last executing test programs: 18m25.814441872s ago: executing program 4 (id=1233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYBLOB='\x00'/17, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000586a6ff922d8ef212953654b2bbf439cb75ca20b37e422a15fe77c64041612e8799700d1c206b2d01127fdc6d78308cd7acff45faabeb23af6a388c58360a76aa8255d9ba17ea555e3b0c96146363de120fce390e49654988e22d565ed98832f12ac2f9b92cf26f0919da449b60edc0bb1aa987aa6fd6759871a95f522e5982f11bfbc84d74077218cfbeb3d8062eb"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000240), 0x10) sendmsg$can_bcm(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000100"/16, @ANYRES64=r9, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB='\x00\x00\x00TL'], 0x38}, 0x300, 0x0, 0x0, 0x6108be0612f59833}, 0x0) 18m24.347714524s ago: executing program 4 (id=1238): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0xa00013, &(0x7f0000000f40)={[{@block_validity}]}, 0x0, 0x54b, &(0x7f0000000680)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() chmod(0x0, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000002c0)={0xa, 0x2, 0x395, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd28, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, @in=@remote, 0x10, 0x2400, 0x1000, 0x0, 0x2, 0x20, 0x20, 0x84, 0x0, 0xee01}, {}, {}, 0x4}}, 0xb8}}, 0x0) shutdown(r4, 0x1) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000040)='./file2/file0\x00', 0x8, &(0x7f0000001f40)=ANY=[], 0x1, 0x152b, &(0x7f0000000a00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x40) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[], 0x32600) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r6}, 0x10) 18m19.42924918s ago: executing program 4 (id=1246): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0xa00013, &(0x7f0000000f40)={[{@block_validity}]}, 0x0, 0x54b, &(0x7f0000000680)="$eJzs3c9vHFcdAPDvjL32JnFZFxAqlSgVLUoqSDZuaGshBOVSDqgSUO7BxBvLyjpr7HWJrQpc8R8gJLhy4oLEhRsS6oE/AFWqBBfEAQECIUjggPjRQTM7q5rdWdtt17uu/flIk31vfn3fm4nf/Ni3MwGcW49HxPMRMRMRT0VEoxyflsPNPLPfm+/B/VduPUiKydlLf00iKcf115XnZyPiUm+RqEfEV74Q8fVkOO727t6dlXa7tVXmm92Nzeb27t7V9Y2VtdZa6+6NG0vPLj+3/Mzy9az0ruq52E/86IXP/vyT3/zdzT9f+VZerM98KGoxUI9x6lW9VmyLvnwbbZ1EsCmYKetTm3ZBAAA4lvwc//0R8bHi/L8RM8XZ3ICZgfz8pEoHAAAAjEP2uYX4TxKRAQAAAGdWGhELkaTXyr4AC5Gmc+W9gQ/GxbTd2e5+4nZn5+5qPi1iMWrp7fV263rZV3gxakmeXyr72PbzTw/kb0TEwxHxvcaFIn/tVqe9OuV7HwAAAHBeXBq4/v9HIy3SlQ7+iLXqdwIAAADA6bU4MgMAAACcFS75AQAA4OwbvP4ffN4/AAAA8J72pRdfzIes//7r1Zd3d+50Xr662ur/2L+ztXltrdNZK57Zt3HU+tqdzuan4u7OvWa3td1tbu/u3dzo7Nzt3lyPesQLXzzxCgEAAABDHv7oa79OImL/0xeKIcrnAB7qG5MoGXCq/GHaBQDGSVc/OL88xRvOr9q0CwBMXXLE9F5voGR/IoUBAABOxOUPD3//33//v3sDcLYd2dcHADhz3sn3/64L4GyoFT0AL0y7GMAUzJb3AN7Xy86Pmq8+asIvjxspyyJebxwc4zwCAAAma6EYkvRaeR2wEGnxleBDEeli1JLb6+3W9fL64FeN2nyeXyqWTI7sMwwAAAAAAAAAAAAAAAAAAAAAAAAA9GRZEhkAAABwpkWkf0qKp/lHXG48uTB4f2Au+Wcj/lhmktmIlW53aykf/7fiXV5zEdH9wUvfv5ePf3rk68MAAACAcUv2R07qXaeXn0sTLRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA58CD+6/c6g+TjPuXz0fEYlX82agXn/WoRcTFvycxe2C5JCJmxhB//9WIeKQqfhJvZtm3oyxFVfwL44s/VxV/sdg01fHTiLg0hvhwnr2Wtz/PV/39p/F48Vn99zdbDu/W6PYvLSM/UrRzVe3PQ0Nr26iM8egbP2n2UrXh+K9GPDpb3f71299kRPwnhtb27yzLhuN/7at7e6Pqn/0w4nLMVcWvHYzV7G5sNrd3966ub6ystdbmI2Lp2eXnlp9Zvt68vd5ulf9WxvjuR3725qj4ef0vVhz/fvubXvt7WP2fHLXSAf994979D/SSQzsgj3/licrjbz1GxE/LY9/Hy3Q+/XI/vd9LH/TYj19/7LD6r1Ye/4/e/1eOWf+nvvyd3x9zVgBgArZ39+6stNutrUMS9WPMM4HEfFnksa3wF/VTUa+3mXjrnkTEaSjPO02k/7cr81oN7Ny5GHPQn/7r7W6xbGL/sWfiuEvNTWg3TatFAgAATspbJ/3TLgkAAAAAAAAAAAAAAAAAAACcXwMP/bp0Eo8TG4y5P52qAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAc6n8BAAD//81/znA=") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() chmod(&(0x7f0000001a40)='./file0\x00', 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000002c0)={0xa, 0x2, 0x395, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd28, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, @in=@remote, 0x10, 0x2400, 0x1000, 0x0, 0x2, 0x20, 0x20, 0x84, 0x0, 0xee01}, {}, {}, 0x4}}, 0xb8}}, 0x0) shutdown(r4, 0x1) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000040)='./file2/file0\x00', 0x8, &(0x7f0000001f40)=ANY=[], 0x1, 0x152b, &(0x7f0000000a00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x40) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[], 0x32600) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r6}, 0x10) 18m16.82914817s ago: executing program 4 (id=1251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket(0xa, 0x2, 0x2) fsopen(0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x99, &(0x7f0000000580)={@local, @empty, @void, {@mpls_mc={0x8848, {[{0x4}, {0xff}, {0xfff, 0x0, 0x1}, {0x2}, {0x7, 0x0, 0x1}], @llc={@snap={0x0, 0x1, "23be", "0796f3", 0x88f5, "c6e555620918bea616eb43ab6723bdab667e266dfa38628f7fa89d5060d6e70c30ceab83043e4ae09f958138f8d84aeff1def75f64f834180bd2e46a888f0e881bc63fd6cc8cd74dccabdca22af45e5df41fd901e16f38990de0f05cba28485dd76d4ec2863a554130aaf5bef86c"}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r3) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x80, r6, 0x1, 0x80000, 0x1, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1ff}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x80}}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r7, 0x5425, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r8, &(0x7f0000000900)="240000001a005f0214f9f4070009040002000000000001000000000008000f00fd00", 0x22) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r9, 0x0, 0x20000023896) 18m11.182661337s ago: executing program 4 (id=1257): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000)=0x1, 0x4) 18m11.141950937s ago: executing program 4 (id=1264): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ptrace(0x10, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x64, 0x10, 0x401, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x503, 0x60}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x7ffffffe, 0x6}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40000c2, 0x536}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 17m53.889407492s ago: executing program 32 (id=1264): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ptrace(0x10, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x64, 0x10, 0x401, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x503, 0x60}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x7ffffffe, 0x6}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40000c2, 0x536}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 11.722624775s ago: executing program 1 (id=6221): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) creat(&(0x7f00000001c0)='./bus\x00', 0x11f) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[]) 10.457437594s ago: executing program 1 (id=6227): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r4, &(0x7f0000000080), 0x0}, 0x20) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 10.260948387s ago: executing program 3 (id=6228): syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) 9.727479225s ago: executing program 3 (id=6229): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 8.794976959s ago: executing program 3 (id=6232): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) creat(&(0x7f00000001c0)='./bus\x00', 0x11f) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[]) 7.544924008s ago: executing program 3 (id=6235): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x6}, @IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x5}]}}}]}, 0x44}}, 0x4048000) 7.075579895s ago: executing program 3 (id=6237): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1c0, 0x12, 0x60d, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 6.854024368s ago: executing program 5 (id=6239): syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) 6.783909289s ago: executing program 5 (id=6240): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 6.098224079s ago: executing program 0 (id=6241): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) creat(&(0x7f00000001c0)='./bus\x00', 0x11f) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[]) 6.094903189s ago: executing program 3 (id=6242): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000240)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x65, 0x0, 0x66, 0x33, 0x63, 0x64, 0x61], 0x2d, [0x63, 0x53, 0x31, 0x62], 0x2d, [0xeedfba8c58702b9f, 0x33, 0x61, 0x61], 0x2d, [0x32, 0x64, 0x36, 0x39], 0x2d, [0x0, 0x61, 0x30, 0x30, 0x66, 0x32, 0x66, 0x84db1c848d34f881]}}}]}, 0x3, 0x570, &(0x7f0000000680)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xb0) read$FUSE(r7, &(0x7f0000000bc0)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) 5.090124454s ago: executing program 0 (id=6243): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5.089300525s ago: executing program 5 (id=6244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') readlinkat(0xffffffffffffff9c, 0x0, &(0x7f00000012c0)=""/168, 0xa8) creat(&(0x7f0000002540)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xbc) 4.582100082s ago: executing program 2 (id=6245): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208108dc, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=r0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) write$bt_hci(0xffffffffffffffff, 0x0, 0x138) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 4.441357784s ago: executing program 1 (id=6230): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write$P9_RVERSION(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b00"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC]) 4.408099555s ago: executing program 1 (id=6246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) getrlimit(0x9, &(0x7f00000001c0)) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 3.739556575s ago: executing program 0 (id=6247): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x6}, @IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x5}]}}}]}, 0x44}}, 0x4048000) 3.738356135s ago: executing program 5 (id=6248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) write$tun(0xffffffffffffffff, 0x0, 0x46) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) 3.140719903s ago: executing program 2 (id=6249): syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x20}}, 0x0) 2.819976978s ago: executing program 1 (id=6250): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup(r5) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtaction={0xa4, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x90, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x0, 0x0, 0xffffffe4}, 0x1, r8}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x3c, 0x2, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1f2c, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}}, 0x0) 2.811919768s ago: executing program 2 (id=6251): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup(r5) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtaction={0xa4, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x90, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x0, 0x0, 0xffffffe4}, 0x1, r8}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x3c, 0x2, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1f2c, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}}, 0x0) 2.70047809s ago: executing program 0 (id=6252): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRES64=0x0, @ANYBLOB="8e2be9e749f66eb8bd1c7f34534c81cbc9f24a34459da3337e18614fd1a081e5df8fd0787be3dd19de2032c460a6263a5800ede4a8b900e1807d16ed33f2c4314ea1581617a994865acadbd9efcd7cd12e5fd2389ebce664dc7214a013cc8d92f3ce8e87da17aedfde39cefeafbbf8b1e6d00ff5d70a91bcd66b843c53676ed529e05800d9d74eb4231c61387557ab4c079fb02b4fb66fcec350fa50ae6eb3d45217d2c53fbc82506fa671953d2c9a44fda496d0", @ANYRES64=r2, @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000300), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000200001000000000000000000020000000000000000000000140011006765ee65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x4044) 1.3883835s ago: executing program 0 (id=6253): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$pfkey(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 1.38753585s ago: executing program 1 (id=6254): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000240)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x65, 0x0, 0x66, 0x33, 0x63, 0x64, 0x61], 0x2d, [0x63, 0x53, 0x31, 0x62], 0x2d, [0xeedfba8c58702b9f, 0x33, 0x61, 0x61], 0x2d, [0x32, 0x64, 0x36, 0x39], 0x2d, [0x0, 0x61, 0x30, 0x30, 0x66, 0x32, 0x66, 0x84db1c848d34f881]}}}]}, 0x3, 0x570, &(0x7f0000000680)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b0000"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) read$FUSE(r6, &(0x7f0000000bc0)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) 1.38671257s ago: executing program 5 (id=6255): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) link(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000300)='./file0\x00') r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.302086821s ago: executing program 2 (id=6256): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) read$FUSE(r7, &(0x7f0000000bc0)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) 81.100719ms ago: executing program 2 (id=6257): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write$P9_RVERSION(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b00"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC]) 15.22028ms ago: executing program 2 (id=6258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') readlinkat(0xffffffffffffff9c, 0x0, &(0x7f00000012c0)=""/168, 0xa8) creat(&(0x7f0000002540)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xbc) 1.33142ms ago: executing program 5 (id=6259): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@uexit={0x0, 0x18, 0xcf40}, @uexit={0x0, 0x18, 0xa34}, @uexit={0x0, 0x18, 0xfffffffffffff6f4}, @cpuid={0x2, 0x18, {0x4, 0x3}}, @uexit={0x0, 0x18, 0xc}, @uexit={0x0, 0x18, 0xffffffffffffff65}, @cpuid={0x2, 0x18, {0x800, 0x2}}, @cpuid={0x2, 0x18, {0x8, 0x8}}, @code={0x1, 0x65, {"0ff2acc766000000420f06c7442400ba000000c744240200700000ff2c24642e0f7942000f20c035000000400f22c026430f22d226c6446ab869b805000000b9280000000f01c142d9f5c4827d792ccdb8920000"}}, @uexit={0x0, 0x18, 0xce5}], 0x13d}) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x4, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000240)={0x0, 0x0, r5}) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cee7ec3ee777de774fc7987cca41989"}}]}]}, 0x54}}, 0x40000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000200)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x4a, 0x20a, &(0x7f0000000580)="$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") fsmount(0xffffffffffffffff, 0x1, 0x70) 0s ago: executing program 0 (id=6260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$eJzs281vVFUbAPDn3k4pXy/ti/gBolbR2PjR0oLKwo1GExeamOgCl7UtBCnU0JoIITIag0tD4p4YV/4LrlwZ48rErW6NISFKTEA2jrkz99KZYabQ6ZQpzO+XDHPO3HPvuQ/nnLln7ukNoG+NZv8kEdsj4teIGK5lGwuM1t6uXTk788+VszNJVCrv/JlUy129cnamKFrsty3PjKUR6edJXkmjxdNnjk/Pz8+dyvMTSyc+nFg8feb5Yyemj84dnTs5dejQwQOTL7049UJX4szO6eqeTxb27n7jvQtvzRy+8P7mhu31cXTLaBb4X5Wq5m1PdbuyHvu3shxnUur12XC7BiIia67B6vgfjoFYbrzheP2znp4csK6y7+zfmz8cvJEqV4B7WBId7Rad7QZsHMWFPvv9W7zu4PSj5y6/UvsBlMV9LX/VtpQizf+DBtex/tGIOFy+fjF7RdN9iEqL+wYAAGv1fTb/ee7m+V8SEQ/UlUvytaGRiPh/ROyMiPsiYldE3J+XfTAiHlpl/c1LQzfPP9NLHYZ2W7L538v52lbj/C8tiowM5Ln/VeMfTI4cm5/bHxE7ImIsBoey/GSrgxeHeO2XL9vVXz//O1zOJn1JFHPB/CCXSkN1O5z7pvbepUnp5U8j9pRaxZ9UVwKSqFSytt8dEXtWd+gdReLYM9/ubVeoMf7rF7P6G+NfQRfWmSpfRzxda/9yNMVfSFZen5zYHPNz+yeKXnGzn34+/3a7+tcUfxdk7b+1sf83lRj+O6lfr11cfR3nf/ui7W/K0i3jr+//tTXb2eml6U3Ju9U16035lo+nl5ZOTUZsSt6s5hs+n1o+WpEvymfxj+1rPf535vtk8T8cEVknfiQiHo2Ix/K2ezwinoiIfSvE/+OrT34w1HH86yuLf7bl99+N/j/S2P6rTwwc/+G7dvXfuv9n7X+wmhrLP8nav5ba3Dau9qdT7NNpbwYAAIC7TxoR2yNJx2+k03R8vPb38rtiazq/sLj07JGFj07O1p4RGInBtLjTNVx3P3QyKedHrOWn8nvFxfYD+X3jrwa2VPPjMwvzsz2OHfrdtjbjP/PHQK/PDlh3nteC/tU8/tMenQdw57n+Q//qdPybJ8Ddz/Uf+ler8X+uKW8tAO5Nrv/Qv4x/6F/GP/Qv4x/60lqe6+9OYkt+JsuflFZ4el9ioyQiXbcqyqvca2gDdOMNlSh1YXT38EsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgi/4LAAD//wC47TI=") bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) kernel console output (not intermixed with test programs): NETDEV_CHANGE): vcan0: link becomes ready [ 1393.077360][ T28] audit: type=1326 audit(2000000285.680:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17436 comm="syz.3.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7fc00000 [ 1393.120192][ T28] audit: type=1326 audit(2000000285.680:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17436 comm="syz.3.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7fc00000 [ 1393.150936][ T28] audit: type=1326 audit(2000000285.680:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17436 comm="syz.3.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7fc00000 [ 1393.182223][ T28] audit: type=1326 audit(2000000285.680:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17436 comm="syz.3.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7fc00000 [ 1394.158357][T17493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5119'. [ 1395.392918][T17509] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1396.073868][T17526] xt_NFQUEUE: number of total queues is 0 [ 1396.235439][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 1396.235510][ T28] audit: type=1326 audit(2000000289.680:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17514 comm="syz.1.5126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7ffc0000 [ 1396.345546][ T28] audit: type=1326 audit(2000000289.680:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17514 comm="syz.1.5126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7ffc0000 [ 1396.830201][ T28] audit: type=1326 audit(2000000290.390:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17536 comm="syz.2.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7ffc0000 [ 1396.874100][ T28] audit: type=1326 audit(2000000290.390:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17536 comm="syz.2.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7ffc0000 [ 1398.522677][T17569] xt_NFQUEUE: number of total queues is 0 [ 1399.369207][T17590] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1399.618816][T17594] 9pnet_fd: Insufficient options for proto=fd [ 1400.862718][T17608] netlink: 'syz.2.5154': attribute type 13 has an invalid length. [ 1400.990121][T17608] gretap0: refused to change device tx_queue_len [ 1400.997393][T17608] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1401.472362][T17618] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1401.952768][T17625] xt_NFQUEUE: number of total queues is 0 [ 1402.044021][ T28] audit: type=1326 audit(2000000295.590:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17619 comm="syz.5.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7112b8e929 code=0x7ffc0000 [ 1402.100126][ T28] audit: type=1326 audit(2000000295.640:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17619 comm="syz.5.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7112b8e929 code=0x7ffc0000 [ 1402.681450][T17636] 9pnet_fd: Insufficient options for proto=fd [ 1403.342259][T17646] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1405.387837][T17673] 9pnet_fd: Insufficient options for proto=fd [ 1405.492460][T17676] xt_NFQUEUE: number of total queues is 0 [ 1406.850268][T17692] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1407.160850][T17696] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1408.056111][T17712] 9pnet_fd: Insufficient options for proto=fd [ 1408.111394][ T28] audit: type=1326 audit(2000000301.670:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.2.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7ffc0000 [ 1408.197581][ T28] audit: type=1326 audit(2000000301.670:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.2.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7ffc0000 [ 1410.244186][T17742] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1410.429289][T17734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5192'. [ 1410.745593][T17749] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1411.004683][T17753] 9pnet_fd: Insufficient options for proto=fd [ 1415.116763][T17786] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1415.142979][T17788] xt_NFQUEUE: number of total queues is 0 [ 1416.042194][T17791] 9pnet_fd: Insufficient options for proto=fd [ 1417.073969][ T28] audit: type=1326 audit(2000000310.630:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17806 comm="syz.2.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7ffc0000 [ 1417.098299][ T28] audit: type=1326 audit(2000000310.660:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17806 comm="syz.2.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7ffc0000 [ 1417.361637][T17831] xt_NFQUEUE: number of total queues is 0 [ 1424.920434][T17896] xt_NFQUEUE: number of total queues is 0 [ 1424.985180][T17898] 9pnet_fd: Insufficient options for proto=fd [ 1425.011496][T17905] tipc: Enabling of bearer rejected, already enabled [ 1425.936301][ T28] audit: type=1326 audit(2000000319.490:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17882 comm="syz.5.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7112b8e929 code=0x7ffc0000 [ 1426.016844][ T28] audit: type=1326 audit(2000000319.520:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17882 comm="syz.5.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7112b8e929 code=0x7ffc0000 [ 1427.339503][T17913] tipc: Enabling of bearer rejected, failed to enable media [ 1427.363454][ T28] audit: type=1326 audit(2000000320.920:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17904 comm="syz.3.5246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7fc00000 [ 1427.387110][ T28] audit: type=1326 audit(2000000320.920:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17904 comm="syz.3.5246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efebe78e929 code=0x7fc00000 [ 1427.419571][ T28] audit: type=1326 audit(2000000320.920:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17904 comm="syz.3.5246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7fc00000 [ 1427.443836][T17935] 9pnet_fd: Insufficient options for proto=fd [ 1427.454415][ T28] audit: type=1326 audit(2000000320.920:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17904 comm="syz.3.5246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7fc00000 [ 1427.478506][ T28] audit: type=1326 audit(2000000320.920:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17904 comm="syz.3.5246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7fc00000 [ 1427.548664][ T28] audit: type=1326 audit(2000000320.920:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17904 comm="syz.3.5246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7fc00000 [ 1427.576302][ T28] audit: type=1326 audit(2000000320.920:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17904 comm="syz.3.5246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7fc00000 [ 1427.820973][ T28] audit: type=1326 audit(2000000320.920:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17904 comm="syz.3.5246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7fc00000 [ 1432.062022][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 1432.062040][ T28] audit: type=1400 audit(2000000322.430:1900): avc: denied { create } for pid=17950 comm="syz.1.5261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1432.088846][ T28] audit: type=1400 audit(2000000322.430:1901): avc: denied { mount } for pid=17950 comm="syz.1.5261" name="/" dev="configfs" ino=14180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1432.128318][ T28] audit: type=1400 audit(2000000322.430:1902): avc: denied { search } for pid=17950 comm="syz.1.5261" name="/" dev="configfs" ino=14180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1432.165442][T17958] tipc: Started in network mode [ 1432.175401][T17958] tipc: Node identity 7f000001, cluster identity 4711 [ 1432.193556][ T28] audit: type=1400 audit(2000000322.430:1903): avc: denied { read } for pid=17950 comm="syz.1.5261" name="/" dev="configfs" ino=14180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1432.216705][T17958] tipc: Enabled bearer , priority 10 [ 1432.266307][ T28] audit: type=1400 audit(2000000322.430:1904): avc: denied { open } for pid=17950 comm="syz.1.5261" path="/" dev="configfs" ino=14180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1432.289065][ T28] audit: type=1400 audit(2000000325.770:1905): avc: denied { wake_alarm } for pid=17962 comm="syz.1.5266" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1432.420511][T17975] 9pnet_fd: Insufficient options for proto=fd [ 1433.372715][ T4803] tipc: Node number set to 2130706433 [ 1433.529049][T17966] tipc: Enabling of bearer rejected, failed to enable media [ 1434.059632][ T28] audit: type=1326 audit(2000000327.590:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17957 comm="syz.2.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7fc00000 [ 1435.302119][T18012] 9pnet_fd: Insufficient options for proto=fd [ 1438.455871][T18049] 9pnet_fd: Insufficient options for proto=fd [ 1439.000823][ T28] audit: type=1326 audit(2000000332.560:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18037 comm="syz.1.5289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7ffc0000 [ 1439.029849][ T28] audit: type=1326 audit(2000000332.560:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18037 comm="syz.1.5289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7ffc0000 [ 1440.683687][T18077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5301'. [ 1440.792446][T18086] 9pnet_fd: Insufficient options for proto=fd [ 1441.105431][T18096] xt_NFQUEUE: number of total queues is 0 [ 1442.241726][T18115] tipc: Started in network mode [ 1442.246745][T18115] tipc: Node identity 7f000001, cluster identity 4711 [ 1442.253965][T18115] tipc: Enabled bearer , priority 10 [ 1442.277081][T18117] 9pnet_fd: Insufficient options for proto=fd [ 1443.420749][T18140] xt_NFQUEUE: number of total queues is 0 [ 1443.443590][ T28] audit: type=1326 audit(2000000337.000:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18114 comm="syz.1.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7fc00000 [ 1443.547946][T14570] tipc: Node number set to 2130706433 [ 1443.553581][ T28] audit: type=1326 audit(2000000337.030:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18114 comm="syz.1.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f401fd8e929 code=0x7fc00000 [ 1443.581196][ T28] audit: type=1326 audit(2000000337.030:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18114 comm="syz.1.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7fc00000 [ 1443.607643][ T28] audit: type=1326 audit(2000000337.030:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18114 comm="syz.1.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7fc00000 [ 1443.631507][ T28] audit: type=1326 audit(2000000337.030:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18114 comm="syz.1.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7fc00000 [ 1443.655231][ T28] audit: type=1326 audit(2000000337.040:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18114 comm="syz.1.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7fc00000 [ 1443.685081][ T28] audit: type=1326 audit(2000000337.040:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18114 comm="syz.1.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7fc00000 [ 1443.729479][ T28] audit: type=1326 audit(2000000337.040:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18114 comm="syz.1.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7fc00000 [ 1444.165539][T18155] 9pnet_fd: Insufficient options for proto=fd [ 1444.208330][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 1444.208346][ T28] audit: type=1326 audit(2000000337.760:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18152 comm="syz.0.5326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7ffc0000 [ 1444.325535][ T28] audit: type=1326 audit(2000000337.760:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18152 comm="syz.0.5326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7ffc0000 [ 1446.432925][T18194] xt_NFQUEUE: number of total queues is 0 [ 1449.999013][ T28] audit: type=1326 audit(2000000343.550:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18222 comm="syz.2.5348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7ffc0000 [ 1450.046631][ T28] audit: type=1326 audit(2000000343.550:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18222 comm="syz.2.5348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7ffc0000 [ 1450.469750][ T28] audit: type=1326 audit(2000000343.990:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18237 comm="syz.3.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7ffc0000 [ 1450.758441][ T28] audit: type=1326 audit(2000000343.990:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18237 comm="syz.3.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7ffc0000 [ 1451.250599][ T28] audit: type=1326 audit(2000000344.000:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18237 comm="syz.3.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efebe78d290 code=0x7ffc0000 [ 1451.288536][ T28] audit: type=1326 audit(2000000344.000:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18237 comm="syz.3.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efebe78d290 code=0x7ffc0000 [ 1451.360008][ T28] audit: type=1326 audit(2000000344.000:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18237 comm="syz.3.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7ffc0000 [ 1451.432466][ T28] audit: type=1326 audit(2000000344.000:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18237 comm="syz.3.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7ffc0000 [ 1451.507665][ T28] audit: type=1326 audit(2000000344.000:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18237 comm="syz.3.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7efebe78e929 code=0x7ffc0000 [ 1451.577804][ T28] audit: type=1326 audit(2000000344.000:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18237 comm="syz.3.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7ffc0000 [ 1452.828541][T18280] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1455.700176][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1455.700192][ T28] audit: type=1326 audit(2000000349.260:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18306 comm="syz.1.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7ffc0000 [ 1456.205121][ T28] audit: type=1326 audit(2000000349.260:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18306 comm="syz.1.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7ffc0000 [ 1460.232779][T18378] 9p: Unknown access argument 18446744073709551615: -34 [ 1463.971550][T18442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5415'. [ 1473.299136][T18498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5433'. [ 1473.798394][T18500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5436'. [ 1473.923491][T18517] 9pnet_fd: Insufficient options for proto=fd [ 1474.518314][T18529] 9p: Unknown access argument 18446744073709551615: -34 [ 1476.380390][T18552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12397 sclass=netlink_route_socket pid=18552 comm=syz.1.5455 [ 1476.416420][T18564] 9p: Unknown access argument 18446744073709551615: -34 [ 1486.078121][ T28] audit: type=1326 audit(2000000379.630:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18625 comm="syz.3.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7ffc0000 [ 1486.369472][ T28] audit: type=1326 audit(2000000379.670:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18625 comm="syz.3.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7ffc0000 [ 1492.877035][ T28] audit: type=1326 audit(2000000386.430:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18692 comm="syz.2.5500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7ffc0000 [ 1492.935493][ T28] audit: type=1326 audit(2000000386.460:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18692 comm="syz.2.5500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7ffc0000 [ 1493.122010][T18710] 9pnet_fd: Insufficient options for proto=fd [ 1494.960029][T18726] tipc: Enabling of bearer rejected, already enabled [ 1495.800612][ T28] audit: type=1326 audit(2000000389.360:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18725 comm="syz.0.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7fc00000 [ 1495.854667][ T28] audit: type=1326 audit(2000000389.360:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18725 comm="syz.0.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd9c338e929 code=0x7fc00000 [ 1495.929114][ T28] audit: type=1326 audit(2000000389.360:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18725 comm="syz.0.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7fc00000 [ 1495.957822][ T28] audit: type=1326 audit(2000000389.390:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18725 comm="syz.0.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7fc00000 [ 1496.041627][T18743] xt_NFQUEUE: number of total queues is 0 [ 1496.331767][ T28] audit: type=1326 audit(2000000389.390:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18725 comm="syz.0.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7fc00000 [ 1496.355410][ T28] audit: type=1326 audit(2000000389.390:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18725 comm="syz.0.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7fc00000 [ 1496.411532][ T28] audit: type=1326 audit(2000000389.390:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18725 comm="syz.0.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7fc00000 [ 1496.445415][ T28] audit: type=1326 audit(2000000389.390:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18725 comm="syz.0.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7fc00000 [ 1496.855101][T18753] 9pnet_fd: Insufficient options for proto=fd [ 1498.609264][T18769] tipc: Enabling of bearer rejected, already enabled [ 1499.262126][T18779] tipc: Enabling of bearer rejected, already enabled [ 1499.348052][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 1499.348067][ T28] audit: type=1326 audit(2000000392.900:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18767 comm="syz.2.5521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7fc00000 [ 1499.419575][ T28] audit: type=1326 audit(2000000392.900:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18767 comm="syz.2.5521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f421f38e929 code=0x7fc00000 [ 1499.512809][T18789] netlink: 'syz.3.5526': attribute type 13 has an invalid length. [ 1499.520759][ T28] audit: type=1326 audit(2000000392.900:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18767 comm="syz.2.5521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7fc00000 [ 1499.545401][T18789] gretap0: refused to change device tx_queue_len [ 1499.567740][ T28] audit: type=1326 audit(2000000392.900:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18767 comm="syz.2.5521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7fc00000 [ 1499.572363][T18789] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1499.615071][ T28] audit: type=1326 audit(2000000392.900:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18767 comm="syz.2.5521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7fc00000 [ 1499.671552][ T28] audit: type=1326 audit(2000000392.900:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18767 comm="syz.2.5521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7fc00000 [ 1499.737566][ T28] audit: type=1326 audit(2000000392.900:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18767 comm="syz.2.5521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7fc00000 [ 1499.801371][ T28] audit: type=1326 audit(2000000392.900:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18767 comm="syz.2.5521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7fc00000 [ 1499.857271][ T28] audit: type=1326 audit(2000000392.900:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18767 comm="syz.2.5521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7fc00000 [ 1499.916219][ T28] audit: type=1326 audit(2000000392.900:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18767 comm="syz.2.5521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7fc00000 [ 1500.906434][T18802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5530'. [ 1500.976366][T18806] 9pnet_fd: Insufficient options for proto=fd [ 1501.206339][T18810] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1503.220933][T18834] netlink: 'syz.5.5539': attribute type 27 has an invalid length. [ 1503.491843][T18827] 9pnet_fd: Insufficient options for proto=fd [ 1507.059056][T18885] netlink: 'syz.5.5555': attribute type 27 has an invalid length. [ 1509.267218][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 1509.268242][ T28] audit: type=1326 audit(2000000402.780:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18900 comm="syz.0.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7ffc0000 [ 1509.299681][ T28] audit: type=1326 audit(2000000402.780:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18900 comm="syz.0.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7ffc0000 [ 1509.357128][ T28] audit: type=1326 audit(2000000402.790:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18900 comm="syz.0.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd9c338d290 code=0x7ffc0000 [ 1509.419678][ T28] audit: type=1326 audit(2000000402.790:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18900 comm="syz.0.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd9c338d290 code=0x7ffc0000 [ 1509.448414][ T28] audit: type=1326 audit(2000000402.790:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18900 comm="syz.0.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7ffc0000 [ 1509.479303][ T28] audit: type=1326 audit(2000000402.790:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18900 comm="syz.0.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7ffc0000 [ 1509.537342][ T28] audit: type=1326 audit(2000000402.800:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18900 comm="syz.0.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd9c338e929 code=0x7ffc0000 [ 1509.609942][ T28] audit: type=1326 audit(2000000402.800:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18900 comm="syz.0.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7ffc0000 [ 1509.679330][ T28] audit: type=1326 audit(2000000402.800:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18900 comm="syz.0.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7ffc0000 [ 1510.206164][ T28] audit: type=1326 audit(2000000402.810:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18900 comm="syz.0.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fd9c338e929 code=0x7ffc0000 [ 1512.737953][T18950] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1514.757734][T18969] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1514.843588][T18973] tipc: Enabling of bearer rejected, already enabled [ 1515.149814][T18979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5583'. [ 1515.758027][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1515.758041][ T28] audit: type=1326 audit(2000000409.280:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18972 comm="syz.3.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7fc00000 [ 1515.788458][ T28] audit: type=1326 audit(2000000409.280:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18972 comm="syz.3.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efebe78e929 code=0x7fc00000 [ 1515.863947][ T28] audit: type=1326 audit(2000000409.280:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18972 comm="syz.3.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7fc00000 [ 1515.900129][ T28] audit: type=1326 audit(2000000409.290:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18972 comm="syz.3.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7fc00000 [ 1515.924768][ T28] audit: type=1326 audit(2000000409.290:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18972 comm="syz.3.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7fc00000 [ 1515.948428][ T28] audit: type=1326 audit(2000000409.290:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18972 comm="syz.3.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7fc00000 [ 1515.972293][ T28] audit: type=1326 audit(2000000409.290:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18972 comm="syz.3.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7fc00000 [ 1515.996212][ T28] audit: type=1326 audit(2000000409.290:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18972 comm="syz.3.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7fc00000 [ 1516.020656][ T28] audit: type=1326 audit(2000000409.290:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18972 comm="syz.3.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7fc00000 [ 1516.044265][ T28] audit: type=1326 audit(2000000409.290:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18972 comm="syz.3.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e929 code=0x7fc00000 [ 1516.111912][T18992] overlayfs: failed to clone upperpath [ 1520.753884][T19021] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5597'. [ 1521.360779][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 1521.360846][ T28] audit: type=1326 audit(2000000414.800:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19034 comm="syz.2.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7ffc0000 [ 1521.438244][ T28] audit: type=1326 audit(2000000414.800:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19034 comm="syz.2.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7ffc0000 [ 1521.588951][ T28] audit: type=1326 audit(2000000414.820:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19034 comm="syz.2.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f421f38d290 code=0x7ffc0000 [ 1522.158093][ T28] audit: type=1326 audit(2000000414.820:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19034 comm="syz.2.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f421f38d290 code=0x7ffc0000 [ 1522.187594][T19045] netlink: 'syz.5.5603': attribute type 13 has an invalid length. [ 1522.234201][T19045] gretap0: refused to change device tx_queue_len [ 1522.264649][ T28] audit: type=1326 audit(2000000414.820:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19034 comm="syz.2.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7ffc0000 [ 1522.297264][ T28] audit: type=1326 audit(2000000414.820:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19034 comm="syz.2.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7ffc0000 [ 1522.312947][T19045] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1522.371999][ T28] audit: type=1326 audit(2000000414.860:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19034 comm="syz.2.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f421f38e929 code=0x7ffc0000 [ 1522.595215][ T28] audit: type=1326 audit(2000000414.860:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19034 comm="syz.2.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7ffc0000 [ 1522.618878][ T28] audit: type=1326 audit(2000000414.860:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19034 comm="syz.2.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7ffc0000 [ 1522.651532][ T28] audit: type=1326 audit(2000000414.880:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19034 comm="syz.2.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f421f38e929 code=0x7ffc0000 [ 1523.014317][T19057] 9pnet_fd: Insufficient options for proto=fd [ 1524.310232][T19074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5611'. [ 1526.773084][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1526.773102][ T28] audit: type=1326 audit(2000000418.410:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19082 comm="syz.2.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7ffc0000 [ 1526.882075][ T28] audit: type=1326 audit(2000000418.420:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19082 comm="syz.2.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7ffc0000 [ 1526.979547][ T28] audit: type=1326 audit(2000000418.470:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19082 comm="syz.2.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f421f38d290 code=0x7ffc0000 [ 1527.111662][ T28] audit: type=1326 audit(2000000418.470:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19082 comm="syz.2.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f421f38d290 code=0x7ffc0000 [ 1527.135674][ T28] audit: type=1326 audit(2000000418.480:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19082 comm="syz.2.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7ffc0000 [ 1527.159509][ T28] audit: type=1326 audit(2000000418.480:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19082 comm="syz.2.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7ffc0000 [ 1527.743906][ T28] audit: type=1326 audit(2000000418.580:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19082 comm="syz.2.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f421f38e929 code=0x7ffc0000 [ 1527.779808][ T28] audit: type=1326 audit(2000000418.580:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19082 comm="syz.2.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7ffc0000 [ 1528.825424][T19109] overlayfs: failed to clone upperpath [ 1528.875717][ T28] audit: type=1326 audit(2000000418.580:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19082 comm="syz.2.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421f38e929 code=0x7ffc0000 [ 1528.921820][ T28] audit: type=1326 audit(2000000418.620:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19082 comm="syz.2.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f421f38e929 code=0x7ffc0000 [ 1530.727941][T19136] tipc: Enabling of bearer rejected, already enabled [ 1537.538882][T19190] 9pnet_fd: Insufficient options for proto=fd [ 1537.552184][T19190] overlayfs: failed to clone upperpath [ 1538.169527][T19196] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1538.960384][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 1538.960401][ T28] audit: type=1326 audit(2000000431.810:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19194 comm="syz.1.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7ffc0000 [ 1540.902169][ T28] audit: type=1326 audit(2000000431.810:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19194 comm="syz.1.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7ffc0000 [ 1541.265830][ T28] audit: type=1326 audit(2000000431.820:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19194 comm="syz.1.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f401fd8d290 code=0x7ffc0000 [ 1541.386462][ T28] audit: type=1326 audit(2000000431.820:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19194 comm="syz.1.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f401fd8d290 code=0x7ffc0000 [ 1541.463008][ T28] audit: type=1326 audit(2000000431.820:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19194 comm="syz.1.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7ffc0000 [ 1541.487129][ T28] audit: type=1326 audit(2000000431.820:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19194 comm="syz.1.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7ffc0000 [ 1542.332535][T19232] overlayfs: failed to clone lowerpath [ 1542.367991][ T28] audit: type=1326 audit(2000000431.820:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19194 comm="syz.1.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f401fd8e929 code=0x7ffc0000 [ 1542.410033][ T28] audit: type=1326 audit(2000000431.820:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19194 comm="syz.1.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7ffc0000 [ 1542.436168][T19228] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1542.508274][ T28] audit: type=1326 audit(2000000431.820:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19194 comm="syz.1.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7ffc0000 [ 1542.903201][ T28] audit: type=1326 audit(2000000431.820:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19194 comm="syz.1.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f401fd8e929 code=0x7ffc0000 [ 1545.976606][T19267] tipc: Enabling of bearer rejected, already enabled [ 1548.442329][T19285] tipc: Enabling of bearer rejected, failed to enable media [ 1548.801393][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1548.801408][ T28] audit: type=1326 audit(2000000442.320:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19266 comm="syz.1.5674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7fc00000 [ 1548.831215][ T28] audit: type=1326 audit(2000000442.320:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19266 comm="syz.1.5674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f401fd8e929 code=0x7fc00000 [ 1548.857756][ T28] audit: type=1326 audit(2000000442.320:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19266 comm="syz.1.5674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7fc00000 [ 1548.866192][T19307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5685'. [ 1548.889502][ T28] audit: type=1326 audit(2000000442.320:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19266 comm="syz.1.5674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7fc00000 [ 1548.913829][ T28] audit: type=1326 audit(2000000442.320:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19266 comm="syz.1.5674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7fc00000 [ 1548.938182][ T28] audit: type=1326 audit(2000000442.320:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19266 comm="syz.1.5674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7fc00000 [ 1549.968100][ T28] audit: type=1326 audit(2000000442.320:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19266 comm="syz.1.5674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7fc00000 [ 1550.202389][ T28] audit: type=1326 audit(2000000442.320:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19266 comm="syz.1.5674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7fc00000 [ 1550.226856][ T28] audit: type=1326 audit(2000000442.320:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19266 comm="syz.1.5674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7fc00000 [ 1550.251844][ T28] audit: type=1326 audit(2000000442.320:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19266 comm="syz.1.5674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7fc00000 [ 1551.869954][T19336] tipc: Enabling of bearer rejected, already enabled [ 1552.081401][T19345] xt_NFQUEUE: number of total queues is 0 [ 1552.400283][T19348] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1553.966217][T19361] tipc: Enabling of bearer rejected, failed to enable media [ 1554.129523][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 1554.129540][ T28] audit: type=1326 audit(2000000447.680:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19335 comm="syz.0.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7fc00000 [ 1555.423275][T19374] overlayfs: failed to clone lowerpath [ 1560.348889][T19429] tipc: Enabling of bearer rejected, already enabled [ 1560.390530][T19430] netlink: 'syz.3.5722': attribute type 13 has an invalid length. [ 1560.398959][T19430] gretap0: refused to change device tx_queue_len [ 1560.405859][T19430] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1560.996179][ T28] audit: type=1326 audit(2000000454.510:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19412 comm="syz.1.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7ffc0000 [ 1561.023479][ T28] audit: type=1326 audit(2000000454.510:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19412 comm="syz.1.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7ffc0000 [ 1561.047782][ T28] audit: type=1326 audit(2000000454.520:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19412 comm="syz.1.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f401fd8d290 code=0x7ffc0000 [ 1561.073240][ T28] audit: type=1326 audit(2000000454.520:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19412 comm="syz.1.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f401fd8d290 code=0x7ffc0000 [ 1561.098741][ T28] audit: type=1326 audit(2000000454.520:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19412 comm="syz.1.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7ffc0000 [ 1561.125266][ T28] audit: type=1326 audit(2000000454.520:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19412 comm="syz.1.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7ffc0000 [ 1561.425549][ T28] audit: type=1326 audit(2000000454.530:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19412 comm="syz.1.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f401fd8e929 code=0x7ffc0000 [ 1561.449197][ T28] audit: type=1326 audit(2000000454.530:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19412 comm="syz.1.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7ffc0000 [ 1561.483115][T19437] tipc: Enabling of bearer rejected, failed to enable media [ 1561.592358][ T28] audit: type=1326 audit(2000000454.530:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19412 comm="syz.1.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7ffc0000 [ 1561.630608][ T28] audit: type=1326 audit(2000000454.540:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19412 comm="syz.1.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f401fd8e929 code=0x7ffc0000 [ 1561.996100][T19453] 9pnet_fd: Insufficient options for proto=fd [ 1562.040887][T19455] 9pnet_fd: Insufficient options for proto=fd [ 1562.047886][T19455] overlayfs: failed to clone upperpath [ 1562.138862][T19459] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1563.214453][ T2673] tipc: Disabling bearer [ 1563.254410][ T2673] tipc: Left network mode [ 1563.408017][T19464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.415206][T19464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.424092][T19464] device bridge_slave_0 entered promiscuous mode [ 1563.771992][T19464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.809146][T19464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.862706][T19464] device bridge_slave_1 entered promiscuous mode [ 1564.016652][T19464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.023751][T19464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1564.031054][T19464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.038067][T19464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1564.056002][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1564.063552][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1564.071307][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.201862][T11206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1564.215347][T11206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.222425][T11206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1564.259239][T11206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1564.267626][T11206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.274695][T11206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1564.324514][T19495] 9pnet_fd: Insufficient options for proto=fd [ 1565.227835][T11206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1565.265004][T11206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1565.273479][T11206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1565.282198][T11206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1565.335976][T11206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1565.344663][T11206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1565.394616][T19464] device veth0_vlan entered promiscuous mode [ 1565.402271][ T2673] device veth1_macvtap left promiscuous mode [ 1565.408297][ T2673] device veth0_vlan left promiscuous mode [ 1566.317782][T19528] 9pnet_fd: Insufficient options for proto=fd [ 1566.369717][T11206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1566.463521][T11206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1567.897191][T19464] device veth1_macvtap entered promiscuous mode [ 1567.912047][T11206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1567.937822][T11206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1567.947870][T11206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1567.957074][T11206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1567.976078][T11206] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1568.417624][T11206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1568.451874][T11206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1568.492617][T11206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1568.548314][T11206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1570.012168][T19564] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1570.227648][T19575] loop3: detected capacity change from 0 to 256 [ 1570.250865][T19575] exfat: Deprecated parameter 'utf8' [ 1570.263064][T19575] exfat: Deprecated parameter 'namecase' [ 1571.846575][T19575] exfat: Deprecated parameter 'utf8' [ 1571.856499][T19575] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 1574.693349][T11410] tipc: Disabling bearer [ 1574.698773][T11410] tipc: Left network mode [ 1575.660364][T19608] loop3: detected capacity change from 0 to 1024 [ 1575.667087][T19608] ext4: Unknown parameter 'fsuuid' [ 1575.794561][T19611] xt_NFQUEUE: number of total queues is 0 [ 1576.204762][T19617] 9pnet_fd: Insufficient options for proto=fd [ 1576.453705][T19598] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.475822][T19598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.755368][T19598] device bridge_slave_0 entered promiscuous mode [ 1576.780006][T19598] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.805060][T19598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.813085][T19598] device bridge_slave_1 entered promiscuous mode [ 1576.963626][T19598] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.970719][T19598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1576.977982][T19598] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.985032][T19598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1577.056534][T11206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.065927][T11206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.078660][T11206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1577.086255][T11206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1577.466710][T19638] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1577.474088][T19638] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1577.621212][T19644] overlayfs: failed to clone lowerpath [ 1578.423333][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1578.440158][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1578.466902][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1578.520588][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1578.528924][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1578.537306][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1578.550917][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1579.483380][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1580.137780][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1580.146386][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1580.155900][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.162996][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1580.580505][T19658] xt_NFQUEUE: number of total queues is 0 [ 1580.670173][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1580.905403][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1580.914011][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 1580.921088][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1582.859121][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1582.867384][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1582.875686][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 1582.875701][ T28] audit: type=1326 audit(2000000474.560:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.0.5792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7ffc0000 [ 1582.886353][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1583.126458][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1583.232571][ T28] audit: type=1326 audit(2000000474.570:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.0.5792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7ffc0000 [ 1583.281003][ T28] audit: type=1326 audit(2000000474.610:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.0.5792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd9c338d290 code=0x7ffc0000 [ 1583.329387][ T28] audit: type=1326 audit(2000000474.620:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.0.5792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd9c338d290 code=0x7ffc0000 [ 1583.377035][ T28] audit: type=1326 audit(2000000474.620:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.0.5792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7ffc0000 [ 1583.405432][ T28] audit: type=1326 audit(2000000474.620:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.0.5792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7ffc0000 [ 1583.429251][ T28] audit: type=1326 audit(2000000474.710:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.0.5792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd9c338e929 code=0x7ffc0000 [ 1583.453450][ T28] audit: type=1326 audit(2000000474.710:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.0.5792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7ffc0000 [ 1583.483862][ T28] audit: type=1326 audit(2000000474.720:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.0.5792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7ffc0000 [ 1583.532003][ T28] audit: type=1326 audit(2000000474.760:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.0.5792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fd9c338e929 code=0x7ffc0000 [ 1583.650722][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1583.662713][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1583.688798][T19598] device veth0_vlan entered promiscuous mode [ 1583.701597][T19677] tipc: Enabling of bearer rejected, already enabled [ 1583.777245][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1583.785574][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1583.800147][T19598] device veth1_macvtap entered promiscuous mode [ 1583.806766][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1583.814963][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1583.822620][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1583.849696][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1583.859917][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1584.160748][T11410] device veth1_macvtap left promiscuous mode [ 1584.166851][T11410] device veth0_vlan left promiscuous mode [ 1584.233808][T19678] tipc: Enabling of bearer rejected, failed to enable media [ 1584.245456][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1584.256142][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1584.275409][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1584.283938][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1584.309885][T19690] 9pnet_fd: Insufficient options for proto=fd [ 1584.321978][T19690] overlayfs: failed to resolve './file1': -2 [ 1587.790286][T19712] overlayfs: failed to clone lowerpath [ 1599.308311][T19832] xt_NFQUEUE: number of total queues is 0 [ 1600.577590][T19840] tipc: Enabling of bearer rejected, already enabled [ 1600.651352][T19842] loop2: detected capacity change from 0 to 1024 [ 1600.658046][T19842] ext4: Unknown parameter 'fsuuid' [ 1600.873793][T19548] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1602.221500][T19844] tipc: Enabling of bearer rejected, failed to enable media [ 1602.793143][ T28] kauditd_printk_skb: 1006 callbacks suppressed [ 1602.793159][ T28] audit: type=1326 audit(2000000496.310:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19856 comm="syz.2.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ff38e929 code=0x7ffc0000 [ 1603.094083][ T28] audit: type=1326 audit(2000000496.310:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19856 comm="syz.2.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ff38e929 code=0x7ffc0000 [ 1603.150887][ T28] audit: type=1326 audit(2000000496.310:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19856 comm="syz.2.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74ff38d290 code=0x7ffc0000 [ 1603.269591][ T28] audit: type=1326 audit(2000000496.310:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19856 comm="syz.2.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74ff38d290 code=0x7ffc0000 [ 1604.502991][ T28] audit: type=1326 audit(2000000496.310:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19856 comm="syz.2.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ff38e929 code=0x7ffc0000 [ 1604.532035][ T28] audit: type=1326 audit(2000000496.310:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19856 comm="syz.2.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ff38e929 code=0x7ffc0000 [ 1604.560585][ T28] audit: type=1326 audit(2000000496.310:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19856 comm="syz.2.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f74ff38e929 code=0x7ffc0000 [ 1604.584802][ T28] audit: type=1326 audit(2000000496.310:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19856 comm="syz.2.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ff38e929 code=0x7ffc0000 [ 1604.636864][T19880] 9pnet_fd: Insufficient options for proto=fd [ 1604.665528][ T28] audit: type=1326 audit(2000000496.310:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19856 comm="syz.2.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ff38e929 code=0x7ffc0000 [ 1604.706668][T19880] overlayfs: failed to clone upperpath [ 1604.735522][ T28] audit: type=1326 audit(2000000496.310:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19856 comm="syz.2.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f74ff38e929 code=0x7ffc0000 [ 1605.179743][T19899] xt_NFQUEUE: number of total queues is 0 [ 1606.048627][T19905] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1607.117983][T19934] loop3: detected capacity change from 0 to 512 [ 1607.245146][T19934] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1607.254422][T19934] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1607.291462][T19934] netlink: 'syz.3.5869': attribute type 13 has an invalid length. [ 1607.309994][T19934] gretap0: refused to change device tx_queue_len [ 1607.316900][T19934] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1611.520568][T19464] EXT4-fs (loop3): unmounting filesystem. [ 1611.535900][T19954] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1611.545321][T19954] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1611.560864][T19957] 9pnet_fd: Insufficient options for proto=fd [ 1611.607611][T19959] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5878'. [ 1612.099064][T19978] loop3: detected capacity change from 0 to 512 [ 1612.236590][T19978] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1612.245906][T19978] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1612.417197][T19978] netlink: 'syz.3.5882': attribute type 13 has an invalid length. [ 1612.427262][T19978] gretap0: refused to change device tx_queue_len [ 1612.434341][T19978] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1613.232963][T19464] EXT4-fs (loop3): unmounting filesystem. [ 1613.396031][T19994] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5887'. [ 1613.428870][T19997] 9pnet_fd: Insufficient options for proto=fd [ 1615.882515][T20011] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1616.430593][T20021] loop2: detected capacity change from 0 to 1024 [ 1616.437472][T20021] ext4: Unknown parameter 'fsuuid' [ 1618.846428][T20044] xt_NFQUEUE: number of total queues is 0 [ 1620.488935][T20054] 9pnet_fd: Insufficient options for proto=fd [ 1622.949530][T20076] xt_NFQUEUE: number of total queues is 0 [ 1624.642762][T20090] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1624.944385][T20097] 9pnet_fd: Insufficient options for proto=fd [ 1626.431314][T20101] xt_NFQUEUE: number of total queues is 0 [ 1627.906855][T20120] tipc: Enabling of bearer rejected, already enabled [ 1627.935116][T20122] loop2: detected capacity change from 0 to 2048 [ 1628.813299][T20134] 9pnet_fd: Insufficient options for proto=fd [ 1628.847446][T20122] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1628.909893][T20133] tipc: Enabling of bearer rejected, failed to enable media [ 1629.479491][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1629.479509][ T28] audit: type=1326 audit(2000000523.030:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20119 comm="syz.1.5926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7fc00000 [ 1629.575475][T20149] xt_NFQUEUE: number of total queues is 0 [ 1629.869929][T19598] EXT4-fs (loop2): unmounting filesystem. [ 1630.194142][T20156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5938'. [ 1630.646254][T20166] loop2: detected capacity change from 0 to 1024 [ 1630.662221][T20166] ext4: Unknown parameter 'fsuuid' [ 1638.007293][T20203] loop2: detected capacity change from 0 to 1024 [ 1638.014011][T20203] ext4: Unknown parameter 'fsuuid' [ 1638.982369][T20080] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1639.147650][T20214] 9pnet_fd: Insufficient options for proto=fd [ 1640.711698][T20230] loop2: detected capacity change from 0 to 1024 [ 1640.743462][T20230] ext4: Unknown parameter 'fsuuid' [ 1641.759523][ T28] audit: type=1326 audit(2000000535.300:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20239 comm="syz.1.5962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7ffc0000 [ 1641.817756][T20242] 9pnet_fd: Insufficient options for proto=fd [ 1644.079486][T20263] tipc: Enabling of bearer rejected, already enabled [ 1644.701553][T20268] tipc: Enabling of bearer rejected, failed to enable media [ 1644.928504][ T28] audit: type=1326 audit(2000000538.460:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20262 comm="syz.0.5970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7fc00000 [ 1644.953826][ T28] audit: type=1326 audit(2000000538.460:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20262 comm="syz.0.5970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd9c338e929 code=0x7fc00000 [ 1644.977299][ T28] audit: type=1326 audit(2000000538.460:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20262 comm="syz.0.5970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7fc00000 [ 1645.000804][ T28] audit: type=1326 audit(2000000538.460:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20262 comm="syz.0.5970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7fc00000 [ 1645.024968][ T28] audit: type=1326 audit(2000000538.460:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20262 comm="syz.0.5970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7fc00000 [ 1645.052084][ T28] audit: type=1326 audit(2000000538.460:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20262 comm="syz.0.5970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7fc00000 [ 1645.075939][ T28] audit: type=1326 audit(2000000538.460:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20262 comm="syz.0.5970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7fc00000 [ 1645.106037][T20283] 9pnet_fd: Insufficient options for proto=fd [ 1645.117555][ T28] audit: type=1326 audit(2000000538.460:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20262 comm="syz.0.5970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7fc00000 [ 1645.145730][ T28] audit: type=1326 audit(2000000538.460:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20262 comm="syz.0.5970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c338e929 code=0x7fc00000 [ 1645.207584][T20287] tipc: Enabling of bearer rejected, already enabled [ 1645.634971][T20293] tipc: Enabling of bearer rejected, failed to enable media [ 1651.636751][T20353] xt_NFQUEUE: number of total queues is 0 [ 1651.839739][ T28] kauditd_printk_skb: 153 callbacks suppressed [ 1651.839756][ T28] audit: type=1326 audit(2000000543.550:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20344 comm="syz.2.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ff38e929 code=0x7ffc0000 [ 1651.932770][ T28] audit: type=1326 audit(2000000543.550:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20344 comm="syz.2.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ff38e929 code=0x7ffc0000 [ 1651.964795][ T28] audit: type=1326 audit(2000000543.650:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20344 comm="syz.2.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74ff38d290 code=0x7ffc0000 [ 1651.988717][ T28] audit: type=1326 audit(2000000543.650:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20344 comm="syz.2.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74ff38d290 code=0x7ffc0000 [ 1652.022513][ T28] audit: type=1326 audit(2000000543.650:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20344 comm="syz.2.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ff38e929 code=0x7ffc0000 [ 1652.083868][ T28] audit: type=1326 audit(2000000543.650:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20344 comm="syz.2.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ff38e929 code=0x7ffc0000 [ 1652.352481][ T28] audit: type=1326 audit(2000000543.750:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20344 comm="syz.2.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f74ff38e929 code=0x7ffc0000 [ 1652.517795][ T28] audit: type=1326 audit(2000000543.750:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20344 comm="syz.2.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ff38e929 code=0x7ffc0000 [ 1652.604390][ T28] audit: type=1326 audit(2000000543.750:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20344 comm="syz.2.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ff38e929 code=0x7ffc0000 [ 1652.619547][T20349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5997'. [ 1652.629341][ T28] audit: type=1326 audit(2000000543.850:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20344 comm="syz.2.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f74ff38e929 code=0x7ffc0000 [ 1653.492637][T20384] loop3: detected capacity change from 0 to 2048 [ 1653.555518][T20384] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1654.611693][T19464] EXT4-fs (loop3): unmounting filesystem. [ 1655.151524][T20411] loop2: detected capacity change from 0 to 1024 [ 1655.191453][T20411] ext4: Unknown parameter 'fsuuid' [ 1655.218996][T20411] 9pnet_fd: Insufficient options for proto=fd [ 1657.655513][T20429] loop3: detected capacity change from 0 to 2048 [ 1657.750462][T20429] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1658.094259][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1658.094280][ T28] audit: type=1326 audit(2000000551.650:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20436 comm="syz.5.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7112b8e929 code=0x7ffc0000 [ 1658.684051][ T28] audit: type=1326 audit(2000000551.690:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20436 comm="syz.5.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7112b8e929 code=0x7ffc0000 [ 1658.928805][T19464] EXT4-fs (loop3): unmounting filesystem. [ 1659.802791][T20466] 9pnet_fd: Insufficient options for proto=fd [ 1660.306388][T20475] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1661.451852][T20477] xt_NFQUEUE: number of total queues is 0 [ 1662.241428][T20499] 9pnet_fd: Insufficient options for proto=fd [ 1662.243470][T20501] tipc: Started in network mode [ 1662.253054][T20501] tipc: Node identity 7f000001, cluster identity 4711 [ 1662.261407][T20501] tipc: Enabled bearer , priority 10 [ 1663.335885][T20507] netlink: 'syz.0.6042': attribute type 13 has an invalid length. [ 1663.834716][T20507] gretap0: refused to change device tx_queue_len [ 1663.841690][T20507] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1664.320405][ T1104] tipc: Node number set to 2130706433 [ 1664.607321][T20515] xt_NFQUEUE: number of total queues is 0 [ 1664.958215][T20519] tipc: Enabled bearer , priority 0 [ 1664.992581][T20519] device syzkaller0 entered promiscuous mode [ 1665.002008][T20519] tipc: Resetting bearer [ 1665.054803][T20519] loop3: detected capacity change from 0 to 16 [ 1665.068795][T20519] erofs: (device loop3): mounted with root inode @ nid 36. [ 1665.083528][T20519] erofs: (device loop3): init_inode_xattrs: xattr_isize 12 of nid 36 is not supported yet [ 1665.093626][T20519] SELinux: (dev loop3, type erofs) has no security xattr handler [ 1666.636071][T20500] tipc: Resetting bearer [ 1666.659965][T20500] tipc: Disabling bearer [ 1667.016550][ T28] audit: type=1326 audit(2000000560.570:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20500 comm="syz.3.6041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f7f8e929 code=0x7fc00000 [ 1667.298340][ T28] audit: type=1326 audit(2000000560.660:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20500 comm="syz.3.6041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5f7f8e929 code=0x7fc00000 [ 1667.932432][ T28] audit: type=1326 audit(2000000560.660:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20500 comm="syz.3.6041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f7f8e929 code=0x7fc00000 [ 1667.981054][ T28] audit: type=1326 audit(2000000560.660:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20500 comm="syz.3.6041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f7f8e929 code=0x7fc00000 [ 1668.006513][ T28] audit: type=1326 audit(2000000560.750:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20500 comm="syz.3.6041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f7f8e929 code=0x7fc00000 [ 1668.198532][ T28] audit: type=1326 audit(2000000560.750:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20500 comm="syz.3.6041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f7f8e929 code=0x7fc00000 [ 1668.988392][T20562] xt_NFQUEUE: number of total queues is 0 [ 1669.461647][ T28] audit: type=1326 audit(2000000560.750:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20500 comm="syz.3.6041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f7f8e929 code=0x7fc00000 [ 1669.537389][ T28] audit: type=1326 audit(2000000560.750:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20500 comm="syz.3.6041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f7f8e929 code=0x7fc00000 [ 1669.595314][ T28] audit: type=1326 audit(2000000560.750:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20500 comm="syz.3.6041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f7f8e929 code=0x7fc00000 [ 1669.624444][ T28] audit: type=1326 audit(2000000560.750:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20500 comm="syz.3.6041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f7f8e929 code=0x7fc00000 [ 1670.431335][T20577] overlayfs: failed to clone lowerpath [ 1671.385285][T20586] loop2: detected capacity change from 0 to 1024 [ 1671.392114][T20586] ext4: Unknown parameter 'fsuuid' [ 1671.549246][T20080] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1674.340536][T20608] xt_NFQUEUE: number of total queues is 0 [ 1674.395332][T20616] xt_NFQUEUE: number of total queues is 0 [ 1675.287753][T20627] loop2: detected capacity change from 0 to 1024 [ 1675.295063][T20627] ext4: Unknown parameter 'fsuuid' [ 1676.725681][T20639] xt_NFQUEUE: number of total queues is 0 [ 1677.045470][T20622] loop3: detected capacity change from 0 to 40427 [ 1677.059349][T20622] F2FS-fs (loop3): Image doesn't support compression [ 1677.086154][T20622] F2FS-fs (loop3): invalid crc value [ 1677.106671][T20622] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1677.189448][ C0] ------------[ cut here ]------------ [ 1677.194955][ C0] refcount_t: addition on 0; use-after-free. [ 1677.195138][T20646] loop2: detected capacity change from 0 to 1024 [ 1677.201066][ C0] WARNING: CPU: 0 PID: 20642 at lib/refcount.c:25 refcount_warn_saturate+0x104/0x1a0 [ 1677.207633][T20646] ext4: Unknown parameter 'fsuuid' [ 1677.216736][ C0] Modules linked in: [ 1677.225847][ C0] CPU: 0 PID: 20642 Comm: syz.2.6086 Not tainted 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 1677.235759][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1677.245862][ C0] RIP: 0010:refcount_warn_saturate+0x104/0x1a0 [ 1677.252065][ C0] Code: 05 01 48 c7 c7 60 a3 a9 85 e8 38 fb dd fe 0f 0b eb df e8 6f b5 0c ff c6 05 cf ab 0b 05 01 48 c7 c7 a0 a2 a9 85 e8 1c fb dd fe <0f> 0b eb c3 e8 53 b5 0c ff c6 05 b4 ab 0b 05 01 48 c7 c7 00 a3 a9 [ 1677.254782][T20622] F2FS-fs (loop3): Start checkpoint disabled! [ 1677.271698][ C0] RSP: 0018:ffffc900000079e0 EFLAGS: 00010246 [ 1677.271720][ C0] RAX: 096333a386cb5e00 RBX: 0000000000000002 RCX: ffff88811f77e540 [ 1677.271733][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1677.271750][ C0] RBP: ffffc900000079f0 R08: 0000000000000004 R09: 0000000000000003 [ 1677.271759][ C0] R10: fffff52000000e88 R11: 1ffff92000000e88 R12: ffffc90000007ba0 [ 1677.271773][ C0] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff88810efd5200 [ 1677.271785][ C0] FS: 00007f750022c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1677.271800][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1677.271811][ C0] CR2: 00007ffab5fde000 CR3: 0000000120a1f000 CR4: 00000000003506b0 [ 1677.271824][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1677.271835][ C0] DR3: 00000000000032e7 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1677.271846][ C0] Call Trace: [ 1677.271852][ C0] [ 1677.271860][ C0] tipc_crypto_xmit+0x1822/0x2220 [ 1677.278609][T20622] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1677.284002][ C0] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 1677.387377][ C0] ? __copy_skb_header+0x49f/0x630 [ 1677.392666][ C0] tipc_bearer_xmit_skb+0x226/0x380 [ 1677.398053][ C0] ? __skb_clone+0x47a/0x790 [ 1677.402686][ C0] ? __cfi_tipc_bearer_xmit_skb+0x10/0x10 [ 1677.408424][ C0] ? skb_clone+0x228/0x380 [ 1677.412893][ C0] tipc_disc_timeout+0x6a2/0x830 [ 1677.417936][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 1677.423437][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 1677.428895][ C0] call_timer_fn+0x46/0x2a0 [ 1677.433425][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 1677.438882][ C0] __run_timers+0x639/0x9a0 [ 1677.443407][ C0] ? calc_index+0x200/0x200 [ 1677.447913][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 1677.453177][ C0] run_timer_softirq+0x6a/0xf0 [ 1677.457947][ C0] handle_softirqs+0x1d7/0x600 [ 1677.462745][ C0] ? irqtime_account_irq+0xc4/0x240 [ 1677.467952][ C0] __irq_exit_rcu+0x52/0xf0 [ 1677.472503][ C0] irq_exit_rcu+0x9/0x10 [ 1677.476751][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1677.482493][ C0] [ 1677.485421][ C0] [ 1677.488348][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1677.494438][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x55/0x80 [ 1677.500933][ C0] Code: 40 d2 ed 86 e8 dc 0b c4 fc 4c 89 f7 48 83 3d d1 8c fd 01 00 74 30 e8 1e 0d 00 00 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 a6 50 5b fc 65 8b 05 37 28 12 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 1677.520591][ C0] RSP: 0018:ffffc9000134f5a0 EFLAGS: 00000206 [ 1677.526663][ C0] RAX: 0000000000000001 RBX: 0000000000000a06 RCX: dffffc0000000000 [ 1677.534692][ C0] RDX: ffffc90001367698 RSI: 0000000000000a06 RDI: 0000000000000001 [ 1677.542769][ C0] RBP: ffffc9000134f5b0 R08: dffffc0000000000 R09: ffffed102629e799 [ 1677.550786][ C0] R10: ffffed102629e799 R11: 1ffff1102629e798 R12: ffff88810e43b600 [ 1677.558756][ C0] R13: 0000000000000010 R14: 0000000000000001 R15: 0000000000000000 [ 1677.566761][ C0] __wake_up_sync_key+0x166/0x280 [ 1677.571844][ C0] ? __cfi___wake_up_sync_key+0x10/0x10 [ 1677.577408][ C0] ? __skb_try_recv_datagram+0x3da/0x4d0 [ 1677.583335][ C0] ? __cfi_sk_busy_loop_end+0x10/0x10 [ 1677.588729][ C0] __unix_dgram_recvmsg+0x496/0xd70 [ 1677.594049][ C0] ? __cfi___unix_dgram_recvmsg+0x10/0x10 [ 1677.599792][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 1677.605350][ C0] ? xfd_validate_state+0x70/0x150 [ 1677.610502][ C0] unix_dgram_recvmsg+0xc7/0xe0 [ 1677.615369][ C0] ? __cfi_unix_dgram_recvmsg+0x10/0x10 [ 1677.620940][ C0] ____sys_recvmsg+0x2a0/0x590 [ 1677.625724][ C0] ? __cfi___switch_to+0x10/0x10 [ 1677.630704][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 1677.635738][ C0] ? import_iovec+0x7c/0xb0 [ 1677.640260][ C0] ___sys_recvmsg+0x1b2/0x510 [ 1677.644941][ C0] ? __sys_recvmsg+0x270/0x270 [ 1677.649741][ C0] ? futex_wait+0x47c/0x750 [ 1677.654345][ C0] ? wake_up_q+0x105/0x1b0 [ 1677.658780][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1677.664967][ C0] do_recvmmsg+0x359/0x7a0 [ 1677.669413][ C0] ? __sys_recvmmsg+0x280/0x280 [ 1677.674279][ C0] ? do_futex+0x2dc/0x420 [ 1677.678628][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 1677.683668][ C0] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 1677.685541][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 1677.685554][ T28] audit: type=1400 audit(2000000571.240:3595): avc: denied { remount } for pid=20620 comm="syz.3.6080" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1677.689225][ C0] ? fpregs_restore_userregs+0x128/0x260 [ 1677.720465][ C0] ? switch_fpu_return+0xe/0x10 [ 1677.725332][ C0] x64_sys_call+0x3e7/0x9a0 [ 1677.729877][ C0] do_syscall_64+0x4c/0xa0 [ 1677.734299][ C0] ? clear_bhb_loop+0x30/0x80 [ 1677.738980][ C0] ? clear_bhb_loop+0x30/0x80 [ 1677.743681][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1677.749609][ C0] RIP: 0033:0x7f74ff38e929 [ 1677.754036][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1677.773707][ C0] RSP: 002b:00007f750022c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1677.782163][ C0] RAX: ffffffffffffffda RBX: 00007f74ff5b6080 RCX: 00007f74ff38e929 [ 1677.790168][ C0] RDX: 000000000400034f RSI: 0000200000000480 RDI: 0000000000000003 [ 1677.798141][ C0] RBP: 00007f74ff410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1677.806138][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1677.814142][ C0] R13: 0000000000000000 R14: 00007f74ff5b6080 R15: 00007ffd2af94e68 [ 1677.822189][ C0] [ 1677.825200][ C0] ---[ end trace 0000000000000000 ]--- [ 1677.830727][ C0] ------------[ cut here ]------------ [ 1677.836178][ C0] refcount_t: underflow; use-after-free. [ 1677.841944][ C0] WARNING: CPU: 0 PID: 20642 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 1677.851445][ C0] Modules linked in: [ 1677.855340][ C0] CPU: 0 PID: 20642 Comm: syz.2.6086 Tainted: G W 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 1677.866747][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1677.876834][ C0] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 1677.883016][ C0] Code: 05 01 48 c7 c7 a0 a2 a9 85 e8 1c fb dd fe 0f 0b eb c3 e8 53 b5 0c ff c6 05 b4 ab 0b 05 01 48 c7 c7 00 a3 a9 85 e8 00 fb dd fe <0f> 0b eb a7 e8 37 b5 0c ff c6 05 95 ab 0b 05 01 48 c7 c7 40 a2 a9 [ 1677.902640][ C0] RSP: 0018:ffffc900000079e0 EFLAGS: 00010246 [ 1677.908714][ C0] RAX: 096333a386cb5e00 RBX: 0000000000000003 RCX: ffff88811f77e540 [ 1677.916720][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1677.924705][ C0] RBP: ffffc900000079f0 R08: dffffc0000000000 R09: fffff52000000eb9 [ 1677.932703][ C0] R10: fffff52000000eb9 R11: 1ffff92000000eb8 R12: 00000000c0000000 [ 1677.940685][ C0] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff88810efd5200 [ 1677.948662][ C0] FS: 00007f750022c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1677.957613][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1677.964220][ C0] CR2: 00007ffab5fde000 CR3: 0000000120a1f000 CR4: 00000000003506b0 [ 1677.972235][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1677.980225][ C0] DR3: 00000000000032e7 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1677.988206][ C0] Call Trace: [ 1677.991594][ C0] [ 1677.994437][ C0] tipc_crypto_xmit+0x195e/0x2220 [ 1677.999480][ C0] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 1678.005025][ C0] ? __copy_skb_header+0x49f/0x630 [ 1678.010151][ C0] tipc_bearer_xmit_skb+0x226/0x380 [ 1678.015348][ C0] ? __skb_clone+0x47a/0x790 [ 1678.019940][ C0] ? __cfi_tipc_bearer_xmit_skb+0x10/0x10 [ 1678.025669][ C0] ? skb_clone+0x228/0x380 [ 1678.030089][ C0] tipc_disc_timeout+0x6a2/0x830 [ 1678.035023][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 1678.040479][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 1678.045934][ C0] call_timer_fn+0x46/0x2a0 [ 1678.050449][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 1678.055905][ C0] __run_timers+0x639/0x9a0 [ 1678.060409][ C0] ? calc_index+0x200/0x200 [ 1678.064915][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 1678.070140][ C0] run_timer_softirq+0x6a/0xf0 [ 1678.074906][ C0] handle_softirqs+0x1d7/0x600 [ 1678.079670][ C0] ? irqtime_account_irq+0xc4/0x240 [ 1678.084870][ C0] __irq_exit_rcu+0x52/0xf0 [ 1678.089353][ C0] irq_exit_rcu+0x9/0x10 [ 1678.093601][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1678.099238][ C0] [ 1678.102166][ C0] [ 1678.105085][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1678.111136][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x55/0x80 [ 1678.117574][ C0] Code: 40 d2 ed 86 e8 dc 0b c4 fc 4c 89 f7 48 83 3d d1 8c fd 01 00 74 30 e8 1e 0d 00 00 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 a6 50 5b fc 65 8b 05 37 28 12 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 1678.137201][ C0] RSP: 0018:ffffc9000134f5a0 EFLAGS: 00000206 [ 1678.143277][ C0] RAX: 0000000000000001 RBX: 0000000000000a06 RCX: dffffc0000000000 [ 1678.151259][ C0] RDX: ffffc90001367698 RSI: 0000000000000a06 RDI: 0000000000000001 [ 1678.159226][ C0] RBP: ffffc9000134f5b0 R08: dffffc0000000000 R09: ffffed102629e799 [ 1678.167196][ C0] R10: ffffed102629e799 R11: 1ffff1102629e798 R12: ffff88810e43b600 [ 1678.175195][ C0] R13: 0000000000000010 R14: 0000000000000001 R15: 0000000000000000 [ 1678.183177][ C0] __wake_up_sync_key+0x166/0x280 [ 1678.188209][ C0] ? __cfi___wake_up_sync_key+0x10/0x10 [ 1678.193771][ C0] ? __skb_try_recv_datagram+0x3da/0x4d0 [ 1678.199428][ C0] ? __cfi_sk_busy_loop_end+0x10/0x10 [ 1678.204786][ C0] __unix_dgram_recvmsg+0x496/0xd70 [ 1678.209995][ C0] ? __cfi___unix_dgram_recvmsg+0x10/0x10 [ 1678.215720][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 1678.221265][ C0] ? xfd_validate_state+0x70/0x150 [ 1678.226376][ C0] unix_dgram_recvmsg+0xc7/0xe0 [ 1678.231240][ C0] ? __cfi_unix_dgram_recvmsg+0x10/0x10 [ 1678.236791][ C0] ____sys_recvmsg+0x2a0/0x590 [ 1678.241564][ C0] ? __cfi___switch_to+0x10/0x10 [ 1678.246501][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 1678.251549][ C0] ? import_iovec+0x7c/0xb0 [ 1678.256049][ C0] ___sys_recvmsg+0x1b2/0x510 [ 1678.260722][ C0] ? __sys_recvmsg+0x270/0x270 [ 1678.265479][ C0] ? futex_wait+0x47c/0x750 [ 1678.269987][ C0] ? wake_up_q+0x105/0x1b0 [ 1678.274398][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1678.280559][ C0] do_recvmmsg+0x359/0x7a0 [ 1678.284976][ C0] ? __sys_recvmmsg+0x280/0x280 [ 1678.289838][ C0] ? do_futex+0x2dc/0x420 [ 1678.294171][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 1678.299173][ C0] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 1678.304714][ C0] ? fpregs_restore_userregs+0x128/0x260 [ 1678.310371][ C0] ? switch_fpu_return+0xe/0x10 [ 1678.315202][ C0] x64_sys_call+0x3e7/0x9a0 [ 1678.319729][ C0] do_syscall_64+0x4c/0xa0 [ 1678.324144][ C0] ? clear_bhb_loop+0x30/0x80 [ 1678.328800][ C0] ? clear_bhb_loop+0x30/0x80 [ 1678.333486][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1678.339377][ C0] RIP: 0033:0x7f74ff38e929 [ 1678.343812][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1678.363438][ C0] RSP: 002b:00007f750022c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1678.371878][ C0] RAX: ffffffffffffffda RBX: 00007f74ff5b6080 RCX: 00007f74ff38e929 [ 1678.379869][ C0] RDX: 000000000400034f RSI: 0000200000000480 RDI: 0000000000000003 [ 1678.387839][ C0] RBP: 00007f74ff410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1678.395828][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1678.403803][ C0] R13: 0000000000000000 R14: 00007f74ff5b6080 R15: 00007ffd2af94e68 [ 1678.411794][ C0] [ 1678.414809][ C0] ---[ end trace 0000000000000000 ]--- [ 1678.420602][ C0] ------------[ cut here ]------------ [ 1678.426063][ C0] refcount_t: saturated; leaking memory. [ 1678.431795][ C0] WARNING: CPU: 0 PID: 20642 at lib/refcount.c:22 refcount_warn_saturate+0x158/0x1a0 [ 1678.441273][ C0] Modules linked in: [ 1678.445150][ C0] CPU: 0 PID: 20642 Comm: syz.2.6086 Tainted: G W 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 1678.456535][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1678.466607][ C0] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 1678.472812][ C0] Code: 05 01 48 c7 c7 40 a2 a9 85 e8 e4 fa dd fe 0f 0b eb 8b e8 1b b5 0c ff c6 05 7a ab 0b 05 01 48 c7 c7 40 a2 a9 85 e8 c8 fa dd fe <0f> 0b e9 6c ff ff ff e8 fc b4 0c ff c6 05 5f ab 0b 05 01 48 c7 c7 [ 1678.492426][ C0] RSP: 0018:ffffc900000079e0 EFLAGS: 00010246 [ 1678.498515][ C0] RAX: 096333a386cb5e00 RBX: 0000000000000001 RCX: ffff88811f77e540 [ 1678.506501][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1678.514490][ C0] RBP: ffffc900000079f0 R08: dffffc0000000000 R09: fffff52000000eb9 [ 1678.522461][ C0] R10: fffff52000000eb9 R11: 1ffff92000000eb8 R12: ffffc90000007ba0 [ 1678.530450][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88810efd5200 [ 1678.538404][ C0] FS: 00007f750022c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1678.547348][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1678.553955][ C0] CR2: 00007ffab5fde000 CR3: 0000000120a1f000 CR4: 00000000003506b0 [ 1678.561927][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1678.569914][ C0] DR3: 00000000000032e7 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1678.577865][ C0] Call Trace: [ 1678.581135][ C0] [ 1678.583971][ C0] tipc_crypto_xmit+0x1822/0x2220 [ 1678.588980][ C0] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 1678.594361][ C0] ? __copy_skb_header+0x49f/0x630 [ 1678.599486][ C0] tipc_bearer_xmit_skb+0x226/0x380 [ 1678.604666][ C0] ? __skb_clone+0x47a/0x790 [ 1678.609237][ C0] ? __cfi_tipc_bearer_xmit_skb+0x10/0x10 [ 1678.614965][ C0] ? skb_clone+0x228/0x380 [ 1678.619376][ C0] tipc_disc_timeout+0x6a2/0x830 [ 1678.624330][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 1678.629801][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 1678.635260][ C0] call_timer_fn+0x46/0x2a0 [ 1678.639762][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 1678.645215][ C0] __run_timers+0x639/0x9a0 [ 1678.649735][ C0] ? calc_index+0x200/0x200 [ 1678.654232][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 1678.659432][ C0] run_timer_softirq+0x6a/0xf0 [ 1678.664192][ C0] handle_softirqs+0x1d7/0x600 [ 1678.668933][ C0] ? irqtime_account_irq+0xc4/0x240 [ 1678.674142][ C0] __irq_exit_rcu+0x52/0xf0 [ 1678.678638][ C0] irq_exit_rcu+0x9/0x10 [ 1678.682878][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1678.688506][ C0] [ 1678.691447][ C0] [ 1678.694392][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1678.700407][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x55/0x80 [ 1678.706829][ C0] Code: 40 d2 ed 86 e8 dc 0b c4 fc 4c 89 f7 48 83 3d d1 8c fd 01 00 74 30 e8 1e 0d 00 00 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 a6 50 5b fc 65 8b 05 37 28 12 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 1678.726489][ C0] RSP: 0018:ffffc9000134f5a0 EFLAGS: 00000206 [ 1678.732590][ C0] RAX: 0000000000000001 RBX: 0000000000000a06 RCX: dffffc0000000000 [ 1678.740578][ C0] RDX: ffffc90001367698 RSI: 0000000000000a06 RDI: 0000000000000001 [ 1678.748548][ C0] RBP: ffffc9000134f5b0 R08: dffffc0000000000 R09: ffffed102629e799 [ 1678.756529][ C0] R10: ffffed102629e799 R11: 1ffff1102629e798 R12: ffff88810e43b600 [ 1678.764528][ C0] R13: 0000000000000010 R14: 0000000000000001 R15: 0000000000000000 [ 1678.772516][ C0] __wake_up_sync_key+0x166/0x280 [ 1678.777548][ C0] ? __cfi___wake_up_sync_key+0x10/0x10 [ 1678.783094][ C0] ? __skb_try_recv_datagram+0x3da/0x4d0 [ 1678.788738][ C0] ? __cfi_sk_busy_loop_end+0x10/0x10 [ 1678.794162][ C0] __unix_dgram_recvmsg+0x496/0xd70 [ 1678.799370][ C0] ? __cfi___unix_dgram_recvmsg+0x10/0x10 [ 1678.805100][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 1678.810665][ C0] ? xfd_validate_state+0x70/0x150 [ 1678.815778][ C0] unix_dgram_recvmsg+0xc7/0xe0 [ 1678.820640][ C0] ? __cfi_unix_dgram_recvmsg+0x10/0x10 [ 1678.826184][ C0] ____sys_recvmsg+0x2a0/0x590 [ 1678.830954][ C0] ? __cfi___switch_to+0x10/0x10 [ 1678.835887][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 1678.840915][ C0] ? import_iovec+0x7c/0xb0 [ 1678.845416][ C0] ___sys_recvmsg+0x1b2/0x510 [ 1678.850105][ C0] ? __sys_recvmsg+0x270/0x270 [ 1678.854866][ C0] ? futex_wait+0x47c/0x750 [ 1678.859347][ C0] ? wake_up_q+0x105/0x1b0 [ 1678.863762][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1678.869939][ C0] do_recvmmsg+0x359/0x7a0 [ 1678.874338][ C0] ? __sys_recvmmsg+0x280/0x280 [ 1678.879166][ C0] ? do_futex+0x2dc/0x420 [ 1678.883500][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 1678.888523][ C0] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 1678.894075][ C0] ? fpregs_restore_userregs+0x128/0x260 [ 1678.899718][ C0] ? switch_fpu_return+0xe/0x10 [ 1678.904548][ C0] x64_sys_call+0x3e7/0x9a0 [ 1678.909118][ C0] do_syscall_64+0x4c/0xa0 [ 1678.913539][ C0] ? clear_bhb_loop+0x30/0x80 [ 1678.918220][ C0] ? clear_bhb_loop+0x30/0x80 [ 1678.922902][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1678.928789][ C0] RIP: 0033:0x7f74ff38e929 [ 1678.933208][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1678.952916][ C0] RSP: 002b:00007f750022c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1678.961322][ C0] RAX: ffffffffffffffda RBX: 00007f74ff5b6080 RCX: 00007f74ff38e929 [ 1678.969281][ C0] RDX: 000000000400034f RSI: 0000200000000480 RDI: 0000000000000003 [ 1678.977260][ C0] RBP: 00007f74ff410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1678.985234][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1678.993216][ C0] R13: 0000000000000000 R14: 00007f74ff5b6080 R15: 00007ffd2af94e68 [ 1679.001204][ C0] [ 1679.004210][ C0] ---[ end trace 0000000000000000 ]--- [ 1679.234272][ T8] tipc: Disabling bearer [ 1679.265386][ T8] tipc: Left network mode [ 1679.783184][T20080] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1679.878622][ T8] ------------[ cut here ]------------ [ 1679.884162][ T8] refcount_t: saturated; leaking memory. [ 1679.993821][ T8] WARNING: CPU: 0 PID: 8 at lib/refcount.c:19 refcount_warn_saturate+0x13c/0x1a0 [ 1680.003032][ T8] Modules linked in: [ 1680.006934][ T8] CPU: 0 PID: 8 Comm: kworker/u4:0 Tainted: G W 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 1680.018180][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1680.028256][ T8] Workqueue: netns cleanup_net [ 1680.033042][ T8] RIP: 0010:refcount_warn_saturate+0x13c/0x1a0 [ 1680.039191][ T8] Code: 05 01 48 c7 c7 00 a3 a9 85 e8 00 fb dd fe 0f 0b eb a7 e8 37 b5 0c ff c6 05 95 ab 0b 05 01 48 c7 c7 40 a2 a9 85 e8 e4 fa dd fe <0f> 0b eb 8b e8 1b b5 0c ff c6 05 7a ab 0b 05 01 48 c7 c7 40 a2 a9 [ 1680.058855][ T8] RSP: 0018:ffffc900000877c0 EFLAGS: 00010246 [ 1680.064943][ T8] RAX: 7e50d875a0e5ce00 RBX: 0000000000000000 RCX: ffff88810039d100 [ 1680.072954][ T8] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1680.080962][ T8] RBP: ffffc900000877d0 R08: dffffc0000000000 R09: fffff52000010e75 [ 1680.088941][ T8] R10: fffff52000010e75 R11: 1ffff92000010e74 R12: 1ffff92000010f04 [ 1680.096947][ T8] R13: ffffc90000087840 R14: 0000000000000000 R15: ffff88810ac0a38c [ 1680.104950][ T8] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1680.113921][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1680.120537][ T8] CR2: 0000200000cf8030 CR3: 000000010763d000 CR4: 00000000003506b0 [ 1680.128521][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1680.136542][ T8] DR3: 00000000000032e7 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1680.144546][ T8] Call Trace: [ 1680.147835][ T8] [ 1680.150783][ T8] nf_nat_masq_schedule+0x46b/0x4e0 [ 1680.156112][ T8] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1680.161794][ T8] ? __cfi_device_cmp+0x10/0x10 [ 1680.166653][ T8] ? masq_device_event+0xd0/0xd0 [ 1680.171642][ T8] ? nfqnl_rcv_dev_event+0x441/0x470 [ 1680.177020][ T8] ? rtnl_is_locked+0x15/0x20 [ 1680.181795][ T8] masq_device_event+0x9b/0xd0 [ 1680.186561][ T8] raw_notifier_call_chain+0xa1/0x110 [ 1680.191959][ T8] dev_close_many+0x32d/0x4d0 [ 1680.196696][ T8] ? __cfi_dev_close_many+0x10/0x10 [ 1680.201939][ T8] ? __switch_to_asm+0x3a/0x60 [ 1680.206712][ T8] ? __kasan_check_read+0x11/0x20 [ 1680.211878][ T8] unregister_netdevice_many+0x439/0x1820 [ 1680.217601][ T8] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 1680.223352][ T8] ? __cfi_unregister_netdevice_many+0x10/0x10 [ 1680.229537][ T8] ? irqentry_exit+0x37/0x40 [ 1680.234133][ T8] ? sysvec_reschedule_ipi+0x78/0x80 [ 1680.239445][ T8] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1680.245125][ T8] ip6gre_exit_batch_net+0x5a8/0x5f0 [ 1680.250525][ T8] ? irqentry_exit+0x37/0x40 [ 1680.255117][ T8] ? sysvec_reschedule_ipi+0x78/0x80 [ 1680.260443][ T8] ? __cfi_ip6gre_exit_batch_net+0x10/0x10 [ 1680.266254][ T8] ? cleanup_net+0x557/0xb00 [ 1680.270872][ T8] ? __cfi_ip6gre_exit_batch_net+0x10/0x10 [ 1680.276681][ T8] cleanup_net+0x62d/0xb00 [ 1680.281118][ T8] ? __cfi_cleanup_net+0x10/0x10 [ 1680.286059][ T8] process_one_work+0x71f/0xc40 [ 1680.290951][ T8] worker_thread+0xa29/0x11f0 [ 1680.295629][ T8] kthread+0x281/0x320 [ 1680.299724][ T8] ? __cfi_worker_thread+0x10/0x10 [ 1680.304838][ T8] ? __cfi_kthread+0x10/0x10 [ 1680.309451][ T8] ret_from_fork+0x1f/0x30 [ 1680.313873][ T8] [ 1680.316884][ T8] ---[ end trace 0000000000000000 ]--- [ 1680.322779][ T8] ------------[ cut here ]------------ [ 1680.328239][ T8] WARNING: CPU: 1 PID: 8 at lib/ref_tracker.c:77 ref_tracker_alloc+0x2ae/0x430 [ 1680.337400][ T8] Modules linked in: [ 1680.341364][ T8] CPU: 1 PID: 8 Comm: kworker/u4:0 Tainted: G W 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 1680.352614][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1680.362705][ T8] Workqueue: netns cleanup_net [ 1680.367476][ T8] RIP: 0010:ref_tracker_alloc+0x2ae/0x430 [ 1680.373242][ T8] Code: f9 e5 fe 48 bb 00 00 00 00 00 fc ff df 4c 8b 74 24 08 48 8b 7c 24 10 48 8b 74 24 18 e8 1b 47 66 02 31 c0 eb 6d e8 52 f9 e5 fe <0f> 0b 4d 85 e4 0f 85 09 fe ff ff 4c 8b 64 24 10 4d 8d 74 24 0c 4c [ 1680.392983][ T8] RSP: 0018:ffffc900000876a0 EFLAGS: 00010293 [ 1680.399032][ T8] RAX: ffffffff8289fe1e RBX: dffffc0000000000 RCX: ffff88810039d100 [ 1680.407186][ T8] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000087760 [ 1680.415360][ T8] RBP: ffffc900000877d0 R08: dffffc0000000000 R09: ffffc900000876e0 [ 1680.423380][ T8] R10: fffff52000010eec R11: 1ffff92000010edc R12: ffff8881f7192038 [ 1680.431395][ T8] R13: ffff88810ac0a3a0 R14: 0000000000000cc0 R15: ffff88810ac0a390 [ 1680.439367][ T8] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1680.448334][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1680.454964][ T8] CR2: 0000001b2e31dff8 CR3: 0000000006e0f000 CR4: 00000000003506a0 [ 1680.462959][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1680.470960][ T8] DR3: 00000000000032e7 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1680.478923][ T8] Call Trace: [ 1680.482232][ T8] [ 1680.485157][ T8] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 1680.490646][ T8] ? slab_post_alloc_hook+0x4f/0x2d0 [ 1680.496012][ T8] ? __kasan_kmalloc+0x24/0xb0 [ 1680.500805][ T8] ? nf_nat_masq_schedule+0x238/0x4e0 [ 1680.506182][ T8] ? kmalloc_trace+0x40/0xb0 [ 1680.510924][ T8] nf_nat_masq_schedule+0x338/0x4e0 [ 1680.516139][ T8] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1680.521813][ T8] ? __cfi_device_cmp+0x10/0x10 [ 1680.526664][ T8] ? masq_device_event+0xd0/0xd0 [ 1680.531644][ T8] ? nfqnl_rcv_dev_event+0x441/0x470 [ 1680.536928][ T8] ? rtnl_is_locked+0x15/0x20 [ 1680.541621][ T8] masq_device_event+0x9b/0xd0 [ 1680.546378][ T8] raw_notifier_call_chain+0xa1/0x110 [ 1680.551764][ T8] dev_close_many+0x32d/0x4d0 [ 1680.556433][ T8] ? __cfi_dev_close_many+0x10/0x10 [ 1680.561657][ T8] ? __switch_to_asm+0x3a/0x60 [ 1680.566419][ T8] ? __kasan_check_read+0x11/0x20 [ 1680.571510][ T8] unregister_netdevice_many+0x439/0x1820 [ 1680.577233][ T8] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 1680.582974][ T8] ? __cfi_unregister_netdevice_many+0x10/0x10 [ 1680.589281][ T8] ? irqentry_exit+0x37/0x40 [ 1680.593918][ T8] ? sysvec_reschedule_ipi+0x78/0x80 [ 1680.599198][ T8] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1680.604851][ T8] ip6gre_exit_batch_net+0x5a8/0x5f0 [ 1680.610152][ T8] ? irqentry_exit+0x37/0x40 [ 1680.614737][ T8] ? sysvec_reschedule_ipi+0x78/0x80 [ 1680.620038][ T8] ? __cfi_ip6gre_exit_batch_net+0x10/0x10 [ 1680.625842][ T8] ? cleanup_net+0x557/0xb00 [ 1680.630500][ T8] ? __cfi_ip6gre_exit_batch_net+0x10/0x10 [ 1680.636303][ T8] cleanup_net+0x62d/0xb00 [ 1680.640743][ T8] ? __cfi_cleanup_net+0x10/0x10 [ 1680.645672][ T8] process_one_work+0x71f/0xc40 [ 1680.650538][ T8] worker_thread+0xa29/0x11f0 [ 1680.655214][ T8] kthread+0x281/0x320 [ 1680.659275][ T8] ? __cfi_worker_thread+0x10/0x10 [ 1680.664436][ T8] ? __cfi_kthread+0x10/0x10 [ 1680.669031][ T8] ret_from_fork+0x1f/0x30 [ 1680.673472][ T8] [ 1680.676486][ T8] ---[ end trace 0000000000000000 ]--- [ 1681.031088][ T65] ------------[ cut here ]------------ [ 1681.036581][ T65] WARNING: CPU: 0 PID: 65 at lib/ref_tracker.c:110 ref_tracker_free+0x5de/0x7c0 [ 1681.045676][ T65] Modules linked in: [ 1681.049604][ T65] CPU: 0 PID: 65 Comm: kworker/0:2 Tainted: G W 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 1681.060827][ T65] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1681.070918][ T65] Workqueue: events iterate_cleanup_work [ 1681.076563][ T65] RIP: 0010:ref_tracker_free+0x5de/0x7c0 [ 1681.082236][ T65] Code: 85 e8 2e 70 5b 02 43 0f b6 04 2c 84 c0 4c 8b 74 24 08 0f 85 c9 01 00 00 41 8b 3f e8 dc e8 ff ff 4c 89 f6 eb 84 e8 62 f1 e5 fe <0f> 0b 4d 85 ff 0f 85 d3 fa ff ff 4c 8b 24 24 4d 8d 74 24 0c 4c 89 [ 1681.101897][ T65] RSP: 0018:ffffc90000937b20 EFLAGS: 00010293 [ 1681.107968][ T65] RAX: ffffffff828a060e RBX: 1ffff92000126f68 RCX: ffff88811741d100 [ 1681.115982][ T65] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000937be0 [ 1681.123989][ T65] RBP: ffffc90000937c50 R08: dffffc0000000000 R09: ffffc90000937b60 [ 1681.132020][ T65] R10: fffff52000126f7c R11: 1ffff92000126f6c R12: ffff88810ac0a3a0 [ 1681.140010][ T65] R13: dffffc0000000000 R14: ffffc90000937b60 R15: ffff8881f7192038 [ 1681.147979][ T65] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1681.156981][ T65] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1681.163626][ T65] CR2: 00007f71129ddf98 CR3: 00000001325c2000 CR4: 00000000003506b0 [ 1681.171642][ T65] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1681.179651][ T65] DR3: 00000000000032e7 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1681.187646][ T65] Call Trace: [ 1681.190938][ T65] [ 1681.193862][ T65] ? __cfi_ref_tracker_free+0x10/0x10 [ 1681.199223][ T65] ? __cfi_device_cmp+0x10/0x10 [ 1681.204098][ T65] ? __kasan_check_read+0x11/0x20 [ 1681.209116][ T65] ? nf_ct_iterate_cleanup_net+0xe8/0x130 [ 1681.214915][ T65] iterate_cleanup_work+0x105/0x1f0 [ 1681.220140][ T65] ? __cfi_iterate_cleanup_work+0x10/0x10 [ 1681.225842][ T65] ? __schedule+0xb8f/0x14e0 [ 1681.230506][ T65] process_one_work+0x71f/0xc40 [ 1681.235417][ T65] worker_thread+0xa29/0x11f0 [ 1681.240193][ T65] kthread+0x281/0x320 [ 1681.244294][ T65] ? __cfi_worker_thread+0x10/0x10 [ 1681.249454][ T65] ? __cfi_kthread+0x10/0x10 [ 1681.254067][ T65] ret_from_fork+0x1f/0x30 [ 1681.258527][ T65] [ 1681.261705][ T65] ---[ end trace 0000000000000000 ]--- [ 1681.900298][T20647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1681.907507][T20647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.915732][T20647] device bridge_slave_0 entered promiscuous mode [ 1681.928207][T20647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.255376][T20647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1682.263338][T20647] device bridge_slave_1 entered promiscuous mode [ 1682.404110][T20647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.411199][T20647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1682.418500][T20647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.425551][T20647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1682.457767][ T4646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.467392][ T4646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1682.478538][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1682.486595][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1682.514344][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1682.525606][ T4646] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.532692][ T4646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1682.540849][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1682.549176][ T4646] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.556244][ T4646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1682.571228][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1682.580337][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1682.594442][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1682.858633][T20708] loop2: detected capacity change from 0 to 256 [ 1683.000037][T20708] exfat: Deprecated parameter 'utf8' [ 1683.308191][T20708] exfat: Deprecated parameter 'namecase' [ 1683.470314][T20708] exfat: Deprecated parameter 'utf8' [ 1683.477497][ T8] device veth1_macvtap left promiscuous mode [ 1683.490819][ T8] device veth0_vlan left promiscuous mode [ 1683.501758][T20708] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 1683.594252][T20647] device veth0_vlan entered promiscuous mode [ 1683.614184][T20647] device veth1_macvtap entered promiscuous mode [ 1683.808154][T11410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1683.852411][T20723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6107'. [ 1683.872664][T11410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1683.887730][T20718] 9pnet_fd: Insufficient options for proto=fd [ 1683.890075][T11410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1684.400004][T11410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1684.408222][T11410] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1684.416068][T11410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1684.431480][T11410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1685.239825][T20730] overlayfs: failed to clone lowerpath [ 1685.422730][T11410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1685.639583][T20734] loop3: detected capacity change from 0 to 1024 [ 1685.647944][T20734] ext4: Unknown parameter 'fsuuid' [ 1687.002494][T11410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1687.295847][T11410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1687.303444][T11410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1689.488710][T20759] loop3: detected capacity change from 0 to 1024 [ 1689.502362][T20759] ext4: Unknown parameter 'fsuuid' [ 1691.239691][ T28] audit: type=1400 audit(2000000581.520:3596): avc: denied { mounton } for pid=20752 comm="syz.2.6116" path="/59/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1691.728181][T20770] xt_NFQUEUE: number of total queues is 0 [ 1692.667791][T20777] tipc: Enabling of bearer rejected, already enabled [ 1693.239116][T20786] loop2: detected capacity change from 0 to 2048 [ 1693.587638][T20786] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1693.599740][T20780] tipc: Enabled bearer , priority 0 [ 1695.323484][T20789] loop3: detected capacity change from 0 to 16 [ 1695.330293][T19598] EXT4-fs (loop2): unmounting filesystem. [ 1695.353588][T20780] device syzkaller0 entered promiscuous mode [ 1695.362763][T20789] erofs: (device loop3): mounted with root inode @ nid 36. [ 1695.378551][T20780] tipc: Resetting bearer [ 1695.385137][T20789] erofs: (device loop3): init_inode_xattrs: xattr_isize 12 of nid 36 is not supported yet [ 1695.395481][T20789] SELinux: (dev loop3, type erofs) has no security xattr handler [ 1695.684071][T20804] loop0: detected capacity change from 0 to 512 [ 1696.411045][ T28] audit: type=1326 audit(2000000589.960:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20776 comm="syz.3.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f7f8e929 code=0x7fc00000 [ 1696.500135][T20804] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1696.509336][T20804] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1696.845035][T20804] netlink: 'syz.0.6128': attribute type 13 has an invalid length. [ 1696.858379][T20804] gretap0: refused to change device tx_queue_len [ 1696.865585][T20804] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1697.227283][T20789] tipc: Resetting bearer [ 1697.294345][T20789] tipc: Disabling bearer [ 1697.304644][T20647] EXT4-fs (loop0): unmounting filesystem. [ 1702.439459][T20853] loop0: detected capacity change from 0 to 1024 [ 1702.447924][T20853] ext4: Unknown parameter 'fsuuid' [ 1702.951225][ T28] audit: type=1326 audit(2000000594.570:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20840 comm="syz.1.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7ffc0000 [ 1703.447804][ T28] audit: type=1326 audit(2000000594.570:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20840 comm="syz.1.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401fd8e929 code=0x7ffc0000 [ 1703.818189][T20864] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1707.379771][T20893] xt_NFQUEUE: number of total queues is 0 [ 1708.942025][T20909] xt_NFQUEUE: number of total queues is 0 [ 1709.918907][T20911] netlink: 'syz.1.6161': attribute type 13 has an invalid length. [ 1710.482002][T20911] gretap0: refused to change device tx_queue_len [ 1710.488600][T20911] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1711.532945][T20924] loop0: detected capacity change from 0 to 512 [ 1711.540186][T20924] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1711.627538][T20924] EXT4-fs error (device loop0): __ext4_iget:5078: inode #11: block 1: comm syz.0.6166: invalid block [ 1711.650625][T20924] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.6166: couldn't read orphan inode 11 (err -117) [ 1711.668919][T20924] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1712.561257][T20647] EXT4-fs (loop0): unmounting filesystem. [ 1712.573926][T20936] 9pnet_fd: Insufficient options for proto=fd [ 1712.610139][ T28] audit: type=1326 audit(2000000606.170:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20912 comm="syz.2.6162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ff38e929 code=0x7ffc0000 [ 1712.719462][ T28] audit: type=1326 audit(2000000606.200:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20912 comm="syz.2.6162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ff38e929 code=0x7ffc0000 [ 1713.171709][T20946] overlayfs: failed to clone lowerpath [ 1713.364532][ T28] audit: type=1326 audit(2000000606.860:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.3.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f7f8e929 code=0x7ffc0000 [ 1714.240068][ T28] audit: type=1326 audit(2000000606.860:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.3.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f7f8e929 code=0x7ffc0000 [ 1714.313490][ T28] audit: type=1326 audit(2000000606.870:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.3.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd5f7f8d290 code=0x7ffc0000 [ 1714.377543][ T28] audit: type=1326 audit(2000000606.870:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.3.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd5f7f8d290 code=0x7ffc0000 [ 1714.432782][T20952] 9pnet_fd: Insufficient options for proto=fd [ 1714.438949][ T28] audit: type=1326 audit(2000000606.870:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.3.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f7f8e929 code=0x7ffc0000 [ 1714.520592][ T28] audit: type=1326 audit(2000000606.870:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.3.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f7f8e929 code=0x7ffc0000 [ 1714.575599][ T28] audit: type=1326 audit(2000000606.900:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.3.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd5f7f8e929 code=0x7ffc0000 [ 1714.624460][ T28] audit: type=1326 audit(2000000606.900:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.3.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f7f8e929 code=0x7ffc0000 [ 1714.802078][T20963] xt_NFQUEUE: number of total queues is 0 [ 1717.332926][T20979] overlayfs: failed to clone lowerpath [ 1717.955907][T20988] netlink: 'syz.1.6184': attribute type 13 has an invalid length. [ 1717.996272][T20988] gretap0: refused to change device tx_queue_len [ 1718.003429][T20988] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1718.388418][T20990] loop0: detected capacity change from 0 to 256 [ 1718.830748][T20990] exfat: Deprecated parameter 'utf8' [ 1718.836082][T20990] exfat: Deprecated parameter 'namecase' [ 1718.872308][T20990] exfat: Deprecated parameter 'utf8' [ 1718.890220][T20990] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 1719.007284][T20996] 9pnet_fd: Insufficient options for proto=fd [ 1721.331146][T21018] xt_NFQUEUE: number of total queues is 0 [ 1721.573765][T21019] loop0: detected capacity change from 0 to 1024 [ 1721.592647][T21019] ext4: Unknown parameter 'fsuuid' [ 1721.680470][T20080] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1723.286948][T21043] loop3: detected capacity change from 0 to 256 [ 1723.618958][T21043] exfat: Deprecated parameter 'utf8' [ 1723.639503][T21043] exfat: Deprecated parameter 'namecase' [ 1723.649821][T21043] exfat: Deprecated parameter 'utf8' [ 1723.682930][T21043] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 1724.614694][T21054] loop2: detected capacity change from 0 to 2048 [ 1724.708727][T21054] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1726.798062][T19598] EXT4-fs (loop2): unmounting filesystem. [ 1730.340492][T21116] xt_NFQUEUE: number of total queues is 0 [ 1732.059500][T21139] overlayfs: failed to clone lowerpath [ 1732.476115][T21143] overlayfs: overlapping lowerdir path [ 1733.286672][T21152] loop0: detected capacity change from 0 to 256 [ 1733.293396][T21152] exfat: Deprecated parameter 'utf8' [ 1733.298846][T21152] exfat: Deprecated parameter 'namecase' [ 1733.821022][T21152] exfat: Deprecated parameter 'utf8' [ 1733.869931][T21152] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 1733.963889][T20854] tipc: Disabling bearer [ 1733.971435][T20854] tipc: Left network mode [ 1734.452576][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1734.456034][ T28] audit: type=1326 audit(2000000627.550:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21146 comm="syz.5.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7112b8e929 code=0x7ffc0000 [ 1734.956524][ T28] audit: type=1326 audit(2000000627.550:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21146 comm="syz.5.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7112b8e929 code=0x7ffc0000 [ 1734.980147][ T28] audit: type=1326 audit(2000000627.560:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21146 comm="syz.5.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7112b8d290 code=0x7ffc0000 [ 1735.003725][ T28] audit: type=1326 audit(2000000627.570:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21146 comm="syz.5.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7112b8d290 code=0x7ffc0000 [ 1735.027375][ T28] audit: type=1326 audit(2000000627.570:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21146 comm="syz.5.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7112b8e929 code=0x7ffc0000 [ 1735.066896][ T28] audit: type=1326 audit(2000000627.570:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21146 comm="syz.5.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7112b8e929 code=0x7ffc0000 [ 1735.161277][ T28] audit: type=1326 audit(2000000627.980:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21146 comm="syz.5.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7112b8e929 code=0x7ffc0000 [ 1735.197562][ T28] audit: type=1326 audit(2000000627.980:3621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21146 comm="syz.5.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7112b8e929 code=0x7ffc0000 [ 1735.222544][ T28] audit: type=1326 audit(2000000627.980:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21146 comm="syz.5.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7112b8e929 code=0x7ffc0000 [ 1735.246735][T21176] xt_NFQUEUE: number of total queues is 0 [ 1735.281937][ T28] audit: type=1326 audit(2000000627.980:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21146 comm="syz.5.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f7112b8e929 code=0x7ffc0000 [ 1735.894756][T21167] bridge0: port 1(bridge_slave_0) entered blocking state [ 1735.921802][T21167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.863341][T21167] device bridge_slave_0 entered promiscuous mode [ 1736.872445][T21167] bridge0: port 2(bridge_slave_1) entered blocking state [ 1736.880080][T21167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1736.887519][T21167] device bridge_slave_1 entered promiscuous mode [ 1737.088815][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1737.159487][T21198] overlayfs: overlapping lowerdir path [ 1737.338973][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1737.350037][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1737.365707][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1737.381510][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1737.399146][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1737.407774][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1737.414842][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1737.423135][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1737.423952][T21202] loop2: detected capacity change from 0 to 256 [ 1737.431831][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1737.439052][T21202] exfat: Deprecated parameter 'utf8' [ 1737.446095][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 1737.451094][T21202] exfat: Deprecated parameter 'namecase' [ 1737.457844][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1737.463814][T21202] exfat: Deprecated parameter 'utf8' [ 1737.476429][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1737.485910][T21202] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 1737.516393][T21167] device veth0_vlan entered promiscuous mode [ 1737.529365][T21167] device veth1_macvtap entered promiscuous mode [ 1737.567715][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1737.581386][T21200] loop3: detected capacity change from 0 to 1024 [ 1737.582886][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1737.602007][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1737.608761][T21200] ext4: Unknown parameter 'fsuuid' [ 1737.616989][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1737.625230][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1738.255563][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1738.278416][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1740.630093][T20854] device veth1_macvtap left promiscuous mode [ 1740.682989][T20854] device veth0_vlan left promiscuous mode [ 1741.879238][T21244] loop1: detected capacity change from 0 to 1024 [ 1741.910291][T21244] ext4: Unknown parameter 'fsuuid' [ 1741.994111][T21093] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1742.015218][T21252] tipc: Enabling of bearer rejected, already enabled [ 1742.147931][T21256] loop0: detected capacity change from 0 to 512 [ 1742.163409][T21256] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1742.222047][T20854] ================================================================== [ 1742.230143][T20854] BUG: KASAN: use-after-free in tcp_metrics_flush_all+0xd3/0x210 [ 1742.237961][T20854] Read of size 4 at addr ffff88810ac0a38c by task kworker/u4:2/20854 [ 1742.246019][T20854] [ 1742.248336][T20854] CPU: 0 PID: 20854 Comm: kworker/u4:2 Tainted: G W 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 1742.259868][T20854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1742.269922][T20854] Workqueue: netns cleanup_net [ 1742.274690][T20854] Call Trace: [ 1742.277959][T20854] [ 1742.280882][T20854] __dump_stack+0x21/0x24 [ 1742.285285][T20854] dump_stack_lvl+0xee/0x150 [ 1742.289871][T20854] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1742.294892][T20854] ? __cfi__printk+0x8/0x8 [ 1742.299441][T20854] ? tcp_metrics_flush_all+0xd3/0x210 [ 1742.304810][T20854] ? tcp_metrics_flush_all+0xd3/0x210 [ 1742.310173][T20854] print_address_description+0x71/0x210 [ 1742.315718][T20854] print_report+0x4a/0x60 [ 1742.320057][T20854] kasan_report+0x122/0x150 [ 1742.324555][T20854] ? tcp_metrics_flush_all+0xd3/0x210 [ 1742.329923][T20854] kasan_check_range+0x280/0x290 [ 1742.334855][T20854] __kasan_check_read+0x11/0x20 [ 1742.339704][T20854] tcp_metrics_flush_all+0xd3/0x210 [ 1742.344895][T20854] ? __cfi_tcp_net_metrics_exit_batch+0x10/0x10 [ 1742.351140][T20854] tcp_net_metrics_exit_batch+0x10/0x20 [ 1742.356680][T20854] cleanup_net+0x62d/0xb00 [ 1742.361094][T20854] ? __cfi_cleanup_net+0x10/0x10 [ 1742.366026][T20854] process_one_work+0x71f/0xc40 [ 1742.370870][T20854] worker_thread+0xa29/0x11f0 [ 1742.375538][T20854] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 1742.381001][T20854] ? __kthread_parkme+0x142/0x180 [ 1742.386022][T20854] kthread+0x281/0x320 [ 1742.390082][T20854] ? __cfi_worker_thread+0x10/0x10 [ 1742.395185][T20854] ? __cfi_kthread+0x10/0x10 [ 1742.399766][T20854] ret_from_fork+0x1f/0x30 [ 1742.404185][T20854] [ 1742.407204][T20854] [ 1742.409520][T20854] Allocated by task 11376: [ 1742.413918][T20854] kasan_set_track+0x4b/0x70 [ 1742.418498][T20854] kasan_save_alloc_info+0x25/0x30 [ 1742.423602][T20854] __kasan_slab_alloc+0x72/0x80 [ 1742.428448][T20854] slab_post_alloc_hook+0x4f/0x2d0 [ 1742.433551][T20854] kmem_cache_alloc+0x16e/0x330 [ 1742.438391][T20854] copy_net_ns+0x145/0x5c0 [ 1742.442804][T20854] create_new_namespaces+0x3a2/0x660 [ 1742.448081][T20854] unshare_nsproxy_namespaces+0x120/0x170 [ 1742.453793][T20854] ksys_unshare+0x4ac/0x7b0 [ 1742.458289][T20854] __x64_sys_unshare+0x38/0x40 [ 1742.463048][T20854] x64_sys_call+0x767/0x9a0 [ 1742.467541][T20854] do_syscall_64+0x4c/0xa0 [ 1742.471947][T20854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1742.477851][T20854] [ 1742.480161][T20854] Last potentially related work creation: [ 1742.485859][T20854] kasan_save_stack+0x3a/0x60 [ 1742.490528][T20854] __kasan_record_aux_stack+0xb6/0xc0 [ 1742.495897][T20854] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1742.501696][T20854] insert_work+0x51/0x300 [ 1742.506024][T20854] __queue_work+0x9b1/0xd30 [ 1742.510517][T20854] delayed_work_timer_fn+0x61/0x80 [ 1742.515621][T20854] call_timer_fn+0x46/0x2a0 [ 1742.520128][T20854] __run_timers+0x667/0x9a0 [ 1742.524628][T20854] run_timer_softirq+0xb8/0xf0 [ 1742.529379][T20854] handle_softirqs+0x1d7/0x600 [ 1742.534132][T20854] __irq_exit_rcu+0x52/0xf0 [ 1742.538623][T20854] irq_exit_rcu+0x9/0x10 [ 1742.542852][T20854] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1742.548474][T20854] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1742.554445][T20854] [ 1742.556757][T20854] Second to last potentially related work creation: [ 1742.563321][T20854] kasan_save_stack+0x3a/0x60 [ 1742.567988][T20854] __kasan_record_aux_stack+0xb6/0xc0 [ 1742.573354][T20854] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1742.579152][T20854] insert_work+0x51/0x300 [ 1742.583478][T20854] __queue_work+0x9b1/0xd30 [ 1742.587972][T20854] delayed_work_timer_fn+0x61/0x80 [ 1742.593073][T20854] call_timer_fn+0x46/0x2a0 [ 1742.597567][T20854] __run_timers+0x667/0x9a0 [ 1742.602071][T20854] run_timer_softirq+0xb8/0xf0 [ 1742.606825][T20854] handle_softirqs+0x1d7/0x600 [ 1742.611579][T20854] __irq_exit_rcu+0x52/0xf0 [ 1742.616073][T20854] irq_exit_rcu+0x9/0x10 [ 1742.620308][T20854] sysvec_call_function_single+0xa6/0xc0 [ 1742.625941][T20854] asm_sysvec_call_function_single+0x1b/0x20 [ 1742.631912][T20854] [ 1742.634238][T20854] The buggy address belongs to the object at ffff88810ac0a300 [ 1742.634238][T20854] which belongs to the cache net_namespace of size 4224 [ 1742.648542][T20854] The buggy address is located 140 bytes inside of [ 1742.648542][T20854] 4224-byte region [ffff88810ac0a300, ffff88810ac0b380) [ 1742.661898][T20854] [ 1742.664214][T20854] The buggy address belongs to the physical page: [ 1742.670616][T20854] page:ffffea00042b0200 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88810ac0a300 pfn:0x10ac08 [ 1742.682162][T20854] head:ffffea00042b0200 order:3 compound_mapcount:0 compound_pincount:0 [ 1742.690477][T20854] flags: 0x4000000000010200(slab|head|zone=1) [ 1742.696568][T20854] raw: 4000000000010200 0000000000000000 dead000000000001 ffff8881002ac900 [ 1742.705143][T20854] raw: ffff88810ac0a300 0000000080070003 00000001ffffffff 0000000000000000 [ 1742.713711][T20854] page dumped because: kasan: bad access detected [ 1742.720108][T20854] page_owner tracks the page as allocated [ 1742.725814][T20854] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 283, tgid 283 (syz-executor), ts 19507361080, free_ts 19505435414 [ 1742.747012][T20854] post_alloc_hook+0x1f5/0x210 [ 1742.751884][T20854] prep_new_page+0x1c/0x110 [ 1742.756406][T20854] get_page_from_freelist+0x2c7b/0x2cf0 [ 1742.761952][T20854] __alloc_pages+0x19e/0x3a0 [ 1742.766538][T20854] alloc_slab_page+0x6e/0xf0 [ 1742.771129][T20854] new_slab+0x98/0x3d0 [ 1742.775198][T20854] ___slab_alloc+0x6f6/0xb50 [ 1742.779789][T20854] __slab_alloc+0x5e/0xa0 [ 1742.784112][T20854] kmem_cache_alloc+0x1b0/0x330 [ 1742.788957][T20854] copy_net_ns+0x145/0x5c0 [ 1742.793366][T20854] create_new_namespaces+0x3a2/0x660 [ 1742.798647][T20854] unshare_nsproxy_namespaces+0x120/0x170 [ 1742.804369][T20854] ksys_unshare+0x4ac/0x7b0 [ 1742.808871][T20854] __x64_sys_unshare+0x38/0x40 [ 1742.813629][T20854] x64_sys_call+0x767/0x9a0 [ 1742.818130][T20854] do_syscall_64+0x4c/0xa0 [ 1742.822540][T20854] page last free stack trace: [ 1742.827201][T20854] free_unref_page_prepare+0x742/0x750 [ 1742.832663][T20854] free_unref_page+0x8f/0x530 [ 1742.837336][T20854] __free_pages+0x67/0x100 [ 1742.841744][T20854] __free_slab+0xca/0x1a0 [ 1742.846077][T20854] __unfreeze_partials+0x160/0x190 [ 1742.851186][T20854] put_cpu_partial+0xa9/0x100 [ 1742.855866][T20854] __slab_free+0x1c4/0x280 [ 1742.860280][T20854] ___cache_free+0xbf/0xd0 [ 1742.864686][T20854] qlist_free_all+0xc6/0x140 [ 1742.869269][T20854] kasan_quarantine_reduce+0x14a/0x170 [ 1742.874731][T20854] __kasan_slab_alloc+0x24/0x80 [ 1742.879582][T20854] slab_post_alloc_hook+0x4f/0x2d0 [ 1742.884700][T20854] kmem_cache_alloc+0x16e/0x330 [ 1742.889555][T20854] getname_flags+0xb9/0x500 [ 1742.894144][T20854] getname+0x19/0x20 [ 1742.898048][T20854] do_sys_openat2+0xcb/0x7e0 [ 1742.902717][T20854] [ 1742.905033][T20854] Memory state around the buggy address: [ 1742.910652][T20854] ffff88810ac0a280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1742.918714][T20854] ffff88810ac0a300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1742.926775][T20854] >ffff88810ac0a380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1742.934830][T20854] ^ [ 1742.939157][T20854] ffff88810ac0a400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1742.947223][T20854] ffff88810ac0a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1742.955365][T20854] ================================================================== [ 1742.963476][T20854] Disabling lock debugging due to kernel taint [ 1742.988090][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1742.988103][ T28] audit: type=1400 audit(2000000636.540:3626): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1743.016492][T21256] EXT4-fs error (device loop0): __ext4_iget:5078: inode #11: block 1: comm syz.0.6260: invalid block [ 1743.027633][T21256] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.6260: couldn't read orphan inode 11 (err -117) [ 1743.040912][T21256] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1743.079512][ T28] audit: type=1400 audit(2000000636.540:3627): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1743.136804][T21260] tipc: Enabling of bearer rejected, failed to enable media [ 1743.196934][ T28] audit: type=1400 audit(2000000636.540:3628): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1743.310290][ T28] audit: type=1400 audit(2000000636.540:3629): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1743.332730][T20647] EXT4-fs (loop0): unmounting filesystem. [ 1743.382460][ T28] audit: type=1400 audit(2000000636.540:3630): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1743.425519][ T28] audit: type=1400 audit(2000000636.540:3631): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1743.479165][ T28] audit: type=1400 audit(2000000636.540:3632): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1743.501867][ T28] audit: type=1326 audit(2000000636.850:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21249 comm="syz.5.6259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7112b8e929 code=0x7fc00000