last executing test programs: 5m17.970273978s ago: executing program 32 (id=116): syz_open_dev$tty1(0xc, 0x4, 0x1) close(0x3) socket$kcm(0x2d, 0x2, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@getlink={0x34, 0x12, 0x321, 0x70bd25, 0x8000, {0x7}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c1}, 0x20000050) r1 = io_uring_setup(0x194e, &(0x7f0000000500)={0x0, 0xd3d1, 0x80, 0x1, 0x2b0}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580100001000010000000000fcdbdf00088000000000000000000000000000bb0000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000600000000000000090000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000400000000000000000000000a000000ad0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000170060"], 0x158}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x482) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) bind$packet(r2, &(0x7f00000001c0)={0x11, 0xf6, r5, 0x1, 0xbd, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r5}, 0x14) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff}, 0xfe}, 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5m17.933440469s ago: executing program 33 (id=115): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x7, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x7ff, 0x46) r1 = fcntl$dupfd(r0, 0x406, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) eventfd(0x5000000) write$cgroup_pid(r1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) write$selinux_load(r4, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "f48f9b0f963804d27ddea0bfef40e51943e9d8594988aae7b709c427"}, 0x2c) socket(0x10, 0x2, 0x7) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x2, 0x4, 0x0, 0x3, 0xa, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @multicast1}}]}, 0x50}, 0x1, 0x7}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001180)=@delpolicy={0x112c, 0x14, 0x300, 0x70bd2c, 0x25dfdbfb, {{@in=@rand_addr=0x64010101, @in=@local, 0x4e21, 0xfff8, 0x4e21, 0x0, 0x2, 0x0, 0x20, 0x5e}}, [@sec_ctx={0x100c, 0x8, {0x1008, 0x8, 0x1, 0xe, 0x1000, "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"}}, @tmpl={0xc4, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0x33}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x2, 0x0, 0x8, 0x3, 0x8, 0x7e5e}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x4d6, 0x6c}, 0xa, @in=@multicast2, 0x3d03, 0x0, 0x2, 0x6, 0x6, 0x6, 0x1}, {{@in=@private=0xa010100, 0x4d2, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x1, 0x2, 0x6, 0x6, 0x400, 0xe}]}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x112c}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a0000100180c20000006896db5f584fc5d56900040000080000fc020000000000000000000000000001ff020000000000f2ff000000000000012b0004d3050c0600372b66"], 0x42) recvmsg(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x1102) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) recvfrom$inet6(r4, &(0x7f00000001c0)=""/241, 0xf1, 0x0, 0x0, 0x0) 5m6.338237272s ago: executing program 34 (id=342): syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) dup(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mq_notify(0xffffffffffffffff, 0x0) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r4, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x4058534c, &(0x7f00000003c0)={0x80, 0x1, {0x3, 0x0, 0x1}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f0000000000)={0x9, 0x6, 0xe}) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) tkill(r3, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m46.334703772s ago: executing program 35 (id=713): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) 4m40.007422059s ago: executing program 36 (id=807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000080000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c880}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000004000), 0x0}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) unshare(0x20000400) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010301"], 0x20}}, 0x0) 4m25.743642467s ago: executing program 37 (id=1013): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") 4m22.315574765s ago: executing program 38 (id=1062): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000080900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000808000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000208000440000000220500020007000000340001800c0001006269"], 0x108}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="740000002d0001002abd70000000000008000000", @ANYRES32], 0x74}], 0x1}, 0x0) (fail_nth: 1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./bus\x00', 0x1010400, &(0x7f00000002c0)={[{@shortname_mixed}, {@shortname_lower}, {@uni_xlate}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@shortname_win95}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@fat=@errors_remount}, {@utf8no}, {@shortname_lower}, {@utf8}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp437'}}]}, 0x3, 0x36b, &(0x7f0000000980)="$eJzs3U1oY0UcAPB/+tKkXdD2JgpC9CZo2e5NL7ZIFxZ7UQl+HMTgdlWSKrRYbA+b1oPiUfCoJ28KevAgHkVQxJsHr64gq+JB97bg4kjy8vGapN3uYivF3w+aTGfmP/N/HySv4WX6wlI0L07HpWvXrsbMTCnKS48txfVSzEcWfbsxrjKhDgA4Ha6nFH+m3GjbzOSQ0gmkBQAco+77/0sRUYv5vObNrw/rn7z7A8Cp1/v7f/awPgd8DhDx2rGkBAAcs7HP/+/f11zp/pT7v5YLdwUAAKfVU88+9/jyasSTtdpMxPrbW/WtejwybF++FK9EK9bibMzFjYj8QqHzUOo+nr+wunK2Vqu145f5qEfEVC+wnl8pLGfd+GosxlzM9+J7Vxsppez8Z6sri7WuiNhtd+eP9dJWfTrO9Ob/8UysDS88+oN0nyIurK6cq/UGqK/349sRe8MbFTr5L8RcfP/iYJiU+ncwrq5cXuwnPYzfqlfj4mAvHPgJCAAAAAAAAAAAAAAAAAAAAAAA3JaF2sD8YP2c1HnOV8pZWJjQ3l0fJ4/vrQ+0l68PlKopUvrjjYfq72Sxb32g0fV5tiwkCAAAAAAAAAAAAAAAAAAAAAOb25VotFprG5vbO81iob2xuT0VEZ2aV7/95KvZGO9zk0I5n6IaMZii1pt2p9lIWb9zyiLGw7PO5P2ajz4fZFzsUx1sxcQ0qgc3tVp33Pfz+8Oae7P+yH8P+2QxeQOzQhqPjoy8fmee0q3sqEHhXLGmOj77lZRSoeatYvjl58cHjFJE+dYP3E5zKg7ukzqFb66+fHd/7ze+TLkHHpx7+sp7H/7WbLQ6M0f3CFY2Nm+kZqPU73yE2XvDpe4hGJ4bpcgLpeKZUD5swL39NY3sh9+fuefd7462E1Kx5vXO+TzSJ8s359PR8Epe6KQ50jQ7DJ/ubURrbXrCyX+zwm0c07s++OLjlH769chTDE2NvWyU/p1XHwAAAAAAAAAAAAAAAAAAoKjwXfHel67becP0YVEPP3FC6QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiRj+//9CYW83RmqOUvirPSGquraxGVH5rzcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uX8CAAD//3wwZok=") 4m19.793951982s ago: executing program 6 (id=1104): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2040, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x25c6, &(0x7f0000000140)={0x0, 0x80001031, 0x80, 0x6, 0x110}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100, 0xfffffefd}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x356f, 0x80, 0x3, 0x285}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r5, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa14001980"], 0x44}}, 0x8000) 4m19.629077221s ago: executing program 6 (id=1106): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f00000000c0)=0x2, 0x4) bind$can_raw(r2, &(0x7f0000000480)={0x1d, r1}, 0x10) close(r2) r3 = add_key$keyring(&(0x7f0000000f40), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (async) r4 = open(&(0x7f0000000100)='./bus\x00', 0x1, 0x20) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f00000009c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x5c, r5, 0x400, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2b}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4008805) r6 = syz_open_procfs(0x0, &(0x7f0000000540)='net/ip_tables_matches\x00') pread64(r6, &(0x7f0000000480)=""/177, 0xb1, 0xe0) (async) r7 = add_key$user(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x1}, &(0x7f0000000240)='J', 0x1, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r7}) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000240)={[{@noblock_validity}, {@errors_remount}, {@noinit_itable}]}, 0x1, 0x455, &(0x7f0000001f80)="$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") request_key(&(0x7f0000000000)='user\x00', &(0x7f0000001e80)={'syz', 0x1}, 0x0, r3) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) io_uring_setup(0x160d, &(0x7f0000000040)={0x0, 0x4a74, 0x1cc90, 0x0, 0x148}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r8 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r8, 0x29, 0x10, &(0x7f0000000040)=0x9, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d300300000000006504000001ed000079130000000000006c440000000000007a0ab0fe000000007b13000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e655400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2a0c4b81f7b71cbfcef"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r8) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xbc, r9, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5e8d}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xac}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc1}, 0xc5) 4m19.367892966s ago: executing program 6 (id=1110): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, 0x0, 0x0) 4m19.367427176s ago: executing program 6 (id=1111): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000002c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES16=r2], 0x80}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="040025bd7000fcdbdf250903f5c89d00000008000680ab38d66f757f9a"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) setresuid(0x0, 0xee01, 0x0) setresuid(0x0, 0x0, 0x0) r4 = getpid() syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2dd7f37896fafd4a8623daafcbe4338d8cf2dc9ccd87985e77174a64d09d5f677bf9395b1095", @ANYRES32], 0xff, 0x2f2, &(0x7f0000000980)="$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") open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) rename(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r6, 0x7, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x90, r3, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xfffffffffffffd56, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xdc}, {0x6, 0x11, 0x9}, {0xffffffffffffff04, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) 4m19.215538075s ago: executing program 6 (id=1114): r0 = io_uring_setup(0x194e, &(0x7f0000000500)={0x0, 0xd3d1, 0x80, 0x1, 0x2b0}) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x88a8ffff, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m19.051342244s ago: executing program 6 (id=1118): socket$inet(0x2, 0xa, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) socket(0xa, 0x1, 0x0) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000010000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 4m19.051263675s ago: executing program 39 (id=1118): socket$inet(0x2, 0xa, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) socket(0xa, 0x1, 0x0) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000010000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 3m54.47308765s ago: executing program 0 (id=1677): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregs(0xe, r0, 0xffffffffffffdcaf, 0x0) 3m54.442808522s ago: executing program 0 (id=1678): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff1, 0xc}, {0xffe0, 0xc}, {0xfff2, 0xffff}}}, 0x24}}, 0x20040000) 3m54.414701474s ago: executing program 0 (id=1680): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2ce0c0, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m54.29778125s ago: executing program 0 (id=1685): syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x490, &(0x7f0000000580)="$eJzs3UFrXNUeAPD/nSR9aZu+pO+9RV/BWmwlLdqZpLFtcFEriK4Kat3HmExCyCQTMpO2CUVS/ACCiAquXLkR/ACC9COIUNC9iCiirS5cqCMzudPWOJMETHNx5veD03vOPTPzP6eTOXPPPZe5AXSt4xFxKSJ6IuJ0RAym+3NpivWNVH/c3Ts3puopiVrtyg9JJOm+5msl6fZg+rT+iHj5hYjXkr/GrayuzU+WSsXltFyoLiwVKqtrZ+YWJmeLs8XFsbHR8+MXxs+Nj+xaXy8+9807b374/MVPn7z21cR3p16vN2sgrXuwH7tpo+t9jf+Lpt6IWH4YwTLQk/anL+uGAACwI/Vj/P9ExGON4//B6GkczQEAAACdpPbMQPyaRNQAAACAjpVrXAOb5PLptQADkcvl8xvX8P4vDuRK5Ur1iZnyyuL0xrWyQ9GXm5krFUfSa4WHoi+pl0cb+fvls5vKYxFxOCLeHtzfKOenyqXprE9+AAAAQJc4uGn+//PgxvwfAAAA6DBDWTcAAAAAeOjM/wEAAKDzmf8DAABAR3vx8uV6qjXvfz19dXVlvnz1zHSxMp9fWJnKT5WXl/Kz5fJs4zf7FrZ7vVK5vPRULK5cL1SLlWqhsro2sVBeWaxONO7rPVF0n2gAAADYe4cfvfVlEhHrT+9vpLp9aZ25OnS2XNYNADLTk3UDgMz0Zt0AIDPm+ECyTX1/u4rPdr8tAADAwzH8f+v/0K2s/0P3sv4P3cv6P3Qvc3zA+j8AAHS+gUZKcvl0LXAgcrl8PuJQ47YAfcnMXKk4EhH/jogvBvv+VS+PZt1oAAAAAAAAAAAAAAAAAAAAAAAAAPiHqdWSqAEAAAAdLSL3bZLe/2t48OTA5vMD+5JfBhvbiLj2/pV3r09Wq8uj9f0/3ttffS/dfzaLMxgAAADAZs15enMeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC76e6dG1PNtJdxv382IoZaxe+N/sa2P/oi4sBPSfQ+8LwkInp2If76zYg40ip+Um9WDKWt2Bw/FxH7M45/cBfiQze7VR9/LrX6/OXieGPb+vPXm6a/q/34l7s3/vW0Gf8O7TDG0dsfF9rGvxlxtLf1+NOMn7SJf2KH8V99ZW2tXV3tg4jhlt8/yZ9iFaoLS4XK6tqZuYXJ2eJscXFsbPT8+IXxc+MjhZm5UjH9t2WMtx755Pet+n+gTfyhbfp/cof9/+329Tv/3SL+qROt3/8jW8Sv/008nn4P1OuHm/n1jfyDjn30+bGt+j/dpv/bvf+ndtj/0y+98fUOHwoA7IHK6tr8ZKlUXJaRkZG5l8l6ZAIAAHbb/YP+rFsCAAAAAAAAAAAAAAAAAAAA3Wsvfk4s6z4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzEHwEAAP//0wfUAw==") r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r0, 0x0, 0x0, 0x1000f4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000000)=0xaaec, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2}, 0x0, 0x0) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) ioprio_set$pid(0x3, 0x0, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3) 3m54.077162933s ago: executing program 0 (id=1690): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregs(0xe, r0, 0xffffffffffffdcaf, 0x0) 3m53.794398669s ago: executing program 0 (id=1695): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) 3m53.765399881s ago: executing program 40 (id=1695): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) 3m31.998989553s ago: executing program 3 (id=2331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 3m31.906429309s ago: executing program 3 (id=2332): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x2400c800) 3m31.834597643s ago: executing program 3 (id=2334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x54}}, 0x0) 3m31.71109183s ago: executing program 3 (id=2338): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=@newtaction={0x58, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x44, 0x1, [@m_pedit={0x40, 0x1, 0x0, 0x0, {{0xa}, {0x14, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x500}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 3m31.341952152s ago: executing program 3 (id=2340): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) recvfrom$packet(r1, &(0x7f00000001c0)=""/246, 0xf6, 0x10020, &(0x7f0000000300)={0x11, 0x6, r2, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3m31.210791179s ago: executing program 3 (id=2344): unshare(0x24020400) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x11, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) syncfs(0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x3, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x9}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {0x0, 0xc}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x3}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x100}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x50f2d000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc512, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0xc0, 0x2, [{{0x9, 0x4, 0x0, 0xf2, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0xf, 0xfb, 0x1, {0x22, 0x8fc}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x6, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0x9, 0x9}}]}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0xf2, 0xc3, 0x9, 0x40, 0x3d}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3409}}]}) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r5, @ANYRESHEX=r6], 0x15) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000000440)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x1) 3m21.738441319s ago: executing program 1 (id=2566): unshare(0x2c020400) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) tee(r1, r1, 0xffffffffffffe79f, 0x8) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x4000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)={0x8c, r3, 0x10, 0x70bd27, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffff689}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffffa}, {0x6, 0x16, 0x1398}, {0x5, 0x12, 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008040}, 0x10) ioctl$BLKCLOSEZONE(r2, 0x40101287, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) write$rfkill(r4, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="d800c40000901d2884ffef00090000000000000058df2d27b881748ca27d91fa69b494a5d8abfe5313318e946bcf788e4724ecbdfafc14c4056203d8dcecd248826b4d09", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRESHEX=r0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r5 = syz_open_dev$sg(0x0, 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r8, 0x6, &(0x7f0000000380)={0x0, 0x0, 0x8, 0x5}) fcntl$lock(r8, 0x7, &(0x7f0000000280)={0x1, 0x1, 0x400000000002c, 0x6}) fcntl$lock(r8, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x1, 0x3d}) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000a38000000160a03020000000000000000020000000900020073797a32000000000900010073797a30000000000c0003ae000000000000001f140000005100010000000000000000000000000a943f0260011b1d1f2539a1048da8f6d19a"], 0x60}}, 0x2000c044) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) ioctl$SG_GET_LOW_DMA(r6, 0x227a, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001380)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x25dfdbfd, {0x60, 0x0, 0x0, r12, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x4, 0xfff, 0x1ff, 0x2, 0x2, 0xc}}, {0x4}}]}]}, 0x58}}, 0x80c0) 3m21.652091694s ago: executing program 1 (id=2568): socket$netlink(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x70bd2d, 0x24dfdbfb, {0xa, 0x0, 0x0, 0x0, 0xd3, 0xa0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x480c0) r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f00000001c0)) r3 = socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x8, 0x794bb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x8000000000000001, 0xbc7}, 0x0, 0x32, 0x43a1bd76, 0x1, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="740000004a000b0000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100fe8000000000000000000000000000bb14000100fe8000000000000000000000000000aa080002000000000014000100fc020000000000000000000000000001140001"], 0x74}}, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x48040, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0xe, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdffe, 0x0, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) 3m21.638629114s ago: executing program 1 (id=2570): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa24173", 0x8b, 0x48040, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 3m21.617584296s ago: executing program 1 (id=2572): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x406}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x800000}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/stat\x00') getdents64(r3, &(0x7f00000008c0)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f00000018c0)=ANY=[@ANYRESDEC, @ANYRES64=r3, @ANYBLOB="880038f7c9742756b0ce20e511e2e1ab5cd73a6112610f4d", @ANYRESOCT, @ANYBLOB="4aebb9c5007ecfdf121f5e2377e3cef2811d59fdebeb53f97ec567000de03bf0ce6e679e1f3250c69465b1cade3c500a3fb94b471f771f20a2b3d81617831c00bd091417707d8079be47b20f92c301411ae2fc54eea00bfad687a5c3e68f695d3288495a6f8d515e58cb00f742b6c129f0ac3cc248028899196e2e93232dadb49c3af01ae078f41f3df3cbc965d77def5dec2121844aba200a6dcb079312262ce6baf05e3b44f9c3d5fe17d2156c14275ecdf181590810da1a502c59e6ec887fd0c57fff835784a572618eaef55959234af86e86a60779949ac030179b", @ANYRESHEX=r1, @ANYRESHEX, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x10}, 0x4, 0x0, 0x10000, 0x5, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x8, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000001c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@nouser_xattr}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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") 3m20.735169367s ago: executing program 1 (id=2588): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000080b5980d2777bb08a900000000000073797a3100"/261], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r2 = gettid() r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x401, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x2508, 0x32, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket(0x1e, 0x5, 0x5) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9}, 0x1c) r6 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r6, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000040000002200000000000000", @ANYRES16, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r10 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f00000001c0)=0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) pwrite64(r9, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r9, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x68, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x18, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0x0, 0x0, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000186200000e00ba2c08000000000000000000006c28000104"], &(0x7f00000002c0)='GPL\x00', 0x80000000, 0xc1, &(0x7f0000000340)=""/193, 0x41100, 0x1, '\x00', r11, 0x0, r7, 0x8, &(0x7f0000000740)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x8, 0x9, 0xa6}, 0x10, 0x170b6, r9, 0x2, &(0x7f0000000940)=[r12, r10, r9, r10, r8], &(0x7f0000000980)=[{0x1, 0x1, 0xf, 0xa}, {0x5, 0x2, 0xd, 0x8}], 0x10, 0x5}, 0x94) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x4e23, @private=0xa010102}, 0x10) 3m20.107665833s ago: executing program 1 (id=2599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0xfffff001, 0x3}, &(0x7f0000000040)=0xc) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000000000000dbdb140bf123f7d1d50d431313c660721f05451414f755ec1b850436c9bf340b106cb32d2d69038e0720d0d384bf180d4fbf6520954bb1dfed52b794cc82712d8b63da8a134b2339d2efb8c654d8c00202d5c88caefa60860d1b590c3973050ed871e01987b3e3e42847c62f9d1930eed8b6254e84a4d8f4053f1790340e28cf00"/148, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a879e7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000306030000000000000000000000000605000100070000000900020073797a3000000000a0a3aeb8f9d8cbb91d22b3e4962219f7022d60a15bc2b237b4276f3e685a2ded404c5107dfd10e6f29ec16254485e464647436a24783455dd84c5bca23f7e28ebef840a583a6b7729cef93ba2b68341cfed6"], 0x28}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 3m16.094860906s ago: executing program 41 (id=2344): unshare(0x24020400) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x11, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) syncfs(0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x3, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x9}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {0x0, 0xc}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x3}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x100}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x50f2d000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc512, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0xc0, 0x2, [{{0x9, 0x4, 0x0, 0xf2, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0xf, 0xfb, 0x1, {0x22, 0x8fc}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x6, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0x9, 0x9}}]}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0xf2, 0xc3, 0x9, 0x40, 0x3d}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3409}}]}) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r5, @ANYRESHEX=r6], 0x15) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000000440)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x1) 3m4.977578661s ago: executing program 42 (id=2599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0xfffff001, 0x3}, &(0x7f0000000040)=0xc) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000000000000dbdb140bf123f7d1d50d431313c660721f05451414f755ec1b850436c9bf340b106cb32d2d69038e0720d0d384bf180d4fbf6520954bb1dfed52b794cc82712d8b63da8a134b2339d2efb8c654d8c00202d5c88caefa60860d1b590c3973050ed871e01987b3e3e42847c62f9d1930eed8b6254e84a4d8f4053f1790340e28cf00"/148, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a879e7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000306030000000000000000000000000605000100070000000900020073797a3000000000a0a3aeb8f9d8cbb91d22b3e4962219f7022d60a15bc2b237b4276f3e685a2ded404c5107dfd10e6f29ec16254485e464647436a24783455dd84c5bca23f7e28ebef840a583a6b7729cef93ba2b68341cfed6"], 0x28}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 2m48.594382361s ago: executing program 8 (id=3078): mprotect(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x5) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2m48.551791804s ago: executing program 8 (id=3080): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8) sendmmsg$sock(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="74b17a07", 0x4}], 0x1, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}}], 0x1, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="9febf66018"], 0x0, 0x26, 0x0, 0x1}, 0x28) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcM\xc3\xbdq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4X\xaaf\x00'/151, 0x0) fallocate(r1, 0x1, 0x400002000000000, 0xffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) (async) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8) (async) sendmmsg$sock(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="74b17a07", 0x4}], 0x1, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}}], 0x1, 0x20000000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="9febf66018"], 0x0, 0x26, 0x0, 0x1}, 0x28) (async) memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcM\xc3\xbdq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4X\xaaf\x00'/151, 0x0) (async) fallocate(r1, 0x1, 0x400002000000000, 0xffff) (async) 2m48.487930387s ago: executing program 8 (id=3081): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x10, 0x0}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000140)=0xc) rt_tgsigqueueinfo(r1, 0x0, 0x22, &(0x7f0000000000)={0x27, 0x3, 0x400}) getsockname(r0, &(0x7f00000000c0)=@nfc, 0x0) 2m48.487636417s ago: executing program 8 (id=3082): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10f18c0, 0x0) unshare(0x22020600) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)) r1 = syz_clone3(&(0x7f00000003c0)={0x21080, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x28}, &(0x7f0000000140)=""/175, 0xaf, &(0x7f0000000200)=""/123, &(0x7f0000000380)}, 0x58) syz_open_procfs(r1, &(0x7f0000000040)='mountinfo\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000000)=0x20) 2m48.487132517s ago: executing program 8 (id=3083): futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x1, 0x0, &(0x7f0000048000), 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa0000000000000000010015000000000001001400000000000100"], 0x68}, 0x1, 0x7}, 0x0) 2m48.419486811s ago: executing program 8 (id=3084): mprotect(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x5) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2m48.405645072s ago: executing program 43 (id=3084): mprotect(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x5) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 32.058562551s ago: executing program 2 (id=5436): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x0, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) semtimedop(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_team\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004004}, 0x8080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40880) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x511a, 0x8, 0x20002, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x184, r4, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0xffff}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xe}, {0x8, 0x13, 0xf}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x3}, {0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0xffff}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xfd9}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xba}, {0x6, 0x11, 0xff}, {0x8, 0x13, 0x531}, {0x5, 0x14, 0x1}}]}, 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x40014) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e5000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) fcntl$getown(r5, 0x9) 28.339166087s ago: executing program 2 (id=5483): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000006a40)={&(0x7f0000004480)={0xa, 0x4e20, 0x1, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x280}, 0x4000) r1 = syz_usbip_server_init(0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) r3 = fsopen(&(0x7f0000000180)='sysfs\x00', 0x1) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x18, &(0x7f0000000400)=@req3={0xc, 0x47, 0x8004, 0x4, 0x3, 0xffffffff, 0xfffe0}, 0x1c) recvmmsg(r4, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) r5 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x4402c0, 0x31) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/hibernate_compression_threads', 0x1, 0x68) write$UHID_INPUT2(r8, &(0x7f0000000bc0)={0x30}, 0x6) getdents64(r6, &(0x7f0000002580)=""/4102, 0x1006) r9 = fsmount(r3, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r11, @ANYRES64=r4, @ANYBLOB="010054bd7000030002000100000008000100", @ANYRESOCT=r3, @ANYRESDEC=r9], 0x68}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r12, 0x4030582b, &(0x7f0000000c00)={0x0, 0xb35, 0x4, 0x40000000000000, 0x0, 0xf0}) bind$unix(r9, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 19.65652302s ago: executing program 2 (id=5585): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xba, &(0x7f0000000080)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1, 0xac, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x22, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x65, 0x0, [{0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "7f36c525"}]}]}}, "0100010000000000"}}}}}, 0x0) 17.798345348s ago: executing program 2 (id=5613): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x400, &(0x7f0000000340)=ANY=[@ANYBLOB="5aba603105c7d36b396434976e6f73776170"]) chdir(&(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) mount$9p_unix(0x0, 0x0, 0x0, 0x301200a, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, 0x0, 0x0}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x4a, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x4, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r1], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$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") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB='}', @ANYRES16=r4, @ANYBLOB="010030bd7000fedbdf350a000000200003800800010000000000be00060000000000000000000000ffff64010100"], 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x24040014) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x267, &(0x7f0000000e40)="$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") inotify_init1(0x80000) r6 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) preadv2(r6, 0x0, 0x0, 0xb, 0xfffffc00, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 3.61911936s ago: executing program 4 (id=5746): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x2a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000"], 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff66) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x800) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) r5 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r5, 0x5, 0x0, 0x0) sendmsg$AUDIT_SET(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x3e9, 0x200, 0x70bd28, 0x25dfdbff, {0x10, 0x0, 0x2, r5, 0x1, 0x1ff, 0x7ff, 0x8, 0x0, 0x383, 0x400}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x8000) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='FROZEN\x00', 0x7) 3.463823989s ago: executing program 4 (id=5747): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) close_range(r1, r0, 0x2) syz_emit_ethernet(0x2fe, &(0x7f0000001880)={@link_local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x2c8, 0x67, 0x1, @private0, @loopback, {[@hopopts={0x4, 0xd, '\x00', [@enc_lim={0x4, 0x1, 0xf}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private0}, @calipso={0x7, 0x20, {0x2, 0x6, 0x6, 0x800, [0xb, 0x80, 0xe58]}}, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @hao={0xc9, 0x10, @mcast2}]}, @hopopts={0x269a5d828552a13, 0x2, '\x00', [@hao={0xc9, 0x10, @private0}]}, @dstopts={0x16, 0x17, '\x00', [@pad1, @pad1, @pad1, @hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x10, {0x3, 0x2, 0x0, 0xb, [0x6]}}, @generic={0x5, 0x8d, "60068b6478b2cc21e3e844bfe5c7d17b2e6cacfaddac16a15a79d5196e44b137f0c642c90899e640dddb0b18ea7c3fc311264a66a08cd6d56061ca10e216ac4ab904238e5dd75ec38c2ab53a32c8dae7247baa25a3445e260ba1d9bbf28229efd8b502b47e99fcecaef5ead6537d214495f05fac35b62558e61ec5fb0d86311b000b85a24451657f1943374efa"}]}, @hopopts={0x87, 0xb, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x6, 0x9, [0x8, 0x9, 0x3, 0xe48e, 0x0, 0x4]}}, @calipso={0x7, 0x20, {0x3, 0x6, 0xff, 0x3ff, [0x8, 0x5, 0xffff]}}]}, @srh={0x32, 0xa, 0x4, 0x5, 0x9, 0x38, 0x1, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x28}, @remote]}, @routing={0x87, 0x6, 0x0, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x16}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2]}, @dstopts={0x3a, 0xa, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x7fff}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @generic={0xfc, 0x44, "107f5d73aab66557f99e24918a0df21b4ce88448685cda4757dd2d32e2c8a45ebfd766c5fa4e67a209a19bbd5516df9fb7c10fe9f87ee9dace2b652cd6008b4c92537008"}]}, @hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}, 0x0) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000001480)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000580)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r7, 0xe, 0x3}, &(0x7f00000004c0)=0xc) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000ebffffff0000000004000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140fffffffffffff7ff080003"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20000010}}], 0x1, 0x40) sendmmsg$unix(r11, &(0x7f00000bd000), 0x2d, 0x20040040) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x7, 0xff, 0x1, 0xff21}, {0x3, 0x9, 0x5, 0x7cd7}, {0x9, 0x40, 0xff, 0x5aeb}, {0xffff, 0x8, 0x1, 0x5}]}, 0x10) times(0xfffffffffffffffe) 2.164865305s ago: executing program 7 (id=5754): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x0, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) semtimedop(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_team\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004004}, 0x8080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x98}}, 0x40880) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x511a, 0x8, 0x20002, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x184, r4, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0xffff}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xe}, {0x8, 0x13, 0xf}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x3}, {0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0xffff}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xfd9}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xba}, {0x6, 0x11, 0xff}, {0x8, 0x13, 0x531}, {0x5, 0x14, 0x1}}]}, 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x40014) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e5000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) fcntl$getown(r5, 0x9) 2.164230285s ago: executing program 2 (id=5755): unshare(0x22020400) r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) r2 = openat(r1, &(0x7f0000000040)='.\x00', 0x0, 0xa2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11ce, &(0x7f0000002440)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) 2.145892996s ago: executing program 4 (id=5756): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x0, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}}, 0x40880) 2.113403058s ago: executing program 4 (id=5757): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x0, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) semtimedop(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_team\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004004}, 0x8080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x98}}, 0x40880) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x511a, 0x8, 0x20002, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x184, r4, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0xffff}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xe}, {0x8, 0x13, 0xf}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x3}, {0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0xffff}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xfd9}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xba}, {0x6, 0x11, 0xff}, {0x8, 0x13, 0x531}, {0x5, 0x14, 0x1}}]}, 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x40014) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e5000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) fcntl$getown(r5, 0x9) 1.38035442s ago: executing program 9 (id=5763): syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x4578, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x10, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) 1.315703424s ago: executing program 2 (id=5764): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x301802, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'vlan1\x00'}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) syz_clone(0x4416c080, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x14d27e, 0x0) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000401, 0x0, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000180)=0x1, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000028000000030a01020000000000000000010000080900010073797a3000000000080003006e6174004c000000060a010400000000000000000100000008000b400000000024000480200001800d00010073796e70726f7879000000000c00028008000340000000050900010073797a30"], 0xbc}}, 0x40000) connect$rxrpc(r2, &(0x7f0000000200)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, 0x24) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, &(0x7f00000007c0)={0x9}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r6, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0xb, @empty, 0x1}}}, &(0x7f0000000000)=0x84) 1.314684444s ago: executing program 9 (id=5774): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xa93f, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x40}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) unshare(0x22020600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) 1.231337079s ago: executing program 7 (id=5765): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000f80), 0x1, 0x0) writev(r0, &(0x7f00000021c0)=[{&(0x7f0000000fc0)="42d5afa16f", 0x5}, {0x0}], 0x2) r1 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x26, 0x6, 0x7, 0x0, 0x0, 0x7, 0x517d6, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x10003, 0xc, 0x9, 0x5, 0x9, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x50, r1, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/anycast6\x00') prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) writev(r3, &(0x7f0000000480)=[{&(0x7f0000000100)="64c13cc6b7df2372b5cc939001518e3d33ce037958b2fb574afdc0794dc248759662bfb80f8c88dd555b115dc31e85b41b2f6c9932a8c9c80e2021306981b7b82e88458174aa6392f6a6386aab0a74953fdc9a5a2828ca5f8e452fa9d5b72509dfa4e542a297af5592cc6072ee346c2d0a4ebf8afa", 0x75}, {&(0x7f0000000180)="543623d9b0abca09866aef7880ac5ff54397674ca56a654088c382c6b4ea3a172d2b865a31ae54454c932e2bbd3abd45fb1d21240ea6db7bbd53bea8af6bd2a9047a8249d08258bd684ad6c721bea918433f4a265c7ea25616cfa7cd1eb6aae6694a6f0091fabb72c272a6f6b52bff6abf6ae4771154fe5bd4eaf76f22886ec2971cc84bd3a55b4fe40ad85a5f488196f24bcabd9e1cc0cb609b938ae7349d3cfba2ef6e06bdd8660dd29ea8c6e406d91003f2ad814995d0d2a5901f006f1fb87ef790960e38883c15f335166da58004e5f74e", 0xd3}, {&(0x7f0000000280)="cbb3a94fe9a8f16067dd8bbd4ff648634a0d9297235540f93371a1ad0214de", 0x1f}, {&(0x7f00000002c0)="789bdd228b7925d04199a7d6b5c637680c31351d2490bbc4e864a53cb44c5bba580361c3e066573f7a2984fa1f2adaa5552942a1f103155a5a6448955e235862b1a744b7", 0x44}, {&(0x7f0000000340)="27c42e9fcfe91e15d01a060b26e43be931c9a36786413a23fcf7ecee18ed377eb25b6e2f9175b195da903dafbbfc429df06f064e6fdbfb077abaae7d954f3bb6da27f46f7cd239fe3957232e7b605cec", 0x50}, {&(0x7f00000003c0)="14c40e4f521a360f1620d8eb24933bfd057c54b5a5568c4bb9b2bc2e1fc173f0e01050715b427931976e7af288318c1a98f10fcb9eab8ec0076b2a6a2388223708163099f476fd1f25ee615e3f31c245d364b502942f75e616a08714d21daa1e4e5148d7a07edc95107b073c507e6f62274fd62623dca63853edae14577a2b53f66a", 0x82}], 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) 1.20826238s ago: executing program 4 (id=5766): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000006a00010028bd7000ffdbdf2500000000000000009eecf83fd7d5af12040934ef90fbec719cc57b46d24287debb03719b8021"], 0x18}}, 0x0) 1.148818893s ago: executing program 7 (id=5767): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x0, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}}, 0x40880) 1.147928593s ago: executing program 7 (id=5768): unshare(0x6a040000) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') mq_open(&(0x7f0000000000)='-\x00', 0x40, 0x40, &(0x7f0000000400)={0x5, 0x6, 0xffffffffffffffff, 0x5}) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3d75}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x6d, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) close(r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000006c0)) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x7fff, 0x420, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x3}, 0x0, 0x2, 0x2, 0x4, 0x5, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x8000) 1.005725791s ago: executing program 5 (id=5769): socket(0x2, 0xa, 0x300) socket$kcm(0x2, 0xa, 0x73) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4affeeaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 881.590009ms ago: executing program 5 (id=5770): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 827.789592ms ago: executing program 7 (id=5771): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0x0, r2, 'id0\x00'}) readv(r3, &(0x7f0000000400)=[{&(0x7f0000000140)=""/135, 0x87}, {&(0x7f00000002c0)=""/125, 0x7d}, {&(0x7f0000000200)=""/54, 0x36}, {&(0x7f0000000340)=""/111, 0x6f}, {&(0x7f00000003c0)=""/11, 0xb}], 0x5) pidfd_send_signal(r2, 0x40011, 0x0, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYRESOCT=r4, @ANYRES32=r5, @ANYBLOB="0500020343b251fa02000000"], 0x28}, 0x1, 0x0, 0x0, 0x44851}, 0x4) 785.057475ms ago: executing program 4 (id=5772): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000006a40)={&(0x7f0000004480)={0xa, 0x4e20, 0x1, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x280}, 0x4000) r1 = syz_usbip_server_init(0x1) r2 = fsopen(&(0x7f0000000180)='sysfs\x00', 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x18, &(0x7f0000000400)=@req3={0xc, 0x47, 0x8004, 0x4, 0x3, 0xffffffff, 0xfffe0}, 0x1c) recvmmsg(r3, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) fchdir(r5) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x4402c0, 0x31) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/hibernate_compression_threads', 0x1, 0x68) write$UHID_INPUT2(r7, &(0x7f0000000bc0)={0x30}, 0x6) getdents64(r5, &(0x7f0000002580)=""/4102, 0x1006) r8 = fsmount(r2, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r10, @ANYRES64=r3, @ANYBLOB="010054bd7000030002000100000008000100", @ANYRESOCT=r2, @ANYRESDEC=r8], 0x68}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r11, 0x4030582b, &(0x7f0000000c00)={0x0, 0xb35, 0x4, 0x40000000000000, 0x0, 0xf0}) bind$unix(r8, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 784.675235ms ago: executing program 5 (id=5773): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x3, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r2, 0xd10, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0x4080) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00') preadv(r4, &(0x7f0000003380)=[{&(0x7f00000020c0)=""/168, 0xa8}], 0x1, 0xffffffc0, 0x10000) 784.280905ms ago: executing program 7 (id=5775): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x4) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, &(0x7f0000000300)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_L4PROTO={0x0, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x4004) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}, 0x0, 0x1}, 0x90) accept(0xffffffffffffffff, &(0x7f0000000080)=@ax25={{0x3, @default}, [@null, @null, @netrom, @remote, @null, @bcast, @rose, @rose]}, 0x0) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) mknodat(r9, &(0x7f0000000280)='./file0\x00', 0x2, 0x3) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r10, 0x89a2, &(0x7f0000000200)='bridge0\x00') sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r1, 0x800, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r11 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x80001021, 0x80, 0x6, 0x110}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) r14 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r11, &(0x7f0000000000)={0xa0000010}) io_uring_enter(r11, 0x6e2, 0xc49, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) 748.165196ms ago: executing program 9 (id=5776): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6901, 0x0) socket(0xa, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000014c0)='tasks\x00', 0x2, 0x0) r4 = syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000400)=r4, 0x12) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0400f9f407000904018000000000000000000020000800020040000000", 0x24) r6 = socket(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00000004fcff", 0x58}], 0x1) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@random="cfb14e407d33", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'y&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x7, {0x4, 0x6, '\x00', 0x800, 0xff, 0x1, @mcast1, @loopback, [], "805bcb1e9f2c10fc"}}}}}}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48080, 0x6d) fsetxattr$security_selinux(r8, &(0x7f00000000c0), &(0x7f0000000140)='system_u:object_r:system_dbusd_var_run_t:s0\x00', 0x2c, 0x2) 726.145178ms ago: executing program 5 (id=5777): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000280)="441f080300001538c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e26049f4", 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10) r3 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) clock_nanosleep(0x5, 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) listen(r4, 0x7) listen(r2, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000005c0)="38740fbe744b678e65c6f17633b1515581530e782f63cb13b46114bd80d5d011429702cba0b7a1ad71bf3b0c9aa673bd44f2cf827a5e532c2fbfaff9209964e536d1086266b29c2ca7475b17d316cf4f79cf807ed0110c6b565cdf33ddac104f4f2856a587b1e9480d11cd41a80d8fced53c785dede6d5eed8976aaa9954e00276351e2dcbf93034fefd445fb798f45da9b7578c52a96cae9736cbc6867b46a26e942b1ecad401cecf619dfa4b3bb45ddd7b5d40c260", 0xb6}, {&(0x7f0000000ac0)="41c70dc0044f630c936ddf84d858d2da255728b73ae977fead538d189a6343128da660335b1a2bd376772ae5ef6f70a58c6d084e8c80ce1867aee503d74448e2509dea647c92414a934eb15971251faddfac198b74a84f54f09ef4e6de3f040ec1bda8ab59e3b3dcc651c7cd51bea37889be8c6a169acbc8cdca701459d8b397f244108741a58b0ed7d494f588b45826db261f6e38ae91a6d9290021502ab9804e05a0", 0xa3}, {&(0x7f0000000380)="a14c76be8b19f10e25b8a409868258bb5fffe21281efa582d2f2aa1286b09aa44ee42f6de2dad73a965e05778a76ca6b266f9e13d2dfc7005c587ab18b4abeeed72011ec5c049e87c3efb7b776cdf00508dce167ab1b94faf2d128658ece46757eb08b5b23f40ef292ffcc54e9de9cbe85182eed855d547c", 0x78}, {&(0x7f0000000900)="232ee651aec030d44f41fd7a3693e3d091344b7fdc5d5df4980c8a086397192cc56c624789981970006283b31bec65d3771e74284f49672ff97027a39c5c8ae3edda3e101d65a780c431e8772100f1166f1a0a4d3824c5e9971b6862d0372f8ee3a8ef8bd987486aea4d780fa3a68c17a4f064a64262c12e", 0x78}, {&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000000b80)="9dabb755537e1df33927905294143557446d65e39de36cc0c414518729c028c15b0bb721e6788c9e947430626c96ff7743fccc0cbbe55b41a0ceb1e707414e1db5fac631037ee8cef0aba1ad4a3811ed97fe8a941e7be57b95fe57eec5c2815938a237f9ea369b3b39faf1173e41c8fbcc492f1f5aa577304d4581868fe07337c14b8921a20f8a9576003d6d81e28b2b8c4d3bd087fb208eb57196d9a6f31e235deee7c3ed450e9f33dc3562754b23be85bd62f692be3c673f0cf169b6328bcda5b9ce366f7a1d817078ecb68eada3ccf9fa23f65a1f77928e96925d1971a4466252a706", 0xe4}], 0x6}}], 0x1, 0x4000045) connect$unix(r1, &(0x7f0000000540)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000080)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0x10, 0x2, 0x0) write(r6, &(0x7f00000007c0)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b93779a7bc7fee18f99f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/258, 0x102) setresuid(0xee00, 0xee01, 0xee01) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYRES8=r2, @ANYRESOCT=r1], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x15, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRESHEX=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095", @ANYBLOB="91ea7e8bf1c77aaa84f47132972fee269343c962d9cad30171eacb3552d1bf49915abd83ad761021f389df5a425e2faf3da3e34d8e8786795c8d2d5aace1189206074acadd654f3f667c1b0a3f65763a35699109cb38657ea28f1a0c3a507b3d974dad0c472c25c223fe1542e258f402e5c886b3409750f62342737577c8d25e3f868c935da23f0cad6cc5c4999b2c2744782505886a317e3f25ffd965bab9ff7e7c3330766b8ab00865a95e72e5ce954e073b5454cea8b644a479a17779d4efbd"], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000980)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r9}, &(0x7f0000000440), &(0x7f0000000480)=r10}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) 646.061783ms ago: executing program 5 (id=5778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [{0x8, 0x3}, {0x8, 0x4}], {0x10, 0x3}, {0x20, 0x7}}, 0x34, 0x1) setreuid(0xffffffffffffffff, 0xee01) openat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', 0x14d842, 0x5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x88, 0x0, @remote, @broadcast}, @echo={0x8, 0x0, 0x0, 0x1c, 0x88}}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x9, 0x9, 0x10}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) 252.249416ms ago: executing program 9 (id=5779): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x0, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}}, 0x40880) 183.541199ms ago: executing program 5 (id=5780): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x82, &(0x7f0000000300)={r3, 0x10, 0x4}, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@noblock_validity}, {}, {@auto_da_alloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@barrier}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x573, &(0x7f0000000a40)="$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") r4 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x112) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x1) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000022c0)=ANY=[@ANYBLOB="8cfd9ec135", @ANYBLOB="5ed139a51272fd2d1f134b85de853ec5d013def2030604cc4d884775dd66b0dd"], 0xfe37, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000180)={{0x3a, @empty, 0x4e24, 0x0, 'sh\x00', 0x24, 0x4d93, 0x1e}, {@rand_addr=0x64010100, 0x4e22, 0x1, 0x6, 0x5, 0xe7}}, 0x44) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4002}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6cab2ea8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="40d174b28bf781c274386d178550", 0x0, 0x1200801, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2b, 0x7, 0x12, 0xd, 0x1, @loopback, @mcast2, 0x700, 0x1, 0x3, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r7, 0x29, 0x5, 0x1, 0x7, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x10, 0x80, 0x3, 0x8}}) ioctl$TCFLSH(r0, 0x5608, 0x3) 66.411516ms ago: executing program 9 (id=5781): socket(0x2, 0xa, 0x300) socket$kcm(0x2, 0xa, 0x73) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4affeeaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 0s ago: executing program 9 (id=5782): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000180)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = getpid() (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x46080}, 0x30) kernel console output (not intermixed with test programs): 42.067195][T22819] xt_alloc_table_info+0x40/0x80 [ 342.067277][T22819] do_ip6t_set_ctl+0x5e5/0x8f0 [ 342.067315][T22819] nf_setsockopt+0x199/0x1b0 [ 342.067346][T22819] ipv6_setsockopt+0x11a/0x130 [ 342.067414][T22819] udpv6_setsockopt+0x99/0xb0 [ 342.067441][T22819] sock_common_setsockopt+0x69/0x80 [ 342.067506][T22819] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 342.067569][T22819] __sys_setsockopt+0x184/0x200 [ 342.067729][T22819] __x64_sys_setsockopt+0x64/0x80 [ 342.067762][T22819] x64_sys_call+0x21d5/0x3000 [ 342.067817][T22819] do_syscall_64+0xc0/0x2a0 [ 342.067913][T22819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.067995][T22819] RIP: 0033:0x7ff3abf8acb9 [ 342.068012][T22819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.068029][T22819] RSP: 002b:00007ff3aa9e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 342.068052][T22819] RAX: ffffffffffffffda RBX: 00007ff3ac205fa0 RCX: 00007ff3abf8acb9 [ 342.068118][T22819] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 342.068133][T22819] RBP: 00007ff3aa9e7090 R08: 0000000000000348 R09: 0000000000000000 [ 342.068154][T22819] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 342.068167][T22819] R13: 00007ff3ac206038 R14: 00007ff3ac205fa0 R15: 00007ffd562893b8 [ 342.068184][T22819] [ 342.360636][T22444] syz.2.5348 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 342.370615][T22444] CPU: 0 UID: 0 PID: 22444 Comm: syz.2.5348 Not tainted syzkaller #0 PREEMPT(voluntary) [ 342.370671][T22444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 342.370686][T22444] Call Trace: [ 342.370695][T22444] [ 342.370705][T22444] __dump_stack+0x1d/0x30 [ 342.370731][T22444] dump_stack_lvl+0x95/0xd0 [ 342.370752][T22444] dump_stack+0x15/0x1b [ 342.370807][T22444] dump_header+0x80/0x240 [ 342.370830][T22444] oom_kill_process+0x295/0x350 [ 342.370855][T22444] out_of_memory+0x97d/0xb80 [ 342.370880][T22444] try_charge_memcg+0x62e/0xa10 [ 342.370990][T22444] charge_memcg+0x51/0xc0 [ 342.371024][T22444] __mem_cgroup_charge+0x28/0xb0 [ 342.371054][T22444] shmem_get_folio_gfp+0x47b/0xd60 [ 342.371123][T22444] shmem_write_begin+0xfc/0x1f0 [ 342.371153][T22444] generic_perform_write+0x183/0x490 [ 342.371189][T22444] shmem_file_write_iter+0xc5/0xf0 [ 342.371235][T22444] __kernel_write_iter+0x319/0x590 [ 342.371271][T22444] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 342.371355][T22444] dump_user_range+0x63e/0x8f0 [ 342.371384][T22444] elf_core_dump+0x21a2/0x2330 [ 342.371412][T22444] ? 0xffffffffff600000 [ 342.371434][T22444] coredump_write+0xacf/0xdf0 [ 342.371525][T22444] vfs_coredump+0x26bc/0x3120 [ 342.371558][T22444] ? __memcg_slab_free_hook+0xbc/0x230 [ 342.371730][T22444] ? proc_coredump_connector+0x160/0x2b0 [ 342.371751][T22444] ? kmem_cache_free+0xdf/0x380 [ 342.371845][T22444] get_signal+0xd7b/0xf60 [ 342.371877][T22444] arch_do_signal_or_restart+0x96/0x450 [ 342.371905][T22444] irqentry_exit+0xf7/0x510 [ 342.371928][T22444] asm_exc_page_fault+0x26/0x30 [ 342.372017][T22444] RIP: 0033:0x7f5ec292acc1 [ 342.372036][T22444] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 342.372055][T22444] RSP: 002b:0000000000000040 EFLAGS: 00010217 [ 342.372070][T22444] RAX: 0000000000000000 RBX: 00007f5ec2ba5fa0 RCX: 00007f5ec292acb9 [ 342.372083][T22444] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000000 [ 342.372178][T22444] RBP: 00007f5ec2998bf7 R08: 0000000000000000 R09: 0000000000000000 [ 342.372255][T22444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.372271][T22444] R13: 00007f5ec2ba6038 R14: 00007f5ec2ba5fa0 R15: 00007ffe9b774648 [ 342.372290][T22444] [ 342.372373][T22444] memory: usage 307200kB, limit 307200kB, failcnt 20703 [ 342.613152][T22444] memory+swap: usage 431616kB, limit 9007199254740988kB, failcnt 0 [ 342.621075][T22444] kmem: usage 11544kB, limit 9007199254740988kB, failcnt 0 [ 342.628266][T22444] Memory cgroup stats for /syz2: [ 342.683186][ T4994] usb 11-1: enqueue for inactive port 0 [ 342.693696][ T4994] usb 11-1: enqueue for inactive port 0 [ 342.779387][ T4994] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 342.830387][T22828] loop9: detected capacity change from 0 to 8192 [ 342.883181][T22831] loop7: detected capacity change from 0 to 512 [ 342.915660][T22831] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 342.959373][T22831] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.5491: inode has both inline data and extents flags [ 343.043439][T22831] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.5491: couldn't read orphan inode 15 (err -117) [ 343.100543][T22831] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.155914][T22843] netlink: 'syz.9.5495': attribute type 1 has an invalid length. [ 343.182792][T22444] cache 302456832 [ 343.186539][T22444] rss 45056 [ 343.189661][T22444] shmem 302456832 [ 343.193463][T22444] mapped_file 0 [ 343.197076][T22444] dirty 0 [ 343.200145][T22444] writeback 172032 [ 343.204074][T22444] workingset_refault_anon 22502 [ 343.209103][T22444] workingset_refault_file 1 [ 343.213687][T22444] swap 127762432 [ 343.217249][T22444] swapcached 233472 [ 343.221138][T22444] pgpgin 487554 [ 343.224592][T22444] pgpgout 413643 [ 343.228152][T22444] pgfault 358216 [ 343.231842][T22444] pgmajfault 2986 [ 343.235483][T22444] inactive_anon 203042816 [ 343.239842][T22444] active_anon 98852864 [ 343.243917][T22444] inactive_file 0 [ 343.247552][T22444] active_file 8192 [ 343.251366][T22444] unevictable 0 [ 343.254907][T22444] hierarchical_memory_limit 314572800 [ 343.260295][T22444] hierarchical_memsw_limit 9223372036854771712 [ 343.264716][ T3421] hid_parser_main: 22 callbacks suppressed [ 343.264735][ T3421] hid-generic 0103:0004:0000.000B: unknown main item tag 0x0 [ 343.266490][T22444] total_cache 302456832 [ 343.272317][ T3421] hid-generic 0103:0004:0000.000B: unknown main item tag 0x0 [ 343.279631][T22444] total_rss 45056 [ 343.279642][T22444] total_shmem 302456832 [ 343.279650][T22444] total_mapped_file 0 [ 343.299011][T22852] netlink: 332 bytes leftover after parsing attributes in process `syz.9.5497'. [ 343.299108][T22444] total_dirty 0 [ 343.315680][T22444] total_writeback 172032 [ 343.320088][T22444] total_workingset_refault_anon 22502 [ 343.325492][T22444] total_workingset_refault_file 1 [ 343.330525][T22444] total_swap 127762432 [ 343.334612][T22444] total_swapcached 233472 [ 343.338991][T22444] total_pgpgin 487666 [ 343.342975][T22444] total_pgpgout 413755 [ 343.347071][T22444] total_pgfault 358392 [ 343.351134][T22444] total_pgmajfault 2986 [ 343.355378][T22444] total_inactive_anon 203042816 [ 343.360346][T22444] total_active_anon 98852864 [ 343.364940][T22444] total_inactive_file 0 [ 343.369210][T22444] total_active_file 8192 [ 343.372719][ T3421] hid-generic 0103:0004:0000.000B: unknown main item tag 0x0 [ 343.373537][T22444] total_unevictable 0 [ 343.373548][T22444] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2 [ 343.381105][ T3421] hid-generic 0103:0004:0000.000B: unknown main item tag 0x0 [ 343.385193][T22444] ,task=syz.2.5348,pid=22400,uid=0 [ 343.396909][ T3421] hid-generic 0103:0004:0000.000B: unknown main item tag 0x0 [ 343.404894][T22444] Memory cgroup out of memory: Killed process 22400 (syz.2.5348) total-vm:90160kB, anon-rss:1220kB, file-rss:46464kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 343.409774][ T3421] hid-generic 0103:0004:0000.000B: unknown main item tag 0x0 [ 343.409842][ T3421] hid-generic 0103:0004:0000.000B: unknown main item tag 0x0 [ 343.484063][T22854] loop4: detected capacity change from 0 to 1024 [ 343.538587][T22856] EXT4-fs error (device loop7): ext4_lookup:1785: inode #15: comm syz.7.5491: inode has both inline data and extents flags [ 343.590374][T22854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 343.614770][T22854] ext4 filesystem being mounted at /551/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.678621][T22854] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 343.706952][ T3421] hid-generic 0103:0004:0000.000B: hidraw0: HID v0.02 Device [syz0] on syz1 [ 343.757310][T22859] fido_id[22859]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 343.813593][T13622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 343.891770][T14815] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.958761][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 343.958778][ T29] audit: type=1326 audit(2000000018.146:29083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.4.5503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28229facb9 code=0x7ffc0000 [ 344.048259][ T29] audit: type=1326 audit(2000000018.174:29084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.4.5503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28229facb9 code=0x7ffc0000 [ 344.072044][ T29] audit: type=1326 audit(2000000018.174:29086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.4.5503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f28229bb58e code=0x7ffc0000 [ 344.080259][T22863] loop9: detected capacity change from 0 to 8192 [ 344.096147][ T29] audit: type=1326 audit(2000000018.174:29085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.4.5503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28229facb9 code=0x7ffc0000 [ 344.096178][ T29] audit: type=1326 audit(2000000018.174:29087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.4.5503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f28229bb58e code=0x7ffc0000 [ 344.149834][ T29] audit: type=1326 audit(2000000018.174:29088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.4.5503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28229facb9 code=0x7ffc0000 [ 344.173539][ T29] audit: type=1326 audit(2000000018.174:29089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.4.5503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28229facb9 code=0x7ffc0000 [ 344.197329][ T29] audit: type=1326 audit(2000000018.174:29090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.4.5503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28229facb9 code=0x7ffc0000 [ 344.220966][ T29] audit: type=1326 audit(2000000018.174:29091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.4.5503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28229facb9 code=0x7ffc0000 [ 344.244655][ T29] audit: type=1326 audit(2000000018.174:29092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.4.5503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f28229facb9 code=0x7ffc0000 [ 344.434240][T22881] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5506'. [ 344.446564][T22879] loop4: detected capacity change from 0 to 512 [ 344.453872][T22879] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 344.476167][T22879] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5509: bg 0: block 384: padding at end of block bitmap is not set [ 344.499688][T22879] EXT4-fs (loop4): Remounting filesystem read-only [ 344.533251][T22887] sctp: [Deprecated]: syz.9.5511 (pid 22887) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.533251][T22887] Use struct sctp_sack_info instead [ 344.566704][T22879] EXT4-fs (loop4): 1 truncate cleaned up [ 344.577729][T22887] loop9: detected capacity change from 0 to 512 [ 344.588676][T22879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.718535][T13622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.951242][T22900] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5518'. [ 344.988743][T22402] syz.2.5348 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 344.998656][T22402] CPU: 1 UID: 0 PID: 22402 Comm: syz.2.5348 Not tainted syzkaller #0 PREEMPT(voluntary) [ 344.998688][T22402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 344.998719][T22402] Call Trace: [ 344.998728][T22402] [ 344.998783][T22402] __dump_stack+0x1d/0x30 [ 344.998812][T22402] dump_stack_lvl+0x95/0xd0 [ 344.998837][T22402] dump_stack+0x15/0x1b [ 344.998856][T22402] dump_header+0x80/0x240 [ 344.999028][T22402] oom_kill_process+0x295/0x350 [ 344.999050][T22402] out_of_memory+0x97d/0xb80 [ 344.999143][T22402] try_charge_memcg+0x62e/0xa10 [ 344.999183][T22402] charge_memcg+0x51/0xc0 [ 344.999266][T22402] __mem_cgroup_charge+0x28/0xb0 [ 344.999298][T22402] shmem_get_folio_gfp+0x47b/0xd60 [ 344.999380][T22402] shmem_write_begin+0xfc/0x1f0 [ 344.999472][T22402] generic_perform_write+0x183/0x490 [ 344.999498][T22402] ? __mark_inode_dirty+0x1af/0x740 [ 344.999576][T22402] shmem_file_write_iter+0xc5/0xf0 [ 344.999606][T22402] __kernel_write_iter+0x319/0x590 [ 344.999638][T22402] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 344.999703][T22402] dump_user_range+0x63e/0x8f0 [ 344.999809][T22402] elf_core_dump+0x21a2/0x2330 [ 344.999841][T22402] ? 0xffffffffff600000 [ 344.999864][T22402] coredump_write+0xacf/0xdf0 [ 344.999892][T22402] vfs_coredump+0x26bc/0x3120 [ 345.000000][T22402] ? __memcg_slab_free_hook+0xbc/0x230 [ 345.000033][T22402] ? proc_coredump_connector+0x160/0x2b0 [ 345.000167][T22402] ? kmem_cache_free+0xdf/0x380 [ 345.000194][T22402] get_signal+0xd7b/0xf60 [ 345.000292][T22402] arch_do_signal_or_restart+0x96/0x450 [ 345.000371][T22402] irqentry_exit+0xf7/0x510 [ 345.000395][T22402] asm_exc_page_fault+0x26/0x30 [ 345.000425][T22402] RIP: 0033:0x7f5ec292acc1 [ 345.000444][T22402] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 345.000466][T22402] RSP: 002b:0000000000000040 EFLAGS: 00010217 [ 345.000517][T22402] RAX: 0000000000000000 RBX: 00007f5ec2ba5fa0 RCX: 00007f5ec292acb9 [ 345.000532][T22402] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000000 [ 345.000546][T22402] RBP: 00007f5ec2998bf7 R08: 0000000000000000 R09: 0000000000000000 [ 345.000561][T22402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.000576][T22402] R13: 00007f5ec2ba6038 R14: 00007f5ec2ba5fa0 R15: 00007ffe9b774648 [ 345.000674][T22402] [ 345.000681][T22402] memory: usage 307200kB, limit 307200kB, failcnt 22367 [ 345.243791][T22402] memory+swap: usage 431936kB, limit 9007199254740988kB, failcnt 0 [ 345.251919][T22402] kmem: usage 11384kB, limit 9007199254740988kB, failcnt 0 [ 345.259280][T22402] Memory cgroup stats for /syz2: [ 345.704984][T22930] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22930 comm=syz.5.5528 [ 345.865533][T22933] netlink: 'syz.5.5529': attribute type 16 has an invalid length. [ 345.873407][T22933] netlink: 'syz.5.5529': attribute type 17 has an invalid length. [ 345.878084][T22402] cache 301318144 [ 345.884972][T22402] rss 45056 [ 345.888183][T22402] shmem 301318144 [ 345.891926][T22402] mapped_file 0 [ 345.895538][T22402] dirty 0 [ 345.898486][T22402] writeback 0 [ 345.901837][T22402] workingset_refault_anon 22502 [ 345.906769][T22402] workingset_refault_file 1 [ 345.911296][T22402] swap 127946752 [ 345.914864][T22402] swapcached 49152 [ 345.918581][T22402] pgpgin 493662 [ 345.922040][T22402] pgpgout 420074 [ 345.925645][T22402] pgfault 358599 [ 345.929184][T22402] pgmajfault 2986 [ 345.932899][T22402] inactive_anon 191254528 [ 345.937282][T22402] active_anon 108318720 [ 345.941449][T22402] inactive_file 0 [ 345.945104][T22402] active_file 8192 [ 345.948817][T22402] unevictable 0 [ 345.952265][T22402] hierarchical_memory_limit 314572800 [ 345.957779][T22402] hierarchical_memsw_limit 9223372036854771712 [ 345.964004][T22402] total_cache 301318144 [ 345.968174][T22402] total_rss 45056 [ 345.971800][T22402] total_shmem 301318144 [ 345.975972][T22402] total_mapped_file 0 [ 345.980012][T22402] total_dirty 0 [ 345.983465][T22402] total_writeback 0 [ 345.987329][T22402] total_workingset_refault_anon 22502 [ 345.992761][T22402] total_workingset_refault_file 1 [ 345.997809][T22402] total_swap 127946752 [ 346.001868][T22402] total_swapcached 49152 [ 346.006136][T22402] total_pgpgin 493774 [ 346.010156][T22402] total_pgpgout 420186 [ 346.014277][T22402] total_pgfault 358775 [ 346.018339][T22402] total_pgmajfault 2986 [ 346.022531][T22402] total_inactive_anon 191254528 [ 346.027408][T22402] total_active_anon 108318720 [ 346.032132][T22402] total_inactive_file 0 [ 346.036281][T22402] total_active_file 8192 [ 346.040543][T22402] total_unevictable 0 [ 346.044541][T22402] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5348,pid=22444,uid=0 [ 346.059344][T22402] Memory cgroup out of memory: Killed process 22444 (syz.2.5348) total-vm:90292kB, anon-rss:1228kB, file-rss:51072kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 346.152912][T22933] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 346.409698][T22946] netlink: 'syz.5.5536': attribute type 1 has an invalid length. [ 346.554972][T22953] ip6_vti0 speed is unknown, defaulting to 1000 [ 346.823686][T22957] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5540'. [ 346.853810][T22957] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5540'. [ 347.201985][T22977] FAULT_INJECTION: forcing a failure. [ 347.201985][T22977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.215245][T22977] CPU: 0 UID: 0 PID: 22977 Comm: syz.9.5546 Not tainted syzkaller #0 PREEMPT(voluntary) [ 347.215276][T22977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 347.215296][T22977] Call Trace: [ 347.215303][T22977] [ 347.215312][T22977] __dump_stack+0x1d/0x30 [ 347.215354][T22977] dump_stack_lvl+0x95/0xd0 [ 347.215379][T22977] dump_stack+0x15/0x1b [ 347.215402][T22977] should_fail_ex+0x263/0x280 [ 347.215427][T22977] should_fail+0xb/0x20 [ 347.215447][T22977] should_fail_usercopy+0x1a/0x20 [ 347.215500][T22977] _copy_from_user+0x1c/0xb0 [ 347.215601][T22977] vcs_write+0x353/0xbb0 [ 347.215650][T22977] vfs_writev+0x42b/0x900 [ 347.215678][T22977] ? __pfx_vcs_write+0x10/0x10 [ 347.215726][T22977] do_writev+0xe9/0x210 [ 347.215754][T22977] __x64_sys_writev+0x45/0x50 [ 347.215775][T22977] x64_sys_call+0x1ba5/0x3000 [ 347.215800][T22977] do_syscall_64+0xc0/0x2a0 [ 347.215830][T22977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.215872][T22977] RIP: 0033:0x7ff3abf8acb9 [ 347.215890][T22977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.215910][T22977] RSP: 002b:00007ff3aa9e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 347.216008][T22977] RAX: ffffffffffffffda RBX: 00007ff3ac205fa0 RCX: 00007ff3abf8acb9 [ 347.216022][T22977] RDX: 000000000000000e RSI: 0000200000000c40 RDI: 0000000000000003 [ 347.216034][T22977] RBP: 00007ff3aa9e7090 R08: 0000000000000000 R09: 0000000000000000 [ 347.216048][T22977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.216061][T22977] R13: 00007ff3ac206038 R14: 00007ff3ac205fa0 R15: 00007ffd562893b8 [ 347.216078][T22977] [ 347.653731][T22991] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.718032][T22994] netlink: 'syz.7.5552': attribute type 1 has an invalid length. [ 347.892631][T22435] syz.2.5348 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 347.902535][T22435] CPU: 1 UID: 0 PID: 22435 Comm: syz.2.5348 Not tainted syzkaller #0 PREEMPT(voluntary) [ 347.902575][T22435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 347.902590][T22435] Call Trace: [ 347.902598][T22435] [ 347.902606][T22435] __dump_stack+0x1d/0x30 [ 347.902633][T22435] dump_stack_lvl+0x95/0xd0 [ 347.902659][T22435] dump_stack+0x15/0x1b [ 347.902683][T22435] dump_header+0x80/0x240 [ 347.902751][T22435] oom_kill_process+0x295/0x350 [ 347.902775][T22435] out_of_memory+0x97d/0xb80 [ 347.902800][T22435] try_charge_memcg+0x62e/0xa10 [ 347.902845][T22435] charge_memcg+0x51/0xc0 [ 347.902878][T22435] __mem_cgroup_charge+0x28/0xb0 [ 347.902910][T22435] shmem_get_folio_gfp+0x47b/0xd60 [ 347.902953][T22435] shmem_write_begin+0xfc/0x1f0 [ 347.903047][T22435] generic_perform_write+0x183/0x490 [ 347.903082][T22435] shmem_file_write_iter+0xc5/0xf0 [ 347.903116][T22435] __kernel_write_iter+0x319/0x590 [ 347.903205][T22435] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 347.903243][T22435] dump_user_range+0x63e/0x8f0 [ 347.903286][T22435] elf_core_dump+0x21a2/0x2330 [ 347.903321][T22435] ? 0xffffffffff600000 [ 347.903349][T22435] coredump_write+0xacf/0xdf0 [ 347.903382][T22435] vfs_coredump+0x26bc/0x3120 [ 347.903479][T22435] ? __memcg_slab_free_hook+0xbc/0x230 [ 347.903574][T22435] ? proc_coredump_connector+0x160/0x2b0 [ 347.903599][T22435] ? kmem_cache_free+0xdf/0x380 [ 347.903629][T22435] get_signal+0xd7b/0xf60 [ 347.903730][T22435] arch_do_signal_or_restart+0x96/0x450 [ 347.903762][T22435] irqentry_exit+0xf7/0x510 [ 347.903799][T22435] asm_exc_page_fault+0x26/0x30 [ 347.903823][T22435] RIP: 0033:0x7f5ec292acc1 [ 347.903839][T22435] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 347.903860][T22435] RSP: 002b:0000000000000040 EFLAGS: 00010217 [ 347.903958][T22435] RAX: 0000000000000000 RBX: 00007f5ec2ba5fa0 RCX: 00007f5ec292acb9 [ 347.903974][T22435] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000000 [ 347.903989][T22435] RBP: 00007f5ec2998bf7 R08: 0000000000000000 R09: 0000000000000000 [ 347.904017][T22435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.904032][T22435] R13: 00007f5ec2ba6038 R14: 00007f5ec2ba5fa0 R15: 00007ffe9b774648 [ 347.904108][T22435] [ 347.904117][T22435] memory: usage 307200kB, limit 307200kB, failcnt 23568 [ 348.139261][T22984] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 348.142420][T22435] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 348.149001][T22984] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 348.149094][T22984] vhci_hcd vhci_hcd.0: Device attached [ 348.156937][T22435] kmem: usage 11448kB, limit 9007199254740988kB, failcnt 0 [ 348.156956][T22435] Memory cgroup stats for /syz2: [ 348.187173][T23002] loop5: detected capacity change from 0 to 1024 [ 348.202296][T22435] cache 302292992 [ 348.205962][T22435] rss 200704 [ 348.209149][T22435] shmem 302292992 [ 348.212962][T22435] mapped_file 0 [ 348.216488][T22435] dirty 0 [ 348.219420][T22435] writeback 0 [ 348.222758][T22435] workingset_refault_anon 22502 [ 348.227600][T22435] workingset_refault_file 1 [ 348.232130][T22435] swap 127995904 [ 348.235699][T22435] swapcached 0 [ 348.239060][T22435] pgpgin 500894 [ 348.242537][T22435] pgpgout 427040 [ 348.246071][T22435] pgfault 359141 [ 348.249603][T22435] pgmajfault 2986 [ 348.253247][T22435] inactive_anon 192479232 [ 348.257693][T22435] active_anon 108339200 [ 348.262133][T22435] inactive_file 0 [ 348.265813][T22435] active_file 8192 [ 348.269622][T22435] unevictable 0 [ 348.273161][T22435] hierarchical_memory_limit 314572800 [ 348.278720][T22435] hierarchical_memsw_limit 9223372036854771712 [ 348.284980][T22435] total_cache 302292992 [ 348.289170][T22435] total_rss 200704 [ 348.292884][T22435] total_shmem 302292992 [ 348.297133][T22435] total_mapped_file 0 [ 348.301109][T22435] total_dirty 0 [ 348.304573][T22435] total_writeback 0 [ 348.308404][T22435] total_workingset_refault_anon 22502 [ 348.313768][T22435] total_workingset_refault_file 1 [ 348.318915][T22435] total_swap 127995904 [ 348.323000][T22435] total_swapcached 0 [ 348.326982][T22435] total_pgpgin 501006 [ 348.331033][T22435] total_pgpgout 427152 [ 348.335192][T22435] total_pgfault 359317 [ 348.339276][T22435] total_pgmajfault 2986 [ 348.343679][T22435] total_inactive_anon 192479232 [ 348.348733][T22435] total_active_anon 108339200 [ 348.353551][T22435] total_inactive_file 0 [ 348.357769][T22435] total_active_file 8192 [ 348.362054][T22435] total_unevictable 0 [ 348.366042][T22435] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5348,pid=22399,uid=0 [ 348.380835][T22435] Memory cgroup out of memory: Killed process 22399 (syz.2.5348) total-vm:90160kB, anon-rss:1220kB, file-rss:52480kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 348.411759][T23002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 348.424139][ T1036] usb 5-1: new low-speed USB device number 3 using vhci_hcd [ 348.503885][T23002] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.593763][T22999] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 348.634232][T22999] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5554: bg 0: block 112: padding at end of block bitmap is not set [ 348.653453][T23031] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5565'. [ 348.792672][T19448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 349.456116][T23000] vhci_hcd: connection reset by peer [ 349.470487][T13882] vhci_hcd vhci_hcd.2: stop threads [ 349.475761][T13882] vhci_hcd vhci_hcd.2: release socket [ 349.481192][T13882] vhci_hcd vhci_hcd.2: disconnect device [ 349.689572][T23054] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5571'. [ 349.739074][T23054] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5571'. [ 349.748116][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 349.748131][ T29] audit: type=1400 audit(2000000000.374:29098): avc: denied { create } for pid=23050 comm="syz.4.5570" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=phonet_socket permissive=1 [ 349.836957][T23054] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5571'. [ 349.891999][T23054] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.902436][T23054] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.997539][T23054] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.007944][T23054] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.089409][ T29] audit: type=1326 audit(2000000000.738:29099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23077 comm="syz.5.5581" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1087efacb9 code=0x0 [ 350.129212][T23054] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.139697][T23054] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.180577][ T29] audit: type=1326 audit(2000000000.823:29100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23080 comm="syz.7.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e5d5acb9 code=0x7ffc0000 [ 350.204250][ T29] audit: type=1326 audit(2000000000.823:29101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23080 comm="syz.7.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e5d5acb9 code=0x7ffc0000 [ 350.227955][ T29] audit: type=1326 audit(2000000000.823:29102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23080 comm="syz.7.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e5d5acb9 code=0x7ffc0000 [ 350.251659][ T29] audit: type=1326 audit(2000000000.823:29103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23080 comm="syz.7.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e5d5acb9 code=0x7ffc0000 [ 350.307155][T23054] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.317517][T23054] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.349159][ T29] audit: type=1326 audit(2000000000.823:29104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23080 comm="syz.7.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57e5d1b58e code=0x7ffc0000 [ 350.372902][ T29] audit: type=1326 audit(2000000000.823:29105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23080 comm="syz.7.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57e5d1b58e code=0x7ffc0000 [ 350.396711][ T29] audit: type=1326 audit(2000000000.823:29106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23080 comm="syz.7.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e5d5acb9 code=0x7ffc0000 [ 350.420487][ T29] audit: type=1326 audit(2000000000.823:29107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23080 comm="syz.7.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e5d5acb9 code=0x7ffc0000 [ 350.498051][ T12] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.506360][ T12] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.516887][T22416] syz.2.5348 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 350.526862][T22416] CPU: 1 UID: 0 PID: 22416 Comm: syz.2.5348 Not tainted syzkaller #0 PREEMPT(voluntary) [ 350.526902][T22416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 350.526955][T22416] Call Trace: [ 350.526961][T22416] [ 350.526968][T22416] __dump_stack+0x1d/0x30 [ 350.526999][T22416] dump_stack_lvl+0x95/0xd0 [ 350.527020][T22416] dump_stack+0x15/0x1b [ 350.527042][T22416] dump_header+0x80/0x240 [ 350.527098][T22416] oom_kill_process+0x295/0x350 [ 350.527138][T22416] out_of_memory+0x97d/0xb80 [ 350.527161][T22416] try_charge_memcg+0x62e/0xa10 [ 350.527262][T22416] charge_memcg+0x51/0xc0 [ 350.527293][T22416] __mem_cgroup_charge+0x28/0xb0 [ 350.527326][T22416] shmem_get_folio_gfp+0x47b/0xd60 [ 350.527416][T22416] shmem_write_begin+0xfc/0x1f0 [ 350.527445][T22416] generic_perform_write+0x183/0x490 [ 350.527486][T22416] shmem_file_write_iter+0xc5/0xf0 [ 350.527514][T22416] __kernel_write_iter+0x319/0x590 [ 350.527551][T22416] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 350.527641][T22416] dump_user_range+0x63e/0x8f0 [ 350.527710][T22416] elf_core_dump+0x21a2/0x2330 [ 350.527739][T22416] ? 0xffffffffff600000 [ 350.527762][T22416] coredump_write+0xacf/0xdf0 [ 350.527792][T22416] vfs_coredump+0x26bc/0x3120 [ 350.527894][T22416] ? __memcg_slab_free_hook+0xbc/0x230 [ 350.527923][T22416] ? proc_coredump_connector+0x160/0x2b0 [ 350.527946][T22416] ? kmem_cache_free+0xdf/0x380 [ 350.527972][T22416] get_signal+0xd7b/0xf60 [ 350.528071][T22416] arch_do_signal_or_restart+0x96/0x450 [ 350.528099][T22416] irqentry_exit+0xf7/0x510 [ 350.528219][T22416] asm_exc_page_fault+0x26/0x30 [ 350.528241][T22416] RIP: 0033:0x7f5ec292acc1 [ 350.528258][T22416] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 350.528323][T22416] RSP: 002b:0000000000000040 EFLAGS: 00010217 [ 350.528339][T22416] RAX: 0000000000000000 RBX: 00007f5ec2ba5fa0 RCX: 00007f5ec292acb9 [ 350.528353][T22416] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000000 [ 350.528366][T22416] RBP: 00007f5ec2998bf7 R08: 0000000000000000 R09: 0000000000000000 [ 350.528381][T22416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.528405][T22416] R13: 00007f5ec2ba6038 R14: 00007f5ec2ba5fa0 R15: 00007ffe9b774648 [ 350.528426][T22416] [ 350.528433][T22416] memory: usage 307200kB, limit 307200kB, failcnt 24981 [ 350.544797][ T12] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.548389][T22416] memory+swap: usage 432192kB, limit 9007199254740988kB, failcnt 0 [ 350.551697][ T12] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.554698][T22416] kmem: usage 11064kB, limit 9007199254740988kB, failcnt 0 [ 350.566590][ T12] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.568346][T22416] Memory cgroup stats for /syz2: [ 350.572876][ T12] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.768838][T22416] cache 301584384 [ 350.776516][ T12] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.784600][T22416] rss 40960 [ 350.784612][T22416] shmem 301584384 [ 350.792788][ T12] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.799997][T22416] mapped_file 0 [ 350.800009][T22416] dirty 0 [ 350.854571][T22416] writeback 4096 [ 350.858099][T22416] workingset_refault_anon 22510 [ 350.863064][T22416] workingset_refault_file 1 [ 350.867559][T22416] swap 127959040 [ 350.871106][T22416] swapcached 36864 [ 350.874988][T22416] pgpgin 509939 [ 350.878429][T22416] pgpgout 436288 [ 350.882021][T22416] pgfault 359723 [ 350.885603][T22416] pgmajfault 2987 [ 350.889255][T22416] inactive_anon 188567552 [ 350.893606][T22416] active_anon 111255552 [ 350.897759][T22416] inactive_file 0 [ 350.901433][T22416] active_file 8192 [ 350.905183][T22416] unevictable 0 [ 350.908631][T22416] hierarchical_memory_limit 314572800 [ 350.913996][T22416] hierarchical_memsw_limit 9223372036854771712 [ 350.920229][T22416] total_cache 301584384 [ 350.924493][T22416] total_rss 40960 [ 350.928136][T22416] total_shmem 301584384 [ 350.932370][T22416] total_mapped_file 0 [ 350.936426][T22416] total_dirty 0 [ 350.939952][T22416] total_writeback 4096 [ 350.944086][T22416] total_workingset_refault_anon 22510 [ 350.949663][T22416] total_workingset_refault_file 1 [ 350.954784][T22416] total_swap 127959040 [ 350.958855][T22416] total_swapcached 36864 [ 350.963086][T22416] total_pgpgin 510051 [ 350.967087][T22416] total_pgpgout 436400 [ 350.971191][T22416] total_pgfault 359899 [ 350.975285][T22416] total_pgmajfault 2987 [ 350.979545][T22416] total_inactive_anon 188567552 [ 350.984392][T22416] total_active_anon 111255552 [ 350.989064][T22416] total_inactive_file 0 [ 350.993231][T22416] total_active_file 8192 [ 350.997503][T22416] total_unevictable 0 [ 351.001496][T22416] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5348,pid=22402,uid=0 [ 351.016304][T22416] Memory cgroup out of memory: Killed process 22402 (syz.2.5348) total-vm:90160kB, anon-rss:1220kB, file-rss:51968kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 351.150353][T23096] ip6_vti0 speed is unknown, defaulting to 1000 [ 351.190766][T23105] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5589'. [ 351.221137][T23105] netlink: 'syz.4.5589': attribute type 6 has an invalid length. [ 351.248459][T23107] netlink: 'syz.9.5593': attribute type 29 has an invalid length. [ 351.258778][T23105] loop4: detected capacity change from 0 to 512 [ 351.269053][T23105] ext4: Unknown parameter '"' [ 351.312195][T23107] netlink: 'syz.9.5593': attribute type 29 has an invalid length. [ 351.321000][T23107] netlink: 500 bytes leftover after parsing attributes in process `syz.9.5593'. [ 351.383275][T23115] loop4: detected capacity change from 0 to 128 [ 351.392518][T23115] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 351.439241][T23115] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 351.515683][T23124] FAULT_INJECTION: forcing a failure. [ 351.515683][T23124] name failslab, interval 1, probability 0, space 0, times 0 [ 351.528354][T23124] CPU: 0 UID: 0 PID: 23124 Comm: syz.7.5599 Not tainted syzkaller #0 PREEMPT(voluntary) [ 351.528404][T23124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 351.528419][T23124] Call Trace: [ 351.528427][T23124] [ 351.528436][T23124] __dump_stack+0x1d/0x30 [ 351.528464][T23124] dump_stack_lvl+0x95/0xd0 [ 351.528490][T23124] dump_stack+0x15/0x1b [ 351.528510][T23124] should_fail_ex+0x263/0x280 [ 351.528533][T23124] should_failslab+0x8c/0xb0 [ 351.528556][T23124] __kmalloc_noprof+0xb8/0x580 [ 351.528644][T23124] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 351.528701][T23124] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 351.528741][T23124] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 351.528807][T23124] ? selinux_capable+0x31/0x40 [ 351.528830][T23124] ? security_capable+0x7b/0x90 [ 351.528964][T23124] ? ns_capable+0x7c/0xb0 [ 351.528997][T23124] genl_rcv_msg+0x432/0x470 [ 351.529081][T23124] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 351.529105][T23124] netlink_rcv_skb+0x123/0x220 [ 351.529136][T23124] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.529192][T23124] genl_rcv+0x28/0x40 [ 351.529225][T23124] netlink_unicast+0x5c0/0x690 [ 351.529253][T23124] netlink_sendmsg+0x5c8/0x6f0 [ 351.529334][T23124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.529365][T23124] __sock_sendmsg+0x145/0x170 [ 351.529460][T23124] ____sys_sendmsg+0x31e/0x4a0 [ 351.529484][T23124] ___sys_sendmsg+0x195/0x1e0 [ 351.529561][T23124] __x64_sys_sendmsg+0xd4/0x160 [ 351.529587][T23124] x64_sys_call+0x17ba/0x3000 [ 351.529613][T23124] do_syscall_64+0xc0/0x2a0 [ 351.529646][T23124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.529670][T23124] RIP: 0033:0x7f57e5d5acb9 [ 351.529763][T23124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.529784][T23124] RSP: 002b:00007f57e47b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.529812][T23124] RAX: ffffffffffffffda RBX: 00007f57e5fd5fa0 RCX: 00007f57e5d5acb9 [ 351.529827][T23124] RDX: 0000000004040084 RSI: 0000200000004bc0 RDI: 0000000000000004 [ 351.529867][T23124] RBP: 00007f57e47b7090 R08: 0000000000000000 R09: 0000000000000000 [ 351.529883][T23124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.529899][T23124] R13: 00007f57e5fd6038 R14: 00007f57e5fd5fa0 R15: 00007ffc6acc1fe8 [ 351.529959][T23124] [ 351.827633][T23128] 8021q: VLANs not supported on nlmon0 [ 351.896503][T23137] loop4: detected capacity change from 0 to 1024 [ 351.948178][T23137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 351.971373][T23137] ext4 filesystem being mounted at /577/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.996543][T13622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 352.043646][T23144] loop4: detected capacity change from 0 to 128 [ 352.083436][T23148] netlink: 'syz.4.5606': attribute type 9 has an invalid length. [ 352.091498][T23148] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.5606'. [ 352.188942][T23155] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5608'. [ 352.283364][T23155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5608'. [ 352.498597][T23170] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23170 comm=syz.5.5617 [ 352.558034][T23174] ip6_vti0 speed is unknown, defaulting to 1000 [ 352.660492][T23181] ip6_vti0 speed is unknown, defaulting to 1000 [ 352.664108][T13757] syz-executor invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=1, oom_score_adj=0 [ 352.679499][T13757] CPU: 1 UID: 0 PID: 13757 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 352.679533][T13757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 352.679562][T13757] Call Trace: [ 352.679569][T13757] [ 352.679577][T13757] __dump_stack+0x1d/0x30 [ 352.679602][T13757] dump_stack_lvl+0x95/0xd0 [ 352.679623][T13757] dump_stack+0x15/0x1b [ 352.679714][T13757] dump_header+0x80/0x240 [ 352.679739][T13757] oom_kill_process+0x295/0x350 [ 352.679808][T13757] out_of_memory+0x97d/0xb80 [ 352.679866][T13757] try_charge_memcg+0x62e/0xa10 [ 352.679906][T13757] obj_cgroup_charge_pages+0xa6/0x150 [ 352.679933][T13757] __memcg_kmem_charge_page+0x9e/0x170 [ 352.679996][T13757] __alloc_frozen_pages_noprof+0x18a/0x350 [ 352.680031][T13757] alloc_pages_mpol+0xb3/0x260 [ 352.680064][T13757] alloc_pages_noprof+0x8f/0x130 [ 352.680156][T13757] pgd_alloc+0x40/0x2a0 [ 352.680187][T13757] mm_init+0x381/0x640 [ 352.680254][T13757] copy_mm+0x100/0x370 [ 352.680277][T13757] copy_process+0xcbd/0x1f10 [ 352.680346][T13757] kernel_clone+0x16b/0x5b0 [ 352.680374][T13757] __x64_sys_clone+0x143/0x180 [ 352.680465][T13757] x64_sys_call+0x12d0/0x3000 [ 352.680532][T13757] do_syscall_64+0xc0/0x2a0 [ 352.680566][T13757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.680591][T13757] RIP: 0033:0x7f5ec2953752 [ 352.680608][T13757] Code: 89 e7 e8 f1 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 352.680655][T13757] RSP: 002b:00007ffe9b774860 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 352.680680][T13757] RAX: ffffffffffffffda RBX: 00007ffe9b774860 RCX: 00007f5ec2953752 [ 352.680696][T13757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 352.680728][T13757] RBP: 00007ffe9b7749ec R08: 0000000000000000 R09: 0000000000000001 [ 352.680741][T13757] R10: 000055555cec87d0 R11: 0000000000000246 R12: 0000000000000000 [ 352.680755][T13757] R13: 00000000000927c0 R14: 00000000000544f1 R15: 00007ffe9b774a40 [ 352.680776][T13757] [ 352.680785][T13757] memory: usage 307200kB, limit 307200kB, failcnt 26247 [ 352.890380][T13757] memory+swap: usage 430244kB, limit 9007199254740988kB, failcnt 0 [ 352.898305][T13757] kmem: usage 10916kB, limit 9007199254740988kB, failcnt 0 [ 352.905515][T13757] Memory cgroup stats for /syz2: [ 352.921412][T13757] cache 301654016 [ 352.930034][T13757] rss 49152 [ 352.933138][T13757] shmem 301654016 [ 352.936837][T13757] mapped_file 0 [ 352.940288][T13757] dirty 0 [ 352.943220][T13757] writeback 4096 [ 352.946830][T13757] workingset_refault_anon 22510 [ 352.951694][T13757] workingset_refault_file 1 [ 352.956213][T13757] swap 126308352 [ 352.960141][T13757] swapcached 36864 [ 352.963846][T13757] pgpgin 514150 [ 352.967314][T13757] pgpgout 440482 [ 352.970899][T13757] pgfault 360081 [ 352.974536][T13757] pgmajfault 2987 [ 352.978177][T13757] inactive_anon 131678208 [ 352.982558][T13757] active_anon 169349120 [ 352.986759][T13757] inactive_file 0 [ 352.990438][T13757] active_file 8192 [ 352.994191][T13757] unevictable 0 [ 352.997649][T13757] hierarchical_memory_limit 314572800 [ 353.003091][T13757] hierarchical_memsw_limit 9223372036854771712 [ 353.009239][T13757] total_cache 301654016 [ 353.013502][T13757] total_rss 49152 [ 353.017149][T13757] total_shmem 301654016 [ 353.021402][T13757] total_mapped_file 0 [ 353.025383][T13757] total_dirty 0 [ 353.028839][T13757] total_writeback 4096 [ 353.032958][T13757] total_workingset_refault_anon 22510 [ 353.038388][T13757] total_workingset_refault_file 1 [ 353.043456][T13757] total_swap 126308352 [ 353.047526][T13757] total_swapcached 36864 [ 353.051762][T13757] total_pgpgin 514262 [ 353.055764][T13757] total_pgpgout 440594 [ 353.060020][T13757] total_pgfault 360257 [ 353.064148][T13757] total_pgmajfault 2987 [ 353.068302][T13757] total_inactive_anon 131678208 [ 353.073169][T13757] total_active_anon 169349120 [ 353.077940][T13757] total_inactive_file 0 [ 353.082127][T13757] total_active_file 8192 [ 353.086404][T13757] total_unevictable 0 [ 353.090388][T13757] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5348,pid=22416,uid=0 [ 353.105165][T13757] Memory cgroup out of memory: Killed process 22416 (syz.2.5348) total-vm:90292kB, anon-rss:1228kB, file-rss:52224kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 353.220876][T23194] loop4: detected capacity change from 0 to 1024 [ 353.235593][T23192] loop7: detected capacity change from 0 to 512 [ 353.236561][T23196] tmpfs: Unknown parameter 'Zº`1ÇÓk9d4—noswap' [ 353.292836][T23194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 353.309958][T23194] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.332503][T23194] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5625: bg 0: block 112: padding at end of block bitmap is not set [ 353.357957][T23194] EXT4-fs (loop4): Remounting filesystem read-only [ 353.380488][T23194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5625'. [ 353.474753][T13622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 353.541350][T23208] ip6_vti0 speed is unknown, defaulting to 1000 [ 353.664197][T23211] ip6_vti0 speed is unknown, defaulting to 1000 [ 353.706333][T23181] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23181 comm=syz.5.5621 [ 353.718929][T23181] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23181 comm=syz.5.5621 [ 353.799547][T23220] loop5: detected capacity change from 0 to 1024 [ 353.806194][ T1036] usb 5-1: enqueue for inactive port 0 [ 353.813074][ T1036] usb 5-1: enqueue for inactive port 0 [ 353.824304][T23220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 353.885956][T23220] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.887660][ T1036] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 353.969325][T23220] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5632: bg 0: block 112: padding at end of block bitmap is not set [ 354.064416][T19448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 354.188398][T23232] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5633'. [ 354.197537][T23232] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5633'. [ 354.240379][T23233] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5634'. [ 354.472173][T23239] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 354.478774][T23239] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 354.486299][T23239] vhci_hcd vhci_hcd.0: Device attached [ 354.516975][T23243] loop7: detected capacity change from 0 to 1024 [ 354.558041][T23243] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 354.577675][T23240] vhci_hcd: connection closed [ 354.577930][ T12] vhci_hcd vhci_hcd.5: stop threads [ 354.587935][ T12] vhci_hcd vhci_hcd.5: release socket [ 354.593369][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 354.637493][T22406] syz.2.5348 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 354.647469][T22406] CPU: 1 UID: 0 PID: 22406 Comm: syz.2.5348 Not tainted syzkaller #0 PREEMPT(voluntary) [ 354.647570][T22406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 354.647583][T22406] Call Trace: [ 354.647589][T22406] [ 354.647597][T22406] __dump_stack+0x1d/0x30 [ 354.647656][T22406] dump_stack_lvl+0x95/0xd0 [ 354.647682][T22406] dump_stack+0x15/0x1b [ 354.647705][T22406] dump_header+0x80/0x240 [ 354.647729][T22406] oom_kill_process+0x295/0x350 [ 354.647758][T22406] out_of_memory+0x97d/0xb80 [ 354.647779][T22406] try_charge_memcg+0x62e/0xa10 [ 354.647861][T22406] charge_memcg+0x51/0xc0 [ 354.647894][T22406] __mem_cgroup_charge+0x28/0xb0 [ 354.647988][T22406] shmem_get_folio_gfp+0x47b/0xd60 [ 354.648090][T22406] shmem_write_begin+0xfc/0x1f0 [ 354.648118][T22406] generic_perform_write+0x183/0x490 [ 354.648147][T22406] shmem_file_write_iter+0xc5/0xf0 [ 354.648180][T22406] __kernel_write_iter+0x319/0x590 [ 354.648276][T22406] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 354.648314][T22406] dump_user_range+0x63e/0x8f0 [ 354.648344][T22406] elf_core_dump+0x21a2/0x2330 [ 354.648374][T22406] ? 0xffffffffff600000 [ 354.648463][T22406] coredump_write+0xacf/0xdf0 [ 354.648495][T22406] vfs_coredump+0x26bc/0x3120 [ 354.648537][T22406] ? __memcg_slab_free_hook+0xbc/0x230 [ 354.648647][T22406] ? proc_coredump_connector+0x160/0x2b0 [ 354.648669][T22406] ? kmem_cache_free+0xdf/0x380 [ 354.648695][T22406] get_signal+0xd7b/0xf60 [ 354.648753][T22406] arch_do_signal_or_restart+0x96/0x450 [ 354.648787][T22406] irqentry_exit+0xf7/0x510 [ 354.648833][T22406] asm_exc_page_fault+0x26/0x30 [ 354.648855][T22406] RIP: 0033:0x7f5ec292acc1 [ 354.648870][T22406] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 354.648888][T22406] RSP: 002b:0000000000000040 EFLAGS: 00010217 [ 354.648906][T22406] RAX: 0000000000000000 RBX: 00007f5ec2ba5fa0 RCX: 00007f5ec292acb9 [ 354.648923][T22406] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000000 [ 354.648977][T22406] RBP: 00007f5ec2998bf7 R08: 0000000000000000 R09: 0000000000000000 [ 354.648991][T22406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.649003][T22406] R13: 00007f5ec2ba6038 R14: 00007f5ec2ba5fa0 R15: 00007ffe9b774648 [ 354.649021][T22406] [ 354.649028][T22406] memory: usage 307200kB, limit 307200kB, failcnt 26846 [ 354.859857][T23243] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.860460][T22406] memory+swap: usage 431196kB, limit 9007199254740988kB, failcnt 0 [ 354.860475][T22406] kmem: usage 10972kB, limit 9007199254740988kB, failcnt 0 [ 354.860488][T22406] Memory cgroup stats for [ 354.881776][T23243] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5638: bg 0: block 112: padding at end of block bitmap is not set [ 354.886391][T22406] /syz2: [ 354.933866][T22406] cache 301924352 [ 354.940414][T22406] rss 221184 [ 354.943689][T22406] shmem 301924352 [ 354.947428][T22406] mapped_file 0 [ 354.950877][T22406] dirty 0 [ 354.953799][T22406] writeback 0 [ 354.957086][T22406] workingset_refault_anon 22510 [ 354.961926][T22406] workingset_refault_file 1 [ 354.966435][T22406] swap 126894080 [ 354.970154][T22406] swapcached 8192 [ 354.973781][T22406] pgpgin 523829 [ 354.977315][T22406] pgpgout 450060 [ 354.980857][T22406] pgfault 360848 [ 354.984388][T22406] pgmajfault 2987 [ 354.988048][T22406] inactive_anon 119955456 [ 354.992362][T22406] active_anon 180523008 [ 354.996530][T22406] inactive_file 0 [ 355.000190][T22406] active_file 8192 [ 355.003894][T22406] unevictable 0 [ 355.007342][T22406] hierarchical_memory_limit 314572800 [ 355.012750][T22406] hierarchical_memsw_limit 9223372036854771712 [ 355.019067][T22406] total_cache 301924352 [ 355.023228][T22406] total_rss 221184 [ 355.026930][T22406] total_shmem 301924352 [ 355.031347][T22406] total_mapped_file 0 [ 355.035345][T22406] total_dirty 0 [ 355.038785][T22406] total_writeback 0 [ 355.042650][T22406] total_workingset_refault_anon 22510 [ 355.048075][T22406] total_workingset_refault_file 1 [ 355.053115][T22406] total_swap 126894080 [ 355.057356][T22406] total_swapcached 8192 [ 355.061506][T22406] total_pgpgin 523941 [ 355.065497][T22406] total_pgpgout 450172 [ 355.069552][T22406] total_pgfault 361024 [ 355.073776][T22406] total_pgmajfault 2987 [ 355.077926][T22406] total_inactive_anon 119955456 [ 355.082776][T22406] total_active_anon 180523008 [ 355.087476][T22406] total_inactive_file 0 [ 355.091629][T22406] total_active_file 8192 [ 355.096038][T22406] total_unevictable 0 [ 355.100017][T22406] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5348,pid=22406,uid=0 [ 355.114796][T22406] Memory cgroup out of memory: Killed process 22406 (syz.2.5348) total-vm:90292kB, anon-rss:1224kB, file-rss:55040kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 355.159828][T14815] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 355.236159][T23253] netlink: 'syz.5.5640': attribute type 1 has an invalid length. [ 355.353765][T23256] loop5: detected capacity change from 0 to 1024 [ 355.361204][T23256] EXT4-fs: Ignoring removed orlov option [ 355.375165][T23258] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5643'. [ 355.384944][T23256] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.407621][T23256] EXT4-fs (loop5): shut down requested (2) [ 355.413839][T23256] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 355.434584][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 355.434599][ T29] audit: type=1400 audit(2000000005.734:29115): avc: denied { connect } for pid=23257 comm="syz.7.5643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 355.467428][T23256] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 355.505076][T23256] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=13 [ 355.514760][T23256] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 355.533069][T23256] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 355.563603][T23256] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 355.598797][T23256] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=13 [ 355.601117][T23274] ip6_vti0 speed is unknown, defaulting to 1000 [ 355.618510][ T29] audit: type=1400 audit(2000000005.902:29116): avc: denied { remove_name } for pid=23255 comm="syz.5.5642" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 355.641555][T23256] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 355.660116][ T29] audit: type=1400 audit(2000000005.949:29117): avc: denied { unlink } for pid=23255 comm="syz.5.5642" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 355.725990][T19448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.778181][T23279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5650'. [ 355.784597][T23283] loop5: detected capacity change from 0 to 512 [ 356.200216][T23295] netlink: 'syz.4.5653': attribute type 1 has an invalid length. [ 356.347649][ T29] audit: type=1326 audit(2000000006.547:29118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23296 comm="syz.4.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28229facb9 code=0x7ffc0000 [ 356.371558][ T29] audit: type=1326 audit(2000000006.547:29119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23296 comm="syz.4.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28229facb9 code=0x7ffc0000 [ 356.395343][ T29] audit: type=1326 audit(2000000006.547:29120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23296 comm="syz.4.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28229facb9 code=0x7ffc0000 [ 356.419050][ T29] audit: type=1326 audit(2000000006.547:29121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23296 comm="syz.4.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f28229bb58e code=0x7ffc0000 [ 356.442697][ T29] audit: type=1326 audit(2000000006.547:29122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23296 comm="syz.4.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f28229bb58e code=0x7ffc0000 [ 356.466411][ T29] audit: type=1326 audit(2000000006.547:29123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23296 comm="syz.4.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28229facb9 code=0x7ffc0000 [ 356.489985][ T29] audit: type=1326 audit(2000000006.547:29124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23296 comm="syz.4.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28229facb9 code=0x7ffc0000 [ 356.604628][T23281] Set syz1 is full, maxelem 65536 reached [ 356.675531][T22414] syz.2.5348 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 356.685417][T22414] CPU: 1 UID: 0 PID: 22414 Comm: syz.2.5348 Not tainted syzkaller #0 PREEMPT(voluntary) [ 356.685447][T22414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 356.685463][T22414] Call Trace: [ 356.685471][T22414] [ 356.685480][T22414] __dump_stack+0x1d/0x30 [ 356.685549][T22414] dump_stack_lvl+0x95/0xd0 [ 356.685569][T22414] dump_stack+0x15/0x1b [ 356.685599][T22414] dump_header+0x80/0x240 [ 356.685621][T22414] oom_kill_process+0x295/0x350 [ 356.685680][T22414] out_of_memory+0x97d/0xb80 [ 356.685706][T22414] try_charge_memcg+0x62e/0xa10 [ 356.685745][T22414] charge_memcg+0x51/0xc0 [ 356.685834][T22414] __mem_cgroup_charge+0x28/0xb0 [ 356.685863][T22414] shmem_get_folio_gfp+0x47b/0xd60 [ 356.685895][T22414] shmem_write_begin+0xfc/0x1f0 [ 356.685925][T22414] generic_perform_write+0x183/0x490 [ 356.686024][T22414] shmem_file_write_iter+0xc5/0xf0 [ 356.686095][T22414] __kernel_write_iter+0x319/0x590 [ 356.686267][T22414] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 356.686384][T22414] dump_user_range+0x63e/0x8f0 [ 356.686414][T22414] elf_core_dump+0x21a2/0x2330 [ 356.686449][T22414] ? 0xffffffffff600000 [ 356.686521][T22414] coredump_write+0xacf/0xdf0 [ 356.686554][T22414] vfs_coredump+0x26bc/0x3120 [ 356.686591][T22414] ? __memcg_slab_free_hook+0xbc/0x230 [ 356.686642][T22414] ? proc_coredump_connector+0x160/0x2b0 [ 356.686666][T22414] ? kmem_cache_free+0xdf/0x380 [ 356.686709][T22414] get_signal+0xd7b/0xf60 [ 356.686802][T22414] arch_do_signal_or_restart+0x96/0x450 [ 356.686847][T22414] irqentry_exit+0xf7/0x510 [ 356.686871][T22414] asm_exc_page_fault+0x26/0x30 [ 356.686894][T22414] RIP: 0033:0x7f5ec292acc1 [ 356.686913][T22414] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 356.686942][T22414] RSP: 002b:0000000000000040 EFLAGS: 00010217 [ 356.686959][T22414] RAX: 0000000000000000 RBX: 00007f5ec2ba5fa0 RCX: 00007f5ec292acb9 [ 356.686972][T22414] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000000 [ 356.686987][T22414] RBP: 00007f5ec2998bf7 R08: 0000000000000000 R09: 0000000000000000 [ 356.687003][T22414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.687019][T22414] R13: 00007f5ec2ba6038 R14: 00007f5ec2ba5fa0 R15: 00007ffe9b774648 [ 356.687086][T22414] [ 356.687094][T22414] memory: usage 307200kB, limit 307200kB, failcnt 27881 [ 356.707800][T23305] loop9: detected capacity change from 0 to 1024 [ 356.710978][T22414] memory+swap: usage 432100kB, limit 9007199254740988kB, failcnt 0 [ 356.711016][T22414] kmem: usage 10784kB, limit 9007199254740988kB, failcnt 0 [ 356.711028][T22414] Memory cgroup stats for /syz2: [ 357.008108][T23305] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 357.008282][T22414] cache 303280128 [ 357.013365][T23305] ext4 filesystem being mounted at /384/fi supports timestamps until 2038-01-19 (0x7fffffff) [ 357.025394][T22414] rss 221184 [ 357.042892][T22414] shmem 303280128 [ 357.046516][T22414] mapped_file 0 [ 357.049963][T22414] dirty 0 [ 357.052910][T22414] writeback 0 [ 357.056182][T22414] workingset_refault_anon 22516 [ 357.061078][T22414] workingset_refault_file 1 [ 357.065656][T22414] swap 127975424 [ 357.069803][T22414] swapcached 20480 [ 357.073644][T22414] pgpgin 532848 [ 357.077095][T22414] pgpgout 458744 [ 357.080760][T22414] pgfault 361415 [ 357.084335][T22414] pgmajfault 2989 [ 357.088013][T22414] inactive_anon 28147712 [ 357.092250][T22414] active_anon 273391616 [ 357.096431][T22414] inactive_file 0 [ 357.100168][T22414] active_file 8192 [ 357.103904][T22414] unevictable 0 [ 357.107420][T22414] hierarchical_memory_limit 314572800 [ 357.112883][T22414] hierarchical_memsw_limit 9223372036854771712 [ 357.119092][T22414] total_cache 303280128 [ 357.123289][T22414] total_rss 221184 [ 357.127045][T22414] total_shmem 303280128 [ 357.131188][T22414] total_mapped_file 0 [ 357.135156][T22414] total_dirty 0 [ 357.138742][T22414] total_writeback 0 [ 357.142616][T22414] total_workingset_refault_anon 22516 [ 357.148008][T22414] total_workingset_refault_file 1 [ 357.153028][T22414] total_swap 127975424 [ 357.157102][T22414] total_swapcached 20480 [ 357.161517][T22414] total_pgpgin 532960 [ 357.165706][T22414] total_pgpgout 458856 [ 357.169814][T22414] total_pgfault 361591 [ 357.173930][T22414] total_pgmajfault 2989 [ 357.178093][T22414] total_inactive_anon 28147712 [ 357.182878][T22414] total_active_anon 273391616 [ 357.187566][T22414] total_inactive_file 0 [ 357.191765][T22414] total_active_file 8192 [ 357.196052][T22414] total_unevictable 0 [ 357.200111][T22414] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5348,pid=22405,uid=0 [ 357.214849][T22414] Memory cgroup out of memory: Killed process 22405 (syz.2.5348) total-vm:90160kB, anon-rss:1220kB, file-rss:57648kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 357.244938][T17207] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 357.312910][T13885] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 357.386082][T23322] IPVS: Unknown mcast interface: tun [ 357.395103][T23323] loop7: detected capacity change from 0 to 512 [ 357.441677][T23325] loop9: detected capacity change from 0 to 8192 [ 357.450060][T23325] xt_hashlimit: size too large, truncated to 1048576 [ 357.456770][T23325] xt_hashlimit: max too large, truncated to 1048576 [ 357.464720][T23325] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5661'. [ 357.511999][T23332] netlink: 'syz.7.5665': attribute type 1 has an invalid length. [ 357.535167][T23333] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 357.541750][T23333] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 357.549298][T23333] vhci_hcd vhci_hcd.0: Device attached [ 357.628073][T23335] vhci_hcd: connection closed [ 357.628293][T13882] vhci_hcd vhci_hcd.9: stop threads [ 357.638313][T13882] vhci_hcd vhci_hcd.9: release socket [ 357.643839][T13882] vhci_hcd vhci_hcd.9: disconnect device [ 357.681208][T23341] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5666'. [ 357.746518][T23348] loop7: detected capacity change from 0 to 1024 [ 357.764655][T23348] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 357.787132][T23348] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.817667][T14815] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 358.204567][T23366] loop9: detected capacity change from 0 to 2048 [ 358.273938][T23368] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.281214][T23368] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.289113][ T4442] loop9: p1 < > p4 [ 358.293781][ T4442] loop9: p4 size 721408 extends beyond EOD, truncated [ 358.304013][T23366] loop9: p1 < > p4 [ 358.308770][T23366] loop9: p4 size 721408 extends beyond EOD, truncated [ 358.397169][T23368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.414137][T23372] netlink: 'syz.9.5676': attribute type 1 has an invalid length. [ 358.424779][T23368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.492823][T23368] tipc: Resetting bearer [ 358.513054][T23369] geneve2: entered promiscuous mode [ 358.524775][T13885] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.533782][T13885] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 358.556635][T13885] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.565628][T13885] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 358.628822][T23377] FAULT_INJECTION: forcing a failure. [ 358.628822][T23377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.630591][T13885] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.642057][T23377] CPU: 1 UID: 0 PID: 23377 Comm: syz.5.5678 Not tainted syzkaller #0 PREEMPT(voluntary) [ 358.642142][T23377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 358.642156][T23377] Call Trace: [ 358.642164][T23377] [ 358.642173][T23377] __dump_stack+0x1d/0x30 [ 358.642198][T23377] dump_stack_lvl+0x95/0xd0 [ 358.642294][T23377] dump_stack+0x15/0x1b [ 358.642316][T23377] should_fail_ex+0x263/0x280 [ 358.642339][T23377] should_fail+0xb/0x20 [ 358.642358][T23377] should_fail_usercopy+0x1a/0x20 [ 358.642436][T23377] _copy_from_iter+0xcf/0xea0 [ 358.642462][T23377] ? __alloc_skb+0x397/0x4b0 [ 358.642483][T23377] ? __alloc_skb+0x219/0x4b0 [ 358.642509][T23377] netlink_sendmsg+0x4ae/0x6f0 [ 358.642540][T23377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.642568][T23377] __sock_sendmsg+0x145/0x170 [ 358.642602][T23377] ____sys_sendmsg+0x31e/0x4a0 [ 358.642630][T23377] ___sys_sendmsg+0x195/0x1e0 [ 358.642666][T23377] __x64_sys_sendmsg+0xd4/0x160 [ 358.642759][T23377] x64_sys_call+0x17ba/0x3000 [ 358.642786][T23377] do_syscall_64+0xc0/0x2a0 [ 358.642816][T23377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.642839][T23377] RIP: 0033:0x7f1087efacb9 [ 358.642858][T23377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.642909][T23377] RSP: 002b:00007f1086957028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.642930][T23377] RAX: ffffffffffffffda RBX: 00007f1088175fa0 RCX: 00007f1087efacb9 [ 358.642946][T23377] RDX: 0000000024008850 RSI: 00002000000001c0 RDI: 0000000000000003 [ 358.642961][T23377] RBP: 00007f1086957090 R08: 0000000000000000 R09: 0000000000000000 [ 358.642975][T23377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.643032][T23377] R13: 00007f1088176038 R14: 00007f1088175fa0 R15: 00007ffe967cc218 [ 358.643095][T23377] [ 358.703180][T23380] loop4: detected capacity change from 0 to 1024 [ 358.704288][T13885] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 358.713477][T13885] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.862339][T13885] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 358.921848][T23380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 358.934684][T23380] ext4 filesystem being mounted at /598/fi supports timestamps until 2038-01-19 (0x7fffffff) [ 358.993127][T13622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 359.064950][T23401] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 359.071579][T23401] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 359.079292][T23401] vhci_hcd vhci_hcd.0: Device attached [ 359.219369][T23414] netlink: 'syz.9.5688': attribute type 1 has an invalid length. [ 359.227908][T23402] vhci_hcd: connection closed [ 359.229428][T23415] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5687'. [ 359.243338][T13877] vhci_hcd vhci_hcd.4: stop threads [ 359.248543][T13877] vhci_hcd vhci_hcd.4: release socket [ 359.253943][T13877] vhci_hcd vhci_hcd.4: disconnect device [ 359.275057][ T1036] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 359.283479][T23417] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5689'. [ 359.528059][T23421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23421 comm=syz.7.5691 [ 359.601797][T23423] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 359.673044][T23425] loop7: detected capacity change from 0 to 512 [ 359.766197][T23434] loop7: detected capacity change from 0 to 128 [ 359.814847][T23434] FAT-fs (loop7): Directory bread(block 32) failed [ 359.862965][T23434] FAT-fs (loop7): Directory bread(block 33) failed [ 359.873100][T13885] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.883507][T13885] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.916702][T23434] FAT-fs (loop7): Directory bread(block 34) failed [ 360.006718][T13885] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.017077][T13885] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.023392][T23434] FAT-fs (loop7): Directory bread(block 35) failed [ 360.055436][T23434] FAT-fs (loop7): Directory bread(block 36) failed [ 360.079663][T13885] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.090003][T13885] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.098126][T23434] FAT-fs (loop7): Directory bread(block 37) failed [ 360.107041][T23434] FAT-fs (loop7): Directory bread(block 38) failed [ 360.119522][T23434] FAT-fs (loop7): Directory bread(block 39) failed [ 360.125899][T23437] ip6_vti0 speed is unknown, defaulting to 1000 [ 360.136897][T23434] FAT-fs (loop7): Directory bread(block 40) failed [ 360.154356][T13885] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.162358][T23434] FAT-fs (loop7): Directory bread(block 41) failed [ 360.165245][T13885] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.336448][T23437] chnl_net:caif_netlink_parms(): no params data found [ 360.456893][T23453] ip6_vti0 speed is unknown, defaulting to 1000 [ 360.463781][T13885] bond0: left allmulticast mode [ 360.468647][T13885] bond_slave_0: left allmulticast mode [ 360.474144][T13885] bond_slave_1: left allmulticast mode [ 360.479619][T13885] bridge_slave_1: left allmulticast mode [ 360.485387][T13885] bond0: left promiscuous mode [ 360.490154][T13885] bond_slave_0: left promiscuous mode [ 360.495626][T13885] bond_slave_1: left promiscuous mode [ 360.501195][T13885] bridge_slave_1: left promiscuous mode [ 360.506991][T13885] bridge0: port 2(bond0) entered disabled state [ 360.632884][T13885] bridge_slave_0: left allmulticast mode [ 360.638558][T13885] bridge_slave_0: left promiscuous mode [ 360.644356][T13885] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.692110][T23470] FAULT_INJECTION: forcing a failure. [ 360.692110][T23470] name failslab, interval 1, probability 0, space 0, times 0 [ 360.704865][T23470] CPU: 0 UID: 0 PID: 23470 Comm: syz.5.5700 Not tainted syzkaller #0 PREEMPT(voluntary) [ 360.704907][T23470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.704969][T23470] Call Trace: [ 360.704976][T23470] [ 360.704985][T23470] __dump_stack+0x1d/0x30 [ 360.705066][T23470] dump_stack_lvl+0x95/0xd0 [ 360.705091][T23470] dump_stack+0x15/0x1b [ 360.705110][T23470] should_fail_ex+0x263/0x280 [ 360.705130][T23470] should_failslab+0x8c/0xb0 [ 360.705212][T23470] __kmalloc_cache_noprof+0x64/0x4a0 [ 360.705240][T23470] ? audit_log_d_path+0x8d/0x150 [ 360.705314][T23470] audit_log_d_path+0x8d/0x150 [ 360.705335][T23470] audit_log_d_path_exe+0x42/0x70 [ 360.705361][T23470] audit_log_task+0x1e8/0x250 [ 360.705395][T23470] ? kstrtouint+0x76/0xc0 [ 360.705437][T23470] audit_seccomp+0x60/0x100 [ 360.705466][T23470] ? __seccomp_filter+0x8db/0x1350 [ 360.705555][T23470] __seccomp_filter+0x8ec/0x1350 [ 360.705584][T23470] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 360.705614][T23470] ? vfs_write+0x86e/0x9f0 [ 360.705659][T23470] __secure_computing+0x81/0x150 [ 360.705684][T23470] syscall_trace_enter+0xce/0x1e0 [ 360.705713][T23470] do_syscall_64+0x9a/0x2a0 [ 360.705747][T23470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.705779][T23470] RIP: 0033:0x7f1087efacb9 [ 360.705876][T23470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.705896][T23470] RSP: 002b:00007f1086957028 EFLAGS: 00000246 ORIG_RAX: 0000000000000064 [ 360.705939][T23470] RAX: ffffffffffffffda RBX: 00007f1088175fa0 RCX: 00007f1087efacb9 [ 360.705960][T23470] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 9999999999999999 [ 360.706019][T23470] RBP: 00007f1086957090 R08: 0000000000000000 R09: 0000000000000000 [ 360.706032][T23470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.706045][T23470] R13: 00007f1088176038 R14: 00007f1088175fa0 R15: 00007ffe967cc218 [ 360.706114][T23470] [ 360.932080][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 360.932097][ T29] audit: type=1326 audit(2000000010.878:29146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23468 comm="syz.5.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1087ebb58e code=0x7ffc0000 [ 360.961695][ T29] audit: type=1326 audit(2000000010.878:29147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23468 comm="syz.5.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1087ebb58e code=0x7ffc0000 [ 360.985160][ T29] audit: type=1326 audit(2000000010.878:29148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23468 comm="syz.5.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1087ebb58e code=0x7ffc0000 [ 361.003996][T23473] loop9: detected capacity change from 0 to 2048 [ 361.008636][ T29] audit: type=1326 audit(2000000010.878:29149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23468 comm="syz.5.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1087efacb9 code=0x7ffc0000 [ 361.038578][ T29] audit: type=1326 audit(2000000010.878:29150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23468 comm="syz.5.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1087efacb9 code=0x7ffc0000 [ 361.073593][ T30] oom_reaper: reaped process 23196 (syz.2.5613), now anon-rss:40kB, file-rss:21204kB, shmem-rss:0kB [ 361.121991][T23473] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.166321][T22445] syz.2.5348 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 361.176292][T22445] CPU: 1 UID: 0 PID: 22445 Comm: syz.2.5348 Not tainted syzkaller #0 PREEMPT(voluntary) [ 361.176325][T22445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 361.176341][T22445] Call Trace: [ 361.176350][T22445] [ 361.176358][T22445] __dump_stack+0x1d/0x30 [ 361.176383][T22445] dump_stack_lvl+0x95/0xd0 [ 361.176420][T22445] dump_stack+0x15/0x1b [ 361.176444][T22445] dump_header+0x80/0x240 [ 361.176469][T22445] oom_kill_process+0x295/0x350 [ 361.176491][T22445] out_of_memory+0x97d/0xb80 [ 361.176511][T22445] try_charge_memcg+0x62e/0xa10 [ 361.176612][T22445] charge_memcg+0x51/0xc0 [ 361.176716][T22445] __mem_cgroup_charge+0x28/0xb0 [ 361.176752][T22445] shmem_get_folio_gfp+0x47b/0xd60 [ 361.176781][T22445] shmem_write_begin+0xfc/0x1f0 [ 361.176855][T22445] generic_perform_write+0x183/0x490 [ 361.176888][T22445] shmem_file_write_iter+0xc5/0xf0 [ 361.176952][T22445] __kernel_write_iter+0x319/0x590 [ 361.176991][T22445] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 361.177047][T22445] dump_user_range+0x63e/0x8f0 [ 361.177073][T22445] elf_core_dump+0x21a2/0x2330 [ 361.177181][T22445] ? 0xffffffffff600000 [ 361.177204][T22445] coredump_write+0xacf/0xdf0 [ 361.177238][T22445] vfs_coredump+0x26bc/0x3120 [ 361.177326][T22445] ? __memcg_slab_free_hook+0xbc/0x230 [ 361.177374][T22445] ? proc_coredump_connector+0x160/0x2b0 [ 361.177398][T22445] ? kmem_cache_free+0xdf/0x380 [ 361.177422][T22445] get_signal+0xd7b/0xf60 [ 361.177478][T22445] arch_do_signal_or_restart+0x96/0x450 [ 361.177506][T22445] irqentry_exit+0xf7/0x510 [ 361.177529][T22445] asm_exc_page_fault+0x26/0x30 [ 361.177611][T22445] RIP: 0033:0x7f5ec292acc1 [ 361.177627][T22445] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 361.177644][T22445] RSP: 002b:0000000000000040 EFLAGS: 00010217 [ 361.177660][T22445] RAX: 0000000000000000 RBX: 00007f5ec2ba5fa0 RCX: 00007f5ec292acb9 [ 361.177673][T22445] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000000 [ 361.177686][T22445] RBP: 00007f5ec2998bf7 R08: 0000000000000000 R09: 0000000000000000 [ 361.177761][T22445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.177775][T22445] R13: 00007f5ec2ba6038 R14: 00007f5ec2ba5fa0 R15: 00007ffe9b774648 [ 361.177797][T22445] [ 361.177818][T22445] memory: usage 307200kB, limit 307200kB, failcnt 31056 [ 361.414870][T22445] memory+swap: usage 431524kB, limit 9007199254740988kB, failcnt 0 [ 361.422820][T22445] kmem: usage 10692kB, limit 9007199254740988kB, failcnt 0 [ 361.430060][T22445] Memory cgroup stats for /syz2: [ 361.430656][T22445] cache 303534080 [ 361.439296][T22445] rss 40960 [ 361.442390][T22445] shmem 303534080 [ 361.446064][T22445] mapped_file 0 [ 361.449602][T22445] dirty 0 [ 361.452533][T22445] writeback 20480 [ 361.456168][T22445] workingset_refault_anon 22516 [ 361.461098][T22445] workingset_refault_file 1 [ 361.465595][T22445] swap 127959040 [ 361.469156][T22445] swapcached 36864 [ 361.472874][T22445] pgpgin 545728 [ 361.476421][T22445] pgpgout 471601 [ 361.480086][T22445] pgfault 362220 [ 361.483623][T22445] pgmajfault 2989 [ 361.487250][T22445] inactive_anon 262008832 [ 361.491595][T22445] active_anon 40615936 [ 361.495654][T22445] inactive_file 0 [ 361.499312][T22445] active_file 8192 [ 361.503115][T22445] unevictable 0 [ 361.506639][T22445] hierarchical_memory_limit 314572800 [ 361.512040][T22445] hierarchical_memsw_limit 9223372036854771712 [ 361.518233][T22445] total_cache 303534080 [ 361.522401][T22445] total_rss 40960 [ 361.526025][T22445] total_shmem 303534080 [ 361.530226][T22445] total_mapped_file 0 [ 361.534300][T22445] total_dirty 0 [ 361.537751][T22445] total_writeback 20480 [ 361.542111][T22445] total_workingset_refault_anon 22516 [ 361.547515][T22445] total_workingset_refault_file 1 [ 361.552627][T22445] total_swap 127959040 [ 361.556773][T22445] total_swapcached 36864 [ 361.561004][T22445] total_pgpgin 545840 [ 361.565007][T22445] total_pgpgout 471713 [ 361.569106][T22445] total_pgfault 362396 [ 361.573227][T22445] total_pgmajfault 2989 [ 361.577404][T22445] total_inactive_anon 262008832 [ 361.582253][T22445] total_active_anon 40615936 [ 361.586941][T22445] total_inactive_file 0 [ 361.591089][T22445] total_active_file 8192 [ 361.595348][T22445] total_unevictable 0 [ 361.599320][T22445] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5348,pid=22415,uid=0 [ 361.614085][T22445] Memory cgroup out of memory: Killed process 22415 (syz.2.5348) total-vm:90292kB, anon-rss:1228kB, file-rss:57520kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 361.746909][T13885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.757263][T13885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.767243][T13885] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 361.776784][T13885] bond0 (unregistering): Released all slaves [ 361.784415][T13885] bond1 (unregistering): Released all slaves [ 361.793265][T13885] bond2 (unregistering): Released all slaves [ 361.803344][T13885] bond3 (unregistering): Released all slaves [ 361.863384][T23486] bridge3: entered promiscuous mode [ 361.896869][T23472] ip6_vti0 speed is unknown, defaulting to 1000 [ 362.077125][T23437] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.084205][T23437] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.118869][T23437] bridge_slave_0: entered allmulticast mode [ 362.132541][T23437] bridge_slave_0: entered promiscuous mode [ 362.140362][T23515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5709'. [ 362.150347][T23437] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.157641][T23437] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.170906][T23437] bridge_slave_1: entered allmulticast mode [ 362.183433][T23437] bridge_slave_1: entered promiscuous mode [ 362.191454][T13885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.198898][T13885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.217431][T13885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.224893][T13885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.233969][T13885] hsr0: left allmulticast mode [ 362.238927][T13885] veth1_macvtap: left promiscuous mode [ 362.244481][T13885] veth0_macvtap: left promiscuous mode [ 362.302697][T13885] team0 (unregistering): Port device team_slave_1 removed [ 362.315189][T13885] team0 (unregistering): Port device team_slave_0 removed [ 362.388827][T23437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.412535][T23521] netlink: 'syz.5.5711': attribute type 1 has an invalid length. [ 362.425447][T23437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.442832][T22445] syz.2.5348 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 362.452752][T22445] CPU: 0 UID: 0 PID: 22445 Comm: syz.2.5348 Not tainted syzkaller #0 PREEMPT(voluntary) [ 362.452783][T22445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 362.452795][T22445] Call Trace: [ 362.452801][T22445] [ 362.452809][T22445] __dump_stack+0x1d/0x30 [ 362.452834][T22445] dump_stack_lvl+0x95/0xd0 [ 362.452854][T22445] dump_stack+0x15/0x1b [ 362.452885][T22445] dump_header+0x80/0x240 [ 362.452905][T22445] oom_kill_process+0x295/0x350 [ 362.452926][T22445] out_of_memory+0x97d/0xb80 [ 362.452992][T22445] try_charge_memcg+0x62e/0xa10 [ 362.453029][T22445] charge_memcg+0x51/0xc0 [ 362.453138][T22445] __mem_cgroup_charge+0x28/0xb0 [ 362.453173][T22445] shmem_get_folio_gfp+0x47b/0xd60 [ 362.453222][T22445] shmem_write_begin+0xfc/0x1f0 [ 362.453247][T22445] generic_perform_write+0x183/0x490 [ 362.453283][T22445] shmem_file_write_iter+0xc5/0xf0 [ 362.453371][T22445] __kernel_write_iter+0x319/0x590 [ 362.453405][T22445] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 362.453520][T22445] dump_user_range+0x63e/0x8f0 [ 362.453547][T22445] elf_core_dump+0x21a2/0x2330 [ 362.453649][T22445] ? 0xffffffffff600000 [ 362.453738][T22445] coredump_write+0xacf/0xdf0 [ 362.453766][T22445] vfs_coredump+0x26bc/0x3120 [ 362.453795][T22445] ? __memcg_slab_free_hook+0xbc/0x230 [ 362.453875][T22445] ? proc_coredump_connector+0x160/0x2b0 [ 362.453920][T22445] ? kmem_cache_free+0xdf/0x380 [ 362.454006][T22445] get_signal+0xd7b/0xf60 [ 362.454055][T22445] arch_do_signal_or_restart+0x96/0x450 [ 362.454085][T22445] irqentry_exit+0xf7/0x510 [ 362.454119][T22445] asm_exc_page_fault+0x26/0x30 [ 362.454181][T22445] RIP: 0033:0x7f5ec292acc1 [ 362.454197][T22445] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 362.454214][T22445] RSP: 002b:0000000000000040 EFLAGS: 00010217 [ 362.454318][T22445] RAX: 0000000000000000 RBX: 00007f5ec2ba5fa0 RCX: 00007f5ec292acb9 [ 362.454362][T22445] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000000 [ 362.454377][T22445] RBP: 00007f5ec2998bf7 R08: 0000000000000000 R09: 0000000000000000 [ 362.454392][T22445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.454454][T22445] R13: 00007f5ec2ba6038 R14: 00007f5ec2ba5fa0 R15: 00007ffe9b774648 [ 362.454477][T22445] [ 362.454501][T22445] memory: usage 307200kB, limit 307200kB, failcnt 32367 [ 362.695010][T22445] memory+swap: usage 432148kB, limit 9007199254740988kB, failcnt 0 [ 362.702938][T22445] kmem: usage 10480kB, limit 9007199254740988kB, failcnt 0 [ 362.710223][T22445] Memory cgroup stats for /syz2: [ 362.710424][T22445] cache 303738880 [ 362.718993][T22445] rss 69632 [ 362.722098][T22445] shmem 303738880 [ 362.725726][T22445] mapped_file 0 [ 362.729291][T22445] dirty 0 [ 362.732222][T22445] writeback 20480 [ 362.735914][T22445] workingset_refault_anon 22523 [ 362.740810][T22445] workingset_refault_file 1 [ 362.745313][T22445] swap 127946752 [ 362.748913][T22445] swapcached 49152 [ 362.752660][T22445] pgpgin 549211 [ 362.756194][T22445] pgpgout 475031 [ 362.759732][T22445] pgfault 362444 [ 362.763315][T22445] pgmajfault 2996 [ 362.766940][T22445] inactive_anon 33595392 [ 362.771194][T22445] active_anon 268955648 [ 362.775363][T22445] inactive_file 0 [ 362.778982][T22445] active_file 8192 [ 362.782744][T22445] unevictable 0 [ 362.786193][T22445] hierarchical_memory_limit 314572800 [ 362.791554][T22445] hierarchical_memsw_limit 9223372036854771712 [ 362.797748][T22445] total_cache 303738880 [ 362.801921][T22445] total_rss 69632 [ 362.805630][T22445] total_shmem 303738880 [ 362.809774][T22445] total_mapped_file 0 [ 362.813779][T22445] total_dirty 0 [ 362.817233][T22445] total_writeback 20480 [ 362.821381][T22445] total_workingset_refault_anon 22523 [ 362.826857][T22445] total_workingset_refault_file 1 [ 362.831870][T22445] total_swap 127946752 [ 362.835979][T22445] total_swapcached 49152 [ 362.840229][T22445] total_pgpgin 549323 [ 362.844213][T22445] total_pgpgout 475143 [ 362.848296][T22445] total_pgfault 362620 [ 362.852352][T22445] total_pgmajfault 2996 [ 362.856526][T22445] total_inactive_anon 33595392 [ 362.861365][T22445] total_active_anon 268955648 [ 362.866031][T22445] total_inactive_file 0 [ 362.870553][T22445] total_active_file 8192 [ 362.874837][T22445] total_unevictable 0 [ 362.878839][T22445] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5348,pid=22411,uid=0 [ 362.893763][T22445] Memory cgroup out of memory: Killed process 22411 (syz.2.5348) total-vm:90292kB, anon-rss:1228kB, file-rss:57520kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 362.930357][T23437] team0: Port device team_slave_0 added [ 362.950529][T23437] team0: Port device team_slave_1 added [ 362.962641][T23525] loop5: detected capacity change from 0 to 1024 [ 362.970555][T23525] EXT4-fs: Ignoring removed nobh option [ 362.976220][T23525] EXT4-fs: Ignoring removed bh option [ 362.991715][T23525] EXT4-fs: Mount option(s) incompatible with ext3 [ 363.017945][T23437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.024998][T23437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.051067][T23437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.096861][T23539] FAULT_INJECTION: forcing a failure. [ 363.096861][T23539] name failslab, interval 1, probability 0, space 0, times 0 [ 363.109589][T23539] CPU: 1 UID: 0 PID: 23539 Comm: syz.7.5713 Not tainted syzkaller #0 PREEMPT(voluntary) [ 363.109617][T23539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 363.109680][T23539] Call Trace: [ 363.109688][T23539] [ 363.109695][T23539] __dump_stack+0x1d/0x30 [ 363.109722][ T29] audit: type=1326 audit(2000000012.908:29151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.7.5713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e5d5acb9 code=0x7ffc0000 [ 363.109721][T23539] dump_stack_lvl+0x95/0xd0 [ 363.109855][T23539] dump_stack+0x15/0x1b [ 363.109877][T23539] should_fail_ex+0x263/0x280 [ 363.109900][T23539] should_failslab+0x8c/0xb0 [ 363.109976][T23539] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 363.110002][T23539] ? sidtab_sid2str_get+0xa0/0x130 [ 363.110035][T23539] kmemdup_noprof+0x2b/0x70 [ 363.110068][T23539] sidtab_sid2str_get+0xa0/0x130 [ 363.110110][T23539] security_sid_to_context_core+0x1eb/0x2e0 [ 363.110143][T23539] security_sid_to_context+0x27/0x40 [ 363.110173][T23539] selinux_lsmprop_to_secctx+0x67/0xf0 [ 363.110238][T23539] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 363.110263][T23539] audit_log_subj_ctx+0xa4/0x3e0 [ 363.110325][T23539] ? skb_put+0xa9/0xf0 [ 363.110347][T23539] audit_log_task_context+0x48/0x70 [ 363.110371][T23539] audit_log_task+0xf3/0x250 [ 363.110417][T23539] ? kstrtouint+0x76/0xc0 [ 363.110542][T23539] audit_seccomp+0x60/0x100 [ 363.110574][T23539] ? __seccomp_filter+0x8db/0x1350 [ 363.110602][T23539] __seccomp_filter+0x8ec/0x1350 [ 363.110631][T23539] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 363.110682][T23539] ? vfs_write+0x86e/0x9f0 [ 363.110774][T23539] ? __rcu_read_unlock+0x4e/0x70 [ 363.110795][T23539] ? __fget_files+0x184/0x1c0 [ 363.110821][T23539] __secure_computing+0x81/0x150 [ 363.110868][T23539] syscall_trace_enter+0xce/0x1e0 [ 363.110914][T23539] do_syscall_64+0x9a/0x2a0 [ 363.110945][T23539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.110969][T23539] RIP: 0033:0x7f57e5d5acb9 [ 363.110992][T23539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.111088][T23539] RSP: 002b:00007f57e47b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 363.111110][T23539] RAX: ffffffffffffffda RBX: 00007f57e5fd5fa0 RCX: 00007f57e5d5acb9 [ 363.111145][T23539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000008c0 [ 363.111160][T23539] RBP: 00007f57e47b7090 R08: 0000000000000000 R09: 0000000000000000 [ 363.111174][T23539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.111229][T23539] R13: 00007f57e5fd6038 R14: 00007f57e5fd5fa0 R15: 00007ffc6acc1fe8 [ 363.111256][T23539] [ 363.111266][T23539] audit: error in audit_log_subj_ctx [ 363.119675][ T29] audit: type=1326 audit(2000000012.908:29152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.7.5713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e5d5acb9 code=0x7ffc0000 [ 363.145148][T23437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.167778][ T29] audit: type=1326 audit(2000000012.908:29153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.7.5713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57e5d5acb9 code=0x7ffc0000 [ 363.172290][T23437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.176446][ T29] audit: type=1326 audit(2000000012.908:29154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.7.5713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e5d5acb9 code=0x7ffc0000 [ 363.181173][T23437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.251691][T23525] loop5: detected capacity change from 0 to 2048 [ 363.527610][T23525] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.577749][T23525] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 363.597670][T23437] hsr_slave_0: entered promiscuous mode [ 363.629191][T23437] hsr_slave_1: entered promiscuous mode [ 363.635264][T23437] debugfs: 'hsr0' already exists in 'hsr' [ 363.641063][T23437] Cannot create hsr debugfs directory [ 363.658404][T13885] IPVS: stop unused estimator thread 0... [ 363.667460][T17207] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.822566][T23568] ip6_vti0 speed is unknown, defaulting to 1000 [ 364.068322][T23437] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 364.093126][T23437] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 364.118833][T23437] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 364.136450][T23437] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 364.207122][T23437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.228247][T23437] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.274564][T13882] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.281791][T13882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.299230][T13882] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.306346][T13882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.346681][T23437] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 364.357122][T23437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 364.445461][T23437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.597550][T23640] loop7: detected capacity change from 0 to 128 [ 364.618071][T23643] FAULT_INJECTION: forcing a failure. [ 364.618071][T23643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.631470][T23643] CPU: 1 UID: 0 PID: 23643 Comm: syz.9.5719 Not tainted syzkaller #0 PREEMPT(voluntary) [ 364.631501][T23643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 364.631516][T23643] Call Trace: [ 364.631525][T23643] [ 364.631535][T23643] __dump_stack+0x1d/0x30 [ 364.631559][T23643] dump_stack_lvl+0x95/0xd0 [ 364.631608][T23643] dump_stack+0x15/0x1b [ 364.631627][T23643] should_fail_ex+0x263/0x280 [ 364.631647][T23643] should_fail+0xb/0x20 [ 364.631715][T23643] should_fail_usercopy+0x1a/0x20 [ 364.631741][T23643] _copy_from_user+0x1c/0xb0 [ 364.631767][T23643] ___sys_sendmsg+0xc1/0x1e0 [ 364.631798][T23643] __x64_sys_sendmsg+0xd4/0x160 [ 364.631875][T23643] x64_sys_call+0x17ba/0x3000 [ 364.631902][T23643] do_syscall_64+0xc0/0x2a0 [ 364.631929][T23643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.631983][T23643] RIP: 0033:0x7ff3abf8acb9 [ 364.632000][T23643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.632018][T23643] RSP: 002b:00007ff3aa9e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.632041][T23643] RAX: ffffffffffffffda RBX: 00007ff3ac205fa0 RCX: 00007ff3abf8acb9 [ 364.632059][T23643] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 364.632074][T23643] RBP: 00007ff3aa9e7090 R08: 0000000000000000 R09: 0000000000000000 [ 364.632100][T23643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.632139][T23643] R13: 00007ff3ac206038 R14: 00007ff3ac205fa0 R15: 00007ffd562893b8 [ 364.632167][T23643] [ 364.633511][T19448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.816641][T23437] veth0_vlan: entered promiscuous mode [ 364.836802][T23437] veth1_vlan: entered promiscuous mode [ 364.865606][T23437] veth0_macvtap: entered promiscuous mode [ 364.878474][T23437] veth1_macvtap: entered promiscuous mode [ 364.928464][T23437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.949215][T23660] ip6_vti0 speed is unknown, defaulting to 1000 [ 364.959914][T23437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.986531][T13882] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.995533][T13882] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.004230][T13882] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.113462][T13877] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.196832][T23691] loop9: detected capacity change from 0 to 1024 [ 365.213032][T23693] ip6_vti0 speed is unknown, defaulting to 1000 [ 365.266800][T23691] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 365.281084][T23691] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.326343][T23691] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5730: bg 0: block 112: padding at end of block bitmap is not set [ 365.410381][T17207] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 365.412536][T23704] sctp: [Deprecated]: syz.7.5731 (pid 23704) Use of int in max_burst socket option deprecated. [ 365.412536][T23704] Use struct sctp_assoc_value instead [ 365.641855][T22403] syz.2.5348 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 365.651919][T22403] CPU: 1 UID: 0 PID: 22403 Comm: syz.2.5348 Not tainted syzkaller #0 PREEMPT(voluntary) [ 365.651960][T22403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 365.651975][T22403] Call Trace: [ 365.651982][T22403] [ 365.651990][T22403] __dump_stack+0x1d/0x30 [ 365.652013][T22403] dump_stack_lvl+0x95/0xd0 [ 365.652033][T22403] dump_stack+0x15/0x1b [ 365.652055][T22403] dump_header+0x80/0x240 [ 365.652074][T22403] oom_kill_process+0x295/0x350 [ 365.652095][T22403] out_of_memory+0x97d/0xb80 [ 365.652174][T22403] try_charge_memcg+0x62e/0xa10 [ 365.652213][T22403] charge_memcg+0x51/0xc0 [ 365.652241][T22403] __mem_cgroup_charge+0x28/0xb0 [ 365.652275][T22403] shmem_get_folio_gfp+0x47b/0xd60 [ 365.652335][T22403] shmem_write_begin+0xfc/0x1f0 [ 365.652359][T22403] generic_perform_write+0x183/0x490 [ 365.652429][T22403] ? __mark_inode_dirty+0x1af/0x740 [ 365.652460][T22403] shmem_file_write_iter+0xc5/0xf0 [ 365.652492][T22403] __kernel_write_iter+0x319/0x590 [ 365.652589][T22403] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 365.652625][T22403] dump_user_range+0x63e/0x8f0 [ 365.652696][T22403] elf_core_dump+0x21a2/0x2330 [ 365.652729][T22403] ? 0xffffffffff600000 [ 365.652750][T22403] coredump_write+0xacf/0xdf0 [ 365.652777][T22403] vfs_coredump+0x26bc/0x3120 [ 365.652868][T22403] ? __memcg_slab_free_hook+0xbc/0x230 [ 365.652901][T22403] ? proc_coredump_connector+0x160/0x2b0 [ 365.652930][T22403] ? kmem_cache_free+0xdf/0x380 [ 365.652958][T22403] get_signal+0xd7b/0xf60 [ 365.652987][T22403] arch_do_signal_or_restart+0x96/0x450 [ 365.653029][T22403] irqentry_exit+0xf7/0x510 [ 365.653104][T22403] asm_exc_page_fault+0x26/0x30 [ 365.653126][T22403] RIP: 0033:0x7f5ec292acc1 [ 365.653145][T22403] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 365.653167][T22403] RSP: 002b:0000000000000040 EFLAGS: 00010217 [ 365.653191][T22403] RAX: 0000000000000000 RBX: 00007f5ec2ba5fa0 RCX: 00007f5ec292acb9 [ 365.653273][T22403] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000000 [ 365.653312][T22403] RBP: 00007f5ec2998bf7 R08: 0000000000000000 R09: 0000000000000000 [ 365.653406][T22403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.653419][T22403] R13: 00007f5ec2ba6038 R14: 00007f5ec2ba5fa0 R15: 00007ffe9b774648 [ 365.653436][T22403] [ 365.653443][T22403] memory: usage 307200kB, limit 307200kB, failcnt 33897 [ 365.896596][T22403] memory+swap: usage 432040kB, limit 9007199254740988kB, failcnt 0 [ 365.904542][T22403] kmem: usage 10396kB, limit 9007199254740988kB, failcnt 0 [ 365.912208][T22403] Memory cgroup stats for /syz2: [ 365.912987][T22403] cache 303763456 [ 365.921660][T22403] rss 122880 [ 365.925149][T22403] shmem 303763456 [ 365.928804][T22403] mapped_file 0 [ 365.932261][T22403] dirty 0 [ 365.935216][T22403] writeback 0 [ 365.938501][T22403] workingset_refault_anon 22540 [ 365.943346][T22403] workingset_refault_file 1 [ 365.947994][T22403] swap 127803392 [ 365.951537][T22403] swapcached 45056 [ 365.955273][T22403] pgpgin 565334 [ 365.958747][T22403] pgpgout 491138 [ 365.962286][T22403] pgfault 363281 [ 365.965829][T22403] pgmajfault 3011 [ 365.969500][T22403] inactive_anon 3690496 [ 365.973645][T22403] active_anon 299966464 [ 365.977799][T22403] inactive_file 8192 [ 365.981783][T22403] active_file 0 [ 365.985238][T22403] unevictable 0 [ 365.988721][T22403] hierarchical_memory_limit 314572800 [ 365.994095][T22403] hierarchical_memsw_limit 9223372036854771712 [ 366.000262][T22403] total_cache 303763456 [ 366.004405][T22403] total_rss 122880 [ 366.008129][T22403] total_shmem 303763456 [ 366.012310][T22403] total_mapped_file 0 [ 366.016377][T22403] total_dirty 0 [ 366.019832][T22403] total_writeback 0 [ 366.023670][T22403] total_workingset_refault_anon 22540 [ 366.029095][T22403] total_workingset_refault_file 1 [ 366.034165][T22403] total_swap 127803392 [ 366.038229][T22403] total_swapcached 45056 [ 366.042683][T22403] total_pgpgin 565446 [ 366.046737][T22403] total_pgpgout 491250 [ 366.050801][T22403] total_pgfault 363457 [ 366.054910][T22403] total_pgmajfault 3011 [ 366.059056][T22403] total_inactive_anon 3690496 [ 366.063785][T22403] total_active_anon 299966464 [ 366.068451][T22403] total_inactive_file 8192 [ 366.072863][T22403] total_active_file 0 [ 366.076915][T22403] total_unevictable 0 [ 366.080945][T22403] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5348,pid=22436,uid=0 [ 366.095640][T22403] Memory cgroup out of memory: Killed process 22436 (syz.2.5348) total-vm:90292kB, anon-rss:1228kB, file-rss:57648kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 366.155155][T23724] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 366.161722][T23724] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 366.169285][T23724] vhci_hcd vhci_hcd.0: Device attached [ 366.194298][T23725] vhci_hcd: connection closed [ 366.194633][T19232] vhci_hcd vhci_hcd.5: stop threads [ 366.204657][T19232] vhci_hcd vhci_hcd.5: release socket [ 366.210233][T19232] vhci_hcd vhci_hcd.5: disconnect device [ 366.455273][T23746] loop7: detected capacity change from 0 to 128 [ 366.490671][T23747] loop9: detected capacity change from 0 to 1024 [ 366.498074][T23746] FAT-fs (loop7): Directory bread(block 414) failed [ 366.511240][T23746] FAT-fs (loop7): Directory bread(block 415) failed [ 366.523843][T23746] FAT-fs (loop7): Directory bread(block 416) failed [ 366.531955][T23747] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 366.550831][T23746] FAT-fs (loop7): Directory bread(block 417) failed [ 366.557772][T23747] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.571979][T23749] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 366.593779][T23746] FAT-fs (loop7): Directory bread(block 418) failed [ 366.608973][T23746] FAT-fs (loop7): Directory bread(block 419) failed [ 366.640067][T23746] FAT-fs (loop7): Directory bread(block 420) failed [ 366.673542][T23746] FAT-fs (loop7): Directory bread(block 421) failed [ 366.681844][T17207] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 366.694868][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 366.694885][ T29] audit: type=1326 audit(2000000016.275:29179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23753 comm="syz.4.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a9c9acb9 code=0x7ffc0000 [ 366.697987][T23746] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5745'. [ 366.701359][ T29] audit: type=1326 audit(2000000016.275:29180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23753 comm="syz.4.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f19a9c9acb9 code=0x7ffc0000 [ 366.779534][T23754] ------------[ cut here ]------------ [ 366.785065][T23754] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0x0, 0x0] s64=[0x0, 0x0] u32=[0x80632f4, 0x0] s32=[0x0, 0x0] var_off=(0x0, 0x0) [ 366.801702][T23754] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.4.5747/23754 [ 366.812773][T23754] Modules linked in: [ 366.816676][T23754] CPU: 0 UID: 0 PID: 23754 Comm: syz.4.5747 Not tainted syzkaller #0 PREEMPT(voluntary) [ 366.826605][T23754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 366.836720][T23754] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 366.843102][T23754] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 366.862905][T23754] RSP: 0018:ffffc900069733a0 EFLAGS: 00010246 [ 366.869012][T23754] RAX: ffff88816bc58a90 RBX: 0000000000000000 RCX: 0000000000000000 [ 366.877084][T23754] RDX: ffffffff867f7c6c RSI: ffffffff866c2a01 RDI: ffffffff86fb6fe0 [ 366.885073][T23754] RBP: ffff888137c22ae0 R08: 0000000000000000 R09: 0000000000000000 [ 366.893158][T23754] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888137c22aa0 [ 366.901242][T23754] R13: 0000000000000000 R14: ffff888137c22aec R15: ffff888137c22ad8 [ 366.909440][T23754] FS: 00007f19a86f76c0(0000) GS:ffff8882aeb7c000(0000) knlGS:0000000000000000 [ 366.918579][T23754] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.925230][T23754] CR2: 0000200000003380 CR3: 000000011e63c000 CR4: 00000000003506f0 [ 366.933264][T23754] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 366.941335][T23754] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 366.949315][T23754] Call Trace: [ 366.952620][T23754] [ 366.955562][T23754] reg_set_min_max+0x1c8/0x260 [ 366.960336][T23754] check_cond_jmp_op+0x13bd/0x1a80 [ 366.965647][T23754] do_check+0x3356/0x8250 [ 366.970015][T23754] do_check_common+0xccf/0x1300 [ 366.975008][T23754] bpf_check+0x2f85/0xc890 [ 366.979523][T23754] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 366.985559][T23754] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 366.989740][T22412] syz.2.5348 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 366.991488][T23754] ? css_rstat_updated+0xbb/0x280 [ 367.001385][T22412] CPU: 1 UID: 0 PID: 22412 Comm: syz.2.5348 Not tainted syzkaller #0 PREEMPT(voluntary) [ 367.001441][T22412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 367.001455][T22412] Call Trace: [ 367.001463][T22412] [ 367.001472][T22412] __dump_stack+0x1d/0x30 [ 367.001498][T22412] dump_stack_lvl+0x95/0xd0 [ 367.001544][T22412] dump_stack+0x15/0x1b [ 367.001566][T22412] dump_header+0x80/0x240 [ 367.001588][T22412] oom_kill_process+0x295/0x350 [ 367.001633][T22412] out_of_memory+0x97d/0xb80 [ 367.001657][T22412] try_charge_memcg+0x62e/0xa10 [ 367.001716][T22412] charge_memcg+0x51/0xc0 [ 367.001746][T22412] __mem_cgroup_charge+0x28/0xb0 [ 367.001843][T22412] shmem_get_folio_gfp+0x47b/0xd60 [ 367.001874][T22412] shmem_write_begin+0xfc/0x1f0 [ 367.001964][T22412] generic_perform_write+0x183/0x490 [ 367.001993][T22412] ? __mark_inode_dirty+0x1af/0x740 [ 367.002144][T22412] shmem_file_write_iter+0xc5/0xf0 [ 367.002176][T22412] __kernel_write_iter+0x319/0x590 [ 367.002210][T22412] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 367.002388][T22412] dump_user_range+0x63e/0x8f0 [ 367.002422][T22412] elf_core_dump+0x21a2/0x2330 [ 367.002455][T22412] ? 0xffffffffff600000 [ 367.002486][T22412] coredump_write+0xacf/0xdf0 [ 367.002518][T22412] vfs_coredump+0x26bc/0x3120 [ 367.002616][T22412] ? __memcg_slab_free_hook+0xbc/0x230 [ 367.002655][T22412] ? proc_coredump_connector+0x160/0x2b0 [ 367.002678][T22412] ? kmem_cache_free+0xdf/0x380 [ 367.002706][T22412] get_signal+0xd7b/0xf60 [ 367.002789][T22412] arch_do_signal_or_restart+0x96/0x450 [ 367.002884][T22412] irqentry_exit+0xf7/0x510 [ 367.002910][T22412] asm_exc_page_fault+0x26/0x30 [ 367.002991][T22412] RIP: 0033:0x7f5ec292acc1 [ 367.003010][T22412] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 367.003030][T22412] RSP: 002b:0000000000000040 EFLAGS: 00010217 [ 367.003048][T22412] RAX: 0000000000000000 RBX: 00007f5ec2ba5fa0 RCX: 00007f5ec292acb9 [ 367.003138][T22412] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000000 [ 367.003152][T22412] RBP: 00007f5ec2998bf7 R08: 0000000000000000 R09: 0000000000000000 [ 367.003166][T22412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.003180][T22412] R13: 00007f5ec2ba6038 R14: 00007f5ec2ba5fa0 R15: 00007ffe9b774648 [ 367.003200][T22412] [ 367.003216][T22412] memory: usage 307200kB, limit 307200kB, failcnt 36048 [ 367.006363][T23754] ? try_charge_memcg+0x215/0xa10 [ 367.006405][T23754] ? css_rstat_updated+0xbb/0x280 [ 367.006511][T23754] ? _find_next_zero_bit+0x64/0xa0 [ 367.006573][T23754] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 367.016388][T22412] memory+swap: usage 432152kB, limit 9007199254740988kB, failcnt 0 [ 367.026531][T23754] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 367.026571][T23754] ? css_rstat_updated+0xbb/0x280 [ 367.026627][T23754] ? mod_memcg_state+0x182/0x260 [ 367.026652][T23754] ? __rcu_read_unlock+0x4e/0x70 [ 367.026757][T23754] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 367.026787][T23754] ? pcpu_alloc_noprof+0xd18/0x1210 [ 367.026816][T23754] ? should_fail_ex+0x30/0x280 [ 367.030113][T22412] kmem: usage 10340kB, limit 9007199254740988kB, failcnt 0 [ 367.033114][T23754] ? __kmalloc_noprof+0x2a3/0x580 [ 367.037458][T22412] Memory cgroup stats for /syz2: [ 367.089652][T22412] cache 303861760 [ 367.094678][T23754] ? security_bpf_prog_load+0x60/0x140 [ 367.094721][T23754] ? selinux_bpf_prog_load+0xac/0xd0 [ 367.094775][T23754] ? security_bpf_prog_load+0x9e/0x140 [ 367.094806][T23754] bpf_prog_load+0xf76/0x1140 [ 367.099946][T22412] rss 102400 [ 367.105053][T23754] ? security_bpf+0x2b/0x90 [ 367.110838][T22412] shmem 303861760 [ 367.110849][T22412] mapped_file 0 [ 367.110924][T22412] dirty 0 [ 367.110931][T22412] writeback 0 [ 367.110938][T22412] workingset_refault_anon 22540 [ 367.110946][T22412] workingset_refault_file 1 [ 367.110953][T22412] swap 127950848 [ 367.110960][T22412] swapcached 45056 [ 367.110967][T22412] pgpgin 566532 [ 367.115727][T23754] __sys_bpf+0x469/0x7b0 [ 367.115758][T23754] __x64_sys_bpf+0x41/0x50 [ 367.120483][T22412] pgpgout 492317 [ 367.120494][T22412] pgfault 363327 [ 367.124648][T23754] x64_sys_call+0x28e1/0x3000 [ 367.129325][T22412] pgmajfault 3011 [ 367.129334][T22412] inactive_anon 56520704 [ 367.134034][T23754] do_syscall_64+0xc0/0x2a0 [ 367.139469][T22412] active_anon 247193600 [ 367.139482][T22412] inactive_file 0 [ 367.139489][T22412] active_file 8192 [ 367.139496][T22412] unevictable 0 [ 367.139504][T22412] hierarchical_memory_limit 314572800 [ 367.145177][T23754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.150008][T22412] hierarchical_memsw_limit 9223372036854771712 [ 367.154355][T23754] RIP: 0033:0x7f19a9c9acb9 [ 367.159888][T22412] total_cache 303861760 [ 367.159900][T22412] total_rss 102400 [ 367.164382][T23754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.169238][T22412] total_shmem 303861760 [ 367.169248][T22412] total_mapped_file 0 [ 367.173648][T23754] RSP: 002b:00007f19a86f7028 EFLAGS: 00000246 [ 367.193290][T22412] total_dirty 0 [ 367.193301][T22412] total_writeback 0 [ 367.193308][T22412] total_workingset_refault_anon 22540 [ 367.199385][T23754] ORIG_RAX: 0000000000000141 [ 367.207384][T22412] total_workingset_refault_file 1 [ 367.215331][T23754] RAX: ffffffffffffffda RBX: 00007f19a9f15fa0 RCX: 00007f19a9c9acb9 [ 367.223391][T22412] total_swap 127950848 [ 367.223402][T22412] total_swapcached 45056 [ 367.231648][T23754] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 367.239685][T22412] total_pgpgin 566644 [ 367.239695][T22412] total_pgpgout 492429 [ 367.242696][T23754] RBP: 00007f19a9d08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 367.242717][T23754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.242733][T23754] R13: 00007f19a9f16038 R14: 00007f19a9f15fa0 R15: 00007ffdd3d2ca98 [ 367.249648][T22412] total_pgfault 363503 [ 367.249659][T22412] total_pgmajfault 3011 [ 367.254689][T23754] [ 367.259670][T22412] total_inactive_anon 56520704 [ 367.259680][T22412] total_active_anon 247193600 [ 367.264780][T23754] ---[ end trace 0000000000000000 ]--- [ 367.270897][T22412] total_inactive_file 0 [ 367.270967][T22412] total_active_file 8192 [ 367.367453][ T29] audit: type=1326 audit(2000000016.332:29181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23753 comm="syz.4.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a9c9acb9 code=0x7ffc0000 [ 367.369148][T22412] total_unevictable 0 [ 367.369158][T22412] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/ [ 367.372618][ T29] audit: type=1326 audit(2000000016.332:29182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23753 comm="syz.4.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a9c9acb9 code=0x7ffc0000 [ 367.375534][T22412] ,mems_allowed=0,oom_memcg=/syz2 [ 367.378853][ T29] audit: type=1326 audit(2000000016.332:29183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23753 comm="syz.4.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f19a9c9acb9 code=0x7ffc0000 [ 367.383794][T22412] ,task_memcg= [ 367.388291][ T29] audit: type=1326 audit(2000000016.332:29184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23753 comm="syz.4.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a9c9acb9 code=0x7ffc0000 [ 367.391858][T22412] /syz2,task=syz.2.5348,pid=22412,uid=0 [ 367.391883][T22412] Memory cgroup out of memory: Killed process 22412 (syz.2.5348) total-vm:90292kB, anon-rss:1228kB, file-rss:57648kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 367.421996][T23764] ip6_vti0 speed is unknown, defaulting to 1000 [ 367.423209][ T29] audit: type=1326 audit(2000000016.332:29185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23753 comm="syz.4.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a9c9acb9 code=0x7ffc0000 [ 367.794759][ T29] audit: type=1326 audit(2000000016.332:29186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23753 comm="syz.4.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f19a9c9acb9 code=0x7ffc0000 [ 367.794790][ T29] audit: type=1326 audit(2000000016.332:29187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23753 comm="syz.4.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a9c9acb9 code=0x7ffc0000 [ 367.794816][ T29] audit: type=1326 audit(2000000016.332:29188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23753 comm="syz.4.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a9c9acb9 code=0x7ffc0000 [ 367.899389][T23777] loop7: detected capacity change from 0 to 128 [ 367.899727][T23777] msdos: Unknown parameter '€' [ 367.968228][T23781] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 367.968251][T23781] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 367.968281][T23781] vhci_hcd vhci_hcd.0: Device attached [ 368.049328][T23782] vhci_hcd: connection closed [ 368.075367][T19232] vhci_hcd vhci_hcd.9: stop threads [ 368.085463][T19232] vhci_hcd vhci_hcd.9: release socket [ 368.090903][T19232] vhci_hcd vhci_hcd.9: disconnect device [ 368.502834][T23788] loop2: detected capacity change from 0 to 8192 [ 368.834781][T23814] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5774'. [ 368.849688][T23814] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.859629][T23814] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.899364][T23814] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.909200][T23814] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.017797][T23814] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.027684][T23814] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.051676][T23827] ip6_vti0 speed is unknown, defaulting to 1000 [ 369.081431][T23814] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.091251][T23814] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.181159][T23816] ip6_vti0 speed is unknown, defaulting to 1000 [ 369.224294][ T12] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.232580][ T12] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.265702][ T12] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.273963][ T12] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.334867][ T12] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.343126][ T12] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.368700][T23839] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 369.375249][T23839] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 369.382878][T23839] vhci_hcd vhci_hcd.0: Device attached [ 369.407932][ T12] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.416297][ T12] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.426937][T23848] netlink: 188 bytes leftover after parsing attributes in process `syz.5.5777'. [ 369.428384][T23845] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5776'. [ 369.488135][T23843] bridge0: entered promiscuous mode [ 369.493405][T23843] bridge0: entered allmulticast mode [ 369.514601][T22413] syz.2.5348 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 369.524563][T22413] CPU: 1 UID: 0 PID: 22413 Comm: syz.2.5348 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 369.524668][T22413] Tainted: [W]=WARN [ 369.524675][T22413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 369.524686][T22413] Call Trace: [ 369.524694][T22413] [ 369.524702][T22413] __dump_stack+0x1d/0x30 [ 369.524730][T22413] dump_stack_lvl+0x95/0xd0 [ 369.524756][T22413] dump_stack+0x15/0x1b [ 369.524815][T22413] dump_header+0x80/0x240 [ 369.524835][T22413] oom_kill_process+0x295/0x350 [ 369.524861][T22413] out_of_memory+0x97d/0xb80 [ 369.524955][T22413] try_charge_memcg+0x62e/0xa10 [ 369.524995][T22413] charge_memcg+0x51/0xc0 [ 369.525030][T22413] __mem_cgroup_charge+0x28/0xb0 [ 369.525069][T22413] shmem_get_folio_gfp+0x47b/0xd60 [ 369.525168][T22413] shmem_write_begin+0xfc/0x1f0 [ 369.525195][T22413] generic_perform_write+0x183/0x490 [ 369.525223][T22413] shmem_file_write_iter+0xc5/0xf0 [ 369.525301][T22413] __kernel_write_iter+0x319/0x590 [ 369.525339][T22413] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 369.525450][T22413] dump_user_range+0x63e/0x8f0 [ 369.525480][T22413] elf_core_dump+0x21a2/0x2330 [ 369.525509][T22413] ? 0xffffffffff600000 [ 369.525536][T22413] coredump_write+0xacf/0xdf0 [ 369.525579][T22413] vfs_coredump+0x26bc/0x3120 [ 369.525614][T22413] ? __memcg_slab_free_hook+0xbc/0x230 [ 369.525758][T22413] ? proc_coredump_connector+0x160/0x2b0 [ 369.525783][T22413] ? kmem_cache_free+0xdf/0x380 [ 369.525861][T22413] get_signal+0xd7b/0xf60 [ 369.525896][T22413] arch_do_signal_or_restart+0x96/0x450 [ 369.525931][T22413] irqentry_exit+0xf7/0x510 [ 369.525956][T22413] asm_exc_page_fault+0x26/0x30 [ 369.525975][T22413] RIP: 0033:0x7f5ec292acc1 [ 369.525991][T22413] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 369.526009][T22413] RSP: 002b:0000000000000040 EFLAGS: 00010217 [ 369.526042][T22413] RAX: 0000000000000000 RBX: 00007f5ec2ba5fa0 RCX: 00007f5ec292acb9 [ 369.526058][T22413] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000000 [ 369.526073][T22413] RBP: 00007f5ec2998bf7 R08: 0000000000000000 R09: 0000000000000000 [ 369.526090][T22413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.526105][T22413] R13: 00007f5ec2ba6038 R14: 00007f5ec2ba5fa0 R15: 00007ffe9b774648 [ 369.526127][T22413] [ 369.526197][T22413] memory: usage 307200kB, limit 307200kB, failcnt 36938 [ 369.560723][T23843] team0: Port device bridge0 added [ 369.562290][T22413] memory+swap: usage 431976kB, limit 9007199254740988kB, failcnt 0 [ 369.562309][T22413] kmem: usage 10292kB, limit 9007199254740988kB, failcnt 0 [ 369.576670][T23845] SELinux: Context system_u:object_r:system_dbusd_var_run_t:s0 is not valid (left unmapped). [ 369.580126][T22413] Memory cgroup stats for [ 369.634208][ T1036] usb 9-1: new high-speed USB device number 9 using vhci_hcd [ 369.635286][T22413] /syz2: [ 369.812984][T22413] cache 303357952 [ 369.819602][T22413] rss 487424 [ 369.822826][T22413] shmem 303357952 [ 369.826461][T22413] mapped_file 0 [ 369.830070][T22413] dirty 0 [ 369.833004][T22413] writeback 28672 [ 369.836637][T22413] workingset_refault_anon 22572 [ 369.841551][T22413] workingset_refault_file 1 [ 369.846048][T22413] swap 127770624 [ 369.849674][T22413] swapcached 225280 [ 369.853552][T22413] pgpgin 588865 [ 369.857003][T22413] pgpgout 514638 [ 369.860577][T22413] pgfault 365102 [ 369.864117][T22413] pgmajfault 3033 [ 369.867739][T22413] inactive_anon 198266880 [ 369.872102][T22413] active_anon 105496576 [ 369.876248][T22413] inactive_file 0 [ 369.879882][T22413] active_file 8192 [ 369.884202][T22413] unevictable 0 [ 369.887786][T22413] hierarchical_memory_limit 314572800 [ 369.893443][T22413] hierarchical_memsw_limit 9223372036854771712 [ 369.899596][T22413] total_cache 303357952 [ 369.903795][T22413] total_rss 487424 [ 369.907504][T22413] total_shmem 303357952 [ 369.911648][T22413] total_mapped_file 0 [ 369.915671][T22413] total_dirty 0 [ 369.919191][T22413] total_writeback 28672 [ 369.923391][T22413] total_workingset_refault_anon 22572 [ 369.928772][T22413] total_workingset_refault_file 1 [ 369.928785][T22413] total_swap 127770624 [ 369.928793][T22413] total_swapcached 225280 [ 369.928801][T22413] total_pgpgin 588977 [ 369.946285][T22413] total_pgpgout 514750 [ 369.950349][T22413] total_pgfault 365278 [ 369.954446][T22413] total_pgmajfault 3033 [ 369.958629][T22413] total_inactive_anon 198266880 [ 369.959089][T23862] loop5: detected capacity change from 0 to 1024 [ 369.963470][T22413] total_active_anon 105496576 [ 369.963481][T22413] total_inactive_file 0 [ 369.963557][T22413] total_active_file 8192 [ 369.983487][T22413] total_unevictable 0 [ 369.987652][T22413] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5348,pid=22445,uid=0 [ 369.997037][T23862] EXT4-fs: Ignoring removed nomblk_io_submit option [ 370.002395][T22413] Memory cgroup out of memory: Killed process 22445 (syz.2.5348) total-vm:90292kB, anon-rss:1228kB, file-rss:57648kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 370.026730][T23840] vhci_hcd: connection reset by peer [ 370.046574][T19231] vhci_hcd vhci_hcd.4: stop threads [ 370.051860][T19231] vhci_hcd vhci_hcd.4: release socket [ 370.057247][T19231] vhci_hcd vhci_hcd.4: disconnect device [ 370.091411][T23862] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.215741][T23862] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004 [ 370.307721][T23816] ================================================================== [ 370.315836][T23816] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 370.325653][T23816] [ 370.327981][T23816] read-write to 0xffffffff86a09a00 of 8 bytes by interrupt on cpu 0: [ 370.336052][T23816] tick_do_update_jiffies64+0x113/0x1c0 [ 370.341612][T23816] tick_nohz_handler+0x8d/0x3d0 [ 370.346466][T23816] __hrtimer_run_queues+0x20f/0x590 [ 370.351656][T23816] hrtimer_interrupt+0x21a/0x460 [ 370.356587][T23816] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 370.362472][T23816] sysvec_apic_timer_interrupt+0x6f/0x80 [ 370.368102][T23816] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 370.374075][T23816] do_shrink_slab+0x41a/0x670 [ 370.378742][T23816] shrink_slab+0x538/0x880 [ 370.383146][T23816] shrink_node+0x6cb/0x2000 [ 370.387636][T23816] do_try_to_free_pages+0x404/0xcc0 [ 370.392832][T23816] try_to_free_mem_cgroup_pages+0x222/0x470 [ 370.398723][T23816] try_charge_memcg+0x37e/0xa10 [ 370.403576][T23816] charge_memcg+0x51/0xc0 [ 370.407903][T23816] __mem_cgroup_charge+0x28/0xb0 [ 370.412842][T23816] shmem_get_folio_gfp+0x47b/0xd60 [ 370.417951][T23816] shmem_write_begin+0xfc/0x1f0 [ 370.422798][T23816] generic_perform_write+0x183/0x490 [ 370.428079][T23816] shmem_file_write_iter+0xc5/0xf0 [ 370.433190][T23816] __kernel_write_iter+0x319/0x590 [ 370.438304][T23816] dump_user_range+0x63e/0x8f0 [ 370.443073][T23816] elf_core_dump+0x21a2/0x2330 [ 370.447843][T23816] coredump_write+0xacf/0xdf0 [ 370.452524][T23816] vfs_coredump+0x26bc/0x3120 [ 370.457196][T23816] get_signal+0xd7b/0xf60 [ 370.461528][T23816] arch_do_signal_or_restart+0x96/0x450 [ 370.467070][T23816] irqentry_exit+0xf7/0x510 [ 370.471568][T23816] asm_exc_page_fault+0x26/0x30 [ 370.476412][T23816] [ 370.478724][T23816] read to 0xffffffff86a09a00 of 8 bytes by task 23816 on cpu 1: [ 370.486346][T23816] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 370.492587][T23816] count_shadow_nodes+0x6a/0x230 [ 370.497529][T23816] do_shrink_slab+0x63/0x670 [ 370.502109][T23816] shrink_slab+0x538/0x880 [ 370.506522][T23816] shrink_node+0x6cb/0x2000 [ 370.511014][T23816] do_try_to_free_pages+0x404/0xcc0 [ 370.516222][T23816] try_to_free_mem_cgroup_pages+0x222/0x470 [ 370.522115][T23816] try_charge_memcg+0x37e/0xa10 [ 370.526966][T23816] obj_cgroup_charge_pages+0xa6/0x150 [ 370.532421][T23816] obj_cgroup_charge_account+0x73/0x1a0 [ 370.537965][T23816] __memcg_slab_post_alloc_hook+0x396/0x530 [ 370.543858][T23816] __kvmalloc_node_noprof+0x4cf/0x680 [ 370.549226][T23816] alloc_netdev_mqs+0xa5/0xa40 [ 370.553997][T23816] __ip_tunnel_create+0x2ad/0x430 [ 370.559028][T23816] ip_tunnel_init_net+0x210/0x490 [ 370.564057][T23816] ipip_init_net+0x35/0x40 [ 370.568471][T23816] ops_init+0x22a/0x2e0 [ 370.572628][T23816] setup_net+0x9f/0x230 [ 370.576789][T23816] copy_net_ns+0x308/0x450 [ 370.581206][T23816] create_new_namespaces+0x20e/0x400 [ 370.586483][T23816] copy_namespaces+0x1ad/0x210 [ 370.591242][T23816] copy_process+0xce5/0x1f10 [ 370.595820][T23816] kernel_clone+0x16b/0x5b0 [ 370.600326][T23816] __x64_sys_clone+0x143/0x180 [ 370.605084][T23816] x64_sys_call+0x12d0/0x3000 [ 370.609771][T23816] do_syscall_64+0xc0/0x2a0 [ 370.614278][T23816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.620162][T23816] [ 370.622467][T23816] value changed: 0x0000000100001827 -> 0x0000000100001828 [ 370.629565][T23816] [ 370.631872][T23816] Reported by Kernel Concurrency Sanitizer on: [ 370.638010][T23816] CPU: 1 UID: 0 PID: 23816 Comm: syz.2.5764 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 370.649379][T23816] Tainted: [W]=WARN [ 370.653169][T23816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 370.663216][T23816] ================================================================== [ 371.083077][T22407] syz.2.5348 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 371.093061][T22407] CPU: 1 UID: 0 PID: 22407 Comm: syz.2.5348 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 371.093140][T22407] Tainted: [W]=WARN [ 371.093148][T22407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 371.093160][T22407] Call Trace: [ 371.093168][T22407] [ 371.093176][T22407] __dump_stack+0x1d/0x30 [ 371.093225][T22407] dump_stack_lvl+0x95/0xd0 [ 371.093273][T22407] dump_stack+0x15/0x1b [ 371.093293][T22407] dump_header+0x80/0x240 [ 371.093313][T22407] oom_kill_process+0x295/0x350 [ 371.093334][T22407] out_of_memory+0x97d/0xb80 [ 371.093391][T22407] try_charge_memcg+0x62e/0xa10 [ 371.093431][T22407] charge_memcg+0x51/0xc0 [ 371.093460][T22407] __mem_cgroup_charge+0x28/0xb0 [ 371.093557][T22407] shmem_get_folio_gfp+0x47b/0xd60 [ 371.093587][T22407] shmem_write_begin+0xfc/0x1f0 [ 371.093679][T22407] generic_perform_write+0x183/0x490 [ 371.093788][T22407] shmem_file_write_iter+0xc5/0xf0 [ 371.093816][T22407] __kernel_write_iter+0x319/0x590 [ 371.093861][T22407] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 371.093894][T22407] dump_user_range+0x63e/0x8f0 [ 371.093947][T22407] elf_core_dump+0x21a2/0x2330 [ 371.093979][T22407] ? 0xffffffffff600000 [ 371.094006][T22407] coredump_write+0xacf/0xdf0 [ 371.094038][T22407] vfs_coredump+0x26bc/0x3120 [ 371.094204][T22407] ? __memcg_slab_free_hook+0xbc/0x230 [ 371.094242][T22407] ? proc_coredump_connector+0x160/0x2b0 [ 371.094316][T22407] ? kmem_cache_free+0xdf/0x380 [ 371.094340][T22407] get_signal+0xd7b/0xf60 [ 371.094419][T22407] arch_do_signal_or_restart+0x96/0x450 [ 371.094501][T22407] irqentry_exit+0xf7/0x510 [ 371.094528][T22407] asm_exc_page_fault+0x26/0x30 [ 371.094548][T22407] RIP: 0033:0x7f5ec292acc1 [ 371.094564][T22407] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 371.094581][T22407] RSP: 002b:0000000000000040 EFLAGS: 00010217 [ 371.094644][T22407] RAX: 0000000000000000 RBX: 00007f5ec2ba5fa0 RCX: 00007f5ec292acb9 [ 371.094657][T22407] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000000 [ 371.094670][T22407] RBP: 00007f5ec2998bf7 R08: 0000000000000000 R09: 0000000000000000 [ 371.094682][T22407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.094723][T22407] R13: 00007f5ec2ba6038 R14: 00007f5ec2ba5fa0 R15: 00007ffe9b774648 [ 371.094744][T22407] [ 371.094752][T22407] memory: usage 307200kB, limit 307200kB, failcnt 37955 [ 371.338918][T22407] memory+swap: usage 426104kB, limit 9007199254740988kB, failcnt 0 [ 371.346938][T22407] kmem: usage 10272kB, limit 9007199254740988kB, failcnt 0 [ 371.354162][T22407] Memory cgroup stats for /syz2: [ 371.354655][T22407] cache 297984000 [ 371.363252][T22407] rss 466944 [ 371.366533][T22407] shmem 297984000 [ 371.370169][T22407] mapped_file 0 [ 371.373703][T22407] dirty 0 [ 371.376643][T22407] writeback 0 [ 371.379946][T22407] workingset_refault_anon 22572 [ 371.384788][T22407] workingset_refault_file 1 [ 371.389379][T22407] swap 127909888 [ 371.392923][T22407] swapcached 86016 [ 371.396636][T22407] pgpgin 589662 [ 371.400221][T22407] pgpgout 516786 [ 371.403755][T22407] pgfault 365145 [ 371.407318][T22407] pgmajfault 3033 [ 371.410992][T22407] inactive_anon 187076608 [ 371.415360][T22407] active_anon 111050752 [ 371.419518][T22407] inactive_file 0 [ 371.423144][T22407] active_file 8192 [ 371.426861][T22407] unevictable 0 [ 371.430327][T22407] hierarchical_memory_limit 314572800 [ 371.435770][T22407] hierarchical_memsw_limit 9223372036854771712 [ 371.442001][T22407] total_cache 297984000 [ 371.446296][T22407] total_rss 466944 [ 371.450007][T22407] total_shmem 297984000 [ 371.454212][T22407] total_mapped_file 0 [ 371.458259][T22407] total_dirty 0 [ 371.461743][T22407] total_writeback 0 [ 371.465614][T22407] total_workingset_refault_anon 22572 [ 371.470972][T22407] total_workingset_refault_file 1 [ 371.476043][T22407] total_swap 127909888 [ 371.480098][T22407] total_swapcached 86016 [ 371.484351][T22407] total_pgpgin 589774 [ 371.488322][T22407] total_pgpgout 516898 [ 371.492380][T22407] total_pgfault 365321 [ 371.496497][T22407] total_pgmajfault 3033 [ 371.500633][T22407] total_inactive_anon 187076608 [ 371.505561][T22407] total_active_anon 111050752 [ 371.510253][T22407] total_inactive_file 0 [ 371.514420][T22407] total_active_file 8192 [ 371.518707][T22407] total_unevictable 0 [ 371.522688][T22407] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5348,pid=22424,uid=0 [ 371.537367][T22407] Memory cgroup out of memory: Killed process 22424 (syz.2.5348) total-vm:90292kB, anon-rss:1228kB, file-rss:57648kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 371.555631][T23873] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.565456][T23873] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.592092][T19448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.613888][T23875] ip6_vti0 speed is unknown, defaulting to 1000 [ 371.635576][T23873] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.645436][T23873] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.708195][T23873] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.718057][T23873] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.806808][T23873] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.816656][T23873] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.472532][T22417] syz.2.5348 (22417) used greatest stack depth: 6224 bytes left [ 373.733514][T13877] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.741826][T13877] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.753099][T13877] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.761376][T13877] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.772926][T13885] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.781110][T13885] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.792488][T13885] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.801010][T13885] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.086423][ T1036] vhci_hcd vhci_hcd.4: vhci_device speed not set