [ 1480.966757][ T3017] do_syscall_64+0x44/0x80 [ 1480.971237][ T3017] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1480.977122][ T3017] RIP: 0033:0x4665d9 [ 1480.980999][ T3017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1481.000620][ T3017] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1481.009104][ T3017] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1481.017147][ T3017] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1481.025573][ T3017] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1481.033525][ T3017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1481.041497][ T3017] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1481.049513][ T3026] CPU: 1 PID: 3026 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1481.057846][ T3026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1481.067896][ T3026] Call Trace: [ 1481.071177][ T3026] dump_stack+0x137/0x19d [ 1481.075571][ T3026] should_fail+0x23c/0x250 [ 1481.080021][ T3026] __alloc_pages+0x102/0x320 [ 1481.084605][ T3026] alloc_pages+0x21d/0x310 [ 1481.089044][ T3026] pte_alloc_one+0x29/0xb0 [ 1481.093460][ T3026] __pte_alloc+0x2f/0x210 [ 1481.097783][ T3026] remap_pfn_range_notrack+0x5b7/0x770 [ 1481.103356][ T3026] remap_pfn_range+0x87/0xe0 [ 1481.108080][ T3026] io_uring_mmap+0x23b/0x260 [ 1481.112760][ T3026] mmap_region+0xbb6/0x13e0 [ 1481.117289][ T3026] do_mmap+0x77d/0xc90 [ 1481.121363][ T3026] vm_mmap_pgoff+0xf9/0x1d0 [ 1481.125979][ T3026] ksys_mmap_pgoff+0x2a8/0x380 [ 1481.130748][ T3026] do_syscall_64+0x44/0x80 [ 1481.135254][ T3026] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1481.141189][ T3026] RIP: 0033:0x466622 [ 1481.145149][ T3026] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1481.164767][ T3026] RSP: 002b:00007f1ed12260f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1481.166784][ T3041] FAULT_INJECTION: forcing a failure. [ 1481.166784][ T3041] name failslab, interval 1, probability 0, space 0, times 0 [ 1481.173299][ T3026] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466622 [ 1481.173315][ T3026] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffc000 09:42:25 executing program 2 (fault-call:3 fault-nth:29): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() [ 1481.173328][ T3026] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000000000000 [ 1481.209809][ T3026] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000340 [ 1481.218288][ T3026] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1481.226303][ T3041] CPU: 0 PID: 3041 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1481.234715][ T3041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1481.244833][ T3041] Call Trace: [ 1481.248109][ T3041] dump_stack+0x137/0x19d [ 1481.252450][ T3041] should_fail+0x23c/0x250 [ 1481.257102][ T3041] ? anon_vma_fork+0x117/0x2b0 [ 1481.261965][ T3041] __should_failslab+0x81/0x90 [ 1481.266723][ T3041] should_failslab+0x5/0x20 [ 1481.268993][ T3037] FAULT_INJECTION: forcing a failure. [ 1481.268993][ T3037] name failslab, interval 1, probability 0, space 0, times 0 [ 1481.271332][ T3041] kmem_cache_alloc+0x46/0x2e0 [ 1481.288629][ T3041] ? anon_vma_fork+0xb1/0x2b0 [ 1481.293417][ T3041] anon_vma_fork+0x117/0x2b0 [ 1481.298009][ T3041] dup_mmap+0x49c/0x9c0 [ 1481.302153][ T3041] dup_mm+0x7c/0x210 [ 1481.306028][ T3041] copy_process+0x11ec/0x2e00 [ 1481.310687][ T3041] kernel_clone+0x14b/0x680 [ 1481.315173][ T3041] ? __fget_light+0x21b/0x260 [ 1481.319845][ T3041] __do_sys_fork+0x3a/0x60 [ 1481.324248][ T3041] do_syscall_64+0x44/0x80 [ 1481.328651][ T3041] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1481.334604][ T3041] RIP: 0033:0x4665d9 [ 1481.338480][ T3041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1481.358125][ T3041] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1481.366599][ T3041] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1481.374549][ T3041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1481.382521][ T3041] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1481.390473][ T3041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1481.398609][ T3041] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1481.407002][ T3037] CPU: 1 PID: 3037 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1481.415350][ T3037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1481.425408][ T3037] Call Trace: [ 1481.428677][ T3037] dump_stack+0x137/0x19d [ 1481.433015][ T3037] should_fail+0x23c/0x250 [ 1481.437437][ T3037] ? vm_area_dup+0x44/0x120 [ 1481.441932][ T3037] __should_failslab+0x81/0x90 [ 1481.446701][ T3037] should_failslab+0x5/0x20 [ 1481.451210][ T3037] kmem_cache_alloc+0x46/0x2e0 [ 1481.455976][ T3037] ? pagerange_is_ram_callback+0xb6/0xd0 [ 1481.461614][ T3037] vm_area_dup+0x44/0x120 [ 1481.465942][ T3037] ? pgprot_writethrough+0x20/0x20 [ 1481.471054][ T3037] ? perf_event_mmap+0x14c/0xd00 [ 1481.475995][ T3037] ? pfn_modify_allowed+0x87/0x190 [ 1481.481199][ T3037] ? remap_pfn_range_notrack+0x71c/0x770 [ 1481.486875][ T3037] ? vma_interval_tree_augment_rotate+0xe9/0x100 [ 1481.493319][ T3037] ? anon_vma_interval_tree_iter_next+0x2a0/0x2a0 [ 1481.499789][ T3037] __split_vma+0x82/0x320 [ 1481.504119][ T3037] ? vmacache_find+0x2df/0x320 [ 1481.508991][ T3037] __do_munmap+0x27c/0x1330 [ 1481.513492][ T3037] ? up_write+0x25/0xc0 [ 1481.517644][ T3037] ? vma_link+0x188/0x1a0 [ 1481.521972][ T3037] mmap_region+0x58a/0x13e0 [ 1481.526528][ T3037] ? security_mmap_addr+0x78/0x90 [ 1481.531669][ T3037] do_mmap+0x77d/0xc90 [ 1481.535784][ T3037] vm_mmap_pgoff+0xf9/0x1d0 [ 1481.540292][ T3037] ksys_mmap_pgoff+0x2a8/0x380 [ 1481.545150][ T3037] do_syscall_64+0x44/0x80 [ 1481.549576][ T3037] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1481.555503][ T3037] RIP: 0033:0x466622 [ 1481.559402][ T3037] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1481.579164][ T3037] RSP: 002b:00007f1897f580f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1481.587585][ T3037] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466622 [ 1481.595559][ T3037] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020a2e000 09:42:25 executing program 5: read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:25 executing program 0 (fault-call:3 fault-nth:28): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:25 executing program 2 (fault-call:3 fault-nth:30): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() [ 1481.595674][ T3054] FAULT_INJECTION: forcing a failure. [ 1481.595674][ T3054] name failslab, interval 1, probability 0, space 0, times 0 [ 1481.603589][ T3037] RBP: 0000000020a2e000 R08: 0000000000000006 R09: 0000000010000000 [ 1481.603607][ T3037] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 1481.632792][ T3037] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 [ 1481.640821][ T3054] CPU: 0 PID: 3054 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1481.649192][ T3054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1481.659316][ T3054] Call Trace: [ 1481.662596][ T3054] dump_stack+0x137/0x19d [ 1481.666978][ T3054] should_fail+0x23c/0x250 [ 1481.671394][ T3054] ? vm_area_alloc+0x28/0xa0 [ 1481.675980][ T3054] __should_failslab+0x81/0x90 [ 1481.680755][ T3054] should_failslab+0x5/0x20 [ 1481.685256][ T3054] kmem_cache_alloc+0x46/0x2e0 [ 1481.690068][ T3054] vm_area_alloc+0x28/0xa0 [ 1481.694484][ T3054] mmap_region+0x721/0x13e0 [ 1481.699164][ T3054] ? security_mmap_addr+0x78/0x90 [ 1481.704208][ T3054] do_mmap+0x77d/0xc90 [ 1481.708284][ T3054] vm_mmap_pgoff+0xf9/0x1d0 [ 1481.713438][ T3054] ksys_mmap_pgoff+0x2a8/0x380 [ 1481.718214][ T3054] do_syscall_64+0x44/0x80 [ 1481.722636][ T3054] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1481.728548][ T3054] RIP: 0033:0x466622 [ 1481.732449][ T3054] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 09:42:26 executing program 5: read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:26 executing program 4: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) [ 1481.735494][ T3055] FAULT_INJECTION: forcing a failure. [ 1481.735494][ T3055] name failslab, interval 1, probability 0, space 0, times 0 [ 1481.752235][ T3054] RSP: 002b:00007f1ed12260f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1481.752257][ T3054] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466622 [ 1481.752269][ T3054] RDX: 0000000000000003 RSI: 0000000000100000 RDI: 0000000020ffb000 [ 1481.752282][ T3054] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000010000000 [ 1481.752292][ T3054] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000340 09:42:26 executing program 1 (fault-call:3 fault-nth:30): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) [ 1481.752302][ T3054] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1481.813399][ T3055] CPU: 1 PID: 3055 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1481.821844][ T3055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1481.832020][ T3055] Call Trace: [ 1481.835294][ T3055] dump_stack+0x137/0x19d [ 1481.839687][ T3055] should_fail+0x23c/0x250 [ 1481.844109][ T3055] ? anon_vma_fork+0x117/0x2b0 [ 1481.848868][ T3055] __should_failslab+0x81/0x90 09:42:26 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) gettid() r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xb4, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0xb4}}, 0x4000044) read$snapshot(r0, 0x0, 0x2) [ 1481.853641][ T3055] should_failslab+0x5/0x20 [ 1481.858142][ T3055] kmem_cache_alloc+0x46/0x2e0 [ 1481.862918][ T3055] ? anon_vma_fork+0xb1/0x2b0 [ 1481.867720][ T3055] anon_vma_fork+0x117/0x2b0 [ 1481.872354][ T3055] dup_mmap+0x49c/0x9c0 [ 1481.876526][ T3055] dup_mm+0x7c/0x210 [ 1481.880437][ T3055] copy_process+0x11ec/0x2e00 [ 1481.884699][ T3070] FAULT_INJECTION: forcing a failure. [ 1481.884699][ T3070] name failslab, interval 1, probability 0, space 0, times 0 [ 1481.885126][ T3055] kernel_clone+0x14b/0x680 [ 1481.902326][ T3055] ? __fget_light+0x21b/0x260 [ 1481.906999][ T3055] __do_sys_fork+0x3a/0x60 [ 1481.911404][ T3055] do_syscall_64+0x44/0x80 [ 1481.915873][ T3055] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1481.921798][ T3055] RIP: 0033:0x4665d9 [ 1481.925677][ T3055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1481.945439][ T3055] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1481.954036][ T3055] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1481.962103][ T3055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1481.970428][ T3055] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1481.978377][ T3055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1481.986330][ T3055] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1481.994290][ T3070] CPU: 0 PID: 3070 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1482.002615][ T3070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1482.012669][ T3070] Call Trace: [ 1482.016015][ T3070] dump_stack+0x137/0x19d [ 1482.020397][ T3070] should_fail+0x23c/0x250 [ 1482.024911][ T3070] ? anon_vma_clone+0x8d/0x380 [ 1482.029666][ T3070] __should_failslab+0x81/0x90 [ 1482.034482][ T3070] should_failslab+0x5/0x20 [ 1482.039013][ T3070] kmem_cache_alloc+0x46/0x2e0 [ 1482.043955][ T3070] anon_vma_clone+0x8d/0x380 [ 1482.048542][ T3070] __split_vma+0x134/0x320 [ 1482.052975][ T3070] ? vmacache_find+0x313/0x320 [ 1482.057735][ T3070] __do_munmap+0x2e9/0x1330 [ 1482.062332][ T3070] ? up_write+0x25/0xc0 [ 1482.066617][ T3070] ? vma_link+0x188/0x1a0 [ 1482.070936][ T3070] mmap_region+0x58a/0x13e0 [ 1482.075570][ T3070] ? security_mmap_addr+0x78/0x90 [ 1482.080679][ T3070] do_mmap+0x77d/0xc90 [ 1482.084804][ T3070] vm_mmap_pgoff+0xf9/0x1d0 [ 1482.089329][ T3070] ksys_mmap_pgoff+0x2a8/0x380 [ 1482.094129][ T3070] do_syscall_64+0x44/0x80 [ 1482.098615][ T3070] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1482.104517][ T3070] RIP: 0033:0x466622 [ 1482.108433][ T3070] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1482.128067][ T3070] RSP: 002b:00007f1897f580f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1482.136484][ T3070] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466622 [ 1482.144487][ T3070] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020a2e000 09:42:26 executing program 2 (fault-call:3 fault-nth:31): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:26 executing program 5: read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:26 executing program 4: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) 09:42:26 executing program 0 (fault-call:3 fault-nth:29): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1482.152464][ T3070] RBP: 0000000020a2e000 R08: 0000000000000006 R09: 0000000010000000 [ 1482.160503][ T3070] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 1482.168547][ T3070] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 [ 1482.194399][ T3081] FAULT_INJECTION: forcing a failure. [ 1482.194399][ T3081] name failslab, interval 1, probability 0, space 0, times 0 [ 1482.207194][ T3081] CPU: 1 PID: 3081 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1482.215579][ T3081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1482.215593][ T3081] Call Trace: [ 1482.215600][ T3081] dump_stack+0x137/0x19d [ 1482.215622][ T3081] should_fail+0x23c/0x250 [ 1482.226139][ T3086] FAULT_INJECTION: forcing a failure. [ 1482.226139][ T3086] name failslab, interval 1, probability 0, space 0, times 0 [ 1482.229017][ T3081] ? vm_area_alloc+0x28/0xa0 [ 1482.255010][ T3081] __should_failslab+0x81/0x90 [ 1482.259799][ T3081] should_failslab+0x5/0x20 [ 1482.264287][ T3081] kmem_cache_alloc+0x46/0x2e0 [ 1482.269034][ T3081] vm_area_alloc+0x28/0xa0 [ 1482.273549][ T3081] mmap_region+0x721/0x13e0 [ 1482.278250][ T3081] ? security_mmap_addr+0x78/0x90 [ 1482.283275][ T3081] do_mmap+0x77d/0xc90 [ 1482.287332][ T3081] vm_mmap_pgoff+0xf9/0x1d0 [ 1482.291892][ T3081] ksys_mmap_pgoff+0x2a8/0x380 [ 1482.296655][ T3081] do_syscall_64+0x44/0x80 [ 1482.301064][ T3081] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1482.307026][ T3081] RIP: 0033:0x466622 [ 1482.311429][ T3081] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1482.331074][ T3081] RSP: 002b:00007f1ed12260f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1482.339521][ T3081] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466622 [ 1482.347514][ T3081] RDX: 0000000000000003 RSI: 0000000000100000 RDI: 0000000020ffb000 09:42:26 executing program 5: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) [ 1482.355557][ T3081] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000010000000 [ 1482.363515][ T3081] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000340 [ 1482.371471][ T3081] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1482.379590][ T3086] CPU: 0 PID: 3086 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1482.387992][ T3086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1482.398203][ T3086] Call Trace: [ 1482.401571][ T3086] dump_stack+0x137/0x19d 09:42:26 executing program 0 (fault-call:3 fault-nth:30): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1482.405990][ T3086] should_fail+0x23c/0x250 [ 1482.410408][ T3086] ? anon_vma_clone+0x8d/0x380 [ 1482.415177][ T3086] __should_failslab+0x81/0x90 [ 1482.419967][ T3086] should_failslab+0x5/0x20 [ 1482.424479][ T3086] kmem_cache_alloc+0x46/0x2e0 [ 1482.429321][ T3086] ? avc_has_perm_noaudit+0x19a/0x240 [ 1482.434819][ T3086] anon_vma_clone+0x8d/0x380 [ 1482.439851][ T3086] anon_vma_fork+0x54/0x2b0 [ 1482.444357][ T3086] dup_mmap+0x49c/0x9c0 [ 1482.448514][ T3086] dup_mm+0x7c/0x210 [ 1482.452415][ T3086] copy_process+0x11ec/0x2e00 [ 1482.457095][ T3086] kernel_clone+0x14b/0x680 [ 1482.461688][ T3086] ? __fget_light+0x21b/0x260 [ 1482.466643][ T3086] __do_sys_fork+0x3a/0x60 [ 1482.471128][ T3086] do_syscall_64+0x44/0x80 [ 1482.475591][ T3086] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1482.481554][ T3086] RIP: 0033:0x4665d9 [ 1482.485554][ T3086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:42:27 executing program 3: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x0) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/stat\x00') timer_delete(0x0) read$snapshot(r2, 0x0, 0x2) 09:42:27 executing program 4: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) [ 1482.505314][ T3086] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1482.513732][ T3086] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1482.522755][ T3086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1482.530910][ T3086] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1482.538888][ T3086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1482.547090][ T3086] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1482.598634][ T3094] FAULT_INJECTION: forcing a failure. [ 1482.598634][ T3094] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1482.612005][ T3094] CPU: 1 PID: 3094 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1482.620361][ T3094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1482.630433][ T3094] Call Trace: [ 1482.633717][ T3094] dump_stack+0x137/0x19d [ 1482.638054][ T3094] should_fail+0x23c/0x250 [ 1482.642702][ T3094] __alloc_pages+0x102/0x320 [ 1482.647378][ T3094] alloc_pages+0x21d/0x310 [ 1482.651842][ T3094] pte_alloc_one+0x29/0xb0 [ 1482.656360][ T3094] __pte_alloc+0x2f/0x210 [ 1482.660727][ T3094] remap_pfn_range_notrack+0x5b7/0x770 [ 1482.666649][ T3094] remap_pfn_range+0x87/0xe0 [ 1482.671400][ T3094] io_uring_mmap+0x23b/0x260 [ 1482.676023][ T3094] mmap_region+0xbb6/0x13e0 [ 1482.680536][ T3094] do_mmap+0x77d/0xc90 [ 1482.685235][ T3094] vm_mmap_pgoff+0xf9/0x1d0 [ 1482.689795][ T3094] ksys_mmap_pgoff+0x2a8/0x380 [ 1482.694603][ T3094] do_syscall_64+0x44/0x80 [ 1482.699149][ T3094] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1482.705058][ T3094] RIP: 0033:0x466622 [ 1482.708950][ T3094] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1482.729977][ T3094] RSP: 002b:00007f1ed12260f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1482.738651][ T3094] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466622 09:42:27 executing program 2 (fault-call:3 fault-nth:32): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:27 executing program 5: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:42:27 executing program 1 (fault-call:3 fault-nth:31): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:27 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r1, 0x0, 0x2) 09:42:27 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(0xffffffffffffffff, &(0x7f0000000040)=""/72, 0x48) [ 1482.747430][ T3094] RDX: 0000000000000003 RSI: 0000000000100000 RDI: 0000000020ffb000 [ 1482.755596][ T3094] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000010000000 [ 1482.763706][ T3094] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000340 [ 1482.771682][ T3094] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffc000 [ 1482.806703][ T3119] FAULT_INJECTION: forcing a failure. [ 1482.806703][ T3119] name failslab, interval 1, probability 0, space 0, times 0 [ 1482.820168][ T3119] CPU: 1 PID: 3119 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1482.829092][ T3119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1482.839145][ T3119] Call Trace: [ 1482.842423][ T3119] dump_stack+0x137/0x19d [ 1482.846900][ T3119] should_fail+0x23c/0x250 [ 1482.851888][ T3119] ? anon_vma_clone+0x8d/0x380 [ 1482.856700][ T3119] __should_failslab+0x81/0x90 [ 1482.861567][ T3119] should_failslab+0x5/0x20 [ 1482.866075][ T3119] kmem_cache_alloc+0x46/0x2e0 [ 1482.871131][ T3119] anon_vma_clone+0x8d/0x380 [ 1482.875819][ T3119] __split_vma+0x134/0x320 [ 1482.880505][ T3119] ? vmacache_find+0x313/0x320 [ 1482.885417][ T3119] __do_munmap+0x2e9/0x1330 [ 1482.890181][ T3119] ? up_write+0x25/0xc0 [ 1482.894340][ T3119] ? vma_link+0x188/0x1a0 [ 1482.898669][ T3119] mmap_region+0x58a/0x13e0 [ 1482.903190][ T3119] ? security_mmap_addr+0x78/0x90 [ 1482.908911][ T3119] do_mmap+0x77d/0xc90 [ 1482.913071][ T3119] vm_mmap_pgoff+0xf9/0x1d0 [ 1482.917580][ T3119] ksys_mmap_pgoff+0x2a8/0x380 [ 1482.922437][ T3119] do_syscall_64+0x44/0x80 [ 1482.926862][ T3119] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1482.933145][ T3119] RIP: 0033:0x466622 [ 1482.937217][ T3119] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 09:42:27 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(0xffffffffffffffff, &(0x7f0000000040)=""/72, 0x48) 09:42:27 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)) r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) syz_open_procfs(r0, &(0x7f0000000240)='net\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0xffffffffffffff93) syz_io_uring_setup(0x1ae4, &(0x7f0000000100)={0x0, 0x52b4, 0x1, 0x3, 0x118, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 09:42:27 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(0xffffffffffffffff, &(0x7f0000000040)=""/72, 0x48) [ 1482.957120][ T3119] RSP: 002b:00007f1897f580f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1482.965696][ T3119] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466622 [ 1482.973978][ T3119] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020a2e000 [ 1482.982054][ T3119] RBP: 0000000020a2e000 R08: 0000000000000006 R09: 0000000010000000 09:42:27 executing program 5: r0 = syz_open_procfs(0x0, 0x0) read$snapshot(r0, 0x0, 0x2) [ 1482.982067][ T3119] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 1482.982077][ T3119] R13: 0000000020a2e000 R14: 0000000020000100 R15: 00000000205e1000 [ 1483.020371][ T3126] FAULT_INJECTION: forcing a failure. [ 1483.020371][ T3126] name failslab, interval 1, probability 0, space 0, times 0 [ 1483.020457][ T3126] CPU: 0 PID: 3126 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1483.020486][ T3126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1483.020494][ T3126] Call Trace: [ 1483.020501][ T3126] dump_stack+0x137/0x19d [ 1483.020531][ T3126] should_fail+0x23c/0x250 [ 1483.020548][ T3126] ? anon_vma_clone+0x8d/0x380 09:42:27 executing program 0 (fault-call:3 fault-nth:31): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:27 executing program 2 (fault-call:3 fault-nth:33): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x0) 09:42:27 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:27 executing program 1 (fault-call:3 fault-nth:32): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) [ 1483.020566][ T3126] __should_failslab+0x81/0x90 [ 1483.020631][ T3126] should_failslab+0x5/0x20 [ 1483.020649][ T3126] kmem_cache_alloc+0x46/0x2e0 [ 1483.020671][ T3126] anon_vma_clone+0x8d/0x380 09:42:27 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x0) [ 1483.020692][ T3126] anon_vma_fork+0x54/0x2b0 [ 1483.020710][ T3126] dup_mmap+0x49c/0x9c0 [ 1483.020752][ T3126] dup_mm+0x7c/0x210 09:42:27 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(0xffffffffffffffff, 0x0, 0x2) 09:42:27 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1483.020764][ T3126] copy_process+0x11ec/0x2e00 [ 1483.020781][ T3126] kernel_clone+0x14b/0x680 [ 1483.020869][ T3126] ? __fget_light+0x21b/0x260 [ 1483.020926][ T3126] __do_sys_fork+0x3a/0x60 [ 1483.020941][ T3126] do_syscall_64+0x44/0x80 [ 1483.020962][ T3126] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1483.020983][ T3126] RIP: 0033:0x4665d9 [ 1483.020993][ T3126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1483.021007][ T3126] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1483.021023][ T3126] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1483.021087][ T3126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1483.021099][ T3126] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1483.021111][ T3126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1483.021124][ T3126] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1483.207532][ T3159] FAULT_INJECTION: forcing a failure. [ 1483.207532][ T3159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1483.207556][ T3159] CPU: 0 PID: 3159 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1483.207574][ T3159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1483.207654][ T3159] Call Trace: [ 1483.207662][ T3159] dump_stack+0x137/0x19d [ 1483.207688][ T3159] should_fail+0x23c/0x250 [ 1483.207706][ T3159] should_fail_usercopy+0x16/0x20 [ 1483.207729][ T3159] _copy_to_user+0x1c/0x90 [ 1483.207762][ T3159] simple_read_from_buffer+0xab/0x120 [ 1483.207783][ T3159] proc_fail_nth_read+0xf6/0x140 [ 1483.207806][ T3159] ? rw_verify_area+0x136/0x250 [ 1483.207820][ T3159] ? proc_fault_inject_write+0x200/0x200 [ 1483.207840][ T3159] vfs_read+0x154/0x5d0 [ 1483.207853][ T3159] ? __fget_light+0x21b/0x260 [ 1483.207917][ T3159] ? __cond_resched+0x11/0x40 [ 1483.207985][ T3159] ksys_read+0xce/0x180 [ 1483.208040][ T3159] __x64_sys_read+0x3e/0x50 [ 1483.208058][ T3159] do_syscall_64+0x44/0x80 [ 1483.208078][ T3159] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1483.208098][ T3159] RIP: 0033:0x41935c [ 1483.208108][ T3159] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1483.208125][ T3159] RSP: 002b:00007f1ed1226170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1483.208144][ T3159] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000041935c [ 1483.208154][ T3159] RDX: 000000000000000f RSI: 00007f1ed12261e0 RDI: 0000000000000004 [ 1483.208165][ T3159] RBP: 00007f1ed12261d0 R08: 0000000000000000 R09: 0000000010000000 [ 1483.208220][ T3159] R10: 0000000000008011 R11: 0000000000000246 R12: 0000000000000002 [ 1483.208232][ T3159] R13: 00007ffed36a74ff R14: 00007f1ed1226300 R15: 0000000000022000 [ 1483.218141][ T3162] FAULT_INJECTION: forcing a failure. [ 1483.218141][ T3162] name failslab, interval 1, probability 0, space 0, times 0 [ 1483.218161][ T3162] CPU: 1 PID: 3162 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1483.218175][ T3162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1483.218223][ T3162] Call Trace: [ 1483.218230][ T3162] dump_stack+0x137/0x19d [ 1483.218252][ T3162] should_fail+0x23c/0x250 [ 1483.218268][ T3162] ? dup_mmap+0x38e/0x9c0 [ 1483.218282][ T3162] __should_failslab+0x81/0x90 [ 1483.218304][ T3162] should_failslab+0x5/0x20 [ 1483.218331][ T3162] kmem_cache_alloc+0x46/0x2e0 [ 1483.218367][ T3162] dup_mmap+0x38e/0x9c0 [ 1483.218403][ T3162] dup_mm+0x7c/0x210 [ 1483.218414][ T3162] copy_process+0x11ec/0x2e00 [ 1483.218506][ T3162] kernel_clone+0x14b/0x680 [ 1483.218536][ T3162] ? __fget_light+0x21b/0x260 [ 1483.218567][ T3162] __do_sys_fork+0x3a/0x60 [ 1483.218586][ T3162] do_syscall_64+0x44/0x80 [ 1483.218608][ T3162] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1483.218691][ T3162] RIP: 0033:0x4665d9 [ 1483.218700][ T3162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1483.218767][ T3162] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1483.218786][ T3162] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1483.218799][ T3162] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1483.218809][ T3162] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1483.218818][ T3162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1483.218826][ T3162] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1483.226372][ T3161] FAULT_INJECTION: forcing a failure. [ 1483.226372][ T3161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1483.226395][ T3161] CPU: 0 PID: 3161 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1483.226415][ T3161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1483.226425][ T3161] Call Trace: [ 1483.226431][ T3161] dump_stack+0x137/0x19d [ 1483.226453][ T3161] should_fail+0x23c/0x250 [ 1483.226474][ T3161] should_fail_usercopy+0x16/0x20 [ 1483.226503][ T3161] _copy_to_user+0x1c/0x90 [ 1483.226525][ T3161] simple_read_from_buffer+0xab/0x120 [ 1483.226545][ T3161] proc_fail_nth_read+0xf6/0x140 [ 1483.226563][ T3161] ? rw_verify_area+0x136/0x250 [ 1483.226577][ T3161] ? proc_fault_inject_write+0x200/0x200 [ 1483.226673][ T3161] vfs_read+0x154/0x5d0 [ 1483.226690][ T3161] ? __fget_light+0x21b/0x260 [ 1483.226743][ T3161] ? __cond_resched+0x11/0x40 [ 1483.226760][ T3161] ksys_read+0xce/0x180 [ 1483.226778][ T3161] __x64_sys_read+0x3e/0x50 [ 1483.226795][ T3161] do_syscall_64+0x44/0x80 [ 1483.226870][ T3161] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1483.226889][ T3161] RIP: 0033:0x41935c [ 1483.226899][ T3161] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1483.226916][ T3161] RSP: 002b:00007f1897f58170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1483.226937][ T3161] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000041935c [ 1483.226950][ T3161] RDX: 000000000000000f RSI: 00007f1897f581e0 RDI: 0000000000000005 [ 1483.226963][ T3161] RBP: 00007f1897f581d0 R08: 0000000000000000 R09: 0000000010000000 09:42:28 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x511040, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) 09:42:28 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:28 executing program 2 (fault-call:3 fault-nth:34): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x0) 09:42:28 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0x2) 09:42:28 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1483.226976][ T3161] R10: 0000000000008011 R11: 0000000000000246 R12: 0000000000000002 [ 1483.226987][ T3161] R13: 00007ffc3a18373f R14: 00007f1897f58300 R15: 0000000000022000 [ 1484.003293][ T3203] FAULT_INJECTION: forcing a failure. [ 1484.003293][ T3203] name failslab, interval 1, probability 0, space 0, times 0 [ 1484.016199][ T3203] CPU: 1 PID: 3203 Comm: syz-executor.5 Not tainted 5.13.0-syzkaller #0 [ 1484.024536][ T3203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1484.035049][ T3203] Call Trace: [ 1484.038496][ T3203] dump_stack+0x137/0x19d [ 1484.043126][ T3203] should_fail+0x23c/0x250 [ 1484.047661][ T3203] __should_failslab+0x81/0x90 [ 1484.052439][ T3203] should_failslab+0x5/0x20 [ 1484.057178][ T3203] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1484.063018][ T3203] ? mntput+0x45/0x70 [ 1484.067058][ T3203] ? __kmalloc_node+0x30/0x40 [ 1484.071863][ T3203] ? terminate_walk+0x261/0x270 [ 1484.076817][ T3203] __kmalloc_node+0x30/0x40 [ 1484.081481][ T3203] kvmalloc_node+0x81/0xf0 [ 1484.086191][ T3203] seq_read_iter+0x145/0x910 [ 1484.090876][ T3203] seq_read+0x221/0x260 [ 1484.093065][ T3200] FAULT_INJECTION: forcing a failure. [ 1484.093065][ T3200] name failslab, interval 1, probability 0, space 0, times 0 [ 1484.095144][ T3203] ? seq_open+0xf0/0xf0 [ 1484.095165][ T3203] proc_reg_read+0x119/0x1b0 [ 1484.117932][ T3203] ? proc_reg_get_unmapped_area+0x220/0x220 [ 1484.123891][ T3203] vfs_read+0x154/0x5d0 [ 1484.128039][ T3203] ? __fget_light+0x21b/0x260 [ 1484.132796][ T3203] ? __cond_resched+0x11/0x40 [ 1484.137516][ T3203] ksys_read+0xce/0x180 [ 1484.141756][ T3203] __x64_sys_read+0x3e/0x50 [ 1484.146251][ T3203] do_syscall_64+0x44/0x80 [ 1484.150700][ T3203] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1484.156592][ T3203] RIP: 0033:0x4665d9 [ 1484.160472][ T3203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1484.180699][ T3203] RSP: 002b:00007f56c1a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1484.189101][ T3203] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 09:42:28 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) [ 1484.197061][ T3203] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 1484.205147][ T3203] RBP: 00007f56c1a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 1484.213127][ T3203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1484.221085][ T3203] R13: 00007fffe6cc22af R14: 00007f56c1a44300 R15: 0000000000022000 [ 1484.229501][ T3200] CPU: 0 PID: 3200 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1484.237917][ T3200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1484.248404][ T3200] Call Trace: 09:42:28 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0x2) [ 1484.251685][ T3200] dump_stack+0x137/0x19d [ 1484.256145][ T3200] should_fail+0x23c/0x250 [ 1484.260751][ T3200] ? anon_vma_clone+0x8d/0x380 [ 1484.266695][ T3200] __should_failslab+0x81/0x90 [ 1484.271561][ T3200] should_failslab+0x5/0x20 [ 1484.276246][ T3200] kmem_cache_alloc+0x46/0x2e0 [ 1484.281575][ T3200] anon_vma_clone+0x8d/0x380 [ 1484.291652][ T3200] anon_vma_fork+0x54/0x2b0 [ 1484.296323][ T3200] dup_mmap+0x49c/0x9c0 [ 1484.300667][ T3200] dup_mm+0x7c/0x210 [ 1484.304592][ T3200] copy_process+0x11ec/0x2e00 [ 1484.309375][ T3200] kernel_clone+0x14b/0x680 [ 1484.314601][ T3200] ? __fget_light+0x21b/0x260 [ 1484.319444][ T3200] __do_sys_fork+0x3a/0x60 [ 1484.324142][ T3200] do_syscall_64+0x44/0x80 [ 1484.328661][ T3200] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1484.334638][ T3200] RIP: 0033:0x4665d9 09:42:28 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1484.338531][ T3200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1484.358406][ T3200] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1484.366857][ T3200] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1484.374849][ T3200] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1484.382833][ T3200] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1484.390802][ T3200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 09:42:28 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) [ 1484.398847][ T3200] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1484.425219][ T3232] FAULT_INJECTION: forcing a failure. [ 1484.425219][ T3232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1484.438503][ T3232] CPU: 1 PID: 3232 Comm: syz-executor.5 Not tainted 5.13.0-syzkaller #0 [ 1484.447124][ T3232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1484.457183][ T3232] Call Trace: [ 1484.460497][ T3232] dump_stack+0x137/0x19d [ 1484.464849][ T3232] should_fail+0x23c/0x250 [ 1484.469322][ T3232] should_fail_usercopy+0x16/0x20 [ 1484.474408][ T3232] _copy_to_iter+0x17c/0xdd0 [ 1484.479003][ T3232] ? check_stack_object+0x61/0x70 [ 1484.484113][ T3232] ? __virt_addr_valid+0x15a/0x1a0 [ 1484.489225][ T3232] ? __check_object_size+0x253/0x310 [ 1484.494530][ T3232] seq_read_iter+0x7f0/0x910 [ 1484.499117][ T3232] seq_read+0x221/0x260 [ 1484.503483][ T3232] ? seq_open+0xf0/0xf0 [ 1484.505760][ T3249] FAULT_INJECTION: forcing a failure. [ 1484.505760][ T3249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1484.507640][ T3232] proc_reg_read+0x119/0x1b0 [ 1484.525282][ T3232] ? proc_reg_get_unmapped_area+0x220/0x220 [ 1484.531169][ T3232] vfs_read+0x154/0x5d0 [ 1484.535337][ T3232] ? __fget_light+0x21b/0x260 [ 1484.540259][ T3232] ? __cond_resched+0x11/0x40 [ 1484.544973][ T3232] ksys_read+0xce/0x180 [ 1484.549232][ T3232] __x64_sys_read+0x3e/0x50 [ 1484.553835][ T3232] do_syscall_64+0x44/0x80 [ 1484.558331][ T3232] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1484.564280][ T3232] RIP: 0033:0x4665d9 [ 1484.568158][ T3232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1484.587795][ T3232] RSP: 002b:00007f56c1a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1484.596273][ T3232] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 09:42:28 executing program 3: r0 = getpid() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/raw6\x00') read$snapshot(r1, 0x0, 0x2) 09:42:28 executing program 2 (fault-call:3 fault-nth:35): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() [ 1484.604317][ T3232] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 1484.612386][ T3232] RBP: 00007f56c1a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 1484.620406][ T3232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1484.628800][ T3232] R13: 00007fffe6cc22af R14: 00007f56c1a44300 R15: 0000000000022000 [ 1484.636759][ T3249] CPU: 0 PID: 3249 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 1484.645104][ T3249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 09:42:29 executing program 3: read$snapshot(0xffffffffffffffff, 0x0, 0x2) [ 1484.655167][ T3249] Call Trace: [ 1484.658619][ T3249] dump_stack+0x137/0x19d [ 1484.662953][ T3249] should_fail+0x23c/0x250 [ 1484.667371][ T3249] should_fail_usercopy+0x16/0x20 [ 1484.672529][ T3249] _copy_to_user+0x1c/0x90 [ 1484.676957][ T3249] simple_read_from_buffer+0xab/0x120 [ 1484.682380][ T3249] proc_fail_nth_read+0xf6/0x140 [ 1484.687409][ T3249] ? rw_verify_area+0x136/0x250 [ 1484.692342][ T3249] ? proc_fault_inject_write+0x200/0x200 [ 1484.698030][ T3249] vfs_read+0x154/0x5d0 [ 1484.702178][ T3249] ? __fget_light+0x21b/0x260 [ 1484.706850][ T3249] ? __cond_resched+0x11/0x40 [ 1484.711526][ T3249] ksys_read+0xce/0x180 [ 1484.715678][ T3249] __x64_sys_read+0x3e/0x50 [ 1484.720305][ T3249] do_syscall_64+0x44/0x80 [ 1484.724747][ T3249] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1484.730712][ T3249] RIP: 0033:0x41935c [ 1484.734689][ T3249] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 09:42:29 executing program 5 (fault-call:1 fault-nth:2): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0x2) [ 1484.754463][ T3249] RSP: 002b:00007f8167c9b170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1484.762903][ T3249] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041935c [ 1484.770967][ T3249] RDX: 000000000000000f RSI: 00007f8167c9b1e0 RDI: 0000000000000003 [ 1484.778924][ T3249] RBP: 00007f8167c9b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1484.786939][ T3249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1484.794975][ T3249] R13: 00007ffecda11e5f R14: 00007f8167c9b300 R15: 0000000000022000 [ 1484.834375][ T3261] FAULT_INJECTION: forcing a failure. [ 1484.834375][ T3261] name failslab, interval 1, probability 0, space 0, times 0 [ 1484.847099][ T3261] CPU: 1 PID: 3261 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1484.855468][ T3261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1484.865594][ T3261] Call Trace: [ 1484.868570][ T3267] FAULT_INJECTION: forcing a failure. [ 1484.868570][ T3267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1484.868868][ T3261] dump_stack+0x137/0x19d [ 1484.886276][ T3261] should_fail+0x23c/0x250 [ 1484.890687][ T3261] ? anon_vma_clone+0x8d/0x380 [ 1484.895447][ T3261] __should_failslab+0x81/0x90 [ 1484.900234][ T3261] should_failslab+0x5/0x20 [ 1484.904855][ T3261] kmem_cache_alloc+0x46/0x2e0 [ 1484.909671][ T3261] anon_vma_clone+0x8d/0x380 [ 1484.914323][ T3261] anon_vma_fork+0x54/0x2b0 [ 1484.918895][ T3261] dup_mmap+0x49c/0x9c0 [ 1484.923114][ T3261] dup_mm+0x7c/0x210 [ 1484.927003][ T3261] copy_process+0x11ec/0x2e00 [ 1484.931705][ T3261] kernel_clone+0x14b/0x680 [ 1484.936193][ T3261] ? __fget_light+0x21b/0x260 [ 1484.940879][ T3261] __do_sys_fork+0x3a/0x60 [ 1484.945479][ T3261] do_syscall_64+0x44/0x80 [ 1484.949991][ T3261] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1484.955875][ T3261] RIP: 0033:0x4665d9 [ 1484.959796][ T3261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:42:29 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1484.979407][ T3261] RSP: 002b:00007fd66158f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1484.987805][ T3261] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9 [ 1484.995763][ T3261] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1485.003717][ T3261] RBP: 00007fd66158f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1485.011684][ T3261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1485.019700][ T3261] R13: 00007fff457349af R14: 00007fd66158f300 R15: 0000000000022000 [ 1485.027746][ T3267] CPU: 0 PID: 3267 Comm: syz-executor.5 Not tainted 5.13.0-syzkaller #0 [ 1485.036074][ T3267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1485.046138][ T3267] Call Trace: [ 1485.049429][ T3267] dump_stack+0x137/0x19d [ 1485.053779][ T3267] should_fail+0x23c/0x250 [ 1485.058294][ T3267] should_fail_usercopy+0x16/0x20 [ 1485.063399][ T3267] _copy_to_user+0x1c/0x90 [ 1485.067823][ T3267] simple_read_from_buffer+0xab/0x120 [ 1485.073242][ T3267] proc_fail_nth_read+0xf6/0x140 [ 1485.078175][ T3267] ? rw_verify_area+0x136/0x250 [ 1485.083023][ T3267] ? proc_fault_inject_write+0x200/0x200 [ 1485.088675][ T3267] vfs_read+0x154/0x5d0 [ 1485.092831][ T3267] ? __fget_light+0x21b/0x260 [ 1485.097523][ T3267] ? __cond_resched+0x11/0x40 [ 1485.102246][ T3267] ksys_read+0xce/0x180 [ 1485.106461][ T3267] __x64_sys_read+0x3e/0x50 [ 1485.111356][ T3267] do_syscall_64+0x44/0x80 [ 1485.115831][ T3267] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1485.121865][ T3267] RIP: 0033:0x41935c 09:42:29 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') 09:42:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) 09:42:29 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x7}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:29 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x2}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) [ 1485.125760][ T3267] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1485.145545][ T3267] RSP: 002b:00007f56c1a44170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1485.154106][ T3267] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041935c [ 1485.162139][ T3267] RDX: 000000000000000f RSI: 00007f56c1a441e0 RDI: 0000000000000004 [ 1485.170122][ T3267] RBP: 00007f56c1a441d0 R08: 0000000000000000 R09: 0000000000000000 09:42:29 executing program 2 (fault-call:3 fault-nth:36): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, &(0x7f0000000040)=""/72, 0x2f) [ 1485.178175][ T3267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1485.187044][ T3267] R13: 00007fffe6cc22af R14: 00007f56c1a44300 R15: 0000000000022000 09:42:29 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:29 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x4}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, &(0x7f0000000040)=""/72, 0x20000088) 09:42:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x13) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/llc/socket\x00') ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000080)) 09:42:29 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0x2) [ 1485.368396][ T3308] FAULT_INJECTION: forcing a failure. [ 1485.368396][ T3308] name failslab, interval 1, probability 0, space 0, times 0 [ 1485.381179][ T3308] CPU: 1 PID: 3308 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1485.389506][ T3308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1485.399913][ T3308] Call Trace: [ 1485.403196][ T3308] dump_stack+0x137/0x19d [ 1485.407537][ T3308] should_fail+0x23c/0x250 [ 1485.412648][ T3308] ? anon_vma_fork+0x117/0x2b0 [ 1485.417423][ T3308] __should_failslab+0x81/0x90 [ 1485.422209][ T3308] should_failslab+0x5/0x20 [ 1485.426721][ T3308] kmem_cache_alloc+0x46/0x2e0 [ 1485.431500][ T3308] ? anon_vma_fork+0xb1/0x2b0 [ 1485.436246][ T3308] anon_vma_fork+0x117/0x2b0 [ 1485.441022][ T3308] dup_mmap+0x49c/0x9c0 [ 1485.445336][ T3308] dup_mm+0x7c/0x210 [ 1485.449405][ T3308] copy_process+0x11ec/0x2e00 [ 1485.454086][ T3308] kernel_clone+0x14b/0x680 [ 1485.458885][ T3308] ? __fget_light+0x21b/0x260 [ 1485.463573][ T3308] __do_sys_fork+0x3a/0x60 [ 1485.468665][ T3308] do_syscall_64+0x44/0x80 [ 1485.473177][ T3308] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1485.479346][ T3308] RIP: 0033:0x4665d9 [ 1485.483237][ T3308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1485.503122][ T3308] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 09:42:29 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0x4) 09:42:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, &(0x7f0000000040)=""/72, 0x7ffff000) 09:42:29 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x10}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) r1 = syz_io_uring_complete(0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000240)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@updpolicy={0x12c, 0x19, 0x0, 0x70bd25, 0x25dfdbfb, {{@in=@rand_addr=0x64010101, @in=@private=0xa010102, 0x4e24, 0x8, 0x4e20, 0x5e3, 0xa, 0xa0, 0x0, 0x3a}, {0xffffffff, 0x8, 0x615, 0x5, 0x101, 0x1, 0xe682, 0x5}, {0x2e0, 0xdbd, 0xfffffffffffffffc, 0x2}, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x3}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in=@dev={0xac, 0x14, 0x14, 0x2b}}}, @lastused={0xc, 0xf, 0x2}, @address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0xa, 0x5c}}, @lifetime_val={0x24, 0x9, {0x0, 0x100, 0x7f, 0x800}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4001}, 0x40) 09:42:30 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x5}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) [ 1485.511547][ T3308] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1485.519525][ T3308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1485.527626][ T3308] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1485.535705][ T3308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1485.543679][ T3308] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 09:42:30 executing program 2 (fault-call:3 fault-nth:37): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0x7) 09:42:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000340)='big_key\x00', &(0x7f0000000300)=@secondary) r1 = request_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='net/mcfilter\x00', 0xfffffffffffffff9) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="dfff7ea0cb4f6b16ad62bd7db30e4fdcfdd8d8a1e2c998168deed5589f217661e966f38858eaf427fd7c45a4d95a7fccba15a66160a815234601d3e5443cdfd36e90a799d7bcfb615305467b3e9a8129118f05143a551552b615ed33257447d03f39b5ee837f3d41f343f390fb2a1d13ccf56985c8ba72839cc8ea75fb776a6eef96fda5fd0fcd1890109958689218dea93c9f68b17c18e471a94d0cb936882a68b1f6e0353b3b4f827f", 0xaa}, {&(0x7f0000000100)="e95c3fe2b934b32d4e429144d8e8d6c68058bd60cc7fea350e37f6e017053ffa8a93f4df892251f88ffcc3f5f85b5d64ee4cc9584a8472f92bfdbdaacc6c", 0x3e}, {&(0x7f0000000140)="815b8dd52c61db27c17cec9b6f6266fd104c5020d4cf09d166ff75f0b45a29af612813cd38cccb9edccb742bd03e8fc793bc26d61533ac013b05c8fbf78e8084d2f586a7f36850e928ab34f7b4c9e729bc8731658582b87d", 0x58}], 0x3, r1) 09:42:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, &(0x7f0000000040)=""/72, 0xffffffffffffffff) 09:42:30 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x3e}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:30 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x7}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0x7ffff000) 09:42:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x40) 09:42:30 executing program 4: sched_rr_get_interval(0x0, &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) [ 1485.767321][ T3388] FAULT_INJECTION: forcing a failure. [ 1485.767321][ T3388] name failslab, interval 1, probability 0, space 0, times 0 [ 1485.780022][ T3388] CPU: 0 PID: 3388 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1485.788351][ T3388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1485.798494][ T3388] Call Trace: [ 1485.801771][ T3388] dump_stack+0x137/0x19d [ 1485.806896][ T3388] should_fail+0x23c/0x250 [ 1485.811327][ T3388] ? anon_vma_fork+0x117/0x2b0 09:42:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0x7ffffffff000) [ 1485.816130][ T3388] __should_failslab+0x81/0x90 [ 1485.821136][ T3388] should_failslab+0x5/0x20 [ 1485.825699][ T3388] kmem_cache_alloc+0x46/0x2e0 [ 1485.830585][ T3388] ? anon_vma_fork+0xb1/0x2b0 [ 1485.835273][ T3388] anon_vma_fork+0x117/0x2b0 [ 1485.839887][ T3388] dup_mmap+0x49c/0x9c0 [ 1485.844052][ T3388] dup_mm+0x7c/0x210 [ 1485.847953][ T3388] copy_process+0x11ec/0x2e00 [ 1485.852800][ T3388] kernel_clone+0x14b/0x680 [ 1485.857359][ T3388] ? __fget_light+0x21b/0x260 [ 1485.862036][ T3388] __do_sys_fork+0x3a/0x60 09:42:30 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/arp\x00') read$snapshot(r0, 0x0, 0x2) 09:42:30 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x8}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) [ 1485.866502][ T3388] do_syscall_64+0x44/0x80 [ 1485.870965][ T3388] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1485.876962][ T3388] RIP: 0033:0x4665d9 [ 1485.880910][ T3388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1485.900939][ T3388] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1485.909443][ T3388] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1485.917613][ T3388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1485.925741][ T3388] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1485.934093][ T3388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1485.942239][ T3388] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 09:42:30 executing program 2 (fault-call:3 fault-nth:38): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0xffffffffffffffff) 09:42:30 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x42}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x408201, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000100)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x11002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x30bc2, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x4) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3110802}, 0xc, &(0x7f0000000380)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="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"], 0x28c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 09:42:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r1 = getpid() sched_getscheduler(r1) socket$inet_udp(0x2, 0x2, 0x0) read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) 09:42:30 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x10}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) [ 1486.108577][ T3445] FAULT_INJECTION: forcing a failure. [ 1486.108577][ T3445] name failslab, interval 1, probability 0, space 0, times 0 [ 1486.121560][ T3445] CPU: 0 PID: 3445 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1486.129927][ T3445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1486.139982][ T3445] Call Trace: [ 1486.143268][ T3445] dump_stack+0x137/0x19d [ 1486.147606][ T3445] should_fail+0x23c/0x250 [ 1486.152051][ T3445] ? anon_vma_fork+0x117/0x2b0 [ 1486.156968][ T3445] __should_failslab+0x81/0x90 [ 1486.161737][ T3445] should_failslab+0x5/0x20 [ 1486.166262][ T3445] kmem_cache_alloc+0x46/0x2e0 [ 1486.171031][ T3445] ? anon_vma_fork+0xb1/0x2b0 [ 1486.175756][ T3445] anon_vma_fork+0x117/0x2b0 [ 1486.180411][ T3445] dup_mmap+0x49c/0x9c0 [ 1486.184578][ T3445] dup_mm+0x7c/0x210 [ 1486.188731][ T3445] copy_process+0x11ec/0x2e00 [ 1486.193622][ T3445] kernel_clone+0x14b/0x680 [ 1486.198180][ T3445] ? __fget_light+0x21b/0x260 [ 1486.202931][ T3445] __do_sys_fork+0x3a/0x60 09:42:30 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x3e}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:30 executing program 3: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/sockstat\x00') read$snapshot(r1, 0x0, 0x2) ioctl$SNAPSHOT_FREE(r1, 0x3305) r2 = fork() gettid() r3 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r3}, 0x0) timer_create(0x2, &(0x7f0000000100)={0x0, 0x1c, 0x4, @tid=r3}, 0x0) rt_sigqueueinfo(r2, 0x17, &(0x7f0000000080)={0x5, 0x2, 0x8}) fsmount(r1, 0x1, 0xd) 09:42:30 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x60}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:30 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) read$snapshot(r0, 0x0, 0x0) [ 1486.207529][ T3445] do_syscall_64+0x44/0x80 [ 1486.212103][ T3445] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1486.218011][ T3445] RIP: 0033:0x4665d9 [ 1486.221952][ T3445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1486.241647][ T3445] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1486.250073][ T3445] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 09:42:30 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400001, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) [ 1486.258194][ T3445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1486.266248][ T3445] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1486.274402][ T3445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1486.282456][ T3445] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 09:42:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0x2) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) 09:42:30 executing program 2 (fault-call:3 fault-nth:39): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:30 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x42}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) 09:42:30 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x204}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:30 executing program 3: r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r1, 0x0, 0x2) 09:42:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0x2) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d0, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd, 0x3, "debbf19c91d773323d"}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc4b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbed}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x87ae}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20000080}, 0x108) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) [ 1486.536634][ T3513] FAULT_INJECTION: forcing a failure. [ 1486.536634][ T3513] name failslab, interval 1, probability 0, space 0, times 0 [ 1486.549845][ T3513] CPU: 1 PID: 3513 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1486.549868][ T3513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1486.549880][ T3513] Call Trace: [ 1486.549888][ T3513] dump_stack+0x137/0x19d [ 1486.576891][ T3513] should_fail+0x23c/0x250 [ 1486.581356][ T3513] ? anon_vma_clone+0x8d/0x380 [ 1486.586282][ T3513] __should_failslab+0x81/0x90 [ 1486.591081][ T3513] should_failslab+0x5/0x20 [ 1486.595664][ T3513] kmem_cache_alloc+0x46/0x2e0 [ 1486.600513][ T3513] ? avc_has_perm_noaudit+0x19a/0x240 [ 1486.605943][ T3513] anon_vma_clone+0x8d/0x380 [ 1486.606027][ T3513] anon_vma_fork+0x54/0x2b0 [ 1486.606048][ T3513] dup_mmap+0x49c/0x9c0 [ 1486.606068][ T3513] dup_mm+0x7c/0x210 [ 1486.606080][ T3513] copy_process+0x11ec/0x2e00 [ 1486.606175][ T3513] kernel_clone+0x14b/0x680 09:42:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f00000000c0)={0x80000001, 0x6}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000100)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) read$snapshot(r1, &(0x7f0000000140)=""/65, 0x41) 09:42:31 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x37e}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0x0) 09:42:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') socket$nl_xfrm(0x10, 0x3, 0x6) read$snapshot(r0, 0x0, 0x2) read$rfkill(r0, &(0x7f0000000040), 0x8) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x244daf1a3989c332}, 0x40) [ 1486.606188][ T3513] ? __fget_light+0x21b/0x260 [ 1486.606243][ T3513] __do_sys_fork+0x3a/0x60 [ 1486.642842][ T3513] do_syscall_64+0x44/0x80 [ 1486.642918][ T3513] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1486.642946][ T3513] RIP: 0033:0x4665d9 09:42:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0xfffffffffffffe97) 09:42:31 executing program 5: r0 = fork() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/icmp\x00') r2 = fork() r3 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "bb412fd7f01035de4d8132b9cc8452ccb5882e85b5e5b7c445320526e485bdd4d80240de2f9abd0a57df812f101212f4a61fd161ba3dda5d5780a809959e1501"}, 0x48, 0xfffffffffffffffb) ptrace$getsig(0x4202, r2, 0x8000, &(0x7f00000003c0)) getresuid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200060}, 0xc, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c01000020000002a7bd7000fbdbdf25ff000000e0000001000000000000000000000000ff0200000000000000000000000000014e2400074e20006cde0060998b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="08000c00000000000500190032000000ac000700ffffffff000000000000000000000000fe8000000000000000000000400000bb4e20003f4e2000060a0020808c000400e91f0e65c1fb4ddd25b2a22aeb1523d6f47da5f30f1b82a380e88179a6f3f71a9411799e1b752f698adef60fec28e07d770561c1f0b9466bcc14ee40fac578ed32da710c3b9d627a1fd40d4716d93d4ccc9845dc08b8001100eeeb262e051535822a6caafd0af16ef349aee26092471accbb1db7035a2eff71e3a16bb4b2cd896c13eb28525622355b058c57985ff21bffa73b11b9a8251e05e27b35a87a50b2436349", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="ff0f00000000000000000000000000005c0c00000000000004000000000000000800000000000000c00000000000000013400000000000000400000000000000240d0000000000003f000000000000000004000000000000050000000000000020000000b16b6e00010100010000000008001e000001000008001d000600000008001800010000002c001700040000002bbd70002abd700025bd700025bd7000ffffff7f3900000000000000f7ffffff01000000"], 0x14c}, 0x1, 0x0, 0x0, 0x1}, 0x800) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000280)='id_resolver\x00', &(0x7f0000000240)=@chain) syz_open_procfs(r2, &(0x7f0000000380)='net/sctp\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000000c0)='asymmetric\x00', 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r2}, 0x0) timer_create(0x6, &(0x7f00000001c0)={0x0, 0x1b, 0x4, @thr={&(0x7f0000000180)="ab2fd54cbc67b2b2850ef688f3238cdfb3ca1800a7d7adb01c13c06d30320fd8662bca7e9fa227580af8f174c9", &(0x7f00000002c0)="939c326d4b567fbcf321fad5b28d7c81f1c11c9f8107e1717fcd46b4201423a3d78a12bd67737da3b705f17d6fcf4a08f40a12253cc16df132fb7e6748fe0902ea2878f8cc62c0b572c24b62e178402727ed0d8fbd842b411eafb8e9013a2d9dd1dce308c2f7bb79a70144ca27070271921ef02935fa57d537fe09f61f8a0d6b17ef8ecb5a9f52bf3b9800fd869610789a621452026e2da104c8506ddb8c1cce0362cf4f71598a7e33580fa438c8836f3fb1750070b114a0449e"}}, &(0x7f0000000200)) rt_sigqueueinfo(r2, 0x3f, &(0x7f0000000040)={0x2b, 0x10000, 0x1}) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000740)={0x9, 0xfffffffb}) read$snapshot(r1, 0x0, 0x2) r5 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r5}, 0x0) ptrace(0x8, r5) [ 1486.642958][ T3513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1486.642972][ T3513] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1486.642991][ T3513] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1486.643004][ T3513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1486.643017][ T3513] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 09:42:31 executing program 2 (fault-call:3 fault-nth:40): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:31 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x60}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:31 executing program 3: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/mcfilter\x00') sched_getattr(r0, &(0x7f0000000080)={0x38}, 0x38, 0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x41f6, &(0x7f0000000180)={0x0, 0xb52b, 0x10, 0x2, 0x6a, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)) syz_io_uring_complete(r3) read$snapshot(r1, 0x0, 0x2) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000001040)='lb_`tats_refresh_interval\x00', 0x0, r4) r5 = fsmount(r4, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r5, 0xc0305302, &(0x7f0000000100)={0x4, 0x2, 0xf425, 0x4, 0x433d2364, 0x81b}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x8, 0x7, 0x0, 0x2, 0x0, 0x2395, 0x2048, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffff14, 0x1, @perf_config_ext={0x5, 0x400}, 0x10010, 0x9, 0x5, 0x5, 0xa10, 0x0, 0x1, 0x0, 0x8, 0x0, 0xffffffffffffff28}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r7, 0x0, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x0, &(0x7f0000000380)=0x877, 0x0, 0x4) r8 = fsmount(r2, 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f00000002c0)='&-&\x00', &(0x7f0000000300)='./file0\x00', r8) 09:42:31 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x384}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000040)={{0x8}, 'port0\x00', 0x4, 0x400, 0x8c9, 0x7fffffff, 0x70000, 0x2, 0x1ffc, 0x0, 0x6, 0x6}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="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"]}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'tunl0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x7800, 0x7, 0xd79, 0x10000, {{0x29, 0x4, 0x0, 0x20, 0xa4, 0x68, 0x0, 0x3, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x40}, {[@noop, @ssrr={0x89, 0x3, 0x74}, @ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0x1c, 0x36, 0x1, 0x0, [{@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb93}, {@rand_addr=0x64010102, 0x7}]}, @rr={0x7, 0x13, 0xe0, [@dev={0xac, 0x14, 0x14, 0x1b}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @timestamp_prespec={0x44, 0x54, 0x63, 0x3, 0x8, [{@multicast2, 0x101}, {@rand_addr=0x64010102}, {@private=0xa010101, 0x7fff000}, {@rand_addr=0x64010102, 0x2}, {@private=0xa010100, 0x5}, {@loopback, 0xc7bf}, {@private=0xa010102}, {@multicast1, 0x200}, {@multicast1, 0x4}, {@empty, 0x8}]}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000a80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000540)={0x500, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x500}, 0x1, 0x0, 0x0, 0x10}, 0x8800) [ 1486.643029][ T3513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1486.643041][ T3513] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 09:42:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x2) read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) [ 1486.984582][ T3581] FAULT_INJECTION: forcing a failure. [ 1486.984582][ T3581] name failslab, interval 1, probability 0, space 0, times 0 [ 1486.997465][ T3581] CPU: 0 PID: 3581 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1487.005977][ T3581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1487.005989][ T3581] Call Trace: 09:42:31 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) read$snapshot(r1, 0x0, 0xfffffffffffffc4a) 09:42:31 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x204}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) [ 1487.005995][ T3581] dump_stack+0x137/0x19d [ 1487.006099][ T3581] should_fail+0x23c/0x250 09:42:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r1 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r1, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x614f, &(0x7f00000000c0)={0x0, 0x3ec5, 0x8, 0x2, 0x89}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r4, 0x5, 0x0, 0x9a, 0x1, 0x1}, 0x4aa) read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) [ 1487.006118][ T3581] ? anon_vma_clone+0x8d/0x380 [ 1487.006137][ T3581] __should_failslab+0x81/0x90 09:42:31 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x402}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1487.006157][ T3581] should_failslab+0x5/0x20 09:42:31 executing program 2 (fault-call:3 fault-nth:41): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() [ 1487.006171][ T3581] kmem_cache_alloc+0x46/0x2e0 [ 1487.006196][ T3581] ? avc_has_perm_noaudit+0x19a/0x240 [ 1487.006235][ T3581] anon_vma_clone+0x8d/0x380 09:42:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0)={0x5ef}, 0x4) read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) [ 1487.006267][ T3581] anon_vma_fork+0x54/0x2b0 [ 1487.006288][ T3581] dup_mmap+0x49c/0x9c0 09:42:31 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x402}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) [ 1487.006332][ T3581] dup_mm+0x7c/0x210 [ 1487.006400][ T3581] copy_process+0x11ec/0x2e00 [ 1487.006414][ T3581] kernel_clone+0x14b/0x680 09:42:31 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x406}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:31 executing program 2 (fault-call:3 fault-nth:42): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() [ 1487.006427][ T3581] ? __fget_light+0x21b/0x260 [ 1487.006449][ T3581] __do_sys_fork+0x3a/0x60 [ 1487.006464][ T3581] do_syscall_64+0x44/0x80 [ 1487.006481][ T3581] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1487.006555][ T3581] RIP: 0033:0x4665d9 [ 1487.006566][ T3581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1487.006584][ T3581] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1487.006604][ T3581] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1487.006617][ T3581] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1487.006628][ T3581] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1487.006640][ T3581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1487.006652][ T3581] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1487.235905][ T3629] FAULT_INJECTION: forcing a failure. [ 1487.235905][ T3629] name failslab, interval 1, probability 0, space 0, times 0 [ 1487.235925][ T3629] CPU: 0 PID: 3629 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1487.235985][ T3629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1487.236027][ T3629] Call Trace: [ 1487.236033][ T3629] dump_stack+0x137/0x19d [ 1487.236090][ T3629] should_fail+0x23c/0x250 [ 1487.236111][ T3629] ? anon_vma_clone+0x8d/0x380 [ 1487.236133][ T3629] __should_failslab+0x81/0x90 [ 1487.236174][ T3629] should_failslab+0x5/0x20 [ 1487.236194][ T3629] kmem_cache_alloc+0x46/0x2e0 [ 1487.236218][ T3629] anon_vma_clone+0x8d/0x380 [ 1487.236239][ T3629] anon_vma_fork+0x54/0x2b0 [ 1487.236258][ T3629] dup_mmap+0x49c/0x9c0 [ 1487.236302][ T3629] dup_mm+0x7c/0x210 [ 1487.236315][ T3629] copy_process+0x11ec/0x2e00 [ 1487.236329][ T3629] kernel_clone+0x14b/0x680 [ 1487.236342][ T3629] ? __fget_light+0x21b/0x260 [ 1487.236360][ T3629] __do_sys_fork+0x3a/0x60 [ 1487.236373][ T3629] do_syscall_64+0x44/0x80 [ 1487.236433][ T3629] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1487.236456][ T3629] RIP: 0033:0x4665d9 [ 1487.236467][ T3629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1487.236480][ T3629] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1487.236494][ T3629] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1487.236503][ T3629] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1487.236512][ T3629] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1487.236521][ T3629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1487.236584][ T3629] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1487.431608][ T3660] FAULT_INJECTION: forcing a failure. [ 1487.431608][ T3660] name failslab, interval 1, probability 0, space 0, times 0 [ 1487.431632][ T3660] CPU: 0 PID: 3660 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1487.431650][ T3660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1487.431709][ T3660] Call Trace: [ 1487.431716][ T3660] dump_stack+0x137/0x19d [ 1487.431741][ T3660] should_fail+0x23c/0x250 [ 1487.431760][ T3660] ? anon_vma_fork+0x117/0x2b0 [ 1487.431780][ T3660] __should_failslab+0x81/0x90 [ 1487.431799][ T3660] should_failslab+0x5/0x20 [ 1487.431813][ T3660] kmem_cache_alloc+0x46/0x2e0 [ 1487.431871][ T3660] ? anon_vma_fork+0xb1/0x2b0 [ 1487.431891][ T3660] anon_vma_fork+0x117/0x2b0 [ 1487.431910][ T3660] dup_mmap+0x49c/0x9c0 [ 1487.431928][ T3660] dup_mm+0x7c/0x210 [ 1487.431943][ T3660] copy_process+0x11ec/0x2e00 [ 1487.431959][ T3660] kernel_clone+0x14b/0x680 [ 1487.432033][ T3660] ? __fget_light+0x21b/0x260 [ 1487.432056][ T3660] __do_sys_fork+0x3a/0x60 [ 1487.432072][ T3660] do_syscall_64+0x44/0x80 [ 1487.432092][ T3660] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1487.432112][ T3660] RIP: 0033:0x4665d9 [ 1487.432122][ T3660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1487.432138][ T3660] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1487.432160][ T3660] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1487.432170][ T3660] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1487.432180][ T3660] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1487.432191][ T3660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 09:42:32 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) 09:42:32 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/kcm\x00') fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000100)='\x00', &(0x7f0000000180)='./file0\x00', r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x280000, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r2, &(0x7f0000000040)=""/72, 0x48) 09:42:32 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x406}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:32 executing program 5: keyctl$setperm(0x5, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr\x00') read$snapshot(r0, 0x0, 0x2) keyctl$reject(0x13, 0x0, 0x100, 0x8, 0xfffffffffffffffd) 09:42:32 executing program 2 (fault-call:3 fault-nth:43): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:32 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x604}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1487.432202][ T3660] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1487.975047][ T3688] FAULT_INJECTION: forcing a failure. [ 1487.975047][ T3688] name failslab, interval 1, probability 0, space 0, times 0 [ 1487.987718][ T3688] CPU: 1 PID: 3688 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1487.996493][ T3688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1488.006774][ T3688] Call Trace: [ 1488.010055][ T3688] dump_stack+0x137/0x19d [ 1488.014424][ T3688] should_fail+0x23c/0x250 [ 1488.018843][ T3688] ? anon_vma_fork+0xb1/0x2b0 09:42:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = fsmount(r1, 0x1, 0x73) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = getpid() r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r4) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x9e, 0x37, 0x80, 0x88, 0x0, 0x0, 0x800, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x800, 0x2, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x9}, r3, 0xe, r4, 0x2) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x7) read$snapshot(r0, 0x0, 0x2) 09:42:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/llc/socket\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000080)='\x00', &(0x7f00000000c0)="b40113cb02f08dd554609d447677b5f8e3489525ee22ea03b6ebf924fe4740a7b43abba8bb9721230d14e8ffc6383d2a54ce3ffed35b66f6c6bcd3a263664bf7f6c94bf33ddf0906e92a907320dcac0ba14d5383cf33e6a031", 0x59) read$snapshot(r0, 0x0, 0x2) 09:42:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x202a00, 0x0) read$snapshot(r2, &(0x7f00000000c0)=""/72, 0x2e) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r2) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000180)='lb_stats_refresh_interval\x00', &(0x7f00000001c0)='./file0\x00', r0) r3 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r3}, 0x0) syz_open_procfs(r3, &(0x7f0000000240)='net/netlink\x00') 09:42:32 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x500}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:32 executing program 5: ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x2c) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0xce01, 0x0) read$rfkill(r1, &(0x7f00000000c0), 0x8) read$snapshot(r0, 0x0, 0x2) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f0000000040)) [ 1488.023594][ T3688] __should_failslab+0x81/0x90 [ 1488.028370][ T3688] should_failslab+0x5/0x20 [ 1488.028410][ T3688] kmem_cache_alloc+0x46/0x2e0 [ 1488.028435][ T3688] anon_vma_fork+0xb1/0x2b0 09:42:32 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x700}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1488.028526][ T3688] dup_mmap+0x49c/0x9c0 [ 1488.028543][ T3688] dup_mm+0x7c/0x210 [ 1488.028555][ T3688] copy_process+0x11ec/0x2e00 [ 1488.028570][ T3688] kernel_clone+0x14b/0x680 09:42:32 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x604}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) [ 1488.028583][ T3688] ? __fget_light+0x21b/0x260 [ 1488.028607][ T3688] __do_sys_fork+0x3a/0x60 [ 1488.028665][ T3688] do_syscall_64+0x44/0x80 09:42:32 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x2000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:32 executing program 2 (fault-call:3 fault-nth:44): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() [ 1488.028690][ T3688] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1488.028711][ T3688] RIP: 0033:0x4665d9 [ 1488.028722][ T3688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:42:32 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x700}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) [ 1488.028736][ T3688] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1488.028772][ T3688] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 09:42:32 executing program 2 (fault-call:3 fault-nth:45): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:32 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x3e00}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1488.028784][ T3688] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1488.028794][ T3688] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1488.028804][ T3688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1488.028813][ T3688] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1488.288256][ T3744] ================================================================== [ 1488.288277][ T3744] BUG: KCSAN: data-race in compact_zone / compact_zone [ 1488.288295][ T3744] [ 1488.288299][ T3744] write to 0xffff88823fffad90 of 8 bytes by task 3751 on cpu 0: [ 1488.288311][ T3744] compact_zone+0x1496/0x1d30 [ 1488.288328][ T3744] try_to_compact_pages+0x317/0x840 [ 1488.288345][ T3744] __alloc_pages_direct_compact+0x61/0x320 [ 1488.288365][ T3744] __alloc_pages_slowpath+0x29a/0xb70 [ 1488.288386][ T3744] __alloc_pages+0x25b/0x320 [ 1488.288403][ T3744] alloc_pages+0x21d/0x310 [ 1488.288419][ T3744] __get_free_pages+0x8/0x30 [ 1488.288432][ T3744] io_uring_create+0x887/0x18d0 [ 1488.288447][ T3744] __x64_sys_io_uring_setup+0xe1/0x120 [ 1488.288462][ T3744] do_syscall_64+0x44/0x80 [ 1488.288483][ T3744] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1488.288507][ T3744] [ 1488.288511][ T3744] read to 0xffff88823fffad90 of 8 bytes by task 3744 on cpu 1: [ 1488.288526][ T3744] compact_zone+0x1472/0x1d30 [ 1488.288544][ T3744] try_to_compact_pages+0x317/0x840 [ 1488.288569][ T3744] __alloc_pages_direct_compact+0x61/0x320 [ 1488.288585][ T3744] __alloc_pages_slowpath+0x29a/0xb70 [ 1488.288598][ T3744] __alloc_pages+0x25b/0x320 [ 1488.288611][ T3744] alloc_pages+0x21d/0x310 [ 1488.288623][ T3744] __get_free_pages+0x8/0x30 [ 1488.288636][ T3744] io_uring_create+0x9b9/0x18d0 [ 1488.288654][ T3744] __x64_sys_io_uring_setup+0xe1/0x120 [ 1488.288672][ T3744] do_syscall_64+0x44/0x80 [ 1488.288693][ T3744] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1488.288714][ T3744] [ 1488.288716][ T3744] value changed: 0x000000000018c000 -> 0x0000000000192400 [ 1488.288726][ T3744] [ 1488.288728][ T3744] Reported by Kernel Concurrency Sanitizer on: [ 1488.288735][ T3744] CPU: 1 PID: 3744 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 1488.288755][ T3744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1488.288766][ T3744] ================================================================== [ 1488.358172][ T3752] FAULT_INJECTION: forcing a failure. [ 1488.358172][ T3752] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1488.358199][ T3752] CPU: 1 PID: 3752 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1488.358218][ T3752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1488.358226][ T3752] Call Trace: [ 1488.358232][ T3752] dump_stack+0x137/0x19d [ 1488.358256][ T3752] should_fail+0x23c/0x250 [ 1488.358271][ T3752] __alloc_pages+0x102/0x320 [ 1488.358287][ T3752] alloc_pages+0x21d/0x310 [ 1488.358304][ T3752] pte_alloc_one+0x29/0xb0 [ 1488.358323][ T3752] __pte_alloc+0x2f/0x210 [ 1488.358343][ T3752] copy_pte_range+0x128e/0x1460 [ 1488.358357][ T3752] copy_page_range+0x5da/0x8e0 [ 1488.358374][ T3752] ? anon_vma_fork+0x273/0x2b0 [ 1488.358392][ T3752] dup_mmap+0x6ab/0x9c0 [ 1488.358407][ T3752] dup_mm+0x7c/0x210 [ 1488.358418][ T3752] copy_process+0x11ec/0x2e00 [ 1488.358431][ T3752] kernel_clone+0x14b/0x680 [ 1488.358442][ T3752] ? __fget_light+0x21b/0x260 [ 1488.358459][ T3752] __do_sys_fork+0x3a/0x60 [ 1488.358473][ T3752] do_syscall_64+0x44/0x80 [ 1488.358491][ T3752] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1488.358513][ T3752] RIP: 0033:0x4665d9 [ 1488.358526][ T3752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1488.358544][ T3752] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1488.358563][ T3752] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1488.358575][ T3752] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1488.358587][ T3752] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1488.358598][ T3752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1488.358606][ T3752] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1488.503541][ T3770] FAULT_INJECTION: forcing a failure. [ 1488.503541][ T3770] name failslab, interval 1, probability 0, space 0, times 0 [ 1488.503568][ T3770] CPU: 0 PID: 3770 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1488.503583][ T3770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1488.503594][ T3770] Call Trace: [ 1488.503601][ T3770] dump_stack+0x137/0x19d [ 1488.503623][ T3770] should_fail+0x23c/0x250 [ 1488.503644][ T3770] ? dup_mmap+0x38e/0x9c0 [ 1488.503662][ T3770] __should_failslab+0x81/0x90 [ 1488.503693][ T3770] should_failslab+0x5/0x20 [ 1488.503707][ T3770] kmem_cache_alloc+0x46/0x2e0 [ 1488.503751][ T3770] ? anon_vma_fork+0x273/0x2b0 [ 1488.503807][ T3770] dup_mmap+0x38e/0x9c0 [ 1488.503820][ T3770] dup_mm+0x7c/0x210 [ 1488.503833][ T3770] copy_process+0x11ec/0x2e00 [ 1488.503850][ T3770] kernel_clone+0x14b/0x680 [ 1488.503867][ T3770] ? __fget_light+0x21b/0x260 [ 1488.503890][ T3770] __do_sys_fork+0x3a/0x60 [ 1488.504040][ T3770] do_syscall_64+0x44/0x80 [ 1488.504075][ T3770] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1488.504102][ T3770] RIP: 0033:0x4665d9 [ 1488.504114][ T3770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1488.504127][ T3770] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 09:42:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) r1 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, 0x0) ptrace$getsig(0x4202, r1, 0x4, &(0x7f0000000040)) 09:42:33 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x3f00}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1488.504141][ T3770] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1488.504151][ T3770] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1488.504162][ T3770] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1488.504175][ T3770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1488.504188][ T3770] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 09:42:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x80, 0x8, 0x469c, 0x3, {{0x11, 0x4, 0x1, 0x33, 0x44, 0x66, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010101, @loopback, {[@noop, @end, @rr={0x7, 0x23, 0xa9, [@empty, @broadcast, @local, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x12}, @local, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xb}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}}}) read$snapshot(r0, 0x0, 0x2) 09:42:33 executing program 2 (fault-call:3 fault-nth:46): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:33 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x2000}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) read$snapshot(r2, &(0x7f0000000040)=""/78, 0x11) read$snapshot(r0, &(0x7f00000002c0)=""/92, 0x5c) r3 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x2400c080) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x202000, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x1, 0x8, 0x1d30, 0x2, {{0x1c, 0x4, 0x1, 0x6, 0x70, 0x64, 0x0, 0x80, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x2c, 0xc4, 0x3, 0x2, [{@private=0xa010101, 0x80}, {@private=0xa010102, 0x2}, {@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x1}, {@rand_addr=0x64010102, 0x4ed2e3e5}]}, @noop, @ssrr={0x89, 0x17, 0xc, [@dev={0xac, 0x14, 0x14, 0x1d}, @loopback, @remote, @rand_addr=0x64010100, @broadcast]}, @lsrr={0x83, 0x7, 0x73, [@rand_addr=0x64010100]}, @generic={0x88, 0x11, "e6dfb63b86183a99348f51477a2f64"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x20, 0x40, 0x0, 0x1ff, {{0x1a, 0x4, 0x1, 0x2, 0x68, 0x67, 0x0, 0x9, 0x2f, 0x0, @remote, @empty, {[@lsrr={0x83, 0x17, 0x94, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x44}, @loopback, @multicast2, @multicast1]}, @timestamp_prespec={0x44, 0x1c, 0xf0, 0x3, 0x9, [{@broadcast}, {@private=0xa010100, 0x101}, {@loopback, 0x72}]}, @ssrr={0x89, 0xb, 0x1d, [@private=0xa010102, @remote]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x1b, [@empty, @rand_addr=0x64010102, @loopback]}]}}}}}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f00000009c0)=ANY=[@ANYBLOB="5c010000", @ANYRES16=0x0, @ANYBLOB="200029bd7000ffdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="4001028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004007504000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656ea6881bb3640000000000000000000000000005000300060000000400040008000600d65932ecdb5444165091695fd7a6054eaf7b959d98e6ba98fb", @ANYRES32=r5, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="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"], 0x15c}}, 0x44) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x10}, 0x20000091) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f0000000100)) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) socket$inet_udp(0x2, 0x2, 0x0) 09:42:33 executing program 3: mq_unlink(&(0x7f0000000040)='\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) 09:42:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0x2) r1 = gettid() syz_open_procfs(r1, &(0x7f0000000080)='smaps_rollup\x00') 09:42:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) 09:42:33 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x4000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='net/mcfilter\x00', 0x0, r2) 09:42:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x6, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffff00, 0x400, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x6, @perf_bp={&(0x7f0000000040), 0x8}, 0x40, 0x1, 0x1, 0x5, 0x7, 0x5, 0x200, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x9, r0, 0x3) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x100010, r0, 0xfff) read$snapshot(r0, 0x0, 0x2) [ 1489.564372][ T3820] FAULT_INJECTION: forcing a failure. [ 1489.564372][ T3820] name failslab, interval 1, probability 0, space 0, times 0 [ 1489.577120][ T3820] CPU: 0 PID: 3820 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1489.585441][ T3820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1489.595494][ T3820] Call Trace: [ 1489.598765][ T3820] dump_stack+0x137/0x19d [ 1489.603104][ T3820] should_fail+0x23c/0x250 [ 1489.607516][ T3820] ? dup_mmap+0x38e/0x9c0 09:42:34 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x3e00}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) [ 1489.611840][ T3820] __should_failslab+0x81/0x90 [ 1489.616603][ T3820] should_failslab+0x5/0x20 [ 1489.621102][ T3820] kmem_cache_alloc+0x46/0x2e0 [ 1489.625890][ T3820] dup_mmap+0x38e/0x9c0 [ 1489.630039][ T3820] dup_mm+0x7c/0x210 [ 1489.633930][ T3820] copy_process+0x11ec/0x2e00 [ 1489.638608][ T3820] kernel_clone+0x14b/0x680 [ 1489.643131][ T3820] ? __fget_light+0x21b/0x260 [ 1489.647807][ T3820] __do_sys_fork+0x3a/0x60 [ 1489.652279][ T3820] do_syscall_64+0x44/0x80 [ 1489.656732][ T3820] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1489.662744][ T3820] RIP: 0033:0x4665d9 [ 1489.666622][ T3820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1489.686211][ T3820] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1489.694607][ T3820] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1489.702569][ T3820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1489.710532][ T3820] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1489.718504][ T3820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1489.726477][ T3820] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 09:42:34 executing program 5: rt_sigqueueinfo(0xffffffffffffffff, 0x21, &(0x7f00000003c0)={0x24, 0x80000000, 0x2}) clock_getres(0x6, &(0x7f0000000300)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000002c0)='\x00', 0x0, r2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$SNAPSHOT_FREE(r0, 0x3305) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000010) 09:42:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) 09:42:34 executing program 2 (fault-call:3 fault-nth:47): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:34 executing program 3: fork() r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='statm\x00') read$snapshot(r1, 0x0, 0x44c1d607166be02d) 09:42:34 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x4200}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:34 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x4000}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7ff, @local, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010101}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x2) socket(0x29, 0x80000, 0x2c9) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x81, 0x10001, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x7, 0x700, 0x0, 0x6}}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_FLOW={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x1) fspick(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x1) 09:42:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') r1 = fsmount(r0, 0x0, 0x74) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r2 = accept$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) write$selinux_attr(r0, &(0x7f0000000200)='system_u:object_r:dpkg_lock_t:s0\x00', 0x21) recvfrom$unix(r2, &(0x7f0000000100)=""/198, 0xc6, 0x11000, 0x0, 0x0) read$snapshot(r0, 0x0, 0x2) 09:42:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) ioctl$SNAPSHOT_FREE(r0, 0x3305) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) [ 1490.161727][ T3903] FAULT_INJECTION: forcing a failure. [ 1490.161727][ T3903] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.174359][ T3903] CPU: 0 PID: 3903 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1490.182677][ T3903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1490.192811][ T3903] Call Trace: [ 1490.196073][ T3903] dump_stack+0x137/0x19d [ 1490.200399][ T3903] should_fail+0x23c/0x250 [ 1490.204855][ T3903] ? anon_vma_clone+0x8d/0x380 [ 1490.209618][ T3903] __should_failslab+0x81/0x90 [ 1490.214377][ T3903] should_failslab+0x5/0x20 [ 1490.219490][ T3903] kmem_cache_alloc+0x46/0x2e0 [ 1490.224249][ T3903] anon_vma_clone+0x8d/0x380 [ 1490.228825][ T3903] anon_vma_fork+0x54/0x2b0 [ 1490.233305][ T3903] dup_mmap+0x49c/0x9c0 [ 1490.237470][ T3903] dup_mm+0x7c/0x210 [ 1490.241351][ T3903] copy_process+0x11ec/0x2e00 [ 1490.246019][ T3903] kernel_clone+0x14b/0x680 [ 1490.250501][ T3903] ? __fget_light+0x21b/0x260 [ 1490.255170][ T3903] __do_sys_fork+0x3a/0x60 [ 1490.259563][ T3903] do_syscall_64+0x44/0x80 [ 1490.264021][ T3903] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1490.269895][ T3903] RIP: 0033:0x4665d9 [ 1490.273766][ T3903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1490.293558][ T3903] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1490.302000][ T3903] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1490.309951][ T3903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1490.317911][ T3903] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1490.325905][ T3903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1490.333861][ T3903] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 09:42:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f00000000c0)={0x3, 0x2}) 09:42:34 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x4200}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:34 executing program 2 (fault-call:3 fault-nth:48): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:34 executing program 5: syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, &(0x7f00000002c0)=0x7f, 0x0, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000300), r2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl0\x00', r1, 0x2f, 0x7f, 0x5, 0x1, 0x2, @mcast1, @private0, 0x7, 0x700, 0x82f}}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r3) fspick(r3, &(0x7f0000000100)='./file0\x00', 0x1) read$snapshot(r0, 0x0, 0x2) 09:42:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r1 = request_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='.!\x00', 0xfffffffffffffff8) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0xf00, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000300)={0xffff, 0x2, 0x1, {0x5f, 0x1}, 0x0, 0x4}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) recvfrom$unix(r0, &(0x7f00000000c0)=""/220, 0xdc, 0x40000000, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 09:42:35 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) 09:42:35 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x6000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1490.586727][ T3949] FAULT_INJECTION: forcing a failure. [ 1490.586727][ T3949] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.599455][ T3949] CPU: 0 PID: 3949 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1490.607899][ T3949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1490.618034][ T3949] Call Trace: [ 1490.621335][ T3949] dump_stack+0x137/0x19d [ 1490.625707][ T3949] should_fail+0x23c/0x250 [ 1490.625727][ T3949] ? anon_vma_fork+0xb1/0x2b0 [ 1490.625772][ T3949] __should_failslab+0x81/0x90 [ 1490.625792][ T3949] should_failslab+0x5/0x20 [ 1490.625807][ T3949] kmem_cache_alloc+0x46/0x2e0 [ 1490.625825][ T3949] anon_vma_fork+0xb1/0x2b0 [ 1490.625871][ T3949] dup_mmap+0x49c/0x9c0 [ 1490.625890][ T3949] dup_mm+0x7c/0x210 [ 1490.625906][ T3949] copy_process+0x11ec/0x2e00 [ 1490.666296][ T3949] kernel_clone+0x14b/0x680 [ 1490.666319][ T3949] ? __fget_light+0x21b/0x260 [ 1490.666341][ T3949] __do_sys_fork+0x3a/0x60 [ 1490.666355][ T3949] do_syscall_64+0x44/0x80 [ 1490.666381][ T3949] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1490.690330][ T3949] RIP: 0033:0x4665d9 [ 1490.690353][ T3949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1490.713883][ T3949] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 09:42:35 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x6000}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:35 executing program 2 (fault-call:3 fault-nth:49): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() [ 1490.713902][ T3949] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1490.713912][ T3949] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1490.713921][ T3949] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1490.713930][ T3949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1490.713941][ T3949] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1490.894105][ T3992] FAULT_INJECTION: forcing a failure. [ 1490.894105][ T3992] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.894130][ T3992] CPU: 0 PID: 3992 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1490.894202][ T3992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1490.894213][ T3992] Call Trace: [ 1490.894220][ T3992] dump_stack+0x137/0x19d [ 1490.894410][ T3992] should_fail+0x23c/0x250 [ 1490.894431][ T3992] ? anon_vma_fork+0xb1/0x2b0 [ 1490.894453][ T3992] __should_failslab+0x81/0x90 [ 1490.894477][ T3992] should_failslab+0x5/0x20 [ 1490.894496][ T3992] kmem_cache_alloc+0x46/0x2e0 [ 1490.894575][ T3992] anon_vma_fork+0xb1/0x2b0 09:42:35 executing program 2 (fault-call:3 fault-nth:50): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() [ 1490.894596][ T3992] dup_mmap+0x49c/0x9c0 [ 1490.894615][ T3992] dup_mm+0x7c/0x210 [ 1490.894628][ T3992] copy_process+0x11ec/0x2e00 [ 1490.894641][ T3992] kernel_clone+0x14b/0x680 [ 1490.894653][ T3992] ? __fget_light+0x21b/0x260 [ 1490.894726][ T3992] __do_sys_fork+0x3a/0x60 [ 1490.894743][ T3992] do_syscall_64+0x44/0x80 [ 1490.894785][ T3992] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1490.894808][ T3992] RIP: 0033:0x4665d9 [ 1490.894821][ T3992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1490.894916][ T3992] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1490.894936][ T3992] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 09:42:35 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x40000}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:35 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x7e03}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1490.894950][ T3992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1490.894962][ T3992] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1490.894975][ T3992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1490.894988][ T3992] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 09:42:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') syz_io_uring_setup(0x7fe3, &(0x7f0000000040)={0x0, 0x9d8, 0x4, 0x1, 0x255, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff7000/0x7000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r2 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r2, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r5) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r5}, 0xb) read$snapshot(r0, 0x0, 0x2) 09:42:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/exec\x00') read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) 09:42:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x0) syz_io_uring_complete(0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x199000, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x145680, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f00000000c0)) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) [ 1491.257093][ T4004] FAULT_INJECTION: forcing a failure. [ 1491.257093][ T4004] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1491.270348][ T4004] CPU: 1 PID: 4004 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1491.278663][ T4004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1491.288706][ T4004] Call Trace: [ 1491.291979][ T4004] dump_stack+0x137/0x19d [ 1491.296325][ T4004] should_fail+0x23c/0x250 [ 1491.300731][ T4004] __alloc_pages+0x102/0x320 [ 1491.305399][ T4004] alloc_pages+0x21d/0x310 [ 1491.309802][ T4004] pte_alloc_one+0x29/0xb0 [ 1491.314201][ T4004] __pte_alloc+0x2f/0x210 [ 1491.318531][ T4004] copy_pte_range+0x128e/0x1460 [ 1491.323370][ T4004] ? __alloc_pages+0x194/0x320 [ 1491.328122][ T4004] ? vma_interval_tree_augment_rotate+0x100/0x100 [ 1491.334526][ T4004] copy_page_range+0x5da/0x8e0 [ 1491.339282][ T4004] ? anon_vma_fork+0x273/0x2b0 [ 1491.344040][ T4004] dup_mmap+0x6ab/0x9c0 [ 1491.348273][ T4004] dup_mm+0x7c/0x210 [ 1491.352156][ T4004] copy_process+0x11ec/0x2e00 [ 1491.356818][ T4004] kernel_clone+0x14b/0x680 [ 1491.361306][ T4004] ? __fget_light+0x21b/0x260 [ 1491.365972][ T4004] __do_sys_fork+0x3a/0x60 [ 1491.370371][ T4004] do_syscall_64+0x44/0x80 [ 1491.374779][ T4004] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1491.380661][ T4004] RIP: 0033:0x4665d9 [ 1491.384541][ T4004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1491.404135][ T4004] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1491.412528][ T4004] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1491.420496][ T4004] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1491.428640][ T4004] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1491.436597][ T4004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1491.444550][ T4004] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 [ 1491.457736][ T4021] ================================================================== [ 1491.465811][ T4021] BUG: KCSAN: data-race in compact_zone / compact_zone [ 1491.472651][ T4021] [ 1491.474962][ T4021] write to 0xffff88823fffad90 of 8 bytes by task 4010 on cpu 0: [ 1491.482573][ T4021] compact_zone+0x1496/0x1d30 [ 1491.487247][ T4021] try_to_compact_pages+0x317/0x840 [ 1491.492436][ T4021] __alloc_pages_direct_compact+0x61/0x320 [ 1491.498226][ T4021] __alloc_pages_slowpath+0x5d4/0xb70 [ 1491.503579][ T4021] __alloc_pages+0x25b/0x320 [ 1491.508160][ T4021] alloc_pages+0x21d/0x310 [ 1491.512559][ T4021] __get_free_pages+0x8/0x30 [ 1491.517128][ T4021] io_uring_create+0x887/0x18d0 [ 1491.521953][ T4021] __x64_sys_io_uring_setup+0xe1/0x120 [ 1491.527387][ T4021] do_syscall_64+0x44/0x80 [ 1491.531793][ T4021] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1491.537674][ T4021] [ 1491.539978][ T4021] read to 0xffff88823fffad90 of 8 bytes by task 4021 on cpu 1: [ 1491.547512][ T4021] compact_zone+0x1472/0x1d30 [ 1491.552195][ T4021] try_to_compact_pages+0x317/0x840 [ 1491.557380][ T4021] __alloc_pages_direct_compact+0x61/0x320 [ 1491.563179][ T4021] __alloc_pages_slowpath+0x29a/0xb70 [ 1491.568526][ T4021] __alloc_pages+0x25b/0x320 [ 1491.573105][ T4021] alloc_pages+0x21d/0x310 [ 1491.577515][ T4021] __get_free_pages+0x8/0x30 [ 1491.582085][ T4021] io_uring_create+0x887/0x18d0 [ 1491.586909][ T4021] __x64_sys_io_uring_setup+0xe1/0x120 [ 1491.592341][ T4021] do_syscall_64+0x44/0x80 [ 1491.596739][ T4021] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1491.602620][ T4021] [ 1491.604921][ T4021] value changed: 0x0000000000188400 -> 0x000000000018c000 [ 1491.611998][ T4021] [ 1491.614333][ T4021] Reported by Kernel Concurrency Sanitizer on: [ 1491.620466][ T4021] CPU: 1 PID: 4021 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 1491.628767][ T4021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1491.638806][ T4021] ================================================================== 09:42:36 executing program 2 (fault-call:3 fault-nth:51): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) read$snapshot(r0, 0x0, 0xfffffffffffffe46) r1 = syz_io_uring_complete(0x0) fspick(r1, &(0x7f0000000040)='./file0\x00', 0x0) 09:42:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f00000000c0)={0x35a, 0x3}) 09:42:36 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x80000}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0xf2b}, 0x4) read$snapshot(r0, 0x0, 0x2) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x2) 09:42:36 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x8403}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1491.951137][ T4049] FAULT_INJECTION: forcing a failure. [ 1491.951137][ T4049] name failslab, interval 1, probability 0, space 0, times 0 [ 1491.963873][ T4049] CPU: 1 PID: 4049 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1491.973145][ T4049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1491.983190][ T4049] Call Trace: [ 1491.986464][ T4049] dump_stack+0x137/0x19d [ 1491.990798][ T4049] should_fail+0x23c/0x250 [ 1491.995215][ T4049] ? anon_vma_fork+0x117/0x2b0 [ 1491.999974][ T4049] __should_failslab+0x81/0x90 [ 1492.004799][ T4049] should_failslab+0x5/0x20 [ 1492.009298][ T4049] kmem_cache_alloc+0x46/0x2e0 [ 1492.014075][ T4049] ? anon_vma_fork+0xb1/0x2b0 [ 1492.018748][ T4049] anon_vma_fork+0x117/0x2b0 [ 1492.023342][ T4049] dup_mmap+0x49c/0x9c0 [ 1492.027558][ T4049] dup_mm+0x7c/0x210 [ 1492.031465][ T4049] copy_process+0x11ec/0x2e00 [ 1492.036131][ T4049] kernel_clone+0x14b/0x680 [ 1492.040635][ T4049] ? __fget_light+0x21b/0x260 [ 1492.045320][ T4049] __do_sys_fork+0x3a/0x60 [ 1492.049733][ T4049] do_syscall_64+0x44/0x80 [ 1492.054189][ T4049] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1492.060128][ T4049] RIP: 0033:0x4665d9 [ 1492.064008][ T4049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1492.083631][ T4049] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1492.092094][ T4049] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 09:42:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, &(0x7f0000000040)=""/67, 0x43) [ 1492.100103][ T4049] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1492.108072][ T4049] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1492.116082][ T4049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1492.124037][ T4049] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 09:42:36 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000040)='^\x00', &(0x7f0000000080)="661506a13a77310dada30a71ba4ac1fc5a52a16038b2fe05ae41f5f11718c77ee493a24c3142719d21f720535a07a69e473cc5c28013622e81f54db2d01e82cd2fff7e89169253139011711d76626522bb1af4456ec9927abe0faf852ab6e08a7efcb60136853bc1b9f014ad6d7e9cac0f27783c547a967d866dd3dc52c8a4fd7d40a375a1cabbfee8e55db4e8e855bceefb2c26ac214c78efead2cc1f589f35021eb22e19cb855302acaa415df2e8fd98364b003af75edca7328cbcdd78e817eb624547023d28314d01eaf1890670e9fc0c98fff85ec1cfd82585fe9795fdf78a9d7eef66316717800c983b2444fb1beb29210305b666", 0xf7) read$snapshot(r3, 0x0, 0x2) 09:42:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') r1 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r2 = syz_io_uring_setup(0x30b2, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x4, 0x0, r3) read$snapshot(r0, 0x0, 0x2) 09:42:36 executing program 2 (fault-call:3 fault-nth:52): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) socket(0x2, 0x800, 0x6) 09:42:36 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x40000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:36 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x200000}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000040)) 09:42:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000080)={0x2, 0x1, 0x3, 0x1000, 0x4, 0x5}) [ 1492.490788][ T4106] FAULT_INJECTION: forcing a failure. [ 1492.490788][ T4106] name failslab, interval 1, probability 0, space 0, times 0 [ 1492.503590][ T4106] CPU: 1 PID: 4106 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1492.511905][ T4106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1492.522023][ T4106] Call Trace: [ 1492.525327][ T4106] dump_stack+0x137/0x19d [ 1492.529654][ T4106] should_fail+0x23c/0x250 [ 1492.534070][ T4106] ? dup_mmap+0x38e/0x9c0 [ 1492.538466][ T4106] __should_failslab+0x81/0x90 [ 1492.543226][ T4106] should_failslab+0x5/0x20 [ 1492.547786][ T4106] kmem_cache_alloc+0x46/0x2e0 [ 1492.552548][ T4106] ? anon_vma_fork+0x273/0x2b0 [ 1492.557311][ T4106] dup_mmap+0x38e/0x9c0 [ 1492.561453][ T4106] dup_mm+0x7c/0x210 [ 1492.565325][ T4106] copy_process+0x11ec/0x2e00 [ 1492.570036][ T4106] kernel_clone+0x14b/0x680 [ 1492.574520][ T4106] ? __fget_light+0x21b/0x260 [ 1492.579182][ T4106] __do_sys_fork+0x3a/0x60 [ 1492.583581][ T4106] do_syscall_64+0x44/0x80 [ 1492.588052][ T4106] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1492.593991][ T4106] RIP: 0033:0x4665d9 [ 1492.597861][ T4106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1492.617450][ T4106] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1492.625843][ T4106] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 09:42:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) read$snapshot(0xffffffffffffffff, &(0x7f0000000040)=""/72, 0x48) [ 1492.633811][ T4106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1492.641758][ T4106] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1492.649763][ T4106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1492.657716][ T4106] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 09:42:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x5c000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) read$snapshot(r0, 0x0, 0x0) 09:42:37 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x20a320}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:37 executing program 2 (fault-call:3 fault-nth:53): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:37 executing program 3: fork() fork() timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x4, @thr={&(0x7f0000000180)="389fe1f85d3b5c4e56dcb5f3ef7e1b8c4b12b4d6b8857ebc76d509930ba4292849b275618c62c16bb6d008c796d35338e57677ae40b15af30dc36e49242f6e37d15b0bf9711af7d6919789b58205b2430d8f", &(0x7f0000000200)="cd80367dbe38d46e3bc461328a8861c9c858d4b2a4c88d7993e6d49675ed7bece28fda8095942b7baa5bce4de12a12bc0fb70c8a97aeed5227c2c14aabbba88ed07ca2661c869ae7554da969b3445256b1aa2c833633e586cb70"}}, 0x0) keyctl$invalidate(0x15, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000080)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000140)='cgroup\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x0, 0x8, 0x20, @empty, @remote, 0x8, 0x80, 0x6, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x2f, 0x4, 0x5, 0xff, 0x2, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x7800, 0x85, 0x80000001}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x30c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc7c}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff043}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r3}}}]}}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4008010}, 0x80) read$snapshot(r1, 0x0, 0x2) read$snapshot(r1, &(0x7f0000000040)=""/41, 0x29) r4 = syz_io_uring_complete(0x0) write$selinux_attr(r4, &(0x7f0000000300)='system_u:object_r:systemd_logind_sessions_t:s0\x00', 0x2f) 09:42:37 executing program 4: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/udp\x00') sched_getattr(r0, &(0x7f0000000100)={0x38}, 0x38, 0x0) read$snapshot(r1, &(0x7f0000000040)=""/72, 0x48) 09:42:37 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x80000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x8000, 0x700, 0x0, 0x1fb, {{0x1d, 0x4, 0x3, 0x7, 0x74, 0x68, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x35}, {[@ssrr={0x89, 0xf, 0x1d, [@local, @empty, @dev={0xac, 0x14, 0x14, 0x26}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x4c, 0x66, 0x3, 0x5, [{@empty, 0x6}, {@local, 0x20}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x31}, 0xb4b}, {@broadcast, 0x5}, {@multicast1, 0x9}, {@remote, 0x4}, {@local, 0x1}, {@loopback, 0x7}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000180)={'ip_vti0\x00', r2, 0x8000, 0x80, 0xde, 0x10001, {{0x7, 0x4, 0x1, 0x2, 0x1c, 0x64, 0x0, 0x7, 0x29, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @noop, @ra={0x94, 0x4, 0x1}, @end]}}}}}) syz_genetlink_get_family_id$team(&(0x7f0000000040), r1) recvfrom$unix(r0, &(0x7f0000000200)=""/103, 0x67, 0x12060, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) read$snapshot(r0, 0x0, 0x2) [ 1493.007312][ T4166] FAULT_INJECTION: forcing a failure. [ 1493.007312][ T4166] name failslab, interval 1, probability 0, space 0, times 0 [ 1493.020468][ T4166] CPU: 1 PID: 4166 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1493.028814][ T4166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1493.038851][ T4166] Call Trace: [ 1493.042111][ T4166] dump_stack+0x137/0x19d [ 1493.046522][ T4166] should_fail+0x23c/0x250 [ 1493.050916][ T4166] ? dup_mmap+0x38e/0x9c0 [ 1493.055224][ T4166] __should_failslab+0x81/0x90 [ 1493.059998][ T4166] should_failslab+0x5/0x20 [ 1493.064479][ T4166] kmem_cache_alloc+0x46/0x2e0 [ 1493.069217][ T4166] ? anon_vma_fork+0x273/0x2b0 [ 1493.073967][ T4166] dup_mmap+0x38e/0x9c0 [ 1493.078163][ T4166] dup_mm+0x7c/0x210 [ 1493.082030][ T4166] copy_process+0x11ec/0x2e00 [ 1493.086677][ T4166] kernel_clone+0x14b/0x680 [ 1493.091156][ T4166] ? __fget_light+0x21b/0x260 [ 1493.095834][ T4166] __do_sys_fork+0x3a/0x60 [ 1493.100222][ T4166] do_syscall_64+0x44/0x80 [ 1493.104630][ T4166] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1493.110502][ T4166] RIP: 0033:0x4665d9 [ 1493.114373][ T4166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1493.133967][ T4166] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1493.142364][ T4166] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1493.150397][ T4166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1493.158347][ T4166] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1493.166722][ T4166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1493.174671][ T4166] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 09:42:37 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x400000}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x210100, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) read$snapshot(0xffffffffffffffff, &(0x7f0000000080)=""/88, 0x58) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20020840}, 0x24000800) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) 09:42:37 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='attr/fscreate\x00') r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0) read$snapshot(r1, 0x0, 0x0) 09:42:37 executing program 2 (fault-call:3 fault-nth:54): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:37 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sched\x00') r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in=@empty, @in=@initdev}}, {{@in6=@private1}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x507802, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x2b936c0b61cdf646, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) read$snapshot(r2, 0x0, 0x61) 09:42:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r1 = fsmount(r0, 0x1, 0x4f) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='net/mcfilter\x00', 0x0, r2) read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) fsmount(r1, 0x0, 0x8) 09:42:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) 09:42:38 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x600000}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:38 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x400000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) 09:42:38 executing program 4: ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/config\x00') read$snapshot(r0, &(0x7f0000000040)=""/50, 0x32) syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) read$snapshot(r1, &(0x7f0000000100)=""/92, 0x5c) 09:42:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x8000000) read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000001080)={0x1228, r3, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x598}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffc00}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_NODE={0x1008, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x39e409d0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbd0}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd4}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x1228}, 0x1, 0x0, 0x0, 0x40010}, 0x40) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000040)) 09:42:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) [ 1493.633665][ T4228] FAULT_INJECTION: forcing a failure. [ 1493.633665][ T4228] name failslab, interval 1, probability 0, space 0, times 0 [ 1493.646329][ T4228] CPU: 1 PID: 4228 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1493.654640][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1493.664803][ T4228] Call Trace: [ 1493.668084][ T4228] dump_stack+0x137/0x19d [ 1493.672418][ T4228] should_fail+0x23c/0x250 [ 1493.676833][ T4228] ? dup_mmap+0x38e/0x9c0 [ 1493.681153][ T4228] __should_failslab+0x81/0x90 [ 1493.685940][ T4228] should_failslab+0x5/0x20 [ 1493.690482][ T4228] kmem_cache_alloc+0x46/0x2e0 [ 1493.695315][ T4228] dup_mmap+0x38e/0x9c0 [ 1493.699463][ T4228] dup_mm+0x7c/0x210 [ 1493.703334][ T4228] copy_process+0x11ec/0x2e00 [ 1493.708007][ T4228] kernel_clone+0x14b/0x680 [ 1493.712501][ T4228] ? __fget_light+0x21b/0x260 [ 1493.717217][ T4228] __do_sys_fork+0x3a/0x60 [ 1493.721624][ T4228] do_syscall_64+0x44/0x80 [ 1493.726086][ T4228] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1493.731964][ T4228] RIP: 0033:0x4665d9 [ 1493.735830][ T4228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1493.755439][ T4228] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1493.763858][ T4228] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1493.771805][ T4228] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1493.779750][ T4228] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1493.787697][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1493.795644][ T4228] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 09:42:38 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') 09:42:38 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x705e20}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:38 executing program 2 (fault-call:3 fault-nth:55): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:38 executing program 3: ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x5) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000040)) 09:42:38 executing program 5: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_NET_NS_FD={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x44) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0x2) 09:42:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)='\x00', 0x0, r2) r3 = fspick(r0, &(0x7f00000000c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000100)='\x91--\x00', &(0x7f0000000140)='./file0\x00', r0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r4) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r4, 0x80083313, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/protocols\x00') r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000008, 0x10, r1, 0x8000000) syz_io_uring_setup(0x1e98, &(0x7f0000000280)={0x0, 0xfbe, 0x4, 0x3, 0x327, 0x0, r4}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000300)=0x0) r8 = epoll_create1(0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000400)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r8, &(0x7f0000000380)={0x40000000}, r9}, 0x800) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r5) read$snapshot(r5, &(0x7f0000000200)=""/108, 0x6c) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000440)='$%[{}}\\[%*{9/\x00', 0x0, 0xffffffffffffffff) [ 1494.264253][ T4296] FAULT_INJECTION: forcing a failure. [ 1494.264253][ T4296] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.276983][ T4296] CPU: 0 PID: 4296 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1494.285308][ T4296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1494.295378][ T4296] Call Trace: [ 1494.298643][ T4296] dump_stack+0x137/0x19d [ 1494.303063][ T4296] should_fail+0x23c/0x250 [ 1494.307474][ T4296] ? anon_vma_fork+0xb1/0x2b0 09:42:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = fsmount(r0, 0x0, 0x4) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000000c0)={0x22}, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000040)={0x1f, 0x1, 0x80000001, {0x0, 0x20}, 0x5, 0x9}) read$snapshot(r0, 0x0, 0x2) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) [ 1494.312140][ T4296] __should_failslab+0x81/0x90 [ 1494.316983][ T4296] should_failslab+0x5/0x20 [ 1494.321468][ T4296] kmem_cache_alloc+0x46/0x2e0 [ 1494.326239][ T4296] anon_vma_fork+0xb1/0x2b0 [ 1494.330735][ T4296] dup_mmap+0x49c/0x9c0 [ 1494.334947][ T4296] dup_mm+0x7c/0x210 [ 1494.338869][ T4296] copy_process+0x11ec/0x2e00 [ 1494.343535][ T4296] kernel_clone+0x14b/0x680 [ 1494.348114][ T4296] ? __fget_light+0x21b/0x260 [ 1494.352780][ T4296] __do_sys_fork+0x3a/0x60 [ 1494.357188][ T4296] do_syscall_64+0x44/0x80 [ 1494.361688][ T4296] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1494.367611][ T4296] RIP: 0033:0x4665d9 [ 1494.371492][ T4296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1494.391080][ T4296] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1494.399509][ T4296] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1494.407461][ T4296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1494.415495][ T4296] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1494.423444][ T4296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1494.431389][ T4296] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 09:42:39 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x50301d}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:39 executing program 5: request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='net/sockstat6\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00') read$snapshot(r0, 0x0, 0x2) 09:42:39 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x430040, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) read$snapshot(r0, &(0x7f0000000140)=""/69, 0x45) socketpair(0x11, 0x1, 0x7fffffff, &(0x7f00000000c0)) 09:42:39 executing program 2 (fault-call:3 fault-nth:56): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r1 = syz_io_uring_complete(0x0) write$cgroup_type(r1, &(0x7f0000000040), 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000080)='&+\xfb\x00', 0x0, r3) read$snapshot(r0, 0x0, 0x2) 09:42:39 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x80ffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r1 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0xff, 0x0, 0xcc, 0x36, 0x0, 0x4, 0x21001, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x10100, 0x0, 0x7, 0x3, 0x10001, 0x7, 0x2, 0x0, 0x1f, 0x0, 0x787}, r1, 0x0, r0, 0x1) read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) 09:42:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x40) read$snapshot(r0, 0x0, 0x2) [ 1494.770031][ T4332] FAULT_INJECTION: forcing a failure. [ 1494.770031][ T4332] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.782667][ T4332] CPU: 0 PID: 4332 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1494.790981][ T4332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1494.801021][ T4332] Call Trace: [ 1494.804283][ T4332] dump_stack+0x137/0x19d [ 1494.808657][ T4332] should_fail+0x23c/0x250 [ 1494.813107][ T4332] ? anon_vma_fork+0x117/0x2b0 [ 1494.817848][ T4332] __should_failslab+0x81/0x90 [ 1494.822672][ T4332] should_failslab+0x5/0x20 [ 1494.827204][ T4332] kmem_cache_alloc+0x46/0x2e0 [ 1494.832012][ T4332] ? anon_vma_fork+0xb1/0x2b0 [ 1494.836681][ T4332] anon_vma_fork+0x117/0x2b0 [ 1494.841247][ T4332] dup_mmap+0x49c/0x9c0 [ 1494.845439][ T4332] dup_mm+0x7c/0x210 [ 1494.849310][ T4332] copy_process+0x11ec/0x2e00 [ 1494.853958][ T4332] kernel_clone+0x14b/0x680 [ 1494.858479][ T4332] ? __fget_light+0x21b/0x260 [ 1494.863155][ T4332] __do_sys_fork+0x3a/0x60 [ 1494.867552][ T4332] do_syscall_64+0x44/0x80 [ 1494.872063][ T4332] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1494.877959][ T4332] RIP: 0033:0x4665d9 [ 1494.881853][ T4332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1494.901438][ T4332] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1494.909827][ T4332] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 09:42:39 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) accept$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@private1, @in6=@remote}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) 09:42:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='@\x00', 0x0, r2) 09:42:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000000c0)) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x3ff) [ 1494.917791][ T4332] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1494.925749][ T4332] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1494.933775][ T4332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1494.941805][ T4332] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 09:42:39 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x600000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) read$snapshot(r0, 0x0, 0x2) 09:42:39 executing program 4: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) r1 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, 0x0) r2 = getpgid(r1) sched_rr_get_interval(r2, &(0x7f00000001c0)) timer_gettime(0x0, &(0x7f0000000200)) r3 = syz_open_procfs(r1, &(0x7f0000000100)='net/nf_conntrack_expect\x00') openat$cgroup_type(r3, &(0x7f00000000c0), 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000140)='\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c) sched_getparam(r0, &(0x7f0000000240)) read$snapshot(r3, &(0x7f0000000040)=""/72, 0x48) r4 = fsmount(r3, 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x2) 09:42:39 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='setgroups\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) r2 = syz_io_uring_complete(0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x7800, 0x700, 0x4, 0x2, {{0xb, 0x4, 0x2, 0x1, 0x2c, 0x65, 0x0, 0xe, 0x4, 0x0, @empty, @local, {[@timestamp={0x44, 0xc, 0xa9, 0x0, 0xf, [0x1, 0x0]}, @timestamp_addr={0x44, 0xc, 0x68, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000300)={'erspan0\x00', r3, 0x700, 0x7, 0xbe2, 0x23, {{0x37, 0x4, 0x1, 0x30, 0xdc, 0x66, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @local, {[@timestamp_addr={0x44, 0xc, 0xa, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0xa}, 0x3}]}, @timestamp_prespec={0x44, 0xc, 0x65, 0x3, 0x2, [{@multicast2, 0x4}]}, @ssrr={0x89, 0x23, 0x42, [@private=0xa010102, @empty, @empty, @rand_addr=0x64010102, @empty, @private=0xa010100, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xf, 0xcb, [@rand_addr=0x8200, @private=0xa010101, @private=0xa010102]}, @lsrr={0x83, 0xb, 0x9, [@dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010100]}, @lsrr={0x83, 0x1b, 0xc1, [@private=0xa010100, @multicast2, @private=0xa010102, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x21}]}, @end, @timestamp_addr={0x44, 0x1c, 0x8d, 0x1, 0xd, [{@rand_addr=0x64010101, 0x80000000}, {@private=0xa010101, 0x79}, {@broadcast, 0xccf6}]}, @timestamp={0x44, 0x1c, 0x38, 0x0, 0x8, [0xffffffff, 0x200, 0x4, 0x204a, 0x7, 0x3ff]}, @timestamp={0x44, 0x1c, 0x8e, 0x0, 0x2, [0x8, 0x9, 0x7, 0x80, 0x3534, 0x0]}]}}}}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x101040, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4000000000000004}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4015}, 0x200480c4) read$snapshot(r1, 0x0, 0x2) 09:42:39 executing program 2 (fault-call:3 fault-nth:57): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:39 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0xa04a1d}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') read$snapshot(r0, 0x0, 0x2) [ 1495.367205][ T4401] FAULT_INJECTION: forcing a failure. [ 1495.367205][ T4401] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.379847][ T4401] CPU: 0 PID: 4401 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1495.388162][ T4401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1495.398203][ T4401] Call Trace: [ 1495.401464][ T4401] dump_stack+0x137/0x19d [ 1495.405789][ T4401] should_fail+0x23c/0x250 [ 1495.410196][ T4401] ? anon_vma_fork+0xb1/0x2b0 [ 1495.414928][ T4401] __should_failslab+0x81/0x90 [ 1495.419732][ T4401] should_failslab+0x5/0x20 [ 1495.424223][ T4401] kmem_cache_alloc+0x46/0x2e0 [ 1495.429018][ T4401] anon_vma_fork+0xb1/0x2b0 [ 1495.433514][ T4401] dup_mmap+0x49c/0x9c0 [ 1495.437662][ T4401] dup_mm+0x7c/0x210 [ 1495.441538][ T4401] copy_process+0x11ec/0x2e00 [ 1495.446248][ T4401] kernel_clone+0x14b/0x680 [ 1495.450752][ T4401] ? __fget_light+0x21b/0x260 [ 1495.455414][ T4401] __do_sys_fork+0x3a/0x60 [ 1495.459866][ T4401] do_syscall_64+0x44/0x80 [ 1495.464283][ T4401] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1495.470163][ T4401] RIP: 0033:0x4665d9 [ 1495.474083][ T4401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1495.493678][ T4401] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1495.502146][ T4401] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1495.510111][ T4401] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 09:42:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x2c8, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2e65}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x821}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb60}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK={0xa8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x96}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2be68127}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5b96e22d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa676}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x37c}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f800}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcb02569}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xdf}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) read$snapshot(r0, 0x0, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/raw6\x00') ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000440)) [ 1495.518070][ T4401] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1495.526034][ T4401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1495.533987][ T4401] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 09:42:40 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x80ffff}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) r1 = syz_io_uring_complete(0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000040)={0x9, 0x8001}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x1010, r0, 0x731f) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0xcf31498) 09:42:40 executing program 2 (fault-call:3 fault-nth:58): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:40 executing program 5: ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/keycreate\x00') syz_open_procfs(0x0, &(0x7f0000000080)='sched\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)='lb_stats_refresh_interval\x00\x00\x15\xfc\x8f\xa71\x999\xf3?\xdc\xc7R\xd6\x85\xa53\x90=.+\x86Gk\xa1s\x84n,\xbd\x0e\x13\x00\x884\xf5\xaea\n;S9\xdd$mZ\xe3\x9d\x03\xa5\xcdz\xcaY\xe4H\xa7R0\xf1\xc7\xba\xc8\x8cb\xff\xb4\x82\xff\xfc\x16e\xc0\xfar\xe81\xca.\x1e\xe0xy\xa5\x83\x8a\x0e\x86C\x95\x12\xf5\n\xa9;\xe7q\xfc\xf0\xb7\xce\xe7<\xc1\xb3gZh\xccE\x8ed\x9a\x19j\x01C\xf32S!~\xf5\xaa5Y\x10j\xfd\xc7\x85Q\x97\xf9!4f\x8e)\x1a\xf3_\x8bjf\xe5E\xd6\xed\x19\xe77\xaf\x89\xba\xa5\x00\x85\xb5\xf6\x80k?\xdd\xa5\xf59\x8f\xbe\x1c\x04[\xfc%\x1fPf\xe8u\x06\xca\xf3\x17\xf5H\xd8\x00\xfd]\a\xe6', 0x0, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) read$snapshot(r0, 0x0, 0xff11) 09:42:40 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0xc0ffff}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) 09:42:40 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x98) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000000c0)='net/mcfilter\x00', &(0x7f0000000100)="a6f43ed3778268f57e89d9923e3094d5d3d58dbb643b3d257eb8c8eca66a706524eb7cdcbe57a3dd7c60314a56b4755201cfb0a702782d93653c183d5b717589", 0x40) read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) 09:42:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') r1 = fsmount(r0, 0x1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x3, 0x80, 0x80, 0x81, 0xf, 0x51, 0x0, 0x22c9, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xb13b, 0x4, @perf_config_ext={0x5, 0x8}, 0x601, 0x9, 0x1, 0x3, 0x9, 0x8, 0x401, 0x0, 0xffffaa75, 0x0, 0xccc}) read$snapshot(r0, 0x0, 0x2) 09:42:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) [ 1495.819665][ T4437] FAULT_INJECTION: forcing a failure. [ 1495.819665][ T4437] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1495.832896][ T4437] CPU: 0 PID: 4437 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1495.841218][ T4437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1495.851265][ T4437] Call Trace: [ 1495.854535][ T4437] dump_stack+0x137/0x19d [ 1495.858862][ T4437] should_fail+0x23c/0x250 [ 1495.863276][ T4437] __alloc_pages+0x102/0x320 [ 1495.867862][ T4437] alloc_pages+0x21d/0x310 [ 1495.872266][ T4437] pte_alloc_one+0x29/0xb0 [ 1495.876673][ T4437] __pte_alloc+0x2f/0x210 [ 1495.880992][ T4437] copy_pte_range+0x128e/0x1460 [ 1495.885825][ T4437] ? __alloc_pages+0x194/0x320 [ 1495.890578][ T4437] ? vma_interval_tree_augment_rotate+0x100/0x100 [ 1495.896997][ T4437] copy_page_range+0x5da/0x8e0 [ 1495.901758][ T4437] ? anon_vma_fork+0x273/0x2b0 [ 1495.906518][ T4437] dup_mmap+0x6ab/0x9c0 [ 1495.910666][ T4437] dup_mm+0x7c/0x210 [ 1495.914562][ T4437] copy_process+0x11ec/0x2e00 [ 1495.919226][ T4437] kernel_clone+0x14b/0x680 [ 1495.923720][ T4437] ? __fget_light+0x21b/0x260 [ 1495.928389][ T4437] __do_sys_fork+0x3a/0x60 [ 1495.932792][ T4437] do_syscall_64+0x44/0x80 [ 1495.937197][ T4437] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1495.943080][ T4437] RIP: 0033:0x4665d9 [ 1495.946959][ T4437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:42:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfc000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbf0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x91}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) read$snapshot(r0, 0x0, 0xfffffffffffffd9c) 09:42:40 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0xb0ff20}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1495.966553][ T4437] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1495.974958][ T4437] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1495.982926][ T4437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1495.990886][ T4437] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1495.998846][ T4437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1496.006808][ T4437] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 09:42:40 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1) read$snapshot(r0, &(0x7f00000000c0)=""/84, 0x54) 09:42:40 executing program 5: ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0x2) 09:42:40 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x1000000}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:40 executing program 2 (fault-call:3 fault-nth:59): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:40 executing program 3: prctl$PR_GET_NO_NEW_PRIVS(0x27) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="69705f767469300004000000000000001341e622629c494415cf56da1cb6851514d32cc6fd855af8f9e8a5ea78c0eee9a3c8b750e061d8c39e5d26b693fe566d4ee401f15dd847e34a8d914ee03f6e9f7e6368a6", @ANYRES32=0x0, @ANYBLOB="0700000800000001000000004b0c00ac016800000329907800000000ac1414aa00444cece3e000000100000005ac1414200000fd59ac1414bb000007ffac1e0001000000077f00000100000007ac1414aa00000800ac1414bb000000006401010000000003ac14140e00000003441ca2c37f00000100000003ac141411000007ff00000000000004008618000000030012504beabf3076d362ecfe5ca843b75d9d8313a1ac1414bbe0000001ac1e0101ac1e010100000000"]}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) write$selinux_attr(r1, &(0x7f0000000040)='system_u:object_r:devpts_t:s0\x00', 0x1e) 09:42:40 executing program 4: prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) 09:42:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0x2) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x6) 09:42:40 executing program 3: r0 = fork() sched_getparam(r0, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/ipv6_route\x00') openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$snapshot(r1, 0x0, 0x2) 09:42:40 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0xc0ff20}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') r1 = syz_io_uring_complete(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x174, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xbd, 0x3, "8d194522f177a3793639acf5698ca90bc0be8b8b157d40db1cf9240aeecaf6f58f5c20a3b16fb3486912d753eef08b080af3036ed9e07e4e28e85e3720299591d032824600df8f1b6a8e00e31e4172c6d13f3ec1b8e7dfe727c4bb17c2f6b5711962bdad1ebb125890b911e777923ab07bc210c464b0c83231811885854fe865183baabec43ea7952b1b0ed6eae6f0c1e76671945e0243e71dc09e0994b02681e756ddb5fde48c9aa01e44649d2b17b88872c76586864f55da"}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xba9}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x20004080}, 0x4080) read$snapshot(r0, 0x0, 0x2) [ 1496.437931][ T4504] FAULT_INJECTION: forcing a failure. [ 1496.437931][ T4504] name failslab, interval 1, probability 0, space 0, times 0 [ 1496.450661][ T4504] CPU: 0 PID: 4504 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1496.458983][ T4504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1496.469049][ T4504] Call Trace: [ 1496.472318][ T4504] dump_stack+0x137/0x19d [ 1496.476744][ T4504] should_fail+0x23c/0x250 [ 1496.481140][ T4504] ? anon_vma_fork+0x117/0x2b0 [ 1496.485888][ T4504] __should_failslab+0x81/0x90 [ 1496.490657][ T4504] should_failslab+0x5/0x20 [ 1496.495151][ T4504] kmem_cache_alloc+0x46/0x2e0 [ 1496.499900][ T4504] ? anon_vma_fork+0xb1/0x2b0 [ 1496.504573][ T4504] anon_vma_fork+0x117/0x2b0 [ 1496.509207][ T4504] dup_mmap+0x49c/0x9c0 [ 1496.513393][ T4504] dup_mm+0x7c/0x210 [ 1496.517277][ T4504] copy_process+0x11ec/0x2e00 [ 1496.521964][ T4504] kernel_clone+0x14b/0x680 [ 1496.526478][ T4504] ? __fget_light+0x21b/0x260 [ 1496.531159][ T4504] __do_sys_fork+0x3a/0x60 [ 1496.535565][ T4504] do_syscall_64+0x44/0x80 [ 1496.539973][ T4504] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1496.546017][ T4504] RIP: 0033:0x4665d9 [ 1496.549913][ T4504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1496.569541][ T4504] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1496.577945][ T4504] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 09:42:41 executing program 4: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$snapshot(r1, &(0x7f0000000040)=""/72, 0x48) [ 1496.585904][ T4504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1496.593860][ T4504] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1496.601954][ T4504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1496.609911][ T4504] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 09:42:41 executing program 5: ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0xffffff68) 09:42:41 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x2000000}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x400941, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000080)) 09:42:41 executing program 5: r0 = fork() r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/ipx\x00') read$snapshot(r1, 0x0, 0x2) write$rfkill(r1, &(0x7f0000000000)={0x2c3, 0x9, 0x3, 0x1, 0x1}, 0x8) 09:42:41 executing program 2 (fault-call:3 fault-nth:60): syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:41 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0xc0ffff}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x80, 0xffffff12, 0x0, @private0, @private1, 0x7800, 0x8000, 0x0, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x1f, 0x3e, 0x7, 0x1c, @mcast1, @empty, 0x700, 0x20, 0x87, 0x389}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x2f, 0x3e, 0x7, 0xffff, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x8, 0x7800, 0x2, 0x7}}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private2}}, &(0x7f00000004c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x1, 0x80, 0x7a, 0x6090, {{0x12, 0x4, 0x0, 0x8, 0x48, 0x67, 0x0, 0x3, 0x2f, 0x0, @remote, @remote, {[@ssrr={0x89, 0x2b, 0x4f, [@dev={0xac, 0x14, 0x14, 0x2d}, @rand_addr=0x64010102, @local, @loopback, @local, @broadcast, @remote, @local, @broadcast, @empty]}, @generic={0x94, 0x8, "c8cd05a6acca"}, @end]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4a9}, 0xc, &(0x7f0000000a00)={&(0x7f0000000600)={0x400, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xdf}}}]}}, {{0x8, 0x1, r2}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x400}}, 0x8004) read$snapshot(r0, &(0x7f0000000080)=""/51, 0x33) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000140)='\x00', &(0x7f0000000100)='./file1\x00', r0) syz_open_dev$ttys(0xc, 0x2, 0x1) 09:42:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') read$snapshot(r0, 0x0, 0x2) r1 = syz_io_uring_complete(0x0) io_uring_setup(0x3509, &(0x7f0000000080)={0x0, 0x6f3f, 0x4, 0x3, 0x165, 0x0, r1}) 09:42:41 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x2040000}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:41 executing program 5: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/unix\x00') read$snapshot(r1, 0x0, 0x2) 09:42:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/mdstat\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x23a, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_FLOW={0x6}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000800) 09:42:41 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0xd0ff20}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1497.150518][ T4591] FAULT_INJECTION: forcing a failure. [ 1497.150518][ T4591] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.163178][ T4591] CPU: 1 PID: 4591 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 1497.171495][ T4591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1497.181539][ T4591] Call Trace: [ 1497.184808][ T4591] dump_stack+0x137/0x19d [ 1497.189129][ T4591] should_fail+0x23c/0x250 [ 1497.193563][ T4591] ? dup_mmap+0x38e/0x9c0 [ 1497.197883][ T4591] __should_failslab+0x81/0x90 [ 1497.202641][ T4591] should_failslab+0x5/0x20 [ 1497.207131][ T4591] kmem_cache_alloc+0x46/0x2e0 [ 1497.211897][ T4591] ? __vma_link_rb+0x3c2/0x3e0 [ 1497.216659][ T4591] ? anon_vma_fork+0x72/0x2b0 [ 1497.221347][ T4591] dup_mmap+0x38e/0x9c0 [ 1497.225496][ T4591] dup_mm+0x7c/0x210 [ 1497.229423][ T4591] copy_process+0x11ec/0x2e00 [ 1497.234095][ T4591] kernel_clone+0x14b/0x680 [ 1497.238583][ T4591] ? __fget_light+0x21b/0x260 [ 1497.243319][ T4591] __do_sys_fork+0x3a/0x60 [ 1497.247782][ T4591] do_syscall_64+0x44/0x80 [ 1497.252197][ T4591] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1497.258127][ T4591] RIP: 0033:0x4665d9 [ 1497.262008][ T4591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1497.281598][ T4591] RSP: 002b:00007fd6615b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1497.290004][ T4591] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 09:42:41 executing program 4: timer_getoverrun(0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000500)={{r0, r1+10000000}, {0x77359400}}, &(0x7f0000000540)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r2, &(0x7f0000000040)=""/72, 0x48) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0x340, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd06}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x227}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "35ae779ce7ba713d332e612a56764b64fcd10721dfd35de9c7e32ac6482feda201"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "32c6a09dbce152471ee7758d2214d085156fc8d60fd8ba1f02"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x96, 0x3, "4df6f01c7757e68392cd18451b0d37029c51f11d97e3503cdbf64ecaec630f053e36d9f0b07e307e2df74301574e9f09747e45cf30ecb2333f55dc5aa3c9fab301d3d06f11d2837e9295f1b06f8a85dfc8e1ac974ee273bea3cb268975999e7c93c4c520c2db7db3ad18bb3b57ac462b5c5d8076940d13aef5b3e46b10460ffaaaf1b81d2dc9d3001389d941ecac93663d31"}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x40}, 0x20000080) [ 1497.297954][ T4591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1497.305898][ T4591] RBP: 00007fd6615b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1497.313860][ T4591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1497.321874][ T4591] R13: 00007fff457349af R14: 00007fd6615b0300 R15: 0000000000022000 09:42:41 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x4000000}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:41 executing program 5: ptrace$getsig(0x4202, 0x0, 0x7, &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0x2) 09:42:41 executing program 4: syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x14002, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) read$snapshot(r1, &(0x7f0000000100)=""/76, 0x4c) 09:42:42 executing program 2: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') read$snapshot(r0, 0x0, 0x2) 09:42:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r3 = getuid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@private2, @in=@dev}}, {{@in=@multicast1}, 0x0, @in=@private}}, &(0x7f00000001c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'syztnl0\x00', r2, 0x0, 0x0, 0x5, 0x0, 0x16, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x1, 0x2, 0xffff}}) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40022}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=@allocspi={0x1bc, 0x16, 0x4, 0x70bd29, 0x25dfdbfb, {{{@in6=@private0, @in=@multicast2, 0x4e20, 0x0, 0x4e21, 0x3, 0x2, 0x80, 0x10, 0x0, r4, r3}, {@in=@multicast2, 0x4d2, 0x3c}, @in=@rand_addr=0x64010101, {0x29, 0x4f, 0x1, 0x1ff, 0x46, 0x100, 0x4, 0x7fff}, {0x52, 0x3, 0x6, 0x40}, {0x9, 0x3, 0x8001}, 0x70bd2d, 0x3504, 0xa, 0x2, 0x80, 0x20}, 0xe0c, 0x8}, [@tmpl={0xc4, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x15}, 0x4d4, 0x33}, 0xa, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x8001}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4d4, 0xff}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2, 0x2, 0x2, 0x3, 0x5bc, 0x8}, {{@in6=@empty, 0x4d5, 0x2b}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3504, 0x3, 0x1, 0x6, 0x400, 0x1, 0xfffffffa}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) read$snapshot(r0, 0x0, 0x2) 09:42:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000000c0)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$negate(0xd, 0x0, 0x8, r2) 09:42:42 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x1000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:42 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x5000000}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r0, 0x0, 0x2) ioctl$SNAPSHOT_FREE(r0, 0x3305) 09:42:42 executing program 3: r0 = fork() syz_open_procfs(r0, &(0x7f0000000000)='io\x00') syz_io_uring_complete(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) 09:42:42 executing program 4: prctl$PR_SET_FP_MODE(0x2d, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000000c0)={{0x40, 0x5}, 'port1\x00', 0x40, 0x1000, 0x3f, 0x244, 0x7, 0x9, 0x0, 0x0, 0x5, 0xf8}) read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) 09:42:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x3, 0x8, 0x5, {0xffffff3e, 0x2}, 0x2, 0x1000}) read$snapshot(r0, 0x0, 0x2) 09:42:42 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x6040000}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r1 = syz_io_uring_setup(0x332a, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x12, r1, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_io_uring_setup(0x30b2, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r7) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x748, 0x6, 0x0, {0x0, r6, r7}}, 0x7) read$snapshot(r0, &(0x7f0000000040)=""/95, 0x5f) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 09:42:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r1) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f00000000c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001040)='lb_stats_refresh_interval\x00', 0x0, r2) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000100)) read$snapshot(r0, &(0x7f0000000040)=""/72, 0x48) 09:42:42 executing program 5: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/ip_tables_names\x00') read$snapshot(r1, 0x0, 0x2) 09:42:42 executing program 3: r0 = fork() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/ip_vs\x00') read$snapshot(r1, 0x0, 0x2) 09:42:42 executing program 0: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00005e4000/0x2000)=nil, 0x0, 0x0) fork() fork() syz_io_uring_setup(0x332a, &(0x7f0000000280)={0x0, 0x2000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:42:42 executing program 1: syz_io_uring_setup(0x7c00, &(0x7f0000000240), &(0x7f0000dd2000/0x2000)=nil, &(0x7f00006f4000/0x3000)=nil, &(0x7f00000002c0), 0x0) fork() syz_io_uring_setup(0xb89, &(0x7f0000000000), &(0x7f0000a31000/0x3000)=nil, &(0x7f00005e6000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5736, &(0x7f0000000140)={0x0, 0x7000000}, &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 09:42:42 executing program 2: syz_io_uring_setup(0x7c00, &(0x7f0000000000), &(0x7f0000dd2000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x5736, &(0x7f0000000140), &(0x7f00005e1000/0xe000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000000100), 0x0) fork() 09:42:43 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "bb412fd7f01035de4d8132b9cc8452ccb5882e85b5e5b7c445320526e485bdd4d80240de2f9abd0a57df812f101212f4a61fd161ba3dda5d5780a809959e1501"}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000280)='id_resolver\x00', &(0x7f0000000240)=@chain) keyctl$invalidate(0x15, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') timer_delete(0x0) read$snapshot(r1, &(0x7f0000000040)=""/72, 0x48)