last executing test programs: 5m28.793382253s ago: executing program 2 (id=617): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000ed0000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffd8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) socket(0xa, 0x40000000002, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x18, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES64=r2, @ANYBLOB="ff796584012637bab1ef1700a0e27c0dfe0f13b0690746406cd7ce0858a401d09461d82f31ec7a984e", @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400995103004e00010000000000000000001c00"], 0x14}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000005c0), &(0x7f0000000600)='%pi6 \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r7}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f00000000c0)='./file0\x00', 0x60004ce) r9 = getpid() r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r11, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x3c}}, 0x0) r12 = socket$inet(0x2, 0x1, 0x0) listen(r12, 0x0) 5m27.512330938s ago: executing program 2 (id=618): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) write(r0, 0x0, 0x0) gettid() prctl$PR_SET_SECUREBITS(0x1c, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x81e00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000d40)={0x0, 0x7000003, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000258f88)) msgsnd(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000000000001f686d0decff6db2f8d1a4d7d797508ba08c71c76aaf3e3ae8c7a648d026cd427ae3da794ba555f3e97dfca596bf090801df8c907bcc49be1bf0dfd6e2b44bd25483f80efe19f9b9a9ec6a"], 0x0, 0x0) msgrcv(r5, 0x0, 0x0, 0x1, 0x1000) msgrcv(r5, &(0x7f00000000c0)={0x0, ""/245}, 0xfd, 0x0, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgctl$IPC_STAT(r5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r6}, 0x10) setitimer(0x0, 0x0, 0x0) 5m26.606980856s ago: executing program 2 (id=625): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_usbip_server_init(0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x22402, 0x0) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000002f020bb692d3d478e21cba744e9be318110000", @ANYRES32=r9, @ANYRESHEX=r6], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r10 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r10, 0x29, 0x16, &(0x7f0000fcb000)=0x2, 0x4) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000000)=0x14) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"/643], 0x1, 0x120b, &(0x7f0000002300)="$eJzs3M9rXFUUB/CTNv1hajJRa7UF6UE3unk2WbhyEyQF6YDSNoVWEF7NRIeZzIS8ITBFbHdu/TvEpTtB/AeyceNacJeNyy7EJ84LtglxEcFOWz6fzRzm3i9zH28YeJd7Zu/9bzZ7G1WxUY7ixMxMzG5F5MOMjBNxMhoP4p1bv/z6xo3bd66ttNur1zOvrtxcei8zFy7/+MmX37350+jcre8XfjgTu4uf7v2+/Nvuhd2Le3/e/KJbZbfKwXCUZd4dDkfl3X4n17tVr8j8uN8pq052B1Vn+8D4Rn+4tTXOcrA+P7e13amqLAfj7HXGORrmaHuc5edld5BFUeT8XPDfnY61bx/WdR1R16fidNR1Xb8Qc3EuXoz5WIhWLMZL8XK8Eufj1bgQr8XrcXEya9orBwAAAAAAAAAAAAAAAAAAgOeL/n8AAAAAAAAAAAAAAAAAAACYPv3/AAAAAAAAAAAAAAAAAAAAMH36/wEAAAAAAAAAAAAAAAAAAGD6bty+c22l3V69nnk2YvPrnbWdtea1GV/ZiG70oxNXohV/xKT7v9HUVz9sr17JicV4d/P+fv7+ztrJg/mlyd8JHJlfavJ5MH8m5h7PL0crzh+dXz4yfzbefuuxfBGt+PmzGEY/1uPv7KP8V0uZH3zUPpS/NJkHAAAAz4Mi/3Hk83tR5MxMM/XQePPmv+8P1K1D+wOHnq9n49LsFC+ciWp8r1f2+53tZ6vY/0rGvV55+WlYj+IYxf69e/C0rOcZLU5FxP/4EVP8UeKJeXTTp70SAAAAAAAAAAAAjuMYBwNnm/O2xz9OOO1rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5iB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFcFAAD//78558w=") 5m25.663603243s ago: executing program 2 (id=632): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) syz_emit_ethernet(0xca, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000bc0000000000019078ac1e0001ac1414bb0c00907800000000480000000000000000880000ac1e0001ac1414aa0703dd000dee0dd9de36ed4bcc5b4e23440c00030000000000000000890f0000000000ffffffffffffffff444cfe0164010101000000017f00000100000000e000000200000000ac1e0101000000007f000001000000000000000000e61334fe908e28a8903d61000000ac1e000100000000ffffffff00000000ffffffff00000000441400000000000200000000000000ab0000000000"], 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="4401000000080104000000000000000005007a3000000000060002408864000005000300060000000600024004000000090001007300000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1276, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$tun(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000a00ffffffffffffaaaaaaaaaaaa08004500002b0064000000069078ac141403ac1e01014e200000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000010907800001c0006"], 0x3d) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "000000009b993e68", "75df9868592b9fd3ccfffffffffffff7", ')\x00\x000', "00000011000a00"}, 0x28) r3 = epoll_create1(0x0) r4 = socket$unix(0x1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x7}}, {@i_version}]}, 0x4, 0x504, &(0x7f0000019940)="$eJzs3c9vG1kdAPDvOHGTZt1NF/YACNiyLBRU6vzobrRaDnQvILRaCbFCQuLQDYk3imLXUZwsTcghPXJHohIn+BO4cUDqiQM3bnDjUg5IBSJQg8Rh0IyniZvEdWiTeGt/PtJ45r1x/H3PznvP8xznBTC0rkTETkRciIgPI2KyyE+KLW62t+x+j3a3F/Z2txeSSNMP/pHk57O86PiZzEvFY45HxPe/E/Hj5Gjc1ubWyny9Xlsr0lPrjdWp1ubW9eVSkTM7NzM3/faNt2ZPra6vNX7z8NvL7/3gd7/9woM/7nz9p1mxKj+7lJ/rrMdpale9HJWOvNGIeO8sgvXJaPH7w4sna22fiojX8/Y/GSP5qwkADLI0nYx0sjMNAAy67Pq/EkmpWswFVKJUqlbbc3ivxkSp3mytX5tsbtxejHwO63KUSx8t12vTxVzh5SgnWXomPz5Izx5K34iIVyLi52MX83R1oVlf7OcbHwAYYi8dGv//PdYe/wGAATfe7wIAAOfO+A8Aw8f4DwDD5/8Y/307EAAGhOt/ABg+xn8AGD49x/+751MOAOBcfO/997Mt3Sv+//Xix5sb36x8fH2x1lqpNjYWqgvNtdXqUrO5VK9VF9K01+PVm83VmTf3k63NrVuN5sbt9VvLjfml2q1a+YzrAwD09spr9/+cRMTOOxfzLTrWcjBWw2ArPZE6ZqEeYGCN9LsAQN/4Pg8MrxNc45sGgAHX68q/658I3bP4K7yorn7W/D8Mq1K/CwD0zbPN/3/r1MsBnD/z/zC80jSx5j8ADBlz/MCzfP7/wyg+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhVcm3pFTN1wLfyW5L1WrEpYi4HOXko+V6bToiXo6IP42Vx7L0TL8LDQA8p9LfkmL9r6uTb1QOn72Q/Gcs30fET375wS/uzK+vr81k+f/cz1+/V+TPXuhHBQCATjePZrXH6WLfcSH/aHd74fF2nkV8+G57cdEs7l6xtc+Mxmi+H49yREz8KynSbdn7lZFTiL9zNyI+c1D/Ox0RKvkcSHvl08Pxs9iXziD+wfOfRJqm6UH80hPxS3nZsn05fy4+fQplgWFz/912P5m1u4u721kTK9pfKa7k++Pb/3jeQz2/x/3f3pH+r7Tf/40ciZ/kbf7KfvrpJXn45u+/eyQznWyfuxvxudHj4if78ZMu/e8bJ6zjXz7/xde7nUt/FXE1jo/f1si72an1xupUa3Pr+nJjfqm2VLs9Ozs3Mzf99o23ZqfyOer27R+Oi/H3d6693C1+Vv+JLvHHe9T/Kyes/6//++GPvvSU+F/78vGv/6tPiZ+NiV89Yfz5iZvHLd+9H3+xS/17vf7XThj/wV+3Fk94VwDgHLQ2t1bm6/XaWo+D7L1mr/s4eDEPYifinIN+YzziE1F3B90O+t0zAWftoNH3uyQAAAAAAAAAAAAAAEA3rc2tlbE4268T9buOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADK7/BQAA//+TAtDE") r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r5, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x50, 0x46]}, 0x2b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) close(r4) socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x8001, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0xa002a008}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x30, 0xfa00, {&(0x7f0000000240), 0x2, {0xa, 0x4e20, 0xfffffe01, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, r6}}, 0x38) socket$netlink(0x10, 0x3, 0x8000000004) 5m25.317671002s ago: executing program 2 (id=640): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r2, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r5, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000008000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, 0x0, &(0x7f0000000040)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) flock(r2, 0x2) dup3(r2, r1, 0x0) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x1a08050, &(0x7f0000000880)=ANY=[], 0x2, 0x5ae, &(0x7f0000001540)="$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") r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r8, 0x0, 0x80000) socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x61, 0x0, 0x29) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080"], 0x24}}, 0x0) 5m24.973201111s ago: executing program 2 (id=644): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x48, &(0x7f0000002240), &(0x7f0000002280)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x9d, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x3, 0x8, 0x8f, 0x66, 0x0, 0x5, 0x6, 0x0, @broadcast, @loopback, {[@timestamp_prespec={0x44, 0xc, 0xb9, 0x3, 0x9, [{@loopback, 0x7984ef7b}]}, @end]}}, {{0x4e22, 0x4e20, r2, r3, 0x1, 0x0, 0xf, 0x8, 0x3ff, 0x0, 0x100, {[@md5sig={0x13, 0x12, "6803c0eaa3fb0d892d46ce37460eb19a"}, @eol, @fastopen={0x22, 0x4, "031d"}, @mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0x13, 0x6, 0x8}]}}, {"6ed721425cab17aeee69a7d0bd318fd811a6b0019a26a0d17d8ef92ad800c100000000e9096ac4cc8d5c7b68b26cee"}}}}}}, &(0x7f0000000280)={0x0, 0x4, [0x4aa, 0xce7, 0x12f, 0x56]}) 5m24.972803491s ago: executing program 32 (id=644): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x48, &(0x7f0000002240), &(0x7f0000002280)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x9d, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x3, 0x8, 0x8f, 0x66, 0x0, 0x5, 0x6, 0x0, @broadcast, @loopback, {[@timestamp_prespec={0x44, 0xc, 0xb9, 0x3, 0x9, [{@loopback, 0x7984ef7b}]}, @end]}}, {{0x4e22, 0x4e20, r2, r3, 0x1, 0x0, 0xf, 0x8, 0x3ff, 0x0, 0x100, {[@md5sig={0x13, 0x12, "6803c0eaa3fb0d892d46ce37460eb19a"}, @eol, @fastopen={0x22, 0x4, "031d"}, @mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0x13, 0x6, 0x8}]}}, {"6ed721425cab17aeee69a7d0bd318fd811a6b0019a26a0d17d8ef92ad800c100000000e9096ac4cc8d5c7b68b26cee"}}}}}}, &(0x7f0000000280)={0x0, 0x4, [0x4aa, 0xce7, 0x12f, 0x56]}) 1m26.720953712s ago: executing program 1 (id=5946): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000540)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m26.713375232s ago: executing program 1 (id=5947): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0) 1m26.696454212s ago: executing program 1 (id=5948): creat(&(0x7f00000000c0)='./file0\x00', 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)={'trans=rdma,', {}, 0x2c, {[{@common=@privport}]}}) 1m26.665613262s ago: executing program 1 (id=5950): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) 1m26.630458842s ago: executing program 1 (id=5951): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r0, &(0x7f0000000080), &(0x7f0000000740)=""/159}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000540)=""/187) 1m26.406292051s ago: executing program 1 (id=5971): r0 = epoll_create(0x1) epoll_pwait(r0, &(0x7f0000000300)=[{}], 0x1, 0x7fff, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x81, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002640), 0x80800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002680)={0x2}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x1, 0x0, 0xbe}]}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$kcm(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1400000006000000080000000800000000001cc47f4965ee0000a6f0490bcae2c1fae702a7c2ba60831ebd9e08b41f3958a151104e2a0cd100a0da9f0af2c7af8c8f2ef2c7e5972a9f864d1fabe835e2d86192442a6510b5ef941b8276fe592f279eb076785e22a0c7f4b05a05bf689f6637fb79228aaf9b9af2a2aac67e9680fc38c16a4c79d0dcb96936e5259fd6c510329ce3b2ca3ac50e5e421f2ca900fb7a683e277143810bfab73178e57666e6a26eb4eb9bf58781bdae81ab4df34ddebebeb827f231df19917d23f20e8e9c37f625da58689aaba320d387e4a7ee3fdf15", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00@\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x70f8, &(0x7f00000005c0)={0x0, 0x0, 0x40, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r5, 0x101) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000f80)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x8, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 1m26.370066741s ago: executing program 33 (id=5971): r0 = epoll_create(0x1) epoll_pwait(r0, &(0x7f0000000300)=[{}], 0x1, 0x7fff, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x81, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002640), 0x80800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002680)={0x2}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x1, 0x0, 0xbe}]}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$kcm(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1400000006000000080000000800000000001cc47f4965ee0000a6f0490bcae2c1fae702a7c2ba60831ebd9e08b41f3958a151104e2a0cd100a0da9f0af2c7af8c8f2ef2c7e5972a9f864d1fabe835e2d86192442a6510b5ef941b8276fe592f279eb076785e22a0c7f4b05a05bf689f6637fb79228aaf9b9af2a2aac67e9680fc38c16a4c79d0dcb96936e5259fd6c510329ce3b2ca3ac50e5e421f2ca900fb7a683e277143810bfab73178e57666e6a26eb4eb9bf58781bdae81ab4df34ddebebeb827f231df19917d23f20e8e9c37f625da58689aaba320d387e4a7ee3fdf15", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00@\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x70f8, &(0x7f00000005c0)={0x0, 0x0, 0x40, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r5, 0x101) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000f80)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x8, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 2.359282567s ago: executing program 4 (id=8797): bpf$PROG_LOAD(0x5, 0x0, 0x0) mlockall(0x1) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000440)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xceq\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x3, 0x1, 0xec}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x9, 0x0) 1.689222865s ago: executing program 6 (id=8810): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2b0300000000f9dbdf2505000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 1.688743175s ago: executing program 4 (id=8811): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@fwd={0x5}, @func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd0924030000030004020624050400"], 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, &(0x7f00000007c0)={0x20, 0xc, 0x10, {0x10, 0x23, "ee93b2411557a118fc4b379e5717"}}, &(0x7f0000000880)={0x0, 0x3, 0x3, @string={0x3, 0x3, 'u'}}, &(0x7f00000008c0)=ANY=[@ANYBLOB="000f55000000050f5500060710020c1101800b10010c110001030500020b1001080000fd070700040b10010c6c004004fdffc614100409ed8e324761e2ebced1ddae762701d8130f42bc3231ec2bd3c2b1e6000000000000"], &(0x7f0000000940)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1f, 0x22, 0x9, "8f07ce92", "3b9195a2"}}, &(0x7f0000000980)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xc0, 0x81, 0x9, 0x6, 0x9, 0xf3d2, 0x13}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x28, @string={0x28, 0x3, "ccb458ec9da8a8aca170d4729af805ca7592f4878aeefc580bf2e58ed574ab6281dc2c8820e8"}}, 0x0, 0x0, 0x0}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, 0x0, 0x24}, 0x80, 0x0}, 0x50) socketpair(0x28, 0x80000, 0x8e, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000540), &(0x7f0000000000)=""/7, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r1, &(0x7f0000000400), 0x20000000}, 0x20) open(&(0x7f00000004c0)='./file1/file0\x00', 0x0, 0x0) 1.642588905s ago: executing program 6 (id=8814): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f0000000040)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @empty, @val={@void, {0x8100, 0x4, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @loopback}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1.561252574s ago: executing program 6 (id=8816): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 1.109171963s ago: executing program 3 (id=8828): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000001800000000000000940000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000f00008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000840)='virtio_transport_alloc_pkt\x00', r3}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 1.076617113s ago: executing program 4 (id=8831): r0 = epoll_create(0x1) epoll_pwait(r0, &(0x7f0000000300)=[{}], 0x1, 0x7fff, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x81, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002640), 0x80800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002680)={0x2}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x1, 0x0, 0xbe}]}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xffffffc1, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1400000006000000080000000800000000001cc47f4965ee0000a6f0490bcae2c1fae702a7c2ba60831ebd9e08b41f3958a151104e2a0cd100a0da9f0af2c7af8c8f2ef2c7e5972a9f864d1fabe835e2d86192442a6510b5ef941b8276fe592f279eb076785e22a0c7f4b05a05bf689f6637fb79228aaf9b9af2a2aac67e9680fc38c16a4c79d0dcb96936e5259fd6c510329ce3b2ca3ac50e5e421f2ca900fb7a683e277143810bfab73178e57666e6a26eb4eb9bf58781bdae81ab4df34ddebebeb827f231df19917d23f20e8e9c37f625da58689aaba320d3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00@\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x70f8, &(0x7f00000005c0)={0x0, 0x0, 0x40, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r5, 0x101) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000f80)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x8, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 676.344222ms ago: executing program 6 (id=8845): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0x6400000c) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000000), 0x4) 586.628041ms ago: executing program 3 (id=8837): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xef) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r5, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 585.983061ms ago: executing program 0 (id=8838): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendmmsg$inet(r3, &(0x7f0000000e80)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) write$binfmt_misc(r3, &(0x7f0000000300), 0xfdef) 537.315001ms ago: executing program 5 (id=8839): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 525.067781ms ago: executing program 3 (id=8840): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) fcntl$setlease(r3, 0x400, 0x1) fchown(r3, 0x0, 0xffffffffffffffff) 522.686952ms ago: executing program 0 (id=8841): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 463.781541ms ago: executing program 3 (id=8842): socket$nl_route(0x10, 0x3, 0x0) socket$isdn(0x22, 0x2, 0x10) socket$isdn(0x22, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x1ed3, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x1, 0x279}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x6, 0x0, @fd, 0x0, 0x0, 0x0, {0x9208}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 399.627031ms ago: executing program 0 (id=8843): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x177c, &(0x7f00000002c0)={0x0, 0x572e, 0x2, 0x0, 0xfffffffe}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 398.702291ms ago: executing program 5 (id=8844): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000040000000500", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'team_slave_0\x00', @broadcast}) 356.111631ms ago: executing program 3 (id=8846): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) cachestat(r0, &(0x7f0000000380)={0xfffffffffffffffd}, &(0x7f0000000300), 0x0) 355.192941ms ago: executing program 0 (id=8847): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7}}], 0x18}, 0x4004820) 317.914981ms ago: executing program 5 (id=8848): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000700)={0x0, @dev, @broadcast}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x4}, 0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[], 0x154}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 289.478181ms ago: executing program 0 (id=8849): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@base={0x9, 0x4, 0x3, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) 276.13111ms ago: executing program 5 (id=8850): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = syz_io_uring_setup(0x10d, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x400, 0x0, 0xe9}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000b2c000)=[{r1}], 0x2c, 0xffffffffffbffff8) dup2(r0, r1) 217.19359ms ago: executing program 6 (id=8851): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x200000000200}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 210.77711ms ago: executing program 4 (id=8852): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 192.9779ms ago: executing program 6 (id=8853): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x7, 0x0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x5, 0x6}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x9}}, @union={0xb, 0x4, 0x0, 0x5, 0x0, 0x6b, [{0x0, 0x1, 0x5}, {0x9, 0x3, 0xfffffc12}, {0x3, 0x3, 0x2}, {0xe, 0x4, 0x483}]}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x2, 0x6}, @restrict={0x5, 0x0, 0x0, 0xb, 0x3}, @fwd={0x3}, @restrict={0x5, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x5f]}}, &(0x7f0000000480)=""/199, 0xb3, 0xc7, 0x1, 0x4, 0x0, @void, @value}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000006}}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @void}}}]}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 121.28035ms ago: executing program 4 (id=8854): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400008f2000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r2, 0x0, 0x80000000000000}, 0x18) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r4, &(0x7f00000003c0)='./file0\x00') 97.86007ms ago: executing program 5 (id=8855): r0 = io_uring_setup(0xdac, &(0x7f0000000180)) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') close_range(r0, r0, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r2, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r4, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 54.57579ms ago: executing program 4 (id=8856): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 1.12897ms ago: executing program 3 (id=8857): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xe}, 0x18) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) 564.98µs ago: executing program 5 (id=8858): mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) rt_sigsuspend(&(0x7f0000000300)={[0x7]}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 0s ago: executing program 0 (id=8859): gettid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r1}, 0x10) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) kernel console output (not intermixed with test programs): o 1000 [ 379.405022][T21801] lo speed is unknown, defaulting to 1000 [ 379.437325][T21801] lo speed is unknown, defaulting to 1000 [ 379.507173][T21801] lo speed is unknown, defaulting to 1000 [ 379.550839][T21837] syz.5.6454[21837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 379.578901][T21839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6455'. [ 379.599526][T21839] netlink: 'syz.0.6455': attribute type 7 has an invalid length. [ 379.607340][T21839] netlink: 'syz.0.6455': attribute type 8 has an invalid length. [ 379.615078][T21839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6455'. [ 379.834207][T21863] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6463'. [ 379.900722][T21868] netlink: 133492 bytes leftover after parsing attributes in process `syz.4.6465'. [ 380.183389][T21906] xt_hashlimit: max too large, truncated to 1048576 [ 380.407702][T21938] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6499'. [ 380.447416][T21941] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 380.478009][T21942] sit0 speed is unknown, defaulting to 1000 [ 380.512698][T21931] netlink: 'syz.6.6496': attribute type 10 has an invalid length. [ 380.539553][T21931] geneve1: entered promiscuous mode [ 380.562161][T21931] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 380.614198][T21957] vlan0: entered promiscuous mode [ 380.623565][T21942] lo speed is unknown, defaulting to 1000 [ 380.630154][T21942] lo speed is unknown, defaulting to 1000 [ 380.638262][T21942] lo speed is unknown, defaulting to 1000 [ 380.684611][T21942] lo speed is unknown, defaulting to 1000 [ 380.782872][ T29] kauditd_printk_skb: 948 callbacks suppressed [ 380.782887][ T29] audit: type=1326 audit(2000000127.340:60943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21977 comm="syz.4.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15385d29 code=0x7ffc0000 [ 380.833023][ T29] audit: type=1326 audit(2000000127.370:60944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21977 comm="syz.4.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c15385d29 code=0x7ffc0000 [ 380.840989][T21985] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 380.856829][ T29] audit: type=1326 audit(2000000127.370:60945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21977 comm="syz.4.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15385d29 code=0x7ffc0000 [ 380.856871][ T29] audit: type=1326 audit(2000000127.370:60946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21977 comm="syz.4.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c15385d29 code=0x7ffc0000 [ 380.856904][ T29] audit: type=1326 audit(2000000127.380:60947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21977 comm="syz.4.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15385d29 code=0x7ffc0000 [ 380.856975][ T29] audit: type=1326 audit(2000000127.380:60948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21977 comm="syz.4.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4c15385d29 code=0x7ffc0000 [ 380.857008][ T29] audit: type=1326 audit(2000000127.380:60949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21977 comm="syz.4.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15385d29 code=0x7ffc0000 [ 380.857107][ T29] audit: type=1326 audit(2000000127.380:60950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21977 comm="syz.4.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c15385d29 code=0x7ffc0000 [ 380.857136][ T29] audit: type=1326 audit(2000000127.380:60951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21977 comm="syz.4.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15385d29 code=0x7ffc0000 [ 380.857173][ T29] audit: type=1326 audit(2000000127.380:60952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21977 comm="syz.4.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15385d29 code=0x7ffc0000 [ 381.339528][T22017] sit0 speed is unknown, defaulting to 1000 [ 381.389713][T22012] netlink: 'syz.5.6529': attribute type 10 has an invalid length. [ 381.422194][T22017] lo speed is unknown, defaulting to 1000 [ 381.428377][T22017] lo speed is unknown, defaulting to 1000 [ 381.434733][T22017] lo speed is unknown, defaulting to 1000 [ 381.478241][T22017] lo speed is unknown, defaulting to 1000 [ 381.523333][T22032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6539'. [ 382.361515][T22093] vlan3: entered promiscuous mode [ 382.678600][T22123] netlink: zone id is out of range [ 382.967407][T22157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6596'. [ 382.984072][T22160] bpf_get_probe_write_proto: 8 callbacks suppressed [ 382.984105][T22160] syz.0.6597[22160] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 382.990970][T22160] syz.0.6597[22160] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.002739][T22160] syz.0.6597[22160] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.049358][T22163] sit0 speed is unknown, defaulting to 1000 [ 383.065707][T22167] netlink: 'syz.0.6600': attribute type 9 has an invalid length. [ 383.074844][T22167] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.6600'. [ 383.134064][T22175] syz.0.6603[22175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.134207][T22175] syz.0.6603[22175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.162765][T22175] syz.0.6603[22175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.168327][T22163] lo speed is unknown, defaulting to 1000 [ 383.208730][T22163] lo speed is unknown, defaulting to 1000 [ 383.215360][T22163] lo speed is unknown, defaulting to 1000 [ 383.254099][T22163] lo speed is unknown, defaulting to 1000 [ 383.599829][T22205] tipc: Enabling of bearer rejected, failed to enable media [ 384.211022][T22253] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 384.360799][T22272] __nla_validate_parse: 1 callbacks suppressed [ 384.360818][T22272] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6647'. [ 385.078335][T22342] syz.4.6679[22342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 385.078412][T22342] syz.4.6679[22342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 385.091522][T22342] syz.4.6679[22342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 385.653302][T22417] netlink: 'syz.0.6713': attribute type 10 has an invalid length. [ 385.696980][T22423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6715'. [ 385.812540][T22434] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6720'. [ 385.839448][ T29] kauditd_printk_skb: 788 callbacks suppressed [ 385.839569][ T29] audit: type=1326 audit(2000000132.400:61741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22437 comm="syz.6.6723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b4775d29 code=0x7ffc0000 [ 385.877457][ T29] audit: type=1326 audit(2000000132.430:61742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22437 comm="syz.6.6723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b4775d29 code=0x7ffc0000 [ 385.901887][ T29] audit: type=1326 audit(2000000132.430:61743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22437 comm="syz.6.6723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1b4775d29 code=0x7ffc0000 [ 385.925490][ T29] audit: type=1326 audit(2000000132.430:61744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22437 comm="syz.6.6723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b4775d29 code=0x7ffc0000 [ 385.949430][ T29] audit: type=1326 audit(2000000132.430:61745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22437 comm="syz.6.6723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b4775d29 code=0x7ffc0000 [ 385.973063][ T29] audit: type=1326 audit(2000000132.430:61746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22437 comm="syz.6.6723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb1b4775d29 code=0x7ffc0000 [ 385.996670][ T29] audit: type=1326 audit(2000000132.430:61747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22437 comm="syz.6.6723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b4775d29 code=0x7ffc0000 [ 386.020427][ T29] audit: type=1326 audit(2000000132.430:61748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22437 comm="syz.6.6723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b4775d29 code=0x7ffc0000 [ 386.044227][ T29] audit: type=1326 audit(2000000132.430:61749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22437 comm="syz.6.6723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fb1b4775d29 code=0x7ffc0000 [ 386.067937][ T29] audit: type=1326 audit(2000000132.430:61750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22437 comm="syz.6.6723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b4775d29 code=0x7ffc0000 [ 386.173504][T22451] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6728'. [ 386.341045][T22456] sit0 speed is unknown, defaulting to 1000 [ 386.555302][T22456] lo speed is unknown, defaulting to 1000 [ 386.573072][T22456] lo speed is unknown, defaulting to 1000 [ 386.601706][T22456] lo speed is unknown, defaulting to 1000 [ 386.715589][T22456] lo speed is unknown, defaulting to 1000 [ 387.004523][T22501] sit0 speed is unknown, defaulting to 1000 [ 387.101536][T22501] lo speed is unknown, defaulting to 1000 [ 387.109770][T22501] lo speed is unknown, defaulting to 1000 [ 387.118403][T22501] lo speed is unknown, defaulting to 1000 [ 387.181524][T22501] lo speed is unknown, defaulting to 1000 [ 387.278159][T22532] SELinux: syz.6.6762 (22532) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 387.366371][T22548] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 387.398515][T22542] Falling back ldisc for ttyS3. [ 387.416964][T22550] openvswitch: netlink: Message has 12 unknown bytes. [ 387.683823][T22588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6787'. [ 387.699362][ T6678] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 387.707143][ T6678] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 387.719042][ T6678] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x3 [ 387.734438][T22591] sit0 speed is unknown, defaulting to 1000 [ 387.736128][ T6678] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 387.891584][T22603] sit0 speed is unknown, defaulting to 1000 [ 387.936037][T22608] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.6795'. [ 387.946263][T22605] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.6795'. [ 387.974823][T22591] lo speed is unknown, defaulting to 1000 [ 387.996056][T22591] lo speed is unknown, defaulting to 1000 [ 388.002688][T22591] lo speed is unknown, defaulting to 1000 [ 388.081935][T22603] lo speed is unknown, defaulting to 1000 [ 388.098342][T22603] lo speed is unknown, defaulting to 1000 [ 388.141848][T22591] lo speed is unknown, defaulting to 1000 [ 388.142060][T22603] lo speed is unknown, defaulting to 1000 [ 388.220941][T22633] syz.5.6807[22633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.221018][T22633] syz.5.6807[22633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.221199][T22603] lo speed is unknown, defaulting to 1000 [ 388.232773][T22633] syz.5.6807[22633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.702280][T22676] syz.6.6825[22676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.719094][T22676] syz.6.6825[22676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.739256][T22676] syz.6.6825[22676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.902425][T22698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6834'. [ 388.956000][T22699] sit0 speed is unknown, defaulting to 1000 [ 388.987113][T22689] netlink: 'syz.5.6837': attribute type 10 has an invalid length. [ 389.071931][T22699] lo speed is unknown, defaulting to 1000 [ 389.087991][T22699] lo speed is unknown, defaulting to 1000 [ 389.101884][T22699] lo speed is unknown, defaulting to 1000 [ 389.142040][T22699] lo speed is unknown, defaulting to 1000 [ 389.218407][T22723] netlink: 'syz.0.6846': attribute type 39 has an invalid length. [ 389.264559][T22728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6848'. [ 389.356803][T22735] geneve2: entered promiscuous mode [ 389.362219][T22735] geneve2: entered allmulticast mode [ 389.863736][T22778] SELinux: Context system_u:object_r:tzdata_exec_t:s0 is not valid (left unmapped). [ 390.361314][T22821] netlink: 133492 bytes leftover after parsing attributes in process `syz.4.6890'. [ 390.476763][T22831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6894'. [ 390.967909][T22861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6898'. [ 391.099675][T22875] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 391.350964][ T29] kauditd_printk_skb: 894 callbacks suppressed [ 391.350979][ T29] audit: type=1326 audit(2000000137.910:62645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22894 comm="syz.3.6909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2d70f7cce7 code=0x7ffc0000 [ 391.397335][ T29] audit: type=1326 audit(2000000137.910:62646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22894 comm="syz.3.6909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2d70f21f29 code=0x7ffc0000 [ 391.422134][ T29] audit: type=1326 audit(2000000137.910:62647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22894 comm="syz.3.6909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2d70f7cce7 code=0x7ffc0000 [ 391.446874][ T29] audit: type=1326 audit(2000000137.910:62648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22894 comm="syz.3.6909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2d70f21f29 code=0x7ffc0000 [ 391.470893][ T29] audit: type=1326 audit(2000000137.910:62649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22894 comm="syz.3.6909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 391.495947][ T29] audit: type=1326 audit(2000000137.910:62650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22894 comm="syz.3.6909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 391.520924][ T29] audit: type=1326 audit(2000000137.910:62651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22894 comm="syz.3.6909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 391.545224][ T29] audit: type=1326 audit(2000000137.910:62652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22894 comm="syz.3.6909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 391.570234][ T29] audit: type=1326 audit(2000000137.910:62653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22894 comm="syz.3.6909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2d70f7cce7 code=0x7ffc0000 [ 391.594818][ T29] audit: type=1326 audit(2000000137.910:62654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22894 comm="syz.3.6909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2d70f21f29 code=0x7ffc0000 [ 391.608221][T22905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6911'. [ 391.834548][T22922] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6920'. [ 391.955904][ T6677] usb usb2-port1: attempt power cycle [ 392.220333][T22961] sit0 speed is unknown, defaulting to 1000 [ 392.259220][T22965] netlink: 'syz.4.6928': attribute type 10 has an invalid length. [ 392.337597][T22961] lo speed is unknown, defaulting to 1000 [ 392.343833][T22961] lo speed is unknown, defaulting to 1000 [ 392.351978][T22961] lo speed is unknown, defaulting to 1000 [ 392.363647][T22969] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6938'. [ 392.390573][T22961] lo speed is unknown, defaulting to 1000 [ 392.901437][T23003] tipc: Enabling of bearer rejected, failed to enable media [ 393.127279][T23037] sit0 speed is unknown, defaulting to 1000 [ 393.146502][T23043] syz.4.6972: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 393.161484][T23043] CPU: 1 UID: 0 PID: 23043 Comm: syz.4.6972 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 393.172364][T23043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 393.178959][T23044] netlink: 'syz.0.6960': attribute type 10 has an invalid length. [ 393.182452][T23043] Call Trace: [ 393.182462][T23043] [ 393.196670][T23043] dump_stack_lvl+0xf2/0x150 [ 393.201304][T23043] dump_stack+0x15/0x1a [ 393.205515][T23043] warn_alloc+0x145/0x1b0 [ 393.209874][T23043] ? __schedule+0x6fa/0x930 [ 393.214398][T23043] ? __vmalloc_node_range_noprof+0x88/0xe80 [ 393.220361][T23043] __vmalloc_node_range_noprof+0xaa/0xe80 [ 393.226265][T23043] ? __pfx_futex_wake_mark+0x10/0x10 [ 393.231588][T23043] ? __rcu_read_unlock+0x4e/0x70 [ 393.236563][T23043] ? avc_has_perm_noaudit+0x1cc/0x210 [ 393.242017][T23043] ? xskq_create+0x36/0xd0 [ 393.246469][T23043] vmalloc_user_noprof+0x59/0x70 [ 393.251454][T23043] ? xskq_create+0x79/0xd0 [ 393.255983][T23043] xskq_create+0x79/0xd0 [ 393.260325][T23043] xsk_init_queue+0x82/0xd0 [ 393.264839][T23043] xsk_setsockopt+0x388/0x520 [ 393.269586][T23043] ? __pfx_xsk_setsockopt+0x10/0x10 [ 393.274798][T23043] __sys_setsockopt+0x187/0x200 [ 393.279867][T23043] __x64_sys_setsockopt+0x66/0x80 [ 393.284931][T23043] x64_sys_call+0x282e/0x2dc0 [ 393.289666][T23043] do_syscall_64+0xc9/0x1c0 [ 393.294544][T23043] ? clear_bhb_loop+0x55/0xb0 [ 393.299387][T23043] ? clear_bhb_loop+0x55/0xb0 [ 393.304332][T23043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.310284][T23043] RIP: 0033:0x7f4c15385d29 [ 393.314743][T23043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.334519][T23043] RSP: 002b:00007f4c139f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 393.342946][T23043] RAX: ffffffffffffffda RBX: 00007f4c15575fa0 RCX: 00007f4c15385d29 [ 393.350951][T23043] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 393.358952][T23043] RBP: 00007f4c15401b08 R08: 0000000000000004 R09: 0000000000000000 [ 393.366991][T23043] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.375033][T23043] R13: 0000000000000000 R14: 00007f4c15575fa0 R15: 00007ffd69585948 [ 393.383025][T23043] [ 393.386344][T23043] Mem-Info: [ 393.389470][T23043] active_anon:9481 inactive_anon:24090 isolated_anon:0 [ 393.389470][T23043] active_file:5050 inactive_file:7646 isolated_file:0 [ 393.389470][T23043] unevictable:0 dirty:131 writeback:0 [ 393.389470][T23043] slab_reclaimable:3419 slab_unreclaimable:92530 [ 393.389470][T23043] mapped:29272 shmem:27142 pagetables:1532 [ 393.389470][T23043] sec_pagetables:0 bounce:0 [ 393.389470][T23043] kernel_misc_reclaimable:0 [ 393.389470][T23043] free:1733326 free_pcp:57493 free_cma:0 [ 393.422058][T23037] lo speed is unknown, defaulting to 1000 [ 393.434969][T23043] Node 0 active_anon:38040kB inactive_anon:96360kB active_file:20200kB inactive_file:30584kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117088kB dirty:524kB writeback:0kB shmem:108568kB writeback_tmp:0kB kernel_stack:4832kB pagetables:6128kB sec_pagetables:0kB all_unreclaimable? no [ 393.443544][T23037] lo speed is unknown, defaulting to 1000 [ 393.469035][T23043] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 393.469179][T23043] lowmem_reserve[]: 0 2866 7844 0 [ 393.469214][T23043] Node 0 DMA32 free:2950280kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953912kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 393.469322][T23043] lowmem_reserve[]: 0 0 4978 0 [ 393.469383][T23043] Node 0 Normal free:3967664kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:38040kB inactive_anon:96360kB active_file:20200kB inactive_file:30584kB unevictable:0kB writepending:524kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:226096kB local_pcp:112060kB free_cma:0kB [ 393.469526][T23043] lowmem_reserve[]: 0 0 0 0 [ 393.469552][T23043] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 393.469690][T23043] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950280kB [ 393.469916][T23043] Node 0 Normal: 49*4kB (UME) 1560*8kB (UME) 1827*16kB (UME) 1848*32kB (UME) 942*64kB (UME) 215*128kB (UME) 713*256kB (UME) 634*512kB (UME) 525*1024kB (UME) 87*2048kB (UM) 624*4096kB (UM) = 3967668kB [ 393.470211][T23043] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 393.470229][T23043] 39880 total pagecache pages [ 393.478704][T23037] lo speed is unknown, defaulting to 1000 [ 393.502825][T23043] 19 pages in swap cache [ 393.502837][T23043] Free swap = 62312kB [ 393.502847][T23043] Total swap = 124996kB [ 393.502856][T23043] 2097051 pages RAM [ 393.502864][T23043] 0 pages HighMem/MovableOnly [ 393.502872][T23043] 80181 pages reserved [ 393.739436][T23037] lo speed is unknown, defaulting to 1000 [ 393.851002][T23070] SELinux: security_context_str_to_sid () failed with errno=-22 [ 393.884657][T23079] netlink: '+}[@': attribute type 1 has an invalid length. [ 394.135849][ T6677] usb usb2-port1: unable to enumerate USB device [ 394.142380][T22802] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 394.149952][T22802] vhci_hcd: invalid port number 23 [ 394.172161][T23107] sit0 speed is unknown, defaulting to 1000 [ 394.226400][T23105] netlink: 'syz.5.6997': attribute type 10 has an invalid length. [ 394.251708][T23107] lo speed is unknown, defaulting to 1000 [ 394.257947][T23107] lo speed is unknown, defaulting to 1000 [ 394.264285][T23107] lo speed is unknown, defaulting to 1000 [ 394.296606][T23107] lo speed is unknown, defaulting to 1000 [ 394.421267][T23124] netlink: 108 bytes leftover after parsing attributes in process `syz.6.7006'. [ 394.523530][T23130] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7009'. [ 394.533333][T23130] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7009'. [ 394.544193][T23130] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7009'. [ 395.101865][T23169] syz.5.7026[23169] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.101985][T23169] syz.5.7026[23169] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.139630][T23169] syz.5.7026[23169] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.500695][T23227] syz.0.7054[23227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.512826][T23227] syz.0.7054[23227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.527020][T23227] syz.0.7054[23227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.561030][T23232] netlink: zone id is out of range [ 395.741736][T23253] syz.4.7067[23253] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.741812][T23253] syz.4.7067[23253] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.759982][T23253] syz.4.7067[23253] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 396.375821][T23332] bridge0: port 1(vlan3) entered blocking state [ 396.394379][T23332] bridge0: port 1(vlan3) entered disabled state [ 396.404874][T23332] vlan3: entered allmulticast mode [ 396.410490][T23334] xt_hashlimit: max too large, truncated to 1048576 [ 396.422227][T23332] vlan3: left allmulticast mode [ 396.626308][T23357] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 396.687221][T23360] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23360 comm=syz.5.7115 [ 396.700824][T23360] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23360 comm=syz.5.7115 [ 396.756898][ T29] kauditd_printk_skb: 1242 callbacks suppressed [ 396.756927][ T29] audit: type=1326 audit(2000000143.320:63897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23363 comm="syz.5.7117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6cc25d29 code=0x7ffc0000 [ 396.799775][ T29] audit: type=1326 audit(2000000143.320:63898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23363 comm="syz.5.7117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a6cc25d29 code=0x7ffc0000 [ 396.823636][ T29] audit: type=1326 audit(2000000143.320:63899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23363 comm="syz.5.7117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6cc25d29 code=0x7ffc0000 [ 396.847317][ T29] audit: type=1326 audit(2000000143.320:63900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23363 comm="syz.5.7117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a6cc25d29 code=0x7ffc0000 [ 396.871084][ T29] audit: type=1326 audit(2000000143.320:63901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23363 comm="syz.5.7117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6cc25d29 code=0x7ffc0000 [ 396.895403][ T29] audit: type=1326 audit(2000000143.320:63902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23363 comm="syz.5.7117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3a6cc25d29 code=0x7ffc0000 [ 396.919726][ T29] audit: type=1326 audit(2000000143.320:63903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23363 comm="syz.5.7117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6cc25d29 code=0x7ffc0000 [ 396.943363][ T29] audit: type=1326 audit(2000000143.320:63904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23363 comm="syz.5.7117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a6cc25d29 code=0x7ffc0000 [ 396.952207][T23369] __nla_validate_parse: 3 callbacks suppressed [ 396.952228][T23369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7119'. [ 396.967038][ T29] audit: type=1326 audit(2000000143.320:63905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23363 comm="syz.5.7117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6cc25d29 code=0x7ffc0000 [ 396.967159][ T29] audit: type=1326 audit(2000000143.320:63906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23363 comm="syz.5.7117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a6cc25d29 code=0x7ffc0000 [ 397.079654][T23376] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 397.274313][T23411] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 397.294826][T23411] SELinux: failed to load policy [ 397.387832][T23430] syz.5.7146[23430] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.432704][T23434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7149'. [ 397.553599][T23451] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7157'. [ 397.724587][T23470] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7166'. [ 397.733786][T23470] 0X: renamed from caif0 [ 397.740783][T23470] 0X: entered allmulticast mode [ 397.746213][T23470] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 397.977550][T23494] xt_CT: You must specify a L4 protocol and not use inversions on it [ 398.052093][T23514] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 398.118629][T23522] sit0 speed is unknown, defaulting to 1000 [ 398.192631][T23510] netlink: 'syz.0.7179': attribute type 10 has an invalid length. [ 398.199970][T23530] sit0 speed is unknown, defaulting to 1000 [ 398.238701][T23522] lo speed is unknown, defaulting to 1000 [ 398.244907][T23522] lo speed is unknown, defaulting to 1000 [ 398.250564][T23523] netlink: 'syz.3.7183': attribute type 10 has an invalid length. [ 398.251591][T23522] lo speed is unknown, defaulting to 1000 [ 398.316212][T23522] lo speed is unknown, defaulting to 1000 [ 398.361186][T23533] sit0 speed is unknown, defaulting to 1000 [ 398.434373][T23530] lo speed is unknown, defaulting to 1000 [ 398.447297][T23530] lo speed is unknown, defaulting to 1000 [ 398.463097][T23530] lo speed is unknown, defaulting to 1000 [ 398.507012][T23533] lo speed is unknown, defaulting to 1000 [ 398.523217][T23533] lo speed is unknown, defaulting to 1000 [ 398.559184][T23533] lo speed is unknown, defaulting to 1000 [ 398.562288][T23530] lo speed is unknown, defaulting to 1000 [ 398.624459][T23533] lo speed is unknown, defaulting to 1000 [ 399.435228][T23635] tmpfs: Unknown parameter 'mp' [ 399.659958][T23662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7245'. [ 399.685423][T23668] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7249'. [ 400.210720][T23734] sit0 speed is unknown, defaulting to 1000 [ 400.227796][T23736] wireguard0: entered promiscuous mode [ 400.233558][T23736] wireguard0: entered allmulticast mode [ 400.253815][T23740] netlink: 'syz.5.7273': attribute type 10 has an invalid length. [ 400.289964][T23734] lo speed is unknown, defaulting to 1000 [ 400.297008][T23734] lo speed is unknown, defaulting to 1000 [ 400.303808][T23734] lo speed is unknown, defaulting to 1000 [ 400.338271][T23734] lo speed is unknown, defaulting to 1000 [ 400.809769][T23774] No such timeout policy "syz0" [ 401.164466][T23816] netlink: 'syz.0.7311': attribute type 1 has an invalid length. [ 401.362551][T23823] netlink: 133492 bytes leftover after parsing attributes in process `syz.3.7314'. [ 401.780858][T23854] block device autoloading is deprecated and will be removed. [ 401.812472][ T29] kauditd_printk_skb: 1434 callbacks suppressed [ 401.812491][ T29] audit: type=1326 audit(2000000148.370:65341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.6.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b4775d29 code=0x7ffc0000 [ 401.842571][T23856] 9pnet: Could not find request transport: t [ 401.849287][ T29] audit: type=1326 audit(2000000148.370:65342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.6.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1b4775d29 code=0x7ffc0000 [ 401.873014][ T29] audit: type=1326 audit(2000000148.380:65343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.6.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b4775d29 code=0x7ffc0000 [ 401.873045][ T29] audit: type=1326 audit(2000000148.380:65344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.6.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb1b4775d29 code=0x7ffc0000 [ 401.873079][ T29] audit: type=1326 audit(2000000148.380:65345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.6.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b4775d29 code=0x7ffc0000 [ 401.873128][ T29] audit: type=1326 audit(2000000148.380:65346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.6.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fb1b4775d29 code=0x7ffc0000 [ 401.873187][ T29] audit: type=1326 audit(2000000148.380:65347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.6.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b4775d29 code=0x7ffc0000 [ 401.873234][ T29] audit: type=1326 audit(2000000148.380:65348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.6.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb1b4774690 code=0x7ffc0000 [ 401.873305][ T29] audit: type=1326 audit(2000000148.380:65349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.6.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb1b4777557 code=0x7ffc0000 [ 401.873333][ T29] audit: type=1326 audit(2000000148.380:65350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.6.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1b4775d29 code=0x7ffc0000 [ 402.359266][T23896] bpf_get_probe_write_proto: 5 callbacks suppressed [ 402.359288][T23896] syz.0.7345[23896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.377042][T23896] syz.0.7345[23896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.392182][T23896] syz.0.7345[23896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.442166][T23900] sit0 speed is unknown, defaulting to 1000 [ 402.496602][T23897] netlink: 'syz.5.7343': attribute type 10 has an invalid length. [ 402.515231][T23904] sit0 speed is unknown, defaulting to 1000 [ 402.598154][T23900] lo speed is unknown, defaulting to 1000 [ 402.612279][T23900] lo speed is unknown, defaulting to 1000 [ 402.630164][T23900] lo speed is unknown, defaulting to 1000 [ 402.662008][T23904] lo speed is unknown, defaulting to 1000 [ 402.679170][T23909] syz.0.7349[23909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.679296][T23909] syz.0.7349[23909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.691364][T23904] lo speed is unknown, defaulting to 1000 [ 402.725614][T23909] syz.0.7349[23909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.727276][T23904] lo speed is unknown, defaulting to 1000 [ 402.751652][T23900] lo speed is unknown, defaulting to 1000 [ 402.765061][T23911] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 402.812034][T23904] lo speed is unknown, defaulting to 1000 [ 403.055311][T23930] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23930 comm=syz.0.7358 [ 403.069250][T23930] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23930 comm=syz.0.7358 [ 403.124849][T23935] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7360'. [ 403.364498][T23956] block device autoloading is deprecated and will be removed. [ 403.439889][T23962] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7372'. [ 403.556994][T23970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7376'. [ 403.587052][T23970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7376'. [ 403.659891][T23977] netlink: 108 bytes leftover after parsing attributes in process `syz.6.7389'. [ 403.676077][T23977] netlink: 108 bytes leftover after parsing attributes in process `syz.6.7389'. [ 403.685267][T23977] netlink: 84 bytes leftover after parsing attributes in process `syz.6.7389'. [ 403.738798][T23985] syz.6.7382[23985] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 403.738943][T23985] syz.6.7382[23985] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 403.751269][T23985] syz.6.7382[23985] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 403.757120][T23987] 9pnet_fd: Insufficient options for proto=fd [ 403.812632][T23992] netlink: 160 bytes leftover after parsing attributes in process `syz.6.7385'. [ 404.285136][T24053] netlink: 'syz.6.7414': attribute type 1 has an invalid length. [ 404.477480][T24072] loop6: detected capacity change from 0 to 164 [ 404.509024][T24072] syz.6.7422: attempt to access beyond end of device [ 404.509024][T24072] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 404.525442][T24072] syz.6.7422: attempt to access beyond end of device [ 404.525442][T24072] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 404.553076][T24074] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7424'. [ 404.686833][T24102] netlink: 'syz.4.7436': attribute type 1 has an invalid length. [ 405.132410][T24151] sit0 speed is unknown, defaulting to 1000 [ 405.187757][T24152] netlink: 'syz.5.7454': attribute type 10 has an invalid length. [ 405.214412][T24151] lo speed is unknown, defaulting to 1000 [ 405.220899][T24151] lo speed is unknown, defaulting to 1000 [ 405.231310][T24151] lo speed is unknown, defaulting to 1000 [ 405.270691][T24151] lo speed is unknown, defaulting to 1000 [ 405.421748][T24164] netlink: 'syz.3.7461': attribute type 3 has an invalid length. [ 405.819198][T24179] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7467'. [ 405.912381][T24185] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 405.948312][T24197] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 405.997370][T24205] netlink: 'syz.5.7480': attribute type 21 has an invalid length. [ 406.005390][T24205] IPv6: NLM_F_CREATE should be specified when creating new route [ 406.025394][T24207] dvmrp0: left allmulticast mode [ 406.184099][T24237] Cannot find del_set index 0 as target [ 406.308729][T24257] netlink: 'syz.3.7505': attribute type 4 has an invalid length. [ 406.346393][T24263] rdma_op ffff88816e356980 conn xmit_rdma 0000000000000000 [ 406.467615][T24271] tipc: Enabling of bearer rejected, already enabled [ 406.825457][ T29] kauditd_printk_skb: 1105 callbacks suppressed [ 406.825475][ T29] audit: type=1326 audit(2000000153.380:66456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24313 comm="syz.0.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf0dc5d29 code=0x7ffc0000 [ 406.871395][ T29] audit: type=1326 audit(2000000153.400:66457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24316 comm="syz.3.7533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 406.896677][ T29] audit: type=1326 audit(2000000153.400:66458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24316 comm="syz.3.7533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 406.921360][ T29] audit: type=1326 audit(2000000153.400:66459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24316 comm="syz.3.7533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 406.946456][ T29] audit: type=1326 audit(2000000153.400:66460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24316 comm="syz.3.7533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 406.971145][ T29] audit: type=1326 audit(2000000153.400:66461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24316 comm="syz.3.7533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 406.996360][ T29] audit: type=1326 audit(2000000153.400:66462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24316 comm="syz.3.7533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 407.020876][ T29] audit: type=1326 audit(2000000153.400:66463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24316 comm="syz.3.7533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 407.045751][ T29] audit: type=1326 audit(2000000153.400:66464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24316 comm="syz.3.7533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 407.070655][ T29] audit: type=1326 audit(2000000153.400:66465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24316 comm="syz.3.7533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d70f84690 code=0x7ffc0000 [ 407.511269][T24354] syz.3.7549[24354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 407.511406][T24354] syz.3.7549[24354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 407.558413][T24354] syz.3.7549[24354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 407.764036][T24377] sit0 speed is unknown, defaulting to 1000 [ 407.953583][T24377] lo speed is unknown, defaulting to 1000 [ 407.970018][T24377] lo speed is unknown, defaulting to 1000 [ 407.988169][T24377] lo speed is unknown, defaulting to 1000 [ 408.048278][T24377] lo speed is unknown, defaulting to 1000 [ 408.187884][T24396] ALSA: seq fatal error: cannot create timer (-22) [ 408.383695][T24418] __nla_validate_parse: 8 callbacks suppressed [ 408.383739][T24418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7577'. [ 408.673431][T24440] netlink: 664 bytes leftover after parsing attributes in process `syz.5.7587'. [ 408.800832][T24446] netlink: 'syz.3.7591': attribute type 29 has an invalid length. [ 408.823624][T24446] netlink: 'syz.3.7591': attribute type 29 has an invalid length. [ 408.963221][T24467] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7600'. [ 409.170881][T24491] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7609'. [ 409.219288][T24495] loop6: detected capacity change from 0 to 512 [ 409.232186][T24495] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.7611: corrupted in-inode xattr: invalid ea_ino [ 409.249407][T24495] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.7611: couldn't read orphan inode 15 (err -117) [ 409.263084][T24495] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.300760][T24501] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7612'. [ 409.325452][T20690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.389069][T24512] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7616'. [ 409.398115][T24512] tipc: Started in network mode [ 409.403083][T24512] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 409.415046][T24512] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 409.423423][T24512] tipc: Enabled bearer , priority 10 [ 409.451581][T24519] vlan3: entered allmulticast mode [ 409.456891][T24519] bridge_slave_0: entered allmulticast mode [ 409.459697][T24522] loop6: detected capacity change from 0 to 256 [ 409.471247][T24519] bridge_slave_0: left allmulticast mode [ 409.477595][T24522] FAT-fs (loop6): Directory bread(block 64) failed [ 409.477623][T24522] FAT-fs (loop6): Directory bread(block 65) failed [ 409.477649][T24522] FAT-fs (loop6): Directory bread(block 66) failed [ 409.477666][T24522] FAT-fs (loop6): Directory bread(block 67) failed [ 409.477749][T24522] FAT-fs (loop6): Directory bread(block 68) failed [ 409.511787][T24522] FAT-fs (loop6): Directory bread(block 69) failed [ 409.518641][T24522] FAT-fs (loop6): Directory bread(block 70) failed [ 409.525186][T24522] FAT-fs (loop6): Directory bread(block 71) failed [ 409.531776][T24522] FAT-fs (loop6): Directory bread(block 72) failed [ 409.538372][T24522] FAT-fs (loop6): Directory bread(block 73) failed [ 409.553990][T24522] Process accounting resumed [ 409.558958][T24522] syz.6.7623: attempt to access beyond end of device [ 409.558958][T24522] loop6: rw=0, sector=1816, nr_sectors = 4 limit=256 [ 409.572715][T24522] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 326) [ 409.581034][T24522] FAT-fs (loop6): Filesystem has been set read-only [ 409.671127][T24537] sit0 speed is unknown, defaulting to 1000 [ 409.691954][T24542] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7632'. [ 409.739436][T24543] sit0 speed is unknown, defaulting to 1000 [ 409.773132][T24537] lo speed is unknown, defaulting to 1000 [ 409.787644][T24537] lo speed is unknown, defaulting to 1000 [ 409.800935][T24537] lo speed is unknown, defaulting to 1000 [ 409.873315][T24543] lo speed is unknown, defaulting to 1000 [ 409.884936][T24537] lo speed is unknown, defaulting to 1000 [ 409.891574][T24543] lo speed is unknown, defaulting to 1000 [ 409.906641][T24543] lo speed is unknown, defaulting to 1000 [ 410.011946][T24557] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 410.025678][T24543] lo speed is unknown, defaulting to 1000 [ 410.557156][ T6678] tipc: Node number set to 1 [ 410.725115][T24596] sit0 speed is unknown, defaulting to 1000 [ 410.909357][T24615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7663'. [ 410.954288][T24596] lo speed is unknown, defaulting to 1000 [ 410.960817][T24596] lo speed is unknown, defaulting to 1000 [ 411.011978][T24623] syz.3.7655[24623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 411.012042][T24623] syz.3.7655[24623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 411.032041][T24596] lo speed is unknown, defaulting to 1000 [ 411.044284][T24623] syz.3.7655[24623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 411.108201][T24596] lo speed is unknown, defaulting to 1000 [ 411.199797][T24628] sit0 speed is unknown, defaulting to 1000 [ 411.229044][T24630] netlink: 'syz.6.7668': attribute type 10 has an invalid length. [ 411.249444][T24642] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 411.289415][T24645] syz.3.7674[24645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 411.289532][T24645] syz.3.7674[24645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 411.318936][T24645] syz.3.7674[24645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 411.338454][T24628] lo speed is unknown, defaulting to 1000 [ 411.360231][T24649] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7676'. [ 411.364969][T24628] lo speed is unknown, defaulting to 1000 [ 411.369240][T24649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7676'. [ 411.386257][T24628] lo speed is unknown, defaulting to 1000 [ 411.485030][T24628] lo speed is unknown, defaulting to 1000 [ 411.612423][T24670] syz.3.7683[24670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 411.675931][T24679] sd 0:0:1:0: device reset [ 411.738707][T24687] loop6: detected capacity change from 0 to 1024 [ 411.799106][T24693] loop6: detected capacity change from 0 to 2048 [ 411.820712][T24693] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.839715][T24693] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 411.855554][ T29] kauditd_printk_skb: 1150 callbacks suppressed [ 411.855568][ T29] audit: type=1326 audit(2000000158.410:67616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24690 comm="syz.3.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 411.885647][ T29] audit: type=1326 audit(2000000158.410:67617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24690 comm="syz.3.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 411.910653][ T29] audit: type=1326 audit(2000000158.410:67618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24690 comm="syz.3.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 411.934157][ T29] audit: type=1326 audit(2000000158.410:67619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24690 comm="syz.3.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 411.958868][ T29] audit: type=1326 audit(2000000158.410:67620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24690 comm="syz.3.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 411.982554][ T29] audit: type=1326 audit(2000000158.410:67621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24690 comm="syz.3.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 412.007379][ T29] audit: type=1326 audit(2000000158.410:67622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24690 comm="syz.3.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 412.031155][ T29] audit: type=1326 audit(2000000158.410:67623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24690 comm="syz.3.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 412.055582][ T29] audit: type=1326 audit(2000000158.410:67624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24690 comm="syz.3.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 412.079159][ T29] audit: type=1326 audit(2000000158.410:67625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24690 comm="syz.3.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 412.108261][T20690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.130869][T24704] sit0 speed is unknown, defaulting to 1000 [ 412.172707][T24703] netlink: 'syz.5.7698': attribute type 10 has an invalid length. [ 412.208227][T24704] lo speed is unknown, defaulting to 1000 [ 412.215912][T24704] lo speed is unknown, defaulting to 1000 [ 412.222566][T24704] lo speed is unknown, defaulting to 1000 [ 412.296066][T24704] lo speed is unknown, defaulting to 1000 [ 412.338163][T24720] loop6: detected capacity change from 0 to 512 [ 412.390345][T24720] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 412.430354][T24733] netlink: 'syz.4.7707': attribute type 13 has an invalid length. [ 412.614800][T24749] Unknown options in mask 5 [ 413.416855][T24817] __nla_validate_parse: 3 callbacks suppressed [ 413.416964][T24817] netlink: 268 bytes leftover after parsing attributes in process `syz.5.7743'. [ 413.825102][T24863] geneve0: left allmulticast mode [ 413.911524][T24874] netlink: 824 bytes leftover after parsing attributes in process `syz.3.7770'. [ 414.026331][T24882] sit0 speed is unknown, defaulting to 1000 [ 414.041000][T24870] netlink: 'syz.4.7768': attribute type 10 has an invalid length. [ 414.193824][T24882] lo speed is unknown, defaulting to 1000 [ 414.200605][T24882] lo speed is unknown, defaulting to 1000 [ 414.207122][T24882] lo speed is unknown, defaulting to 1000 [ 414.248074][T24882] lo speed is unknown, defaulting to 1000 [ 414.295232][T24909] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7781'. [ 414.675418][T24952] sit0 speed is unknown, defaulting to 1000 [ 414.717348][T24940] sit0 speed is unknown, defaulting to 1000 [ 414.718203][T24944] netlink: 'syz.3.7794': attribute type 10 has an invalid length. [ 414.727407][T24946] netlink: 'syz.6.7795': attribute type 10 has an invalid length. [ 414.748632][T24963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7804'. [ 414.777485][T24952] lo speed is unknown, defaulting to 1000 [ 414.783731][T24952] lo speed is unknown, defaulting to 1000 [ 414.792052][T24952] lo speed is unknown, defaulting to 1000 [ 414.850064][T24952] lo speed is unknown, defaulting to 1000 [ 414.891948][T24940] lo speed is unknown, defaulting to 1000 [ 414.900827][T24940] lo speed is unknown, defaulting to 1000 [ 414.907616][T24940] lo speed is unknown, defaulting to 1000 [ 414.945768][T24940] lo speed is unknown, defaulting to 1000 [ 415.024728][T24970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7806'. [ 415.089238][T24975] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7808'. [ 415.403822][T24991] bpf_get_probe_write_proto: 2 callbacks suppressed [ 415.403844][T24991] syz.3.7815[24991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.410651][T24991] syz.3.7815[24991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.426281][T24991] syz.3.7815[24991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.806410][T25018] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7828'. [ 415.911585][T25022] sit0 speed is unknown, defaulting to 1000 [ 415.962165][T25021] netlink: 'syz.3.7826': attribute type 10 has an invalid length. [ 416.047580][T25022] lo speed is unknown, defaulting to 1000 [ 416.053653][T25022] lo speed is unknown, defaulting to 1000 [ 416.060855][T25022] lo speed is unknown, defaulting to 1000 [ 416.096263][T25022] lo speed is unknown, defaulting to 1000 [ 416.185359][T25051] syz.5.7842[25051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.185551][T25051] syz.5.7842[25051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.197439][T25051] syz.5.7842[25051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.355027][T25066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7848'. [ 416.378742][T25066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7848'. [ 416.729992][T25099] sit0 speed is unknown, defaulting to 1000 [ 416.769454][T25104] netlink: 'syz.4.7858': attribute type 10 has an invalid length. [ 416.830618][T25099] lo speed is unknown, defaulting to 1000 [ 416.837079][T25099] lo speed is unknown, defaulting to 1000 [ 416.843716][T25099] lo speed is unknown, defaulting to 1000 [ 416.887163][T25099] lo speed is unknown, defaulting to 1000 [ 417.086764][T25130] veth0_vlan: entered allmulticast mode [ 417.103763][T25130] veth0_vlan: left promiscuous mode [ 417.109449][T25130] veth0_vlan: entered promiscuous mode [ 417.142388][T25137] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7879'. [ 417.208189][T25143] loop6: detected capacity change from 0 to 1024 [ 417.217430][T25143] EXT4-fs: Ignoring removed nobh option [ 417.223041][T25143] EXT4-fs: Ignoring removed nomblk_io_submit option [ 417.244049][T25143] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 417.263908][T25143] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.279063][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 417.279081][ T29] audit: type=1400 audit(2000000163.840:68019): avc: denied { ioctl } for pid=25142 comm="syz.6.7882" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 417.314924][T25143] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 417.315298][ T29] audit: type=1400 audit(2000000163.840:68020): avc: denied { remount } for pid=25142 comm="syz.6.7882" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 417.346417][T25143] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 417.380847][T20690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.403992][ T29] audit: type=1326 audit(2000000163.960:68021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25156 comm="syz.3.7888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 417.428907][ T29] audit: type=1326 audit(2000000163.960:68022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25156 comm="syz.3.7888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 417.454259][ T29] audit: type=1326 audit(2000000163.960:68023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25156 comm="syz.3.7888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 417.481306][ T29] audit: type=1326 audit(2000000163.960:68024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25156 comm="syz.3.7888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 417.505788][ T29] audit: type=1326 audit(2000000163.960:68025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25156 comm="syz.3.7888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 417.530283][ T29] audit: type=1326 audit(2000000163.960:68026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25156 comm="syz.3.7888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 417.553976][ T29] audit: type=1326 audit(2000000163.960:68027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25156 comm="syz.3.7888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 417.578345][ T29] audit: type=1326 audit(2000000163.960:68028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25156 comm="syz.3.7888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 417.648137][T25167] ip6gre1: entered allmulticast mode [ 417.839302][T25186] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.848472][T25186] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.857003][T25186] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.865437][T25186] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.877072][T25186] vxlan0: entered promiscuous mode [ 417.882299][T25186] vxlan0: entered allmulticast mode [ 417.984905][T25188] sit0 speed is unknown, defaulting to 1000 [ 418.065035][T25188] lo speed is unknown, defaulting to 1000 [ 418.071357][T25188] lo speed is unknown, defaulting to 1000 [ 418.078398][T25188] lo speed is unknown, defaulting to 1000 [ 418.116753][T25188] lo speed is unknown, defaulting to 1000 [ 418.438206][T25235] loop6: detected capacity change from 0 to 2048 [ 418.459360][T25237] syz.5.7925[25237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 418.459439][T25237] syz.5.7925[25237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 418.467272][T25235] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.471111][T25237] syz.5.7925[25237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 418.524697][T20690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.594518][T25251] syz.3.7930[25251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 418.641202][T25260] __nla_validate_parse: 2 callbacks suppressed [ 418.641223][T25260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7934'. [ 418.667609][T25262] $H: left promiscuous mode [ 418.672755][T25262] bond_slave_0: left promiscuous mode [ 418.678560][T25262] bond_slave_1: left promiscuous mode [ 418.684934][T25262] 8021q: adding VLAN 0 to HW filter on device $H [ 418.696736][T25262] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 418.839674][T25267] netlink: 2 bytes leftover after parsing attributes in process `syz.5.7937'. [ 418.851413][T25267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.861926][T25267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.874792][T25267] batadv_slave_1: entered promiscuous mode [ 418.881775][T25267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.060391][T25279] sch_tbf: burst 40 is lower than device lo mtu (2060) ! [ 419.157792][T25287] veth0_virt_wifi: entered promiscuous mode [ 419.164731][T25287] veth0_virt_wifi: left promiscuous mode [ 419.260241][T25263] syz.3.7934 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 419.274590][T25263] CPU: 1 UID: 0 PID: 25263 Comm: syz.3.7934 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 419.285476][T25263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 419.295609][T25263] Call Trace: [ 419.298932][T25263] [ 419.301918][T25263] dump_stack_lvl+0xf2/0x150 [ 419.306586][T25263] dump_stack+0x15/0x1a [ 419.310856][T25263] dump_header+0x83/0x2d0 [ 419.315224][T25263] oom_kill_process+0x341/0x4c0 [ 419.320101][T25263] out_of_memory+0x9af/0xbe0 [ 419.324754][T25263] ? css_next_descendant_pre+0x11c/0x140 [ 419.330404][T25263] mem_cgroup_out_of_memory+0x13e/0x190 [ 419.336103][T25263] try_charge_memcg+0x508/0x7f0 [ 419.340995][T25263] obj_cgroup_charge_pages+0xbd/0x1a0 [ 419.346472][T25263] __memcg_kmem_charge_page+0x9d/0x170 [ 419.352012][T25263] __alloc_pages_noprof+0x1bc/0x340 [ 419.357386][T25263] alloc_pages_mpol_noprof+0xec/0x1e0 [ 419.362886][T25263] alloc_pages_noprof+0xe1/0x100 [ 419.367847][T25263] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 419.373692][T25263] __kvmalloc_node_noprof+0x121/0x170 [ 419.379088][T25263] ? ip_set_alloc+0x1f/0x30 [ 419.383604][T25263] ip_set_alloc+0x1f/0x30 [ 419.388020][T25263] hash_ipport_create+0x4dc/0x9f0 [ 419.393055][T25263] ? __pfx_hash_ipport_create+0x10/0x10 [ 419.398613][T25263] ip_set_create+0x359/0x8a0 [ 419.403278][T25263] ? strnstr+0xe1/0x100 [ 419.407562][T25263] ? __nla_parse+0x40/0x60 [ 419.412092][T25263] nfnetlink_rcv_msg+0x4a9/0x570 [ 419.417093][T25263] netlink_rcv_skb+0x12c/0x230 [ 419.421886][T25263] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 419.427410][T25263] nfnetlink_rcv+0x16c/0x15d0 [ 419.432244][T25263] ? __check_object_size+0x95/0x520 [ 419.437543][T25263] ? __list_del_entry_valid_or_report+0x5f/0xf0 [ 419.443910][T25263] ? __rmqueue_pcplist+0xf7e/0x1110 [ 419.449174][T25263] ? should_fail_ex+0x31/0x230 [ 419.454060][T25263] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 419.459996][T25263] ? netlink_unicast+0x1f2/0x670 [ 419.465094][T25263] netlink_unicast+0x599/0x670 [ 419.469925][T25263] netlink_sendmsg+0x5cc/0x6e0 [ 419.474713][T25263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.480142][T25263] __sock_sendmsg+0x140/0x180 [ 419.484946][T25263] ____sys_sendmsg+0x312/0x410 [ 419.489807][T25263] __sys_sendmsg+0x19d/0x230 [ 419.494505][T25263] __x64_sys_sendmsg+0x46/0x50 [ 419.499282][T25263] x64_sys_call+0x2734/0x2dc0 [ 419.503981][T25263] do_syscall_64+0xc9/0x1c0 [ 419.508520][T25263] ? clear_bhb_loop+0x55/0xb0 [ 419.513210][T25263] ? clear_bhb_loop+0x55/0xb0 [ 419.517908][T25263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.523881][T25263] RIP: 0033:0x7f2d70f85d29 [ 419.528332][T25263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.548331][T25263] RSP: 002b:00007f2d6f5d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.556785][T25263] RAX: ffffffffffffffda RBX: 00007f2d71176080 RCX: 00007f2d70f85d29 [ 419.565335][T25263] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000006 [ 419.573533][T25263] RBP: 00007f2d71001b08 R08: 0000000000000000 R09: 0000000000000000 [ 419.581601][T25263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.589646][T25263] R13: 0000000000000000 R14: 00007f2d71176080 R15: 00007ffe2761a6d8 [ 419.597639][T25263] [ 419.601053][T25263] memory: usage 307200kB, limit 307200kB, failcnt 799 [ 419.608196][T25263] memory+swap: usage 346436kB, limit 9007199254740988kB, failcnt 0 [ 419.616169][T25263] kmem: usage 214772kB, limit 9007199254740988kB, failcnt 0 [ 419.623494][T25263] Memory cgroup stats for /syz3: [ 419.625879][T25263] cache 93478912 [ 419.634420][T25263] rss 1138688 [ 419.637844][T25263] shmem 52285440 [ 419.641619][T25263] mapped_file 196608 [ 419.646609][T25263] dirty 98304 [ 419.649945][T25263] writeback 0 [ 419.653317][T25263] workingset_refault_anon 1301 [ 419.658281][T25263] workingset_refault_file 2147 [ 419.663223][T25263] swap 40177664 [ 419.666784][T25263] swapcached 0 [ 419.670147][T25263] pgpgin 416733 [ 419.673704][T25263] pgpgout 393631 [ 419.677871][T25263] pgfault 462421 [ 419.681433][T25263] pgmajfault 196 [ 419.684970][T25263] inactive_anon 40443904 [ 419.689226][T25263] active_anon 12980224 [ 419.693375][T25263] inactive_file 0 [ 419.697207][T25263] active_file 41201664 [ 419.701271][T25263] unevictable 0 [ 419.704731][T25263] hierarchical_memory_limit 314572800 [ 419.710711][T25263] hierarchical_memsw_limit 9223372036854771712 [ 419.716936][T25263] total_cache 93478912 [ 419.721048][T25263] total_rss 1138688 [ 419.724856][T25263] total_shmem 52285440 [ 419.729037][T25263] total_mapped_file 196608 [ 419.733555][T25263] total_dirty 98304 [ 419.738039][T25263] total_writeback 0 [ 419.741843][T25263] total_workingset_refault_anon 1301 [ 419.747175][T25263] total_workingset_refault_file 2147 [ 419.752612][T25263] total_swap 40177664 [ 419.756639][T25263] total_swapcached 0 [ 419.760602][T25263] total_pgpgin 416733 [ 419.764575][T25263] total_pgpgout 393631 [ 419.769388][T25263] total_pgfault 462421 [ 419.773469][T25263] total_pgmajfault 196 [ 419.777622][T25263] total_inactive_anon 40443904 [ 419.782541][T25263] total_active_anon 12980224 [ 419.787256][T25263] total_inactive_file 0 [ 419.791437][T25263] total_active_file 41201664 [ 419.796796][T25263] total_unevictable 0 [ 419.800810][T25263] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1345,pid=8712,uid=0 [ 419.815617][T25263] Memory cgroup out of memory: Killed process 8712 (syz.3.1345) total-vm:95564kB, anon-rss:1052kB, file-rss:20464kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 419.845389][T25297] netlink: 'syz.5.7949': attribute type 10 has an invalid length. [ 419.853533][T25297] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7949'. [ 419.956796][T25305] loop6: detected capacity change from 0 to 1024 [ 419.976513][T25305] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 419.987970][T25305] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 420.019494][T25305] JBD2: no valid journal superblock found [ 420.025266][T25305] EXT4-fs (loop6): Could not load journal inode [ 420.212765][T25320] sit0 speed is unknown, defaulting to 1000 [ 420.257167][T25325] netlink: 'syz.6.7961': attribute type 10 has an invalid length. [ 420.314362][T25344] sit0 speed is unknown, defaulting to 1000 [ 420.333511][T25351] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7974'. [ 420.356418][T25352] netlink: 'syz.4.7965': attribute type 10 has an invalid length. [ 420.414349][T25320] lo speed is unknown, defaulting to 1000 [ 420.431976][T25349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7973'. [ 420.441096][T25349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7973'. [ 420.450193][T25349] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7973'. [ 420.465328][T25320] lo speed is unknown, defaulting to 1000 [ 420.472714][T25344] lo speed is unknown, defaulting to 1000 [ 420.479324][T25320] lo speed is unknown, defaulting to 1000 [ 420.486449][T25344] lo speed is unknown, defaulting to 1000 [ 420.546185][T25320] lo speed is unknown, defaulting to 1000 [ 420.548504][T25344] lo speed is unknown, defaulting to 1000 [ 420.590864][T25364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7980'. [ 420.614012][T25344] lo speed is unknown, defaulting to 1000 [ 420.652984][T25370] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7982'. [ 421.038099][T25379] xt_hashlimit: max too large, truncated to 1048576 [ 421.063655][T25381] bpf_get_probe_write_proto: 8 callbacks suppressed [ 421.063678][T25381] syz.4.7985[25381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.072863][T25381] syz.4.7985[25381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.085270][T25381] syz.4.7985[25381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.223259][T25389] vlan3: entered allmulticast mode [ 421.239929][T25389] bridge_slave_0: entered allmulticast mode [ 421.251048][T25389] bridge_slave_0: left allmulticast mode [ 421.359475][T25403] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=25403 comm=syz.3.7997 [ 421.370251][T25364] syz.0.7980 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 421.386352][T25364] CPU: 0 UID: 0 PID: 25364 Comm: syz.0.7980 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 421.397193][T25364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 421.407380][T25364] Call Trace: [ 421.410683][T25364] [ 421.413615][T25364] dump_stack_lvl+0xf2/0x150 [ 421.418245][T25364] dump_stack+0x15/0x1a [ 421.422422][T25364] dump_header+0x83/0x2d0 [ 421.426844][T25364] oom_kill_process+0x341/0x4c0 [ 421.431720][T25364] out_of_memory+0x9af/0xbe0 [ 421.436322][T25364] ? css_next_descendant_pre+0x11c/0x140 [ 421.442061][T25364] mem_cgroup_out_of_memory+0x13e/0x190 [ 421.447685][T25364] try_charge_memcg+0x508/0x7f0 [ 421.452716][T25364] obj_cgroup_charge_pages+0xbd/0x1a0 [ 421.458144][T25364] __memcg_kmem_charge_page+0x9d/0x170 [ 421.463616][T25364] __alloc_pages_noprof+0x1bc/0x340 [ 421.468875][T25364] alloc_pages_mpol_noprof+0xec/0x1e0 [ 421.474310][T25364] alloc_pages_noprof+0xe1/0x100 [ 421.479364][T25364] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 421.485304][T25364] __kvmalloc_node_noprof+0x121/0x170 [ 421.490798][T25364] ? ip_set_alloc+0x1f/0x30 [ 421.495370][T25364] ip_set_alloc+0x1f/0x30 [ 421.499803][T25364] hash_ipport_create+0x4dc/0x9f0 [ 421.504846][T25364] ? __pfx_hash_ipport_create+0x10/0x10 [ 421.510405][T25364] ip_set_create+0x359/0x8a0 [ 421.515138][T25364] ? __nla_parse+0x40/0x60 [ 421.519630][T25364] nfnetlink_rcv_msg+0x4a9/0x570 [ 421.524687][T25364] netlink_rcv_skb+0x12c/0x230 [ 421.529464][T25364] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 421.534953][T25364] nfnetlink_rcv+0x16c/0x15d0 [ 421.539704][T25364] ? __rcu_read_unlock+0x4e/0x70 [ 421.544687][T25364] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 421.550145][T25364] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 421.555966][T25364] ? __bpf_ringbuf_reserve+0x2de/0x320 [ 421.561458][T25364] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 421.567038][T25364] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 421.572473][T25364] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 421.578368][T25364] ? __bpf_ringbuf_reserve+0x2de/0x320 [ 421.583937][T25364] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 421.589351][T25364] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 421.595201][T25364] ? stack_map_peek_elem+0x168/0x1e0 [ 421.600594][T25364] ? __rcu_read_unlock+0x34/0x70 [ 421.605562][T25364] ? array_map_lookup_elem+0x5b/0x80 [ 421.611009][T25364] ? __rcu_read_unlock+0x4e/0x70 [ 421.615964][T25364] ? bpf_trace_run3+0x12b/0x1d0 [ 421.620849][T25364] ? cgroup_rstat_updated+0x9f/0x570 [ 421.626155][T25364] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 421.631683][T25364] ? should_fail_ex+0x31/0x230 [ 421.636471][T25364] ? selinux_nlmsg_lookup+0x119/0x8c0 [ 421.641947][T25364] ? __rcu_read_unlock+0x34/0x70 [ 421.646934][T25364] ? __netlink_lookup+0x253/0x290 [ 421.652000][T25364] netlink_unicast+0x599/0x670 [ 421.656836][T25364] netlink_sendmsg+0x5cc/0x6e0 [ 421.661651][T25364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.667049][T25364] __sock_sendmsg+0x140/0x180 [ 421.671756][T25364] ____sys_sendmsg+0x312/0x410 [ 421.676538][T25364] __sys_sendmsg+0x19d/0x230 [ 421.681185][T25364] __x64_sys_sendmsg+0x46/0x50 [ 421.685963][T25364] x64_sys_call+0x2734/0x2dc0 [ 421.690656][T25364] do_syscall_64+0xc9/0x1c0 [ 421.695167][T25364] ? clear_bhb_loop+0x55/0xb0 [ 421.700038][T25364] ? clear_bhb_loop+0x55/0xb0 [ 421.705481][T25364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.711489][T25364] RIP: 0033:0x7f6bf0dc5d29 [ 421.715932][T25364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.735672][T25364] RSP: 002b:00007f6bef431038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.744185][T25364] RAX: ffffffffffffffda RBX: 00007f6bf0fb5fa0 RCX: 00007f6bf0dc5d29 [ 421.752285][T25364] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000006 [ 421.760465][T25364] RBP: 00007f6bf0e41b08 R08: 0000000000000000 R09: 0000000000000000 [ 421.768443][T25364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.776427][T25364] R13: 0000000000000000 R14: 00007f6bf0fb5fa0 R15: 00007ffcddc2cc48 [ 421.784413][T25364] [ 421.788477][T25364] memory: usage 307200kB, limit 307200kB, failcnt 580 [ 421.795605][T25364] memory+swap: usage 329932kB, limit 9007199254740988kB, failcnt 0 [ 421.803678][T25364] kmem: usage 239076kB, limit 9007199254740988kB, failcnt 0 [ 421.811752][T25364] Memory cgroup stats for /syz0: [ 421.812751][T25364] cache 68173824 [ 421.822093][T25364] rss 1544192 [ 421.825532][T25364] shmem 57688064 [ 421.829089][T25364] mapped_file 241664 [ 421.832363][T25405] sit0 speed is unknown, defaulting to 1000 [ 421.832979][T25364] dirty 61440 [ 421.832990][T25364] writeback 0 [ 421.846246][T25364] workingset_refault_anon 348 [ 421.850940][T25364] workingset_refault_file 3860 [ 421.855863][T25364] swap 23310336 [ 421.859358][T25364] swapcached 8192 [ 421.863066][T25364] pgpgin 557881 [ 421.866579][T25364] pgpgout 540858 [ 421.870155][T25364] pgfault 537022 [ 421.873712][T25364] pgmajfault 87 [ 421.874661][T25407] netlink: 'syz.5.7992': attribute type 10 has an invalid length. [ 421.877918][T25364] inactive_anon 57659392 [ 421.889489][T25364] active_anon 1581056 [ 421.893710][T25364] inactive_file 0 [ 421.897369][T25364] active_file 10485760 [ 421.901447][T25364] unevictable 0 [ 421.904913][T25364] hierarchical_memory_limit 314572800 [ 421.910990][T25364] hierarchical_memsw_limit 9223372036854771712 [ 421.917623][T25364] total_cache 68173824 [ 421.921827][T25364] total_rss 1544192 [ 421.925745][T25364] total_shmem 57688064 [ 421.929813][T25364] total_mapped_file 241664 [ 421.934266][T25364] total_dirty 61440 [ 421.938857][T25364] total_writeback 0 [ 421.942678][T25364] total_workingset_refault_anon 348 [ 421.946074][T25405] lo speed is unknown, defaulting to 1000 [ 421.947901][T25364] total_workingset_refault_file 3860 [ 421.954141][T25405] lo speed is unknown, defaulting to 1000 [ 421.958945][T25364] total_swap 23310336 [ 421.958960][T25364] total_swapcached 8192 [ 421.958970][T25364] total_pgpgin 557881 [ 421.958979][T25364] total_pgpgout 540858 [ 421.958989][T25364] total_pgfault 537022 [ 421.967286][T25405] lo speed is unknown, defaulting to 1000 [ 421.969615][T25364] total_pgmajfault 87 [ 421.995172][T25364] total_inactive_anon 57659392 [ 422.000695][T25364] total_active_anon 1581056 [ 422.005273][T25364] total_inactive_file 0 [ 422.009471][T25364] total_active_file 10485760 [ 422.009551][T25405] lo speed is unknown, defaulting to 1000 [ 422.014089][T25364] total_unevictable 0 [ 422.014101][T25364] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.209,pid=4456,uid=0 [ 422.039994][T25364] Memory cgroup out of memory: Killed process 4456 (syz.0.209) total-vm:95696kB, anon-rss:840kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 422.247422][T25422] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8004'. [ 422.445710][T25443] syz.3.8014[25443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.445829][T25443] syz.3.8014[25443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.489152][T25443] syz.3.8014[25443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.815610][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 422.815648][ T29] audit: type=1400 audit(2000000169.370:68155): avc: denied { setopt } for pid=25468 comm="syz.4.8026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 422.914216][ T29] audit: type=1326 audit(2000000169.460:68156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25473 comm="syz.3.8025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 422.938217][ T29] audit: type=1326 audit(2000000169.460:68157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25473 comm="syz.3.8025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 422.961804][ T29] audit: type=1326 audit(2000000169.460:68158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25473 comm="syz.3.8025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 422.985308][T25479] syz.4.8030[25479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.985601][ T29] audit: type=1326 audit(2000000169.460:68159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25473 comm="syz.3.8025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 422.985776][T25479] syz.4.8030[25479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.997057][ T29] audit: type=1326 audit(2000000169.460:68160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25473 comm="syz.3.8025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 423.116659][T25479] syz.4.8030[25479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 423.269432][ T29] audit: type=1326 audit(2000000169.830:68161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25489 comm="syz.0.8033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf0dc5d29 code=0x7ffc0000 [ 423.305280][ T29] audit: type=1326 audit(2000000169.830:68162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25489 comm="syz.0.8033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf0dc5d29 code=0x7ffc0000 [ 423.364272][ T29] audit: type=1326 audit(2000000169.830:68163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25489 comm="syz.0.8033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bf0dc5d29 code=0x7ffc0000 [ 423.388832][ T29] audit: type=1326 audit(2000000169.830:68164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25489 comm="syz.0.8033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf0dc5d29 code=0x7ffc0000 [ 423.768699][T25508] syz.6.8040[25508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 424.015064][T25512] sit0 speed is unknown, defaulting to 1000 [ 424.054926][T25513] netlink: 'syz.6.8043': attribute type 10 has an invalid length. [ 424.173349][T25512] lo speed is unknown, defaulting to 1000 [ 424.189482][T25512] lo speed is unknown, defaulting to 1000 [ 424.206425][T25512] lo speed is unknown, defaulting to 1000 [ 424.325770][T25512] lo speed is unknown, defaulting to 1000 [ 424.633056][T25556] loop6: detected capacity change from 0 to 128 [ 425.027609][T25609] sit0 speed is unknown, defaulting to 1000 [ 425.063759][T25613] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 425.083232][T25616] netlink: 'syz.3.8075': attribute type 10 has an invalid length. [ 425.189333][T25609] lo speed is unknown, defaulting to 1000 [ 425.196491][T25609] lo speed is unknown, defaulting to 1000 [ 425.205027][T25627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.219528][T25609] lo speed is unknown, defaulting to 1000 [ 425.247905][T25627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.281642][T25609] lo speed is unknown, defaulting to 1000 [ 425.787903][T25652] blktrace: Concurrent blktraces are not allowed on loop7 [ 425.796635][T25652] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 426.014616][T25660] sit0 speed is unknown, defaulting to 1000 [ 426.049922][T25666] netlink: 'syz.6.8103': attribute type 10 has an invalid length. [ 426.104519][T25660] lo speed is unknown, defaulting to 1000 [ 426.112230][T25660] lo speed is unknown, defaulting to 1000 [ 426.120584][T25660] lo speed is unknown, defaulting to 1000 [ 426.131674][T25688] netlink: 'syz.0.8116': attribute type 3 has an invalid length. [ 426.158544][T25660] lo speed is unknown, defaulting to 1000 [ 426.193541][T25692] __nla_validate_parse: 4 callbacks suppressed [ 426.193561][T25692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8118'. [ 426.208751][T25692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8118'. [ 426.232114][T25692] wireguard0: entered promiscuous mode [ 426.238324][T25692] wireguard0: entered allmulticast mode [ 426.248611][T25698] bpf_get_probe_write_proto: 11 callbacks suppressed [ 426.248644][T25698] syz.5.8121[25698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 426.258897][T25698] syz.5.8121[25698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 426.271742][T25698] syz.5.8121[25698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 426.318050][T25698] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 426.821490][T25771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8152'. [ 426.851689][T25775] Cannot find add_set index 0 as target [ 426.880287][T25778] syz.6.8155[25778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 426.880395][T25778] syz.6.8155[25778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 426.893803][T25778] syz.6.8155[25778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.188552][T25822] syz.6.8174[25822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.202685][T25822] syz.6.8174[25822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.214459][T25822] syz.6.8174[25822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.239753][T25822] syz.6.8174[25822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.300429][T25829] rdma_op ffff8881077ff180 conn xmit_rdma 0000000000000000 [ 427.476789][T25836] sit0 speed is unknown, defaulting to 1000 [ 427.527860][T25859] bond0: entered promiscuous mode [ 427.534376][T25843] netlink: 'syz.6.8180': attribute type 10 has an invalid length. [ 427.552647][T25859] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 427.570502][T25859] bond0: left promiscuous mode [ 427.658282][T25836] lo speed is unknown, defaulting to 1000 [ 427.664685][T25836] lo speed is unknown, defaulting to 1000 [ 427.675032][T25836] lo speed is unknown, defaulting to 1000 [ 427.729277][T25836] lo speed is unknown, defaulting to 1000 [ 427.815455][T25870] sit0 speed is unknown, defaulting to 1000 [ 427.866864][T25866] netlink: 'syz.0.8191': attribute type 10 has an invalid length. [ 427.961250][T25878] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8198'. [ 427.970342][T25870] lo speed is unknown, defaulting to 1000 [ 428.005964][T25870] lo speed is unknown, defaulting to 1000 [ 428.026264][T25870] lo speed is unknown, defaulting to 1000 [ 428.102823][T25870] lo speed is unknown, defaulting to 1000 [ 428.156689][T25890] bridge0: port 1($H) entered blocking state [ 428.163036][T25890] bridge0: port 1($H) entered disabled state [ 428.169625][T25890] $H: entered allmulticast mode [ 428.174795][T25890] bond_slave_0: entered allmulticast mode [ 428.180854][T25890] bond_slave_1: entered allmulticast mode [ 428.186636][T25890] geneve1: entered allmulticast mode [ 428.254741][T25893] loop6: detected capacity change from 0 to 512 [ 428.269695][T25893] EXT4-fs: Ignoring removed oldalloc option [ 428.281772][T25893] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 428.319183][T25893] EXT4-fs (loop6): 1 truncate cleaned up [ 428.331589][T25893] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.348370][ T29] kauditd_printk_skb: 441 callbacks suppressed [ 428.348387][ T29] audit: type=1400 audit(2000000173.908:68606): avc: denied { mounton } for pid=25892 comm="syz.6.8204" path="/409/bus/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 428.415257][T25903] sit0 speed is unknown, defaulting to 1000 [ 428.420945][T25908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8208'. [ 428.421710][T25893] loop6: detected capacity change from 512 to 64 [ 428.447250][T25897] netlink: 'syz.4.8205': attribute type 10 has an invalid length. [ 428.528034][ T29] audit: type=1400 audit(2000000174.088:68607): avc: denied { unmount } for pid=20690 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 428.530302][T20690] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -12) [ 428.548396][ T29] audit: type=1400 audit(2000000174.088:68608): avc: denied { unlink } for pid=20690 comm="syz-executor" name="bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 428.625421][T25919] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 428.640780][ T29] audit: type=1400 audit(2000000174.188:68609): avc: denied { rmdir } for pid=20690 comm="syz-executor" name="lost+found" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 428.663777][ T29] audit: type=1400 audit(2000000174.198:68610): avc: denied { unlink } for pid=20690 comm="syz-executor" name="file1" dev="loop6" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 428.703024][T25903] lo speed is unknown, defaulting to 1000 [ 428.709918][T20690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.736657][T25903] lo speed is unknown, defaulting to 1000 [ 428.757457][T25903] lo speed is unknown, defaulting to 1000 [ 428.879874][T25903] lo speed is unknown, defaulting to 1000 [ 429.044658][T25938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8221'. [ 429.057253][T25938] veth1_macvtap (unregistering): left allmulticast mode [ 429.130292][T25942] loop6: detected capacity change from 0 to 732 [ 429.180105][T25946] IPVS: Error connecting to the multicast addr [ 429.187464][T25942] iso9660: Unknown parameter '9qwc%L' [ 429.509215][ T29] audit: type=1326 audit(2000000175.068:68611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25974 comm="syz.3.8235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 429.533145][ T29] audit: type=1326 audit(2000000175.068:68612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25974 comm="syz.3.8235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 429.556844][ T29] audit: type=1326 audit(2000000175.068:68613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25974 comm="syz.3.8235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 429.580655][ T29] audit: type=1326 audit(2000000175.068:68614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25974 comm="syz.3.8235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 429.615647][ T29] audit: type=1326 audit(2000000175.158:68615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25974 comm="syz.3.8235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 429.700139][T25980] macvtap0: entered promiscuous mode [ 429.721815][T25980] macvtap0: left promiscuous mode [ 429.964939][T26000] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8242'. [ 430.107140][T25998] sit0 speed is unknown, defaulting to 1000 [ 430.228175][T26002] netlink: 'syz.6.8246': attribute type 10 has an invalid length. [ 430.549269][T25998] lo speed is unknown, defaulting to 1000 [ 430.615880][T25998] lo speed is unknown, defaulting to 1000 [ 430.628306][T25998] lo speed is unknown, defaulting to 1000 [ 430.662653][T25998] lo speed is unknown, defaulting to 1000 [ 430.825345][T26046] pim6reg: entered allmulticast mode [ 430.871850][T26046] pim6reg: left allmulticast mode [ 431.085061][T26079] loop6: detected capacity change from 0 to 164 [ 431.128973][T26085] batadv_slave_1: entered promiscuous mode [ 431.135301][T26085] batadv_slave_1: left promiscuous mode [ 431.191557][T26091] loop6: detected capacity change from 0 to 2048 [ 431.207172][T26091] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.227087][T26091] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 431.239870][T26091] EXT4-fs (loop6): This should not happen!! Data will be lost [ 431.239870][T26091] [ 431.249840][T26091] EXT4-fs (loop6): Total free blocks count 0 [ 431.256573][T26091] EXT4-fs (loop6): Free/Dirty block details [ 431.262820][T26091] EXT4-fs (loop6): free_blocks=0 [ 431.267927][T26091] EXT4-fs (loop6): dirty_blocks=0 [ 431.273538][T26091] EXT4-fs (loop6): Block reservation details [ 431.279650][T26091] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 431.368933][T20690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.558345][T26119] sit0 speed is unknown, defaulting to 1000 [ 431.578270][T26121] wireguard1: entered promiscuous mode [ 431.584265][T26121] wireguard1: entered allmulticast mode [ 431.609971][T26125] netlink: 'syz.3.8292': attribute type 10 has an invalid length. [ 431.732100][T26119] lo speed is unknown, defaulting to 1000 [ 431.742050][T26119] lo speed is unknown, defaulting to 1000 [ 431.755938][T26119] lo speed is unknown, defaulting to 1000 [ 431.821360][T26119] lo speed is unknown, defaulting to 1000 [ 431.852506][T26141] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 431.919101][T26147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8302'. [ 432.068450][T26166] syzkaller0: entered allmulticast mode [ 432.077252][T26166] syzkaller0 (unregistering): left allmulticast mode [ 432.158359][T26168] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8315'. [ 432.317932][T26178] netlink: 'syz.5.8321': attribute type 4 has an invalid length. [ 432.349816][T26182] netlink: 372 bytes leftover after parsing attributes in process `syz.6.8319'. [ 432.565344][T26213] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 432.572289][T26213] tipc: Enabled bearer , priority 10 [ 432.589869][T26213] tipc: Enabling of bearer rejected, failed to enable media [ 432.695709][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 432.835592][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 432.975631][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 433.115605][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 433.255616][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 433.371100][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 433.371120][ T29] audit: type=1400 audit(2000000178.928:68869): avc: denied { write } for pid=26285 comm="syz.5.8369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 433.397415][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 433.535773][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 433.584178][T26300] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8375'. [ 433.667812][ T29] audit: type=1400 audit(2000000179.218:68870): avc: denied { connect } for pid=26305 comm="syz.3.8378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 433.688184][ T6677] tipc: Node number set to 819976806 [ 433.825596][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 433.847578][T26322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8384'. [ 433.931028][ T29] audit: type=1400 audit(2000000179.488:68871): avc: denied { ioctl } for pid=26327 comm="syz.4.8387" path="socket:[72413]" dev="sockfs" ino=72413 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 433.962363][ T29] audit: type=1400 audit(2000000179.518:68872): avc: denied { read } for pid=26329 comm="syz.6.8388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 434.095680][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 434.201689][T26341] sit0 speed is unknown, defaulting to 1000 [ 434.256671][T26344] netlink: 'syz.4.8391': attribute type 10 has an invalid length. [ 434.269626][T26341] lo speed is unknown, defaulting to 1000 [ 434.275768][T26341] lo speed is unknown, defaulting to 1000 [ 434.282702][T26341] lo speed is unknown, defaulting to 1000 [ 434.315011][T26341] lo speed is unknown, defaulting to 1000 [ 434.352413][T26350] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8394'. [ 434.510558][ T29] audit: type=1326 audit(2000000180.068:68873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26371 comm="syz.3.8404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 434.536290][ T29] audit: type=1326 audit(2000000180.068:68874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26371 comm="syz.3.8404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 434.547835][T26374] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8405'. [ 434.560065][ T29] audit: type=1326 audit(2000000180.068:68875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26371 comm="syz.3.8404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 434.560173][ T29] audit: type=1326 audit(2000000180.068:68876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26371 comm="syz.3.8404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 434.560232][ T29] audit: type=1326 audit(2000000180.068:68877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26371 comm="syz.3.8404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 434.560340][ T29] audit: type=1326 audit(2000000180.068:68878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26371 comm="syz.3.8404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7ffc0000 [ 434.864186][T26384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8409'. [ 434.971924][T26393] ref_ctr increment failed for inode: 0x24c8 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888104969500 [ 435.014125][T26392] uprobe: syz.3.8412:26392 failed to unregister, leaking uprobe [ 435.053635][T26403] netlink: 180 bytes leftover after parsing attributes in process `syz.6.8415'. [ 435.075104][T26403] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8415'. [ 436.444246][T26490] Cannot find set identified by id 0 to match [ 436.782977][T26544] bpf_get_probe_write_proto: 5 callbacks suppressed [ 436.782999][T26544] syz.4.8475[26544] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 436.790478][T26544] syz.4.8475[26544] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 436.802942][T26544] syz.4.8475[26544] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.394557][T26557] sit0 speed is unknown, defaulting to 1000 [ 437.459543][T26591] syz.5.8495[26591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.459643][T26591] syz.5.8495[26591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.479014][T26591] syz.5.8495[26591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.497146][T26591] syz.5.8495[26591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.509097][T26591] syz.5.8495[26591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.570064][T26591] syz.5.8495[26591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.596635][T26598] netlink: 'syz.4.8494': attribute type 10 has an invalid length. [ 437.624789][T26557] lo speed is unknown, defaulting to 1000 [ 437.631617][T26597] Cannot find set identified by id 0 to match [ 437.660485][T26595] sit0 speed is unknown, defaulting to 1000 [ 437.673590][T26557] lo speed is unknown, defaulting to 1000 [ 437.699265][T26557] lo speed is unknown, defaulting to 1000 [ 437.775620][ C1] net_ratelimit: 4 callbacks suppressed [ 437.775642][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 437.805925][T26604] __nla_validate_parse: 7 callbacks suppressed [ 437.805940][T26604] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8495'. [ 437.865036][T26557] lo speed is unknown, defaulting to 1000 [ 437.901726][T26613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8503'. [ 437.958862][T26595] lo speed is unknown, defaulting to 1000 [ 437.979373][T26621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8505'. [ 438.036995][T26595] lo speed is unknown, defaulting to 1000 [ 438.045700][T26619] sit0 speed is unknown, defaulting to 1000 [ 438.047597][T26595] lo speed is unknown, defaulting to 1000 [ 438.101109][T26626] netlink: 96 bytes leftover after parsing attributes in process `syz.6.8507'. [ 438.112515][T26628] bridge0: left allmulticast mode [ 438.177693][T26595] lo speed is unknown, defaulting to 1000 [ 438.338774][T26632] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 438.423578][T26642] macvlan0: entered promiscuous mode [ 438.434579][T26642] ipvlan0: entered promiscuous mode [ 438.443291][T26642] ipvlan0: left promiscuous mode [ 438.454335][T26642] macvlan0: left promiscuous mode [ 438.466246][T26619] lo speed is unknown, defaulting to 1000 [ 438.488550][T26619] lo speed is unknown, defaulting to 1000 [ 438.503986][T26619] lo speed is unknown, defaulting to 1000 [ 438.602359][T26619] lo speed is unknown, defaulting to 1000 [ 438.627774][T26651] bond0: entered promiscuous mode [ 438.640626][T26651] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 438.680295][T26651] bond0: left promiscuous mode [ 438.815601][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 438.899028][T26656] netlink: 3 bytes leftover after parsing attributes in process `syz.5.8520'. [ 439.006202][T26664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8524'. [ 439.015095][T26664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8524'. [ 439.171282][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 439.171301][ T29] audit: type=1400 audit(2000000184.728:68959): avc: denied { write } for pid=26676 comm="syz.3.8530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 439.171669][T26678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8530'. [ 439.177632][ T29] audit: type=1400 audit(2000000184.728:68960): avc: denied { setopt } for pid=26676 comm="syz.3.8530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 439.354495][T26688] vlan3: entered allmulticast mode [ 439.359747][T26688] bridge_slave_0: entered allmulticast mode [ 439.372380][T26688] bridge_slave_0: left allmulticast mode [ 439.461328][ T29] audit: type=1326 audit(2000000185.018:68961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26696 comm="syz.3.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d70f85d29 code=0x7fc00000 [ 439.498036][T26704] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8541'. [ 439.528754][T26708] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8542'. [ 439.729937][ T29] audit: type=1400 audit(2000000185.288:68962): avc: denied { bind } for pid=26721 comm="syz.0.8548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 439.781282][ T29] audit: type=1400 audit(2000000185.338:68963): avc: denied { ioctl } for pid=26725 comm="syz.0.8550" path="socket:[73543]" dev="sockfs" ino=73543 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 439.817516][T26726] netlink: 'syz.0.8550': attribute type 13 has an invalid length. [ 439.835094][T26724] 9pnet_fd: Insufficient options for proto=fd [ 439.849053][T26726] gretap0: refused to change device tx_queue_len [ 439.865593][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 439.867584][T26726] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 439.888935][ T3372] lo speed is unknown, defaulting to 1000 [ 440.228103][ T29] audit: type=1400 audit(2000000185.788:68964): avc: denied { create } for pid=26746 comm="syz.5.8559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 440.277764][ T29] audit: type=1326 audit(2000000185.808:68965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26696 comm="syz.3.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d70f85d29 code=0x7fc00000 [ 440.493041][ T29] audit: type=1326 audit(2000000186.048:68966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26765 comm="syz.0.8567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf0dc5d29 code=0x7ffc0000 [ 440.517586][ T29] audit: type=1326 audit(2000000186.048:68967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26765 comm="syz.0.8567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf0dc5d29 code=0x7ffc0000 [ 440.607311][T26771] loop6: detected capacity change from 0 to 128 [ 440.614428][ T29] audit: type=1326 audit(2000000186.098:68968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26765 comm="syz.0.8567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6bf0dc5d29 code=0x7ffc0000 [ 440.667487][T26771] syz.6.8570: attempt to access beyond end of device [ 440.667487][T26771] loop6: rw=2049, sector=153, nr_sectors = 888 limit=128 [ 440.896029][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 441.358740][T26769] Cannot find del_set index 0 as target [ 441.563075][T26814] vlan3: entered allmulticast mode [ 441.569214][T26814] bridge_slave_0: entered allmulticast mode [ 441.587804][T26814] bridge_slave_0: left allmulticast mode [ 441.880933][T26843] macvlan0: entered promiscuous mode [ 441.897140][T26843] ipvlan0: entered promiscuous mode [ 441.913205][T26843] ipvlan0: left promiscuous mode [ 441.924793][T26843] macvlan0: left promiscuous mode [ 441.935580][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 442.030003][T26867] macvlan1: entered promiscuous mode [ 442.071167][T26867] macvlan1 (unregistering): left promiscuous mode [ 442.236220][T26898] loop6: detected capacity change from 0 to 8192 [ 442.289509][T26898] msdos: Unknown parameter '1844674407370955161501777777777777777777777' [ 442.975624][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 443.211187][T27032] tipc: Enabling of bearer rejected, already enabled [ 443.386336][T27042] ref_ctr increment failed for inode: 0xa05 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888104bc9500 [ 443.402126][T27041] uprobe: syz.6.8626:27041 failed to unregister, leaking uprobe [ 443.478170][T27052] __nla_validate_parse: 6 callbacks suppressed [ 443.478189][T27052] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8630'. [ 443.493562][T27052] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8630'. [ 443.563820][T27054] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.658792][T27054] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.696021][T27066] 9pnet_fd: Insufficient options for proto=fd [ 443.733467][T27054] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.819256][T27054] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.876602][T27054] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.890751][T27054] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.902805][T27054] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.917064][T27054] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.025612][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 444.193862][T27079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8641'. [ 444.202912][T27079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8641'. [ 444.681947][T27106] sit0 speed is unknown, defaulting to 1000 [ 444.726068][T27112] netlink: 'syz.5.8647': attribute type 10 has an invalid length. [ 444.772060][T27106] lo speed is unknown, defaulting to 1000 [ 444.780804][T27106] lo speed is unknown, defaulting to 1000 [ 444.788188][T27106] lo speed is unknown, defaulting to 1000 [ 444.845189][T27106] lo speed is unknown, defaulting to 1000 [ 444.883859][T27121] loop6: detected capacity change from 0 to 2048 [ 444.959428][T27135] IPv4: Oversized IP packet from 127.202.26.0 [ 445.047126][T27141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.065635][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 445.483414][T27154] loop6: detected capacity change from 0 to 2048 [ 445.491004][T27154] EXT4-fs: Ignoring removed mblk_io_submit option [ 445.528052][T27154] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.542313][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 445.542332][ T29] audit: type=1400 audit(2000000191.098:69075): avc: denied { read append open } for pid=27153 comm="syz.6.8667" path="/497/file0/devices.list" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 445.543462][T27154] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8667: bg 0: block 234: padding at end of block bitmap is not set [ 445.592728][T27154] EXT4-fs (loop6): Remounting filesystem read-only [ 445.605893][ T29] audit: type=1400 audit(2000000191.168:69076): avc: denied { map } for pid=27153 comm="syz.6.8667" path="/497/file0/devices.list" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 445.630495][ T29] audit: type=1400 audit(2000000191.168:69077): avc: denied { execute } for pid=27153 comm="syz.6.8667" path="/497/file0/devices.list" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 445.655057][T20690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.715466][T27178] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8674'. [ 445.725178][T27168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8671'. [ 445.770577][ T29] audit: type=1326 audit(2000000191.328:69078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27183 comm="syz.0.8676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf0dc5d29 code=0x7ffc0000 [ 445.795234][ T29] audit: type=1326 audit(2000000191.328:69079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27183 comm="syz.0.8676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf0dc5d29 code=0x7ffc0000 [ 445.819980][ T29] audit: type=1326 audit(2000000191.328:69080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27183 comm="syz.0.8676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bf0dc5d29 code=0x7ffc0000 [ 445.845009][ T29] audit: type=1326 audit(2000000191.328:69081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27183 comm="syz.0.8676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf0dc5d29 code=0x7ffc0000 [ 445.869523][ T29] audit: type=1326 audit(2000000191.328:69082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27183 comm="syz.0.8676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf0dc5d29 code=0x7ffc0000 [ 445.897580][ T29] audit: type=1326 audit(2000000191.328:69083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27183 comm="syz.0.8676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f6bf0dc5d29 code=0x7ffc0000 [ 445.921355][ T29] audit: type=1326 audit(2000000191.328:69084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27183 comm="syz.0.8676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf0dc5d29 code=0x7ffc0000 [ 445.950994][T27191] netlink: 'syz.6.8677': attribute type 11 has an invalid length. [ 446.014082][T27197] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8685'. [ 446.071164][T27206] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8688'. [ 446.095597][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 446.167720][T27214] netem: change failed [ 446.194045][T27219] 9pnet: p9_errstr2errno: server reported unknown error [ 447.099251][T27270] sit0 speed is unknown, defaulting to 1000 [ 447.136758][T27271] netlink: 'syz.6.8713': attribute type 10 has an invalid length. [ 447.145620][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 447.213318][T27270] lo speed is unknown, defaulting to 1000 [ 447.219782][T27270] lo speed is unknown, defaulting to 1000 [ 447.228293][T27270] lo speed is unknown, defaulting to 1000 [ 447.278847][T27270] lo speed is unknown, defaulting to 1000 [ 447.388941][T27289] loop6: detected capacity change from 0 to 2048 [ 447.420297][T27289] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.578545][T20690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.960919][T27324] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 447.969436][T27324] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 447.977858][T27324] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 447.986963][T27324] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 448.185651][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 448.344775][T27334] @: renamed from vlan0 [ 448.377711][T27336] netlink: 'syz.4.8736': attribute type 10 has an invalid length. [ 448.461936][T27341] xt_hashlimit: max too large, truncated to 1048576 [ 448.470564][T27341] Cannot find set identified by id 0 to match [ 448.481555][T27341] siw: device registration error -23 [ 448.560696][T27349] wireguard1: entered promiscuous mode [ 448.566263][T27349] wireguard1: entered allmulticast mode [ 448.658163][T27362] loop6: detected capacity change from 0 to 128 [ 448.690924][T27362] syz.6.8747: attempt to access beyond end of device [ 448.690924][T27362] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 448.713859][T27361] syz.6.8747: attempt to access beyond end of device [ 448.713859][T27361] loop6: rw=524288, sector=145, nr_sectors = 216 limit=128 [ 448.728185][T27361] syz.6.8747: attempt to access beyond end of device [ 448.728185][T27361] loop6: rw=0, sector=161, nr_sectors = 8 limit=128 [ 448.732871][T27368] netlink: 'syz.3.8750': attribute type 7 has an invalid length. [ 448.741914][T27361] syz.6.8747: attempt to access beyond end of device [ 448.741914][T27361] loop6: rw=0, sector=161, nr_sectors = 8 limit=128 [ 448.742029][T27361] syz.6.8747: attempt to access beyond end of device [ 448.742029][T27361] loop6: rw=0, sector=161, nr_sectors = 8 limit=128 [ 448.742070][T27361] syz.6.8747: attempt to access beyond end of device [ 448.742070][T27361] loop6: rw=0, sector=161, nr_sectors = 8 limit=128 [ 448.742138][T27361] syz.6.8747: attempt to access beyond end of device [ 448.742138][T27361] loop6: rw=0, sector=161, nr_sectors = 8 limit=128 [ 448.742281][T27361] syz.6.8747: attempt to access beyond end of device [ 448.742281][T27361] loop6: rw=0, sector=161, nr_sectors = 8 limit=128 [ 448.750010][T27368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8750'. [ 448.766086][T27361] syz.6.8747: attempt to access beyond end of device [ 448.766086][T27361] loop6: rw=0, sector=161, nr_sectors = 8 limit=128 [ 448.838881][T27361] syz.6.8747: attempt to access beyond end of device [ 448.838881][T27361] loop6: rw=0, sector=161, nr_sectors = 8 limit=128 [ 448.995969][T27391] vlan3: entered promiscuous mode [ 449.001469][T27391] $H: entered promiscuous mode [ 449.006777][T27391] bond_slave_0: entered promiscuous mode [ 449.012506][T27391] bond_slave_1: entered promiscuous mode [ 449.020771][T27391] $H: left promiscuous mode [ 449.025770][T27391] bond_slave_0: left promiscuous mode [ 449.031359][T27391] bond_slave_1: left promiscuous mode [ 449.041609][T27393] random: crng reseeded on system resumption [ 449.215608][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 449.294335][T27417] xt_hashlimit: size too large, truncated to 1048576 [ 449.690026][T27434] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.738182][T27434] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.787901][T27437] .: renamed from bond0 [ 449.798262][T27434] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.847129][T27443] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8779'. [ 449.858810][T27434] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.877386][T27445] syz.3.8780[27445] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 449.877457][T27445] syz.3.8780[27445] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 449.889250][T27445] syz.3.8780[27445] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 449.909026][T27434] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.925133][T27448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8781'. [ 449.934908][T27434] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.961667][T27434] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.982521][T27434] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.004339][T27452] netlink: 'syz.5.8778': attribute type 10 has an invalid length. [ 450.004964][T27449] sit0 speed is unknown, defaulting to 1000 [ 450.079680][T27456] netem: change failed [ 450.154777][T27449] lo speed is unknown, defaulting to 1000 [ 450.161672][T27449] lo speed is unknown, defaulting to 1000 [ 450.171674][T27449] lo speed is unknown, defaulting to 1000 [ 450.231091][T27449] lo speed is unknown, defaulting to 1000 [ 450.255586][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 450.699101][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 450.699116][ T29] audit: type=1400 audit(2000000196.258:69243): avc: denied { ioctl } for pid=27490 comm="syz.3.8798" path="socket:[76158]" dev="sockfs" ino=76158 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 450.828700][T27495] netlink: 3 bytes leftover after parsing attributes in process `syz.5.8800'. [ 450.846348][T27495] 1X: renamed from 60X [ 450.853559][T27495] 1X: entered allmulticast mode [ 450.858977][T27495] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check. [ 450.882270][T27499] loop6: detected capacity change from 0 to 512 [ 450.890374][T27499] EXT4-fs: Ignoring removed oldalloc option [ 450.906865][T27499] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 450.966361][T27499] EXT4-fs (loop6): 1 truncate cleaned up [ 450.972480][T27499] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.005538][ T29] audit: type=1400 audit(2000000196.548:69244): avc: denied { write } for pid=27498 comm="syz.6.8802" path="/528/bus/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 451.147289][ T29] audit: type=1400 audit(2000000196.708:69245): avc: denied { bind } for pid=27511 comm="syz.5.8809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 451.182194][T20690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.233657][T27523] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8810'. [ 451.296958][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 451.417297][ T29] audit: type=1326 audit(2000000196.978:69246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27537 comm="syz.0.8819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf0dc5d29 code=0x7ffc0000 [ 451.448894][ T29] audit: type=1326 audit(2000000196.978:69247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27537 comm="syz.0.8819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf0dc5d29 code=0x7ffc0000 [ 451.473029][ T29] audit: type=1326 audit(2000000196.998:69248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27537 comm="syz.0.8819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6bf0dc5d29 code=0x7ffc0000 [ 451.474401][T27540] netlink: 'syz.5.8820': attribute type 10 has an invalid length. [ 451.497410][ T29] audit: type=1326 audit(2000000196.998:69249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27537 comm="syz.0.8819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6bf0dc5d63 code=0x7ffc0000 [ 451.528885][ T29] audit: type=1326 audit(2000000196.998:69250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27537 comm="syz.0.8819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6bf0dc5d63 code=0x7ffc0000 [ 451.552413][ T29] audit: type=1326 audit(2000000196.998:69251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27537 comm="syz.0.8819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf0dc5d29 code=0x7ffc0000 [ 451.576564][T27532] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8816'. [ 451.576670][T27532] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8816'. [ 451.594735][ T29] audit: type=1326 audit(2000000196.998:69252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27537 comm="syz.0.8819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf0dc5d29 code=0x7ffc0000 [ 451.946469][T27577] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 451.959339][T27578] sit0 speed is unknown, defaulting to 1000 [ 451.987088][T27577] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 451.996304][T27579] netlink: 'syz.4.8831': attribute type 10 has an invalid length. [ 452.031670][T27578] lo speed is unknown, defaulting to 1000 [ 452.037795][T27578] lo speed is unknown, defaulting to 1000 [ 452.044290][T27578] lo speed is unknown, defaulting to 1000 [ 452.056814][T27577] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 452.077339][T27578] lo speed is unknown, defaulting to 1000 [ 452.107690][T27577] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 452.152886][T27577] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 452.165132][T27577] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 452.177363][T27577] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 452.189838][T27577] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 452.338957][T27592] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 452.345580][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 452.473100][T27600] delete_channel: no stack [ 452.557824][T27606] team_slave_0: entered promiscuous mode [ 452.563521][T27606] team_slave_0: entered allmulticast mode [ 452.763139][T27631] syz.4.8854[27631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 452.763216][T27631] syz.4.8854[27631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 452.785107][T27631] syz.4.8854[27631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 452.801431][T27633] tmpfs: Bad value for 'mpol' [ 452.830253][T27628] netlink: 'syz.6.8853': attribute type 13 has an invalid length. [ 452.943311][T27641] ================================================================== [ 452.951451][T27641] BUG: KCSAN: data-race in rxrpc_input_call_event / rxrpc_send_data [ 452.959500][T27641] [ 452.961829][T27641] write to 0xffff8881351f4ff4 of 4 bytes by task 27643 on cpu 1: [ 452.969575][T27641] rxrpc_input_call_event+0x8ef/0x12e0 [ 452.975237][T27641] rxrpc_io_thread+0x30e/0x1fb0 [ 452.980255][T27641] kthread+0x1d1/0x210 [ 452.984510][T27641] ret_from_fork+0x4b/0x60 [ 452.988949][T27641] ret_from_fork_asm+0x1a/0x30 [ 452.994363][T27641] [ 452.996695][T27641] read to 0xffff8881351f4ff4 of 4 bytes by task 27641 on cpu 0: [ 453.004608][T27641] rxrpc_send_data+0x889/0x1820 [ 453.009523][T27641] rxrpc_do_sendmsg+0xb92/0xc30 [ 453.010259][T27648] syz.3.8860[27648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 453.014397][T27641] rxrpc_sendmsg+0x417/0x520 [ 453.014434][T27641] __sock_sendmsg+0x140/0x180 [ 453.014464][T27641] ____sys_sendmsg+0x312/0x410 [ 453.014486][T27641] __sys_sendmsg+0x19d/0x230 [ 453.026274][T27648] syz.3.8860[27648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 453.030598][T27641] __x64_sys_sendmsg+0x46/0x50 [ 453.035518][T27648] syz.3.8860[27648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 453.040039][T27641] x64_sys_call+0x2734/0x2dc0 [ 453.040073][T27641] do_syscall_64+0xc9/0x1c0 [ 453.082055][T27641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.088025][T27641] [ 453.090351][T27641] value changed: 0x00000001 -> 0x00000002 [ 453.096073][T27641] [ 453.098413][T27641] Reported by Kernel Concurrency Sanitizer on: [ 453.104678][T27641] CPU: 0 UID: 0 PID: 27641 Comm: syz.0.8859 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 453.115535][T27641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 453.125770][T27641] ================================================================== [ 453.288022][T27628] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.295488][T27628] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.375604][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 453.544481][T27628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.559575][T27628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.684488][T27628] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.693109][T27628] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.702298][T27628] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.711333][T27628] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.803484][T27637] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.8856'. [ 454.425650][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 455.455622][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 456.495651][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 457.535625][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 458.575617][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 459.615665][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 460.655656][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 461.695641][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 462.735620][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available