last executing test programs: 55.865697892s ago: executing program 3 (id=7934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x80}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) times(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x44801) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 54.921974376s ago: executing program 3 (id=7938): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) syz_mount_image$exfat(&(0x7f0000002000), &(0x7f0000005840)='./file1\x00', 0x1000806, &(0x7f00000016c0)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYBLOB="2c666d61736b3d30303030b8463c983030303030303030303030303030362c696f6368617273652acf418b743d637e3737352c6769643d00", @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000027,errors=continue,errors=remount-ro,namecase=1,fmask=00000000000000000000003,umask=00000000000000000000003,allow_utime=00000000000000000000200,\x00'], 0x9, 0x1505, &(0x7f0000000180)="$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") mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000000880)=""/4092}, 0x3d) 49.743356495s ago: executing program 3 (id=7940): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000040)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) iopl(0x3) rt_sigsuspend(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x1de0, &(0x7f0000000440)) io_uring_register$IORING_REGISTER_FILES2(r3, 0x8, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) gettid() write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30}, 0x30) 49.075148555s ago: executing program 3 (id=7946): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x3, 0xba6, &(0x7f0000000c00)="$eJzs3M1rXFUUAPDzXj7bRicVEeumEZEWxGlaSbFFsJWKGxeCboWGdFJCph8kkZo0i4n+A6KuBTeCWpQu7LobBbdutG4tLoQisVEQ0cibjyQ2M0naTvJq8vvBzbt3zpvcc/KYeffCTALYsQayH2nEvog4nUQU6o+nEdFd7fVGVGrnLczPjvwxPzuSxOLi678mkUTE7fnZkcbvSurHPfVBb0R891ISj7y7et7J6Znx4XK5NFEfH5o6d/HQ5PTMs2Pnhs+WzpbOHz76/NCRoaODx4baVuufP5249vuTr/xc+euzv6/89sEnSZyIvnpsZR3tMhADS3+TlTojYrjdk+Wko17PyjqTznWelG5yUgAAtJSuWMM9FoXoiOXFWyG+/j7X5AAAAIC2WOyIWAQAAAC2ucT+HwAAALa5xucAbs/PjjRavp9I2Fq3TkZEf63+hXqrRTqjUj32RldE7L6dxMqvtSa1p923gYi4+eOxL7MWm/Q95LVU5iLi8WbXP6nW31/9Fvfq+tOIGGzD/AN3jP9P9Z9ow/x51w/AznT9ZO1Gtvr+ly6tf6LJ/a+zyb3rXuR9/2us/xZWrf+W6+9osf57bYNzXP70o0utYln9L1x7+YtGy+bPjvdV1F24NRfxRGez+pOl+pMW9Z/e4ByFfy6VWsXyrn/x44gD0bz+hmTt/090aHSsXBqs/Ww6x9y3Q5+3mj/v+rPrv7tF/etd/4sbnOPNU6eutoqtX3/6S3fyRrXXXX/k7eGpqYnDEd3Jq6sfP7J2Lo1zGr8jq//gU2u//pvVn70nVOp/h2wvMFc/ZuN37pjzxSuXv1qr/mzvl+f1P3OP1/+9Dc7x9DfvH2wVW7n/zVo2/82kthcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIY0IvoiSYtL/TQtFiP2RMSjsTstX5icemb0wlvnz2SxiP7oSkfHyqXBiCjUxkk2PlztL4+P3DF+LiL2RsSHhV3VcXHkQvlM3sUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwZE9E9EWSFiMijYiFQpoWi3lnBQAAALRdf94JAAAAAJvO/h8AAAC2P/t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANtne/ddvJBFROb6r2jLd9VhXrpkBmy3NOwEgNx15JwDkpjPvBIDc3OUe33IBtqFknXhvy0hP23MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MF1YN/1G0lEVI7vqrZMdz3W1fQZ+7cwO2AzpXknAOSmY61g59blAWw9L3HYuZrv8YGdJFkn3rt8TuW/kZ5NywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB09ftSVpMSLSaj9Ni8WIhyKiP7qS0bFyaTAiHo6IHwpdPdm4J++kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvJ6Znx4XK5NKGjo5NvJ3kw0qh18n5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD5PTM+PD5XJpYjLvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC8TU7PjA+Xy6WJDXSu3s3JKzp51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DQAA//+LYA3r") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 48.232623468s ago: executing program 3 (id=7948): sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000300)=0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000580)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) 44.124778871s ago: executing program 3 (id=7953): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f00000046c0)=@newtaction={0x48, 0x58, 0x284f, 0x0, 0x0, {}, [{0xe, 0x1, [@m_simple={0x30, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x48}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r7, &(0x7f00000016c0)=[{{&(0x7f0000000f80), 0x6e, &(0x7f0000001300)=[{&(0x7f0000001000)=""/129, 0x81}, {&(0x7f00000010c0)=""/179, 0xb3}, {&(0x7f0000001180)=""/37, 0x25}, {&(0x7f00000011c0)=""/214, 0xd6}, {&(0x7f00000012c0)=""/63, 0x3f}], 0x5, &(0x7f0000001380)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000001400)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001480)}, {&(0x7f00000014c0)=""/216, 0xd8}], 0x2, &(0x7f0000001600)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}}], 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@nobh}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") 28.786244353s ago: executing program 32 (id=7953): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f00000046c0)=@newtaction={0x48, 0x58, 0x284f, 0x0, 0x0, {}, [{0xe, 0x1, [@m_simple={0x30, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x48}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r7, &(0x7f00000016c0)=[{{&(0x7f0000000f80), 0x6e, &(0x7f0000001300)=[{&(0x7f0000001000)=""/129, 0x81}, {&(0x7f00000010c0)=""/179, 0xb3}, {&(0x7f0000001180)=""/37, 0x25}, {&(0x7f00000011c0)=""/214, 0xd6}, {&(0x7f00000012c0)=""/63, 0x3f}], 0x5, &(0x7f0000001380)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000001400)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001480)}, {&(0x7f00000014c0)=""/216, 0xd8}], 0x2, &(0x7f0000001600)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}}], 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@nobh}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") 19.72432795s ago: executing program 5 (id=7972): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 17.237241109s ago: executing program 0 (id=7994): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000000)=0x808b, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x5}, 0x48) connect$pppl2tp(r5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 16.881095484s ago: executing program 5 (id=7995): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xc4) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x17, 0x5, 0x2, 0x4, 0x85}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000040)=""/46, 0x2e) mmap(&(0x7f0000209000/0x3000)=nil, 0x3000, 0xf, 0x4008032, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x10e) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000380)={0x1, 0x0, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 15.292306138s ago: executing program 0 (id=7997): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00 \x00~\x00\x00\x00'], 0x14}}, 0x4000054) 14.199116405s ago: executing program 0 (id=8001): syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sync() unshare(0x64000600) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) 13.365627877s ago: executing program 1 (id=8003): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xf3a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 12.50223994s ago: executing program 1 (id=8006): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 12.5018051s ago: executing program 4 (id=8007): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 12.367776762s ago: executing program 5 (id=8008): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='cachefiles_ondemand_open\x00', r4}, 0x18) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0x4, 0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x10}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc004884}, 0x0) 10.324148603s ago: executing program 2 (id=8009): mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950"], 0x15) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c084, &(0x7f0000000540)={[{@i_version}, {@data_journal}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobh}, {@dioread_nolock}, {@test_dummy_encryption}], [{@dont_appraise}]}, 0xfd, 0x43d, &(0x7f0000000900)="$eJzs281vG0UbAPBn7SR9+/FSU5WPpgUCBRHxkTRpKT1wAYHEASQkOJRjSNIq1G1QEyRaRRAQKkdUiTviiMRfwAkuCDghcYU7qlShXFrgYrTZ3cR27LQOTlzw7ydtMrM7zszj3bFnZ7IB9K2R9EcSsS8ifomI/Vm2scBI9uvmytL0HytL00nUaq//nqyWu7GyNF0ULV63t8gMRJQ+TuJwi3oXLl0+N1Wtzl7M8+OL598ZX7h0+em581NnZ8/OXpg8derE8YlnT04+05U407huDL8/f+TQy29efXX69NW3fvgqKeJviqNLRjY7+Fit1uXqeuv/delkoIcNoSPlrJvG4Gr/3x/lWD95++Olj3raOGBb1Wq12r3tDy/XgP+wJHrdAqA3ii/69P632HZo6HFHuP58dgOUxn0z37IjA1HKyww23d9200hEnF7+8/N0i+2ZhwAAaPBNOv55Kh//NSz8lKJ+XuiufA2lEhF3R8SBiDgZEQcj4p6I1bL3RcT9HdbfvEiycfxTutbhn+xIOv57Ll/bahz/FaO/qJQj/iqGy5UYTM7MVWeP5e/JaAzuSvMTm9Tx7Ys/f9ruWP34L93S+ouxYN6OawO7Gl8zM7U49U9irnf9w4jhgVbxJ2srAellcSgihrdYx9wTXx5pd+zW8Tcaqs90YZ2p9kXE49n5X46m+AvJ5uuT4/+L6uyx8eKq2OjHn6681q7+TuPvtvT872l5/a/FX0nq12sXOq/jyq+ftL2n2er1P5S80bDvvanFxYsTEUPJK1mj6/dPNpWbXC+fxj96tHX/PxDr78ThiEgv4gci4sGIeChv+8MR8UhEHN0k/u9fePTtxj1JB/FvrzT+mY7O/3piKJr3tE6Uz333dUOllegg/vT8n1hNjeZ7bufz73batbWrGQAAAP59ShGxL5LS2Fq6VBoby/6H/2DsKVXnFxafPDP/7oWZ7BmBSgyWipmubD44mw+dyG/ri/xkU/54Pm/8WXn3an5ser460+vgoc/tbdP/U7+Ve906YNt5Xgv6l/4P/Uv/h/6l/0P/atH/d/eiHcDOa/X9/0EP2gHsvKb+b9kP+oj7f+hf+j/0L/0f+tLC7rj1Q/ISEhsSUbojmiGxTYlefzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0x98BAAD///1B6is=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 10.314984054s ago: executing program 4 (id=8010): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000480), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000200)=0x9, 0x4) accept4(r3, 0x0, 0x0, 0x0) 8.465124372s ago: executing program 1 (id=8011): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) syz_mount_image$exfat(&(0x7f0000002000), &(0x7f0000005840)='./file1\x00', 0x1000806, &(0x7f00000016c0)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYBLOB="2c666d61736b3d30303030b8463c983030303030303030303030303030362c696f6368617273652acf418b743d637e3737352c6769643d00", @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000027,errors=continue,errors=remount-ro,namecase=1,fmask=00000000000000000000003,umask=00000000000000000000003,allow_utime=00000000000000000000200,\x00'], 0x9, 0x1505, &(0x7f0000000180)="$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") mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000000880)=""/4092}, 0x3d) 8.462617232s ago: executing program 2 (id=8012): r0 = socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) 8.428334342s ago: executing program 4 (id=8013): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) sendfile(r2, r1, 0x0, 0x200040100000000) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmsg$unix(r5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r6}, 0x10) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x8) 8.418239232s ago: executing program 0 (id=8014): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800"], 0xa8}}, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x0, 0xbdff, 0x0, "fdffffffffffffff"}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000200)=@v1={0x0, @aes128, 0x10, @desc4}) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[], 0xfffffeb7) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x90, 0x1b, "00bf46f8bbde7047bcd4a280000400"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) dup3(r5, r6, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x10100, 0x0) 8.364218843s ago: executing program 5 (id=8015): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x8, {0x8, 0xa, "a7ea3163fd3b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x7}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) poll(0x0, 0x0, 0x5) openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/cpuinfo\x00', 0x0, 0x0) socket(0x10, 0x3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x80) 6.038312708s ago: executing program 1 (id=8016): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x306, @multicast}, 0x1c, {0x2, 0x4e21, @multicast2}, 'veth0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='\x00', 0x0) 5.26567986s ago: executing program 5 (id=8017): socket$packet(0x11, 0x3, 0x300) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000300)={[{@nogrpid}, {@jqfmt_vfsv0}, {@test_dummy_encryption}, {@usrquota}, {@nobarrier}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)=',$:@^@,\x00', r1) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='?', 0x1, r1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lseek(0xffffffffffffffff, 0xffffff7f, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) io_uring_setup(0x38d8, &(0x7f0000001ec0)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r5}) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe04], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 5.138793072s ago: executing program 2 (id=8018): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="240100001800090400000000000000000a000000000000000000000008001e0001000000"], 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x80, 0x2, 0x3, 0x80000000}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000000000000000180100", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x18) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x40, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6bd1}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x192}}, 0x20}}, 0x0) 5.109273692s ago: executing program 4 (id=8019): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)={0x0, r0}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x23) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x1100020, &(0x7f0000000680)={[{@mode={'mode', 0x3d, 0x4000000000001}}, {}]}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) capset(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) 4.964402305s ago: executing program 0 (id=8020): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f0000000580)={[], 0xf000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') lseek(r4, 0x10004, 0x0) getdents(r4, 0x0, 0x48) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) r6 = socket(0x11, 0x3, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x78, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7ff}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ff}]}, @ETHTOOL_A_LINKMODES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x8}, 0x44000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008}, 0x80) 4.164901747s ago: executing program 1 (id=8021): syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x9, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x400, 0xffffffff, 0x1, 0x0, 0x10000}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x13, 0x3, 0x14, 0x0, 0xffffca21}}}]}, 0x78}}, 0x20000010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000980)=ANY=[@ANYBLOB="757466383d312c696f636861727365743d6b6f69382d722c756f695f786c6174653d302c696f636861727365743d757466382c757466383d3067e695c1cd8580386e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c636865636b3d72656c617865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c616c6c6f775f7574696d653d30303030303030303030303030303030303030303737372c00"], 0x1, 0x363, &(0x7f0000000280)="$eJzs3U1oY1UbAOA3vWnSGfi+dicKQnQnaJnOTje2SAcGu1EJ/izE4HRUkiq0WGwX09aF4lJwqSt3CrpwIS5FUMSdC7eOIKPiQmc34OCR5OYmt0naaQerFJ8Hmpy+57znnPtDcntJTp9bjPal6bh8/fq1mJmpRHXxkcW4UYm5yKKwG+NqE2IAwOlwI6X4PeWOmFI54SkBACes9/7/QkQ0Yi6PvP7lYe2Td38AOPX6f/+fOazNzEEVr5zIlACAEzZ2///efdW13k+1+LVa+lQAAHBaPfH0M48urUQ83mjMRKy9udncbMZDw/qly/FSdGI1zsVs3IzILxS6D5Xe44WLK8vnGo3GTvw0F82ImOonNvMrhaWsl1+PhZiNuX5+/2ojpZRd+GRleaHRExG7O73xY62y2ZyOs/3xvz8bq8MLj6KT3lPExZXl841+B821In8nYm9436I7//mYjW+fH3STUvEJxpXlKwvFpIf5m816XBrshQPvgAAAAAAAAAAAAAAAAAAAAAAAwG2ZbwzMDdbPSd3nfKWc+fkJ9b31cfL8/vpAe/n6QKmeIqXfXnug+VYW+9YHGl2fZ9NCggAAAAAAAAAAAAAAAAAAADCwsVWLVqezur6xtd0uF3bWN7amIqIbefnrj744E+NtblGo5kPUIwZDNPrDbrdbKSsapyxiPD3rDl5EPvh0MONym/pgKyZOo35wVafzv3t+fHcYuTsrev5z2CaLyRuYlabx8EjPa//Pp3ScHTUonC9H6uOjX00plSJvlNOvPDveYVQiqsc/cNvtqTi4TeoWvrr24p3F3m99nnL33T/75NV33v+l3ep0R47eEaytb9xM7ValaHy83dLd1UWkEnmhUj4Tqoel7+2PtLLvfn3qrre/OdroqRx5tXs+j7TJ8s35eDS9lhe60xypOjNMn+5vRGd1esLJf6vCbRzTO9777MOUfvj5yEMMTY29bFT+nlcfAAAAAAAAAAAAAAAAAACgrPRd8b7+l32nD8t68LGTnxkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/HOG//+/VNjbjZHIUQp/7EzIqq+ub0TU/u3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+6vAAAA///tLFqQ") socket$nl_route(0x10, 0x3, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) move_mount(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', r7, &(0x7f0000000180)='./file0\x00', 0x154) 3.149958012s ago: executing program 4 (id=8022): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x2a}, 0x28) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 3.143729362s ago: executing program 2 (id=8023): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 531.796142ms ago: executing program 5 (id=8024): mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950"], 0x15) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c084, &(0x7f0000000540)={[{@i_version}, {@data_journal}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobh}, {@dioread_nolock}, {@test_dummy_encryption}], [{@dont_appraise}]}, 0xfd, 0x43d, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 525.024432ms ago: executing program 1 (id=8034): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) sendfile(r2, r1, 0x0, 0x100000000) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) openat$uinput(0xffffffffffffff9c, &(0x7f0000000900), 0x802, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10) 520.777472ms ago: executing program 4 (id=8025): syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sync() unshare(0x64000600) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) 511.197762ms ago: executing program 0 (id=8026): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000380), 0xde, 0x529, &(0x7f00000008c0)="$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") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[], 0x1b4}}, 0x80084) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pselect6(0x2a, 0x0, 0x0, &(0x7f0000000400)={0x1, 0x5, 0xffffffff, 0x30000, 0x80000001, 0x8, 0x4, 0x5e5e}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x4dd]}, 0x8}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000685000/0x2000)=nil, 0x2000, 0x8, 0x13, 0xffffffffffffffff, 0x47ac2000) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000100)=@keyring={'key_or_keyring:', r6}) add_key$keyring(&(0x7f0000000600), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, r5) 355.758425ms ago: executing program 2 (id=8027): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 0s ago: executing program 2 (id=8028): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x80}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) times(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x44801) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): becomes ready [ 1953.466673][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth20: link becomes ready [ 1953.483341][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth22: link becomes ready [ 1953.499173][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1953.514794][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1953.568734][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1953.577191][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1953.585967][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1953.594482][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1953.603303][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1953.611632][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1953.620042][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1953.628345][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1953.638299][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1953.646481][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1953.654926][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1953.663442][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1953.672521][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1953.681013][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1953.689603][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1953.697692][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1953.706206][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1953.714339][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1953.722677][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1953.731313][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1953.741285][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1953.749529][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1953.757524][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1953.765235][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1953.772961][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1953.780642][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge5: link becomes ready [ 1953.788528][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 1953.796108][ T1078] bridge5: port 2(veth5) entered blocking state [ 1953.802379][ T1078] bridge5: port 2(veth5) entered forwarding state [ 1953.809207][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1953.816754][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 1953.824612][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1953.832342][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 1953.842809][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 1953.852501][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 1953.884391][T26944] xt_hashlimit: size too large, truncated to 1048576 [ 1954.079503][T26947] 9pnet_fd: Insufficient options for proto=fd [ 1954.289886][T26945] device bridge0 entered promiscuous mode [ 1954.296068][T26945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1954.669446][T26960] fuse: Bad value for 'fd' [ 1957.236762][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 1957.236780][ T28] audit: type=1326 audit(2000002224.021:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26961 comm="syz.3.7471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbfb8e929 code=0x7fc00000 [ 1958.852377][T27017] 9pnet_fd: Insufficient options for proto=fd [ 1960.095791][T27024] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 1960.110542][T27025] 9pnet_fd: Insufficient options for proto=fd [ 1962.199999][T27048] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7494'. [ 1962.211776][T27048] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7494'. [ 1963.158169][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1965.671121][T27087] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 1967.026972][T27103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7504'. [ 1967.040528][T27103] bridge0: port 2(macsec1) entered blocking state [ 1967.047010][T27103] bridge0: port 2(macsec1) entered disabled state [ 1967.638108][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1968.928113][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1969.080397][T27121] overlayfs: failed to clone upperpath [ 1969.614370][ T28] audit: type=1400 audit(2000002237.051:2478): avc: denied { mount } for pid=27108 comm="syz.1.7511" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1970.319362][T27131] overlayfs: failed to clone lowerpath [ 1970.329372][T27132] overlayfs: failed to clone upperpath [ 1970.520571][T27138] futex_wake_op: syz.0.7516 tries to shift op by -1; fix this program [ 1970.876355][T27148] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 1971.847410][ T28] audit: type=1400 audit(2000002239.811:2479): avc: denied { read } for pid=27139 comm="syz.3.7517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1972.457734][T27172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7523'. [ 1972.468371][T27172] device bridge0 entered promiscuous mode [ 1972.474493][T27172] bridge0: port 1(macsec0) entered blocking state [ 1972.480944][T27172] bridge0: port 1(macsec0) entered disabled state [ 1972.489910][T27172] device bridge0 left promiscuous mode [ 1974.806088][T27200] overlayfs: failed to clone lowerpath [ 1975.803584][T27194] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1978.862461][T27239] netlink: 'syz.1.7539': attribute type 9 has an invalid length. [ 1978.870290][T27239] netlink: 'syz.1.7539': attribute type 6 has an invalid length. [ 1979.270574][T27252] netlink: 'syz.1.7542': attribute type 27 has an invalid length. [ 1979.288581][T27252] tipc: Resetting bearer [ 1980.379415][T27251] netlink: 'syz.4.7543': attribute type 27 has an invalid length. [ 1980.641145][T27251] bridge5: port 2(veth5) entered disabled state [ 1980.647483][T27251] bridge5: port 1(ip6gretap1) entered disabled state [ 1981.689574][T27261] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1981.706527][T27261] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1981.714159][T27261] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1981.721727][T27261] IPv6: ADDRCONF(NETDEV_CHANGE): 00ªX¹¦Dö»: link becomes ready [ 1981.729792][T27261] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1981.737466][T27261] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1981.745304][T27261] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1981.755937][T27261] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1981.795799][T27261] device veth0_vlan left promiscuous mode [ 1981.808681][T27261] device veth0_vlan entered promiscuous mode [ 1981.820784][T27261] bridge5: port 1(ip6gretap1) entered blocking state [ 1981.827510][T27261] bridge5: port 1(ip6gretap1) entered forwarding state [ 1981.836802][T27261] bridge5: port 2(veth5) entered blocking state [ 1981.843113][T27261] bridge5: port 2(veth5) entered forwarding state [ 1981.934906][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1981.942700][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1981.958318][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1981.966934][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1981.975506][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1981.984118][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1982.119683][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1982.131411][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1982.143678][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1982.155529][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1982.167348][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1982.179434][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1982.188513][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1982.196231][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge5: link becomes ready [ 1982.204354][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1982.214423][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1982.222675][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 1982.230737][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 1982.238685][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 1982.246510][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 1982.254445][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 1982.262389][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth18: link becomes ready [ 1982.270258][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth20: link becomes ready [ 1982.278218][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth22: link becomes ready [ 1982.286225][T27273] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1982.295652][T27273] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1982.313623][T27273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1982.351392][T25819] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1982.364198][T25819] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1982.371824][T25819] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1982.428136][T25819] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1982.553535][T27284] netlink: 'syz.0.7559': attribute type 27 has an invalid length. [ 1983.294297][ T60] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1983.564616][ T60] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1983.619863][T27284] device bridge0 left promiscuous mode [ 1983.650809][T27283] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1983.681239][T27283] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1983.696001][T27283] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1983.712807][T27283] device veth0_vlan left promiscuous mode [ 1983.719507][T27283] device veth0_vlan entered promiscuous mode [ 1984.407316][T27283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1984.528090][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1984.611915][T25819] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1984.652404][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1984.730112][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1984.748226][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1984.772611][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1984.789249][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1984.807769][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1984.825215][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1984.841740][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1984.859315][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1984.875816][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1984.893432][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1984.910953][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1984.943005][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1984.960743][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1984.978089][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1984.994884][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1985.013640][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1985.022102][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1985.030850][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1985.039455][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1985.047738][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1985.055975][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1985.063808][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1985.071561][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1985.079414][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1985.087038][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 1985.094900][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1985.102664][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 1985.110487][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1985.118423][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 1985.136817][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 1985.145540][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 1985.155800][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 1985.170838][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 1985.186855][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 1985.202875][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 1985.218981][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 1985.234990][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth17: link becomes ready [ 1985.248311][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 1985.255982][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth19: link becomes ready [ 1985.263757][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth18: link becomes ready [ 1985.278341][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth21: link becomes ready [ 1985.288318][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth20: link becomes ready [ 1985.300330][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth23: link becomes ready [ 1985.308367][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth22: link becomes ready [ 1985.316310][T27306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7553'. [ 1985.331060][T25819] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1985.382816][T27314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge16: link becomes ready [ 1985.402128][T27317] netlink: 'syz.3.7557': attribute type 27 has an invalid length. [ 1985.533559][T27327] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27327 comm=syz.0.7560 [ 1985.559690][T27321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7560'. [ 1986.143320][ T60] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1986.583620][T27337] incfs: Backing dir is not set, filesystem can't be mounted. [ 1986.849663][T27337] incfs: mount failed -2 [ 1989.958301][ C0] ip6_tnl_xmit_ctl: 13 callbacks suppressed [ 1989.958323][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1990.278038][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1990.367927][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1992.869337][T27371] overlayfs: failed to clone upperpath [ 1994.992147][T27391] 9pnet_fd: Insufficient options for proto=fd [ 1997.718014][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1998.358039][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1998.366658][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1999.861853][ T28] audit: type=1400 audit(2000002267.111:2480): avc: denied { create } for pid=27406 comm="syz.3.7582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 2000.232708][T27422] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7585'. [ 2000.242304][T27422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7585'. [ 2004.352655][T27452] 9pnet_fd: Insufficient options for proto=fd [ 2004.410144][T27461] overlayfs: missing 'lowerdir' [ 2006.733345][T27483] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2006.744140][T27483] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2010.445905][T27516] 9pnet_fd: Insufficient options for proto=fd [ 2012.371648][T27529] xt_hashlimit: size too large, truncated to 1048576 [ 2012.437987][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2012.491346][T27534] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 2012.518713][ T28] audit: type=1400 audit(2000002280.471:2481): avc: denied { relabelto } for pid=27523 comm="syz.0.7611" name="" dev="pipefs" ino=14742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 2013.717913][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2014.998118][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2016.998228][T27562] overlayfs: failed to clone lowerpath [ 2017.950415][ T28] audit: type=1400 audit(2000002285.921:2482): avc: denied { create } for pid=27564 comm="syz.3.7620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 2017.971553][T27573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7621'. [ 2018.391390][T27576] 9pnet_fd: Insufficient options for proto=fd [ 2019.957149][T27593] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7624'. [ 2020.570122][T27607] xt_hashlimit: max too large, truncated to 1048576 [ 2021.809481][T27616] overlayfs: failed to clone upperpath [ 2024.345832][T27638] IPv6: Can't replace route, no match found [ 2026.348727][T27658] device veth39 entered promiscuous mode [ 2027.160037][T27667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7646'. [ 2027.755461][T27673] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2027.764256][T27673] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 2027.773443][T27673] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2028.898789][ T28] audit: type=1400 audit(2000002296.871:2483): avc: denied { shutdown } for pid=27679 comm="syz.3.7649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2032.600090][T27709] netlink: 'syz.0.7656': attribute type 27 has an invalid length. [ 2032.743494][T27710] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2032.759047][T27710] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2032.767562][T27710] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2032.788627][T27710] device veth0_vlan left promiscuous mode [ 2032.801631][T27710] device veth0_vlan entered promiscuous mode [ 2032.870874][T27710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2032.879887][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2032.894412][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2032.902962][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2032.911464][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2032.959115][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 2032.999220][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2033.010674][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2033.085175][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2033.105709][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2033.113972][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2033.122307][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2033.138084][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2033.148806][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2033.157181][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2033.175814][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2033.185226][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2033.198264][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2033.206403][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2033.214682][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2033.223143][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2033.231687][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2033.240235][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2033.248577][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2033.256161][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2033.263809][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 2033.271470][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 2033.279108][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 2033.286691][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 2033.294379][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 2033.302003][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 2033.309675][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 2033.317270][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 2033.324939][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 2033.332664][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 2033.340418][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 2033.348155][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 2033.355887][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 2033.363575][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 2033.371461][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth17: link becomes ready [ 2033.379178][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 2033.387157][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth19: link becomes ready [ 2033.394921][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth18: link becomes ready [ 2033.402775][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth21: link becomes ready [ 2033.410507][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth20: link becomes ready [ 2033.418251][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth23: link becomes ready [ 2033.425944][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth22: link becomes ready [ 2033.433729][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth25: link becomes ready [ 2033.441408][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth24: link becomes ready [ 2033.450870][T22320] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2033.458487][T22320] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2033.477986][T17001] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2033.518929][T27724] netlink: 'syz.1.7659': attribute type 27 has an invalid length. [ 2033.527658][T27725] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2033.555534][T27725] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2033.584389][T22320] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2033.599474][T22320] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2034.311185][T22320] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2034.319272][T17001] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2034.326876][T17001] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2034.335660][T17001] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2034.352364][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2034.360233][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2034.367801][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2034.376815][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2034.385437][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2034.393978][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2034.402607][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 2034.411593][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2034.421811][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 2034.430209][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2034.438776][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2034.447023][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2034.455533][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2034.463949][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2034.481322][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2034.489845][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2034.498414][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2034.506719][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2034.515402][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2034.526232][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2034.535666][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2034.545276][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2034.553895][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 2034.561774][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 2034.569465][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 2034.577101][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 2034.584683][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 2034.592195][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 2034.600041][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 2034.612520][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 2034.621258][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 2034.631100][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 2034.640598][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 2034.649674][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 2034.677481][T27738] overlayfs: failed to clone upperpath [ 2034.685887][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 2034.695486][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 2034.704912][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth17: link becomes ready [ 2034.714275][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 2034.724037][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth19: link becomes ready [ 2034.732912][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth18: link becomes ready [ 2034.844919][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth21: link becomes ready [ 2034.855228][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth20: link becomes ready [ 2035.921278][T27732] netlink: 'syz.3.7661': attribute type 27 has an invalid length. [ 2036.157183][T27753] syz.1.7667[27753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2036.158461][T27753] syz.1.7667[27753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2037.977518][ T60] ip6_tnl_xmit_ctl: 5 callbacks suppressed [ 2037.977536][ T60] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2038.068012][ T60] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2038.120410][T27731] device veth0_vlan left promiscuous mode [ 2038.157034][T27731] device veth0_vlan entered promiscuous mode [ 2038.197906][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2038.229063][T27731] device veth1_macvtap left promiscuous mode [ 2038.237156][T27731] device veth1_macvtap entered promiscuous mode [ 2038.336744][T27731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge16: link becomes ready [ 2038.358927][T25816] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2038.469129][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2038.481141][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2038.524627][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2038.558606][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2038.578080][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 2038.592490][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2038.602515][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 2038.623117][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2038.631622][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2038.640036][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2038.648486][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2038.656718][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2038.665294][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2038.688281][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2038.699034][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2038.707584][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2038.716276][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2038.724732][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2038.733132][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2038.742052][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2038.750502][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2038.791290][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2038.799933][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2038.808356][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2038.816395][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2038.824655][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2038.832521][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2039.011544][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2039.148349][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2039.167777][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 2039.191639][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 2039.213826][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 2039.229757][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 2039.247666][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 2039.262202][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 2039.273219][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 2039.281135][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 2039.288914][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 2039.296906][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 2039.304815][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 2039.312803][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 2039.321326][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 2039.329398][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 2039.337067][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth17: link becomes ready [ 2039.345149][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 2039.361040][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth19: link becomes ready [ 2039.369420][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth18: link becomes ready [ 2039.390782][T27769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7670'. [ 2039.563988][ T28] audit: type=1326 audit(2000002307.461:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.1.7675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2040.138758][ T28] audit: type=1326 audit(2000002307.461:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.1.7675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2040.893852][ T28] audit: type=1326 audit(2000002307.461:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.1.7675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2041.028281][ T28] audit: type=1326 audit(2000002307.461:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.1.7675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2041.052011][ T28] audit: type=1326 audit(2000002307.461:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.1.7675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2041.087869][ T28] audit: type=1326 audit(2000002307.461:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.1.7675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2041.157165][ T28] audit: type=1326 audit(2000002307.471:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.1.7675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2041.190798][T27791] netlink: 'syz.3.7678': attribute type 27 has an invalid length. [ 2041.201274][ T28] audit: type=1326 audit(2000002307.471:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.1.7675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2041.275558][ T28] audit: type=1326 audit(2000002307.471:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.1.7675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2041.314803][ T28] audit: type=1326 audit(2000002307.471:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.1.7675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2041.377209][T27793] device veth0_vlan left promiscuous mode [ 2041.398178][T27793] device veth0_vlan entered promiscuous mode [ 2041.405120][T27793] device veth1_macvtap left promiscuous mode [ 2041.448748][T27793] device veth1_macvtap entered promiscuous mode [ 2041.488948][T27793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge16: link becomes ready [ 2041.496631][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2041.517510][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2041.533325][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2041.558279][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2041.568272][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 2041.576455][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2041.585046][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 2041.593539][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2041.602030][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2041.610497][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2041.618954][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2041.627103][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2041.642232][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2041.651124][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2041.668309][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2041.676719][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2041.685662][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2041.694074][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2041.702726][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2041.711053][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2041.719530][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2041.728322][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2041.736844][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2041.758360][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2041.766422][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2041.774313][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2041.782203][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2041.795785][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2041.804836][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2041.812918][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 2041.820679][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 2041.828846][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 2041.836404][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 2041.844533][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 2041.858721][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 2041.866268][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 2041.874268][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 2041.882242][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 2041.890167][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 2041.898624][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 2041.906406][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 2042.146153][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 2042.153990][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 2042.161748][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth17: link becomes ready [ 2042.169639][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 2042.177342][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth19: link becomes ready [ 2042.185302][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth18: link becomes ready [ 2042.437989][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2046.357910][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2046.365495][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2047.408574][T27864] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2047.424019][T27864] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2051.478275][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2052.968072][T27915] overlayfs: failed to clone upperpath [ 2058.448107][T27951] fuse: Invalid rootmode [ 2062.357903][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2062.997906][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2063.862887][T27990] overlayfs: failed to clone upperpath [ 2065.899610][T28010] device bridge8 entered promiscuous mode [ 2066.006673][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 2066.006691][ T28] audit: type=1400 audit(2000002335.975:2513): avc: denied { getopt } for pid=28009 comm="syz.4.7738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2066.582761][T28015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7736'. [ 2066.592430][T28018] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 2067.435408][T28022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7739'. [ 2067.693168][T28022] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2067.702038][T28022] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 2067.711492][T28022] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2068.758121][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2070.079406][ T28] audit: type=1326 audit(2000002340.015:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28054 comm="syz.3.7748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbfb8e929 code=0x7ffc0000 [ 2071.873287][ T28] audit: type=1326 audit(2000002340.025:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28054 comm="syz.3.7748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f4cbfb8e929 code=0x7ffc0000 [ 2071.897171][ T28] audit: type=1326 audit(2000002340.025:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28054 comm="syz.3.7748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbfb8e929 code=0x7ffc0000 [ 2072.043094][ T28] audit: type=1326 audit(2000002340.025:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28054 comm="syz.3.7748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4cbfb8e929 code=0x7ffc0000 [ 2072.088149][ T28] audit: type=1326 audit(2000002340.025:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28054 comm="syz.3.7748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbfb8e929 code=0x7ffc0000 [ 2072.879326][ T28] audit: type=1326 audit(2000002340.025:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28054 comm="syz.3.7748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4cbfb8e929 code=0x7ffc0000 [ 2072.907040][ T28] audit: type=1326 audit(2000002340.025:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28054 comm="syz.3.7748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbfb8e929 code=0x7ffc0000 [ 2073.050832][ T28] audit: type=1326 audit(2000002340.025:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28054 comm="syz.3.7748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4cbfb8e929 code=0x7ffc0000 [ 2073.231361][ T28] audit: type=1326 audit(2000002340.025:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28054 comm="syz.3.7748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbfb8e929 code=0x7ffc0000 [ 2073.255094][ T28] audit: type=1326 audit(2000002340.025:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28054 comm="syz.3.7748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4cbfb8e929 code=0x7ffc0000 [ 2073.278991][ T28] audit: type=1326 audit(2000002340.025:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28054 comm="syz.3.7748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbfb8e929 code=0x7ffc0000 [ 2073.596403][T28082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7752'. [ 2076.041346][T28115] xt_hashlimit: size too large, truncated to 1048576 [ 2077.199771][T28130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28130 comm=syz.2.7767 [ 2077.301133][T28133] overlayfs: failed to resolve './file1': -2 [ 2078.636764][T28144] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 2078.646079][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 2078.646091][ T28] audit: type=1400 audit(2000002348.605:2543): avc: denied { relabelfrom } for pid=28140 comm="syz.0.7770" name="UDP" dev="sockfs" ino=74884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 2078.988845][ T28] audit: type=1400 audit(2000002348.645:2544): avc: denied { relabelto } for pid=28140 comm="syz.0.7770" name="UDP" dev="sockfs" ino=74884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:var_lib_t:s0" [ 2084.520930][T28199] xt_hashlimit: size too large, truncated to 1048576 [ 2086.658774][T28225] xt_hashlimit: max too large, truncated to 1048576 [ 2086.669162][T28225] xt_bpf: check failed: parse error [ 2089.890608][T28249] device vti2 entered promiscuous mode [ 2092.438041][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2094.358099][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2095.269183][T28278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7802'. [ 2095.618461][T28284] device bridge7 entered promiscuous mode [ 2097.439360][T28294] fuse: Invalid rootmode [ 2097.494029][ T28] audit: type=1326 audit(2000002367.465:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28297 comm="syz.1.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2097.522620][ T28] audit: type=1326 audit(2000002367.495:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28297 comm="syz.1.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2097.635741][ T28] audit: type=1326 audit(2000002367.495:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28297 comm="syz.1.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2097.663890][ T28] audit: type=1326 audit(2000002367.495:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28297 comm="syz.1.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2098.071816][T28306] netlink: 160 bytes leftover after parsing attributes in process `syz.1.7809'. [ 2098.118578][ T28] audit: type=1326 audit(2000002367.495:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28297 comm="syz.1.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2098.149029][ T28] audit: type=1326 audit(2000002367.495:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28297 comm="syz.1.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2098.176846][ T28] audit: type=1326 audit(2000002367.495:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28297 comm="syz.1.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2098.203022][ T28] audit: type=1326 audit(2000002367.495:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28297 comm="syz.1.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb88b8d290 code=0x7ffc0000 [ 2098.342896][ T28] audit: type=1326 audit(2000002367.495:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28297 comm="syz.1.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2098.366861][ T28] audit: type=1326 audit(2000002367.495:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28297 comm="syz.1.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2100.871966][T28339] device bridge17 entered promiscuous mode [ 2100.992876][T28333] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2102.461449][T28353] syz.1.7820[28353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2102.461607][T28353] syz.1.7820[28353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2102.535925][T28333] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2102.558293][T25816] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2102.568622][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 2102.568714][ T28] audit: type=1326 audit(2000002372.435:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28335 comm="syz.1.7820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2102.678051][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2102.925757][T28333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2102.997133][T25816] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2103.028022][T25816] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2103.079329][ T28] audit: type=1326 audit(2000002372.435:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28335 comm="syz.1.7820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2103.105285][ T28] audit: type=1326 audit(2000002372.435:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28335 comm="syz.1.7820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2103.164562][ T28] audit: type=1326 audit(2000002372.445:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28335 comm="syz.1.7820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2103.188251][ T28] audit: type=1326 audit(2000002372.445:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28335 comm="syz.1.7820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2103.212612][ T28] audit: type=1326 audit(2000002372.445:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28335 comm="syz.1.7820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2103.236578][ T28] audit: type=1326 audit(2000002372.445:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28335 comm="syz.1.7820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2103.278513][ T28] audit: type=1326 audit(2000002372.445:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28335 comm="syz.1.7820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2103.303138][ T28] audit: type=1326 audit(2000002372.445:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28335 comm="syz.1.7820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2103.387057][T25816] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2104.290312][T25816] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2104.308761][T25816] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2104.471992][ T28] audit: type=1326 audit(2000002372.445:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28335 comm="syz.1.7820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2108.434547][T28403] futex_wake_op: syz.3.7834 tries to shift op by -1; fix this program [ 2108.610855][T28401] netlink: 'syz.4.7833': attribute type 27 has an invalid length. [ 2108.909445][T28401] bridge5: port 2(veth5) entered disabled state [ 2108.915791][T28401] bridge5: port 1(ip6gretap1) entered disabled state [ 2110.320829][T28402] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2110.339703][T28402] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 2110.653428][T28419] overlayfs: missing 'lowerdir' [ 2110.666607][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 2110.666623][ T28] audit: type=1326 audit(2000002380.635:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28418 comm="syz.1.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2110.722678][ T28] audit: type=1326 audit(2000002380.635:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28418 comm="syz.1.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2110.747331][ T28] audit: type=1326 audit(2000002380.645:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28418 comm="syz.1.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2110.771206][ T28] audit: type=1326 audit(2000002380.645:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28418 comm="syz.1.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2110.794993][ T28] audit: type=1326 audit(2000002380.645:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28418 comm="syz.1.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2110.849130][ T28] audit: type=1326 audit(2000002380.645:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28418 comm="syz.1.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2110.872934][ T28] audit: type=1326 audit(2000002380.645:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28418 comm="syz.1.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2110.896678][ T28] audit: type=1326 audit(2000002380.645:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28418 comm="syz.1.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2110.920429][ T28] audit: type=1326 audit(2000002380.645:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28418 comm="syz.1.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2110.944316][ T28] audit: type=1326 audit(2000002380.645:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28418 comm="syz.1.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7ffc0000 [ 2110.968523][T28402] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 2110.975918][T28402] IPv6: ADDRCONF(NETDEV_CHANGE): 00ªX¹¦Dö»: link becomes ready [ 2110.984551][T28402] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 2111.008271][T28402] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 2111.028317][T28402] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 2111.059889][T28402] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2111.108200][T28402] device veth0_vlan left promiscuous mode [ 2111.114371][T28402] device veth0_vlan entered promiscuous mode [ 2111.123969][T28402] bridge5: port 1(ip6gretap1) entered blocking state [ 2111.130716][T28402] bridge5: port 1(ip6gretap1) entered forwarding state [ 2113.343841][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2113.352871][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2113.360838][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2113.371723][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2113.380740][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2113.389302][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2113.398014][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 2113.406263][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2113.414857][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2113.424180][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2113.468285][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2113.479656][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2113.491265][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2113.500002][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2113.510728][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2113.519468][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2113.528172][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2113.536305][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2113.588481][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2113.597276][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2113.607280][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2113.615988][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2113.624693][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2114.225547][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2114.233619][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2114.241409][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 2114.249049][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 2114.256662][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge5: link becomes ready [ 2114.264625][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 2114.272459][ T393] bridge5: port 2(veth5) entered blocking state [ 2114.278748][ T393] bridge5: port 2(veth5) entered forwarding state [ 2114.291743][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 2114.304321][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 2114.589837][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 2114.597513][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 2114.605341][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 2114.613155][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 2114.620989][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 2114.630589][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 2114.638543][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 2114.646369][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 2114.654668][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 2114.664750][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth17: link becomes ready [ 2114.728076][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 2114.745685][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth19: link becomes ready [ 2114.762038][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth18: link becomes ready [ 2114.770211][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth21: link becomes ready [ 2114.778164][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth20: link becomes ready [ 2114.785959][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth23: link becomes ready [ 2114.793917][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth22: link becomes ready [ 2118.951015][T28489] netlink: 'syz.1.7856': attribute type 27 has an invalid length. [ 2118.973560][T28489] tipc: Resetting bearer [ 2119.263449][T28489] device vti2 left promiscuous mode [ 2119.278751][T28489] device bridge7 left promiscuous mode [ 2119.292184][T28487] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2119.305779][T28487] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2119.353466][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2119.361271][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2119.369320][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2119.377798][T28498] overlayfs: failed to clone upperpath [ 2119.377802][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2119.379074][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2119.400110][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2119.438376][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 2119.449984][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2119.503508][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 2119.515131][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2119.525673][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2119.602860][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2119.612751][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2119.623437][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2119.634391][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2119.645325][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2119.657137][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2119.668191][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2119.792729][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2119.822156][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2119.879629][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2119.923376][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2119.967411][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 2120.013507][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 2120.066928][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 2120.308243][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 2120.325189][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 2120.342153][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 2120.357428][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 2120.366068][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 2120.374098][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 2120.381900][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 2120.389436][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 2120.397067][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 2120.404685][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 2120.412329][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 2120.419901][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth17: link becomes ready [ 2120.427573][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 2120.435249][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth19: link becomes ready [ 2120.443053][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth18: link becomes ready [ 2120.450796][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth21: link becomes ready [ 2120.460982][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth20: link becomes ready [ 2121.390675][T28522] netlink: 'syz.0.7873': attribute type 13 has an invalid length. [ 2121.413220][T28522] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2121.450662][T28522] 0ªX¹¦Dö»: refused to change device tx_queue_len [ 2121.458087][T28522] A link change request failed with some changes committed already. Interface 00ªX¹¦Dö» may have been left with an inconsistent configuration, please check. [ 2123.840031][T28530] xt_socket: unknown flags 0xc [ 2125.182432][T28546] netlink: 'syz.3.7868': attribute type 27 has an invalid length. [ 2125.314341][T28546] device bridge17 left promiscuous mode [ 2125.345629][T28545] device veth0_vlan left promiscuous mode [ 2125.352139][T28545] device veth0_vlan entered promiscuous mode [ 2125.360029][T28545] device veth1_macvtap left promiscuous mode [ 2125.370856][T28545] device veth1_macvtap entered promiscuous mode [ 2125.424761][T28545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge16: link becomes ready [ 2125.443079][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2125.452953][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2125.468660][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2125.479449][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2125.488240][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 2125.496508][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2125.505390][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 2125.513909][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2125.527636][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2125.537541][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2125.547628][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2125.556449][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2125.565148][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2125.608909][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2125.618242][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2125.626753][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2125.636154][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2125.644580][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2125.653193][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2125.662152][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2125.671310][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2125.788432][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2125.798584][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2125.808927][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2125.818646][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2125.827347][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2125.893675][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 2125.931769][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2125.989185][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2126.056453][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2126.127077][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 2126.222535][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 2126.289244][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 2126.352327][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 2126.573846][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 2126.592366][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 2126.608353][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 2126.627514][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 2126.658341][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 2126.668352][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 2126.716452][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 2126.729569][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 2126.772868][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 2126.780879][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 2126.803392][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth17: link becomes ready [ 2128.070343][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 2128.381292][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth19: link becomes ready [ 2128.418341][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth18: link becomes ready [ 2128.481468][T28560] netlink: 'syz.3.7872': attribute type 27 has an invalid length. [ 2128.882542][T28576] overlayfs: missing 'lowerdir' [ 2129.111755][T28566] device veth0_vlan left promiscuous mode [ 2129.118110][T28566] device veth0_vlan entered promiscuous mode [ 2129.126264][T28566] device veth1_macvtap left promiscuous mode [ 2129.133282][T28566] device veth1_macvtap entered promiscuous mode [ 2129.164842][T28566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge16: link becomes ready [ 2129.175364][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2129.183530][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2129.192281][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2129.201614][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2129.210351][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2129.219257][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2129.228318][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2129.236778][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2129.245252][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2129.253592][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2129.261869][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2129.270377][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2129.278904][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2129.287222][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 2129.295053][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 2129.302693][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 2129.310249][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 2129.318034][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 2129.325727][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 2129.366328][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 2129.374277][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 2129.382298][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth18: link becomes ready [ 2133.618226][T28584] netlink: 'syz.1.7877': attribute type 13 has an invalid length. [ 2133.626176][T28584] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2133.635095][T28584] 0ªX¹¦D: refused to change device tx_queue_len [ 2133.641752][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 2133.643614][T28584] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2133.694260][ T28] audit: type=1400 audit(2000002916.618:2672): avc: denied { relabelto } for pid=28586 comm="syz.2.7879" name="file0" dev="tmpfs" ino=8707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 2136.150858][T28603] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2136.158684][T28603] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 2136.165955][T28603] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 2136.278994][ T28] audit: type=1400 audit(2000002919.238:2673): avc: denied { unlink } for pid=287 comm="syz-executor" name="file0" dev="tmpfs" ino=8707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 2138.077527][T28627] syz.0.7888[28627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2138.077601][T28627] syz.0.7888[28627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2138.605895][T28630] xt_time: unknown flags 0xc [ 2138.685148][ T28] audit: type=1400 audit(2000002921.428:2674): avc: denied { setopt } for pid=28624 comm="syz.1.7891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2139.201177][T28641] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28641 comm=syz.4.7894 [ 2139.253444][T28644] xt_hashlimit: size too large, truncated to 1048576 [ 2140.005098][T28648] device bridge9 entered promiscuous mode [ 2140.011068][T28648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge9: link becomes ready [ 2141.045211][T28671] futex_wake_op: syz.1.7901 tries to shift op by -1; fix this program [ 2142.496547][T28676] netlink: 'syz.0.7905': attribute type 27 has an invalid length. [ 2142.589630][T28681] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2142.609379][T28681] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2142.620938][T28681] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2142.640667][T28681] device veth0_vlan left promiscuous mode [ 2142.646872][T28681] device veth0_vlan entered promiscuous mode [ 2142.683857][T28681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2142.694230][T17001] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2142.703267][T17001] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2142.711432][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2142.721936][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2142.727978][T22320] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2142.737685][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2142.738877][T22320] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2142.755457][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2142.795192][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 2142.803573][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2142.811999][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2142.820290][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2142.831287][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2142.840670][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2142.849206][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2142.857749][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2142.885662][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2142.894334][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2142.903080][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2142.918222][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2142.919597][T22320] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2142.927661][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2142.944793][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2142.953310][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2142.997002][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2143.006009][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2143.038547][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2143.047162][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2143.055017][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2143.063080][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 2143.070966][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 2143.078855][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 2143.086552][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 2143.094563][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 2143.201551][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 2143.212157][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 2143.222177][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 2143.232205][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 2143.242696][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 2143.603327][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 2143.646272][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 2143.968468][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 2143.976073][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 2143.998832][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth17: link becomes ready [ 2144.107683][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 2144.136358][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth19: link becomes ready [ 2144.359837][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth18: link becomes ready [ 2144.361652][T22320] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2144.369438][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth21: link becomes ready [ 2144.374919][T22320] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2144.390100][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth20: link becomes ready [ 2144.397800][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth23: link becomes ready [ 2144.405748][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth22: link becomes ready [ 2144.441059][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth25: link becomes ready [ 2144.450506][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth24: link becomes ready [ 2144.617971][T17001] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2144.625616][T17001] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2145.602913][T28723] overlayfs: missing 'workdir' [ 2145.619472][T28729] futex_wake_op: syz.0.7919 tries to shift op by -1; fix this program [ 2146.060676][T28737] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 2146.616889][T28749] xt_bpf: check failed: parse error [ 2147.829255][T28756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7927'. [ 2147.838404][T28756] tipc: Enabling of bearer rejected, already enabled [ 2148.677918][ C0] ip6_tnl_xmit_ctl: 8 callbacks suppressed [ 2148.677939][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2150.118173][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2150.157306][T28777] SELinux: Context system_u:object_r:newrole_exec_t:s0 is not valid (left unmapped). [ 2150.168690][ T28] audit: type=1400 audit(2000002933.128:2675): avc: denied { relabelto } for pid=28765 comm="syz.0.7931" name="file0" dev="tmpfs" ino=8398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:newrole_exec_t:s0" [ 2150.332941][ T28] audit: type=1400 audit(2000002933.128:2676): avc: denied { associate } for pid=28765 comm="syz.0.7931" name="file0" dev="tmpfs" ino=8398 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:newrole_exec_t:s0" [ 2150.464752][T28782] overlayfs: failed to clone upperpath [ 2151.132341][ T28] audit: type=1400 audit(2000002934.088:2677): avc: denied { rmdir } for pid=286 comm="syz-executor" name="file0" dev="tmpfs" ino=8398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:newrole_exec_t:s0" [ 2155.168002][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2157.077903][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2157.243798][T28831] netlink: 'syz.1.7945': attribute type 27 has an invalid length. [ 2157.308093][T28831] tipc: Resetting bearer [ 2157.462485][T28830] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2157.476477][T28830] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2157.630834][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2157.639178][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2157.646870][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2157.655527][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2157.685224][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2157.695076][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2157.909814][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 2157.918208][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2157.938455][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 2157.946866][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2157.955230][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2157.969897][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2157.978445][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2157.986919][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2157.995490][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2158.003996][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2158.012852][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2158.022097][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2158.030373][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2158.049105][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2158.058432][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2158.067676][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2158.078393][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 2158.086663][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 2158.104113][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 2158.114396][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 2158.124153][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 2158.133991][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 2158.143718][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 2158.153013][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 2158.162590][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 2158.172339][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 2158.182122][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 2158.195478][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 2158.204354][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 2158.212210][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 2158.220088][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth17: link becomes ready [ 2158.227798][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 2158.235671][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth19: link becomes ready [ 2158.243594][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth18: link becomes ready [ 2158.251394][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth21: link becomes ready [ 2158.259286][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth20: link becomes ready [ 2158.358076][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2158.641208][T28850] syz.0.7950[28850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2158.641400][T28850] syz.0.7950[28850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2162.198065][T28864] xt_CT: No such helper "pptp" [ 2164.869540][T28874] netlink: 'syz.3.7953': attribute type 1 has an invalid length. [ 2164.889640][T28874] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7953'. [ 2168.020566][T28882] netlink: 'syz.4.7958': attribute type 13 has an invalid length. [ 2168.028813][T28882] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2168.038192][T28882] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 2168.045893][T28882] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 2168.053514][T28882] IPv6: ADDRCONF(NETDEV_CHANGE): 00ªX¹¦Dö»: link becomes ready [ 2168.062197][T28882] erspan0: refused to change device tx_queue_len [ 2168.069212][T28882] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 2168.076946][T28882] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2170.980073][T28902] overlayfs: failed to clone upperpath [ 2173.078043][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 2174.357985][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2174.365977][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2177.647939][ T28] audit: type=1400 audit(2000002960.608:2678): avc: denied { mounton } for pid=28940 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 2178.997909][ C0] ------------[ cut here ]------------ [ 2179.003419][ C0] refcount_t: addition on 0; use-after-free. [ 2179.009612][ C0] WARNING: CPU: 0 PID: 28951 at lib/refcount.c:25 refcount_warn_saturate+0x104/0x1a0 [ 2179.019137][ C0] Modules linked in: [ 2179.023053][ C0] CPU: 0 PID: 28951 Comm: syz.2.7974 Not tainted 6.1.141-syzkaller-00033-g36d69f6a49eb #0 [ 2179.032974][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2179.043081][ C0] RIP: 0010:refcount_warn_saturate+0x104/0x1a0 [ 2179.049280][ C0] Code: 05 01 48 c7 c7 20 a2 a9 85 e8 88 fb dd fe 0f 0b eb df e8 6f b5 0c ff c6 05 1f ac 0b 05 01 48 c7 c7 60 a1 a9 85 e8 6c fb dd fe <0f> 0b eb c3 e8 53 b5 0c ff c6 05 04 ac 0b 05 01 48 c7 c7 c0 a1 a9 [ 2179.069038][ C0] RSP: 0018:ffffc90000007820 EFLAGS: 00010246 [ 2179.075151][ C0] RAX: cfeafd64e755da00 RBX: 0000000000000002 RCX: ffff8881600b9440 [ 2179.083177][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 2179.091190][ C0] RBP: ffffc90000007830 R08: dffffc0000000000 R09: fffff52000000e81 [ 2179.099200][ C0] R10: fffff52000000e81 R11: 1ffff92000000e80 R12: ffffc900000079b8 [ 2179.107193][ C0] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff888115113200 [ 2179.115199][ C0] FS: 00007fe75df1b6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2179.124177][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2179.130799][ C0] CR2: 00007fdcc121fd58 CR3: 000000012d8f7000 CR4: 00000000003506b0 [ 2179.138811][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2179.146805][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2179.154850][ C0] Call Trace: [ 2179.158156][ C0] [ 2179.161017][ C0] tipc_crypto_xmit+0x1822/0x2220 [ 2179.166073][ C0] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 2179.171479][ C0] ? skb_clone+0x228/0x380 [ 2179.175919][ C0] tipc_crypto_clone_msg+0x9b/0x160 [ 2179.181153][ C0] tipc_crypto_xmit+0x1992/0x2220 [ 2179.186203][ C0] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 2179.191606][ C0] ? __copy_skb_header+0x49f/0x630 [ 2179.196770][ C0] tipc_bearer_xmit_skb+0x226/0x380 [ 2179.202022][ C0] ? __skb_clone+0x47a/0x790 [ 2179.206650][ C0] ? __cfi_tipc_bearer_xmit_skb+0x10/0x10 [ 2179.212423][ C0] ? skb_clone+0x228/0x380 [ 2179.216869][ C0] tipc_disc_timeout+0x6a2/0x830 [ 2179.221858][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 2179.227349][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 2179.232852][ C0] call_timer_fn+0x46/0x2a0 [ 2179.237479][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 2179.242983][ C0] __run_timers+0x639/0x9a0 [ 2179.247516][ C0] ? calc_index+0x200/0x200 [ 2179.252064][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 2179.257304][ C0] run_timer_softirq+0x6a/0xf0 [ 2179.262109][ C0] handle_softirqs+0x1d7/0x600 [ 2179.266900][ C0] ? irqtime_account_irq+0xc4/0x240 [ 2179.272140][ C0] __irq_exit_rcu+0x52/0xf0 [ 2179.276672][ C0] irq_exit_rcu+0x9/0x10 [ 2179.280957][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 2179.286618][ C0] [ 2179.289579][ C0] [ 2179.292524][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2179.298537][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x55/0x80 [ 2179.304988][ C0] Code: 40 d2 ed 86 e8 8c 0b c4 fc 4c 89 f7 48 83 3d d1 8c fd 01 00 74 30 e8 1e 0d 00 00 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 a6 50 5b fc 65 8b 05 37 28 12 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 2179.318917][ C1] ------------[ cut here ]------------ [ 2179.324644][ C0] RSP: 0018:ffffc900007af5a0 EFLAGS: 00000206 [ 2179.330100][ C1] refcount_t: saturated; leaking memory. [ 2179.330218][ C1] WARNING: CPU: 1 PID: 28949 at lib/refcount.c:22 refcount_warn_saturate+0x158/0x1a0 [ 2179.336143][ C0] RAX: 0000000000000001 RBX: 0000000000000a06 RCX: dffffc0000000000 [ 2179.341772][ C1] Modules linked in: [ 2179.351206][ C0] RDX: ffffc9000073f698 RSI: 0000000000000a06 RDI: 0000000000000001 [ 2179.359195][ C1] [ 2179.359203][ C1] CPU: 1 PID: 28949 Comm: syz.4.7975 Not tainted 6.1.141-syzkaller-00033-g36d69f6a49eb #0 [ 2179.363063][ C0] RBP: ffffc900007af5b0 R08: dffffc0000000000 R09: ffffed102c017a21 [ 2179.371024][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2179.373331][ C0] R10: ffffed102c017a21 R11: 1ffff1102c017a20 R12: ffff88816220f600 [ 2179.383203][ C1] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 2179.391168][ C0] R13: 0000000000000010 R14: 0000000000000001 R15: 0000000000000000 [ 2179.401215][ C1] Code: 05 01 48 c7 c7 00 a1 a9 85 e8 34 fb dd fe 0f 0b eb 8b e8 1b b5 0c ff c6 05 ca ab 0b 05 01 48 c7 c7 00 a1 a9 85 e8 18 fb dd fe <0f> 0b e9 6c ff ff ff e8 fc b4 0c ff c6 05 af ab 0b 05 01 48 c7 c7 [ 2179.409188][ C0] __wake_up_sync_key+0x166/0x280 [ 2179.415309][ C1] RSP: 0018:ffffc900001b0820 EFLAGS: 00010246 [ 2179.423280][ C0] ? __cfi___wake_up_sync_key+0x10/0x10 [ 2179.442877][ C1] [ 2179.442884][ C1] RAX: 4e443d5f20fc0200 RBX: 0000000000000001 RCX: ffff8881600ba880 [ 2179.447892][ C0] ? __skb_try_recv_datagram+0x3da/0x4d0 [ 2179.453929][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 2179.459469][ C0] ? __cfi_sk_busy_loop_end+0x10/0x10 [ 2179.461776][ C1] RBP: ffffc900001b0830 R08: 0000000000000004 R09: 0000000000000003 [ 2179.469742][ C0] __unix_dgram_recvmsg+0x496/0xd70 [ 2179.475344][ C1] R10: fffff520000360b4 R11: 1ffff920000360b4 R12: ffffc900001b09b8 [ 2179.483307][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 2179.488675][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888115113200 [ 2179.496631][ C0] ? __cfi_push_rt_tasks+0x10/0x10 [ 2179.501818][ C1] FS: 00007fdcc12616c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2179.509787][ C0] ? __cfi___unix_dgram_recvmsg+0x10/0x10 [ 2179.514606][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2179.522575][ C0] ? irqentry_exit+0x37/0x40 [ 2179.527658][ C1] CR2: 0000200000b06030 CR3: 000000012fed7000 CR4: 00000000003506a0 [ 2179.536673][ C0] unix_dgram_recvmsg+0xc7/0xe0 [ 2179.542389][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2179.548988][ C0] ? __cfi_unix_dgram_recvmsg+0x10/0x10 [ 2179.553551][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2179.561514][ C0] ____sys_recvmsg+0x2a0/0x590 [ 2179.566338][ C1] Call Trace: [ 2179.566345][ C1] [ 2179.566352][ C1] tipc_crypto_xmit+0x1822/0x2220 [ 2179.574323][ C0] ? sysvec_call_function_single+0x61/0xc0 [ 2179.579860][ C1] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 2179.579881][ C1] ? skb_clone+0x228/0x380 [ 2179.587845][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 2179.592580][ C1] tipc_crypto_clone_msg+0x9b/0x160 [ 2179.595846][ C0] ? import_iovec+0x7c/0xb0 [ 2179.598692][ C1] tipc_crypto_xmit+0x1992/0x2220 [ 2179.603685][ C0] ___sys_recvmsg+0x1b2/0x510 [ 2179.609483][ C1] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 2179.614825][ C0] ? __sys_recvmsg+0x270/0x270 [ 2179.619228][ C1] ? __copy_skb_header+0x49f/0x630 [ 2179.624233][ C0] ? do_recvmmsg+0x32c/0x7a0 [ 2179.629418][ C1] tipc_bearer_xmit_skb+0x226/0x380 [ 2179.633901][ C0] ? ___sys_recvmsg+0x6/0x510 [ 2179.638914][ C1] ? __skb_clone+0x47a/0x790 [ 2179.643565][ C0] do_recvmmsg+0x359/0x7a0 [ 2179.648924][ C1] ? __cfi_tipc_bearer_xmit_skb+0x10/0x10 [ 2179.653667][ C0] ? __sys_recvmmsg+0x280/0x280 [ 2179.658769][ C1] ? skb_clone+0x228/0x380 [ 2179.663337][ C0] ? bpf_trace_run2+0x104/0x250 [ 2179.668535][ C1] tipc_disc_timeout+0x6a2/0x830 [ 2179.673166][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 2179.677728][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 2179.682128][ C0] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 2179.687840][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 2179.692661][ C0] ? __bpf_trace_sys_enter+0x62/0x70 [ 2179.697054][ C1] call_timer_fn+0x46/0x2a0 [ 2179.701891][ C0] ? trace_sys_enter+0x3d/0x50 [ 2179.706801][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 2179.711812][ C0] x64_sys_call+0x3e7/0x9a0 [ 2179.717242][ C1] __run_timers+0x639/0x9a0 [ 2179.722776][ C0] do_syscall_64+0x4c/0xa0 [ 2179.728220][ C1] ? calc_index+0x200/0x200 [ 2179.733476][ C0] ? clear_bhb_loop+0x30/0x80 [ 2179.737965][ C1] ? __irq_exit_rcu+0x5e/0xf0 [ 2179.742724][ C0] ? clear_bhb_loop+0x30/0x80 [ 2179.748179][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2179.752653][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2179.757131][ C1] run_timer_softirq+0x6a/0xf0 [ 2179.761533][ C0] RIP: 0033:0x7fe75d18e929 [ 2179.766008][ C1] handle_softirqs+0x1d7/0x600 [ 2179.770671][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2179.775330][ C1] __irq_exit_rcu+0x52/0xf0 [ 2179.779987][ C0] RSP: 002b:00007fe75df1b038 EFLAGS: 00000246 [ 2179.786111][ C1] irq_exit_rcu+0x9/0x10 [ 2179.791985][ C0] ORIG_RAX: 000000000000012b [ 2179.796722][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 2179.801121][ C0] RAX: ffffffffffffffda RBX: 00007fe75d3b6080 RCX: 00007fe75d18e929 [ 2179.805864][ C1] [ 2179.825454][ C0] RDX: 03fffffffffffeda RSI: 00002000000000c0 RDI: 0000000000000003 [ 2179.829942][ C1] [ 2179.829952][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2179.835988][ C0] RBP: 00007fe75d210b39 R08: 0000000000000000 R09: 0000000000000000 [ 2179.840214][ C1] RIP: 0010:__unix_dgram_recvmsg+0x4ae/0xd70 [ 2179.844860][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 2179.850477][ C1] Code: 04 00 00 ba 04 03 00 00 be 01 00 00 00 e8 3a 08 0a fd eb 05 e8 33 e3 27 fd 48 8b 7c 24 20 49 89 fc 49 c1 ec 03 43 80 3c 2c 00 <74> 0a e8 eb 3c 6c fd 48 8b 7c 24 20 48 83 3f 00 0f 84 b1 00 00 00 [ 2179.858460][ C0] R13: 0000000000000001 R14: 00007fe75d3b6080 R15: 00007fff9a20b1e8 [ 2179.861374][ C1] RSP: 0018:ffffc9000079f6e0 EFLAGS: 00000246 [ 2179.869343][ C0] [ 2179.872245][ C1] [ 2179.872251][ C1] RAX: ffffffff844813ed RBX: ffff888115dc0408 RCX: 0000000000080000 [ 2179.878211][ C0] ---[ end trace 0000000000000000 ]--- [ 2179.886156][ C1] RDX: ffffc90002adf000 RSI: 000000000007ffff RDI: ffffc9000079fd00 [ 2179.892141][ C0] ------------[ cut here ]------------ [ 2179.900091][ C1] RBP: ffffc9000079f870 R08: dffffc0000000000 R09: ffffed1025800537 [ 2179.919693][ C0] refcount_t: underflow; use-after-free. [ 2179.919811][ C0] WARNING: CPU: 0 PID: 28951 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 2179.927648][ C1] R10: ffffed1025800537 R11: 1ffff11025800536 R12: 1ffff920000f3fa0 [ 2179.933701][ C0] Modules linked in: [ 2179.936700][ C1] R13: dffffc0000000000 R14: ffffc9000079f7c0 R15: ffff88812c0028c0 [ 2179.939022][ C0] CPU: 0 PID: 28951 Comm: syz.2.7974 Tainted: G W 6.1.141-syzkaller-00033-g36d69f6a49eb #0 [ 2179.946975][ C1] ? __unix_dgram_recvmsg+0x49d/0xd70 [ 2179.952420][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2179.960385][ C1] ? up_read+0x56/0x1d0 [ 2179.965821][ C0] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 2179.973785][ C1] ? __cfi___unix_dgram_recvmsg+0x10/0x10 [ 2179.979403][ C0] Code: 05 01 48 c7 c7 60 a1 a9 85 e8 6c fb dd fe 0f 0b eb c3 e8 53 b5 0c ff c6 05 04 ac 0b 05 01 48 c7 c7 c0 a1 a9 85 e8 50 fb dd fe <0f> 0b eb a7 e8 37 b5 0c ff c6 05 e5 ab 0b 05 01 48 c7 c7 00 a1 a9 [ 2179.988840][ C1] ? exc_page_fault+0x5e/0xb0 [ 2179.996791][ C0] RSP: 0018:ffffc90000007820 EFLAGS: 00010246 [ 2180.000699][ C1] unix_dgram_recvmsg+0xc7/0xe0 [ 2180.008689][ C0] [ 2180.020038][ C1] ? __cfi_unix_dgram_recvmsg+0x10/0x10 [ 2180.025379][ C0] RAX: cfeafd64e755da00 RBX: 0000000000000003 RCX: ffff8881600b9440 [ 2180.035427][ C1] ____sys_recvmsg+0x2a0/0x590 [ 2180.039565][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 2180.045696][ C1] ? __sys_recvmsg_sock+0x50/0x50 [ 2180.051395][ C0] RBP: ffffc90000007830 R08: 0000000000000004 R09: 0000000000000003 [ 2180.071000][ C1] ? import_iovec+0x7c/0xb0 [ 2180.075654][ C0] R10: fffff52000000eb4 R11: 1ffff92000000eb4 R12: 00000000c0000000 [ 2180.081705][ C1] ___sys_recvmsg+0x1b2/0x510 [ 2180.086527][ C0] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff888115113200 [ 2180.088845][ C1] ? __sys_recvmsg+0x270/0x270 [ 2180.094359][ C0] FS: 00007fe75df1b6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2180.102329][ C1] ? cgroup_rstat_updated+0xf5/0x370 [ 2180.107062][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2180.115027][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2180.120035][ C0] CR2: 00007fdcc121fd58 CR3: 000000012d8f7000 CR4: 00000000003506b0 [ 2180.128006][ C1] ? do_recvmmsg+0x364/0x7a0 [ 2180.132483][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2180.140446][ C1] do_recvmmsg+0x359/0x7a0 [ 2180.145091][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2180.153142][ C1] ? __sys_recvmmsg+0x280/0x280 [ 2180.157910][ C0] Call Trace: [ 2180.157921][ C0] [ 2180.166828][ C1] ? bpf_trace_run2+0x104/0x250 [ 2180.172107][ C0] tipc_crypto_xmit+0x195e/0x2220 [ 2180.178691][ C1] __x64_sys_recvmmsg+0x18d/0x240 [ 2180.184819][ C0] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 2180.192780][ C1] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 2180.197340][ C0] ? skb_clone+0x228/0x380 [ 2180.205303][ C1] ? __bpf_trace_sys_enter+0x62/0x70 [ 2180.209709][ C0] tipc_crypto_clone_msg+0x9b/0x160 [ 2180.217655][ C1] ? trace_sys_enter+0x3d/0x50 [ 2180.222496][ C0] tipc_crypto_xmit+0x1992/0x2220 [ 2180.225760][ C1] x64_sys_call+0x3e7/0x9a0 [ 2180.228601][ C0] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 2180.233416][ C1] do_syscall_64+0x4c/0xa0 [ 2180.238436][ C0] ? __copy_skb_header+0x49f/0x630 [ 2180.243426][ C1] ? clear_bhb_loop+0x30/0x80 [ 2180.248792][ C0] tipc_bearer_xmit_skb+0x226/0x380 [ 2180.254315][ C1] ? clear_bhb_loop+0x30/0x80 [ 2180.258722][ C0] ? __skb_clone+0x47a/0x790 [ 2180.263977][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2180.269158][ C0] ? __cfi_tipc_bearer_xmit_skb+0x10/0x10 [ 2180.273889][ C1] RIP: 0033:0x7fdcc038e929 [ 2180.278899][ C0] ? skb_clone+0x228/0x380 [ 2180.283372][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2180.288726][ C0] tipc_disc_timeout+0x6a2/0x830 [ 2180.293109][ C1] RSP: 002b:00007fdcc1261038 EFLAGS: 00000246 [ 2180.298225][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 2180.302872][ C1] ORIG_RAX: 000000000000012b [ 2180.308061][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 2180.312706][ C1] RAX: ffffffffffffffda RBX: 00007fdcc05b6080 RCX: 00007fdcc038e929 [ 2180.317267][ C0] call_timer_fn+0x46/0x2a0 [ 2180.323143][ C1] RDX: 03fffffffffffcb5 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2180.328843][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 2180.333226][ C1] RBP: 00007fdcc0410b39 R08: 0000000000000000 R09: 0000000000000000 [ 2180.337614][ C0] __run_timers+0x639/0x9a0 [ 2180.357210][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 2180.362142][ C0] ? calc_index+0x200/0x200 [ 2180.368183][ C1] R13: 0000000000000001 R14: 00007fdcc05b6080 R15: 00007fff907ea2c8 [ 2180.373612][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 2180.378277][ C1] [ 2180.383701][ C0] run_timer_softirq+0x6a/0xf0 [ 2180.391663][ C1] ---[ end trace 0000000000000000 ]--- [ 2180.396137][ C0] handle_softirqs+0x1d7/0x600 [ 2180.465650][ C0] ? irqtime_account_irq+0xc4/0x240 [ 2180.470904][ C0] __irq_exit_rcu+0x52/0xf0 [ 2180.475440][ C0] irq_exit_rcu+0x9/0x10 [ 2180.479720][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 2180.485378][ C0] [ 2180.488338][ C0] [ 2180.491278][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2180.497279][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x55/0x80 [ 2180.503735][ C0] Code: 40 d2 ed 86 e8 8c 0b c4 fc 4c 89 f7 48 83 3d d1 8c fd 01 00 74 30 e8 1e 0d 00 00 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 a6 50 5b fc 65 8b 05 37 28 12 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 2180.523381][ C0] RSP: 0018:ffffc900007af5a0 EFLAGS: 00000206 [ 2180.529499][ C0] RAX: 0000000000000001 RBX: 0000000000000a06 RCX: dffffc0000000000 [ 2180.537504][ C0] RDX: ffffc9000073f698 RSI: 0000000000000a06 RDI: 0000000000000001 [ 2180.545517][ C0] RBP: ffffc900007af5b0 R08: dffffc0000000000 R09: ffffed102c017a21 [ 2180.553532][ C0] R10: ffffed102c017a21 R11: 1ffff1102c017a20 R12: ffff88816220f600 [ 2180.561544][ C0] R13: 0000000000000010 R14: 0000000000000001 R15: 0000000000000000 [ 2180.569552][ C0] __wake_up_sync_key+0x166/0x280 [ 2180.574614][ C0] ? __cfi___wake_up_sync_key+0x10/0x10 [ 2180.580201][ C0] ? __skb_try_recv_datagram+0x3da/0x4d0 [ 2180.585864][ C0] ? __cfi_sk_busy_loop_end+0x10/0x10 [ 2180.591278][ C0] __unix_dgram_recvmsg+0x496/0xd70 [ 2180.596493][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 2180.601383][ C0] ? __cfi_push_rt_tasks+0x10/0x10 [ 2180.606537][ C0] ? __cfi___unix_dgram_recvmsg+0x10/0x10 [ 2180.612289][ C0] ? irqentry_exit+0x37/0x40 [ 2180.616907][ C0] unix_dgram_recvmsg+0xc7/0xe0 [ 2180.621852][ C0] ? __cfi_unix_dgram_recvmsg+0x10/0x10 [ 2180.627417][ C0] ____sys_recvmsg+0x2a0/0x590 [ 2180.632217][ C0] ? sysvec_call_function_single+0x61/0xc0 [ 2180.638068][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 2180.643132][ C0] ? import_iovec+0x7c/0xb0 [ 2180.647658][ C0] ___sys_recvmsg+0x1b2/0x510 [ 2180.652419][ C0] ? __sys_recvmsg+0x270/0x270 [ 2180.657205][ C0] ? do_recvmmsg+0x32c/0x7a0 [ 2180.661815][ C0] ? ___sys_recvmsg+0x6/0x510 [ 2180.666499][ C0] do_recvmmsg+0x359/0x7a0 [ 2180.670936][ C0] ? __sys_recvmmsg+0x280/0x280 [ 2180.675801][ C0] ? bpf_trace_run2+0x104/0x250 [ 2180.680680][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 2180.685707][ C0] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 2180.691324][ C0] ? __bpf_trace_sys_enter+0x62/0x70 [ 2180.696634][ C0] ? trace_sys_enter+0x3d/0x50 [ 2180.701440][ C0] x64_sys_call+0x3e7/0x9a0 [ 2180.705961][ C0] do_syscall_64+0x4c/0xa0 [ 2180.710415][ C0] ? clear_bhb_loop+0x30/0x80 [ 2180.715104][ C0] ? clear_bhb_loop+0x30/0x80 [ 2180.719817][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2180.725749][ C0] RIP: 0033:0x7fe75d18e929 [ 2180.730211][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2180.749854][ C0] RSP: 002b:00007fe75df1b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2180.758338][ C0] RAX: ffffffffffffffda RBX: 00007fe75d3b6080 RCX: 00007fe75d18e929 [ 2180.766331][ C0] RDX: 03fffffffffffeda RSI: 00002000000000c0 RDI: 0000000000000003 [ 2180.774348][ C0] RBP: 00007fe75d210b39 R08: 0000000000000000 R09: 0000000000000000 [ 2180.782356][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 2180.790395][ C0] R13: 0000000000000001 R14: 00007fe75d3b6080 R15: 00007fff9a20b1e8 [ 2180.798438][ C0] [ 2180.801545][ C0] ---[ end trace 0000000000000000 ]--- [ 2182.468888][T28952] bridge0: port 2(macsec1) entered blocking state [ 2182.475340][T28952] bridge0: port 2(macsec1) entered disabled state [ 2182.503422][T28940] bridge0: port 1(bridge_slave_0) entered blocking state [ 2182.510567][T28940] bridge0: port 1(bridge_slave_0) entered disabled state [ 2182.529857][T28940] device bridge_slave_0 entered promiscuous mode [ 2182.536960][T28940] bridge0: port 2(bridge_slave_1) entered blocking state [ 2182.589693][T28940] bridge0: port 2(bridge_slave_1) entered disabled state [ 2182.597220][T28940] device bridge_slave_1 entered promiscuous mode [ 2183.002043][ T4189] tipc: Disabling bearer [ 2183.007475][ T4189] tipc: Disabling bearer [ 2183.025632][ T4189] tipc: Left network mode [ 2183.052664][T28940] bridge0: port 2(bridge_slave_1) entered blocking state [ 2183.059758][T28940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2183.078732][ T4189] ------------[ cut here ]------------ [ 2183.084226][ T4189] refcount_t: saturated; leaking memory. [ 2183.094650][ T4189] WARNING: CPU: 0 PID: 4189 at lib/refcount.c:19 refcount_warn_saturate+0x13c/0x1a0 [ 2183.104113][ T4189] Modules linked in: [ 2183.108089][ T4189] CPU: 0 PID: 4189 Comm: kworker/u4:366 Tainted: G W 6.1.141-syzkaller-00033-g36d69f6a49eb #0 [ 2183.119731][ T4189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2183.129812][ T4189] Workqueue: netns cleanup_net [ 2183.134593][ T4189] RIP: 0010:refcount_warn_saturate+0x13c/0x1a0 [ 2183.140775][ T4189] Code: 05 01 48 c7 c7 c0 a1 a9 85 e8 50 fb dd fe 0f 0b eb a7 e8 37 b5 0c ff c6 05 e5 ab 0b 05 01 48 c7 c7 00 a1 a9 85 e8 34 fb dd fe <0f> 0b eb 8b e8 1b b5 0c ff c6 05 ca ab 0b 05 01 48 c7 c7 00 a1 a9 [ 2183.160414][ T4189] RSP: 0018:ffffc9000f2c77c0 EFLAGS: 00010246 [ 2183.166486][ T4189] RAX: 27e3b793dc953d00 RBX: 0000000000000000 RCX: ffff88814f07e540 [ 2183.174507][ T4189] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 2183.182503][ T4189] RBP: ffffc9000f2c77d0 R08: dffffc0000000000 R09: fffff52001e58e75 [ 2183.190530][ T4189] R10: fffff52001e58e75 R11: 1ffff92001e58e74 R12: 1ffff92001e58f04 [ 2183.198520][ T4189] R13: ffffc9000f2c7840 R14: 0000000000000000 R15: ffff88810b93d80c [ 2183.206509][ T4189] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2183.215477][ T4189] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2183.222091][ T4189] CR2: 0000200000937000 CR3: 000000012bf37000 CR4: 00000000003506b0 [ 2183.230107][ T4189] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2183.238103][ T4189] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2183.246093][ T4189] Call Trace: [ 2183.249412][ T4189] [ 2183.252358][ T4189] nf_nat_masq_schedule+0x46b/0x4e0 [ 2183.257571][ T4189] ? __kasan_check_write+0x14/0x20 [ 2183.262727][ T4189] ? __cfi_device_cmp+0x10/0x10 [ 2183.267578][ T4189] ? masq_device_event+0xd0/0xd0 [ 2183.272550][ T4189] ? nfqnl_rcv_dev_event+0x441/0x470 [ 2183.277863][ T4189] ? rtnl_is_locked+0x15/0x20 [ 2183.282554][ T4189] masq_device_event+0x9b/0xd0 [ 2183.287327][ T4189] raw_notifier_call_chain+0xa1/0x110 [ 2183.292980][ T4189] dev_close_many+0x32d/0x4d0 [ 2183.298060][ T4189] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 2183.305180][ T4189] ? __cfi_dev_close_many+0x10/0x10 [ 2183.310454][ T4189] ? wait_for_common+0x54c/0x620 [ 2183.315398][ T4189] ? __kasan_check_read+0x11/0x20 [ 2183.320660][ T4189] unregister_netdevice_many+0x439/0x1820 [ 2183.326415][ T4189] ? __cfi_unregister_netdevice_many+0x10/0x10 [ 2183.332700][ T4189] ? unregister_netdevice_queue+0x1aa/0x360 [ 2183.338625][ T4189] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 2183.344879][ T4189] ? rcu_barrier+0x7e/0x600 [ 2183.349427][ T4189] ip6gre_exit_batch_net+0x5a8/0x5f0 [ 2183.354724][ T4189] ? __cfi_ip6gre_exit_batch_net+0x10/0x10 [ 2183.360575][ T4189] ? __cfi_ip6gre_exit_batch_net+0x10/0x10 [ 2183.366390][ T4189] cleanup_net+0x62d/0xb00 [ 2183.370844][ T4189] ? __cfi_cleanup_net+0x10/0x10 [ 2183.375783][ T4189] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 2183.381200][ T4189] process_one_work+0x71f/0xc40 [ 2183.386055][ T4189] worker_thread+0xa29/0x11f0 [ 2183.390780][ T4189] kthread+0x281/0x320 [ 2183.394848][ T4189] ? __cfi_worker_thread+0x10/0x10 [ 2183.400007][ T4189] ? __cfi_kthread+0x10/0x10 [ 2183.404601][ T4189] ret_from_fork+0x1f/0x30 [ 2183.409045][ T4189] [ 2183.412065][ T4189] ---[ end trace 0000000000000000 ]--- [ 2183.418074][ T4189] ------------[ cut here ]------------ [ 2183.423540][ T4189] WARNING: CPU: 0 PID: 4189 at lib/ref_tracker.c:77 ref_tracker_alloc+0x2ae/0x430 [ 2183.432834][ T4189] Modules linked in: [ 2183.436732][ T4189] CPU: 0 PID: 4189 Comm: kworker/u4:366 Tainted: G W 6.1.141-syzkaller-00033-g36d69f6a49eb #0 [ 2183.448381][ T4189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2183.458498][ T4189] Workqueue: netns cleanup_net [ 2183.463278][ T4189] RIP: 0010:ref_tracker_alloc+0x2ae/0x430 [ 2183.469041][ T4189] Code: f9 e5 fe 48 bb 00 00 00 00 00 fc ff df 4c 8b 74 24 08 48 8b 7c 24 10 48 8b 74 24 18 e8 7b 47 66 02 31 c0 eb 6d e8 62 f9 e5 fe <0f> 0b 4d 85 e4 0f 85 09 fe ff ff 4c 8b 64 24 10 4d 8d 74 24 0c 4c [ 2183.488706][ T4189] RSP: 0018:ffffc9000f2c76a0 EFLAGS: 00010293 [ 2183.494783][ T4189] RAX: ffffffff8289fdbe RBX: dffffc0000000000 RCX: ffff88814f07e540 [ 2183.502772][ T4189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000f2c7760 [ 2183.510755][ T4189] RBP: ffffc9000f2c77d0 R08: dffffc0000000000 R09: ffffc9000f2c76e0 [ 2183.518751][ T4189] R10: fffff52001e58eec R11: 1ffff92001e58edc R12: ffff88810e47e2b8 [ 2183.526725][ T4189] R13: ffff88810b93d820 R14: 0000000000000cc0 R15: ffff88810b93d810 [ 2183.534731][ T4189] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2183.543685][ T4189] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2183.550326][ T4189] CR2: 0000200000937000 CR3: 0000000006e0f000 CR4: 00000000003506b0 [ 2183.558343][ T4189] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2183.566321][ T4189] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2183.574522][ T4189] Call Trace: [ 2183.577801][ T4189] [ 2183.580770][ T4189] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 2183.586254][ T4189] ? kasan_save_alloc_info+0x25/0x30 [ 2183.591587][ T4189] ? __kasan_kmalloc+0x95/0xb0 [ 2183.596351][ T4189] ? nf_nat_masq_schedule+0x238/0x4e0 [ 2183.601773][ T4189] ? kmalloc_trace+0x40/0xb0 [ 2183.606376][ T4189] nf_nat_masq_schedule+0x338/0x4e0 [ 2183.611642][ T4189] ? __kasan_check_write+0x14/0x20 [ 2183.616766][ T4189] ? __cfi_device_cmp+0x10/0x10 [ 2183.621666][ T4189] ? masq_device_event+0xd0/0xd0 [ 2183.626612][ T4189] ? nfqnl_rcv_dev_event+0x441/0x470 [ 2183.631945][ T4189] ? rtnl_is_locked+0x15/0x20 [ 2183.636629][ T4189] masq_device_event+0x9b/0xd0 [ 2183.641445][ T4189] raw_notifier_call_chain+0xa1/0x110 [ 2183.646826][ T4189] dev_close_many+0x32d/0x4d0 [ 2183.651541][ T4189] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 2183.658330][ T4189] ? __cfi_dev_close_many+0x10/0x10 [ 2183.663543][ T4189] ? wait_for_common+0x54c/0x620 [ 2183.668532][ T4189] ? __kasan_check_read+0x11/0x20 [ 2183.673562][ T4189] unregister_netdevice_many+0x439/0x1820 [ 2183.679333][ T4189] ? __cfi_unregister_netdevice_many+0x10/0x10 [ 2183.685497][ T4189] ? unregister_netdevice_queue+0x1aa/0x360 [ 2183.691431][ T4189] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 2183.697675][ T4189] ? rcu_barrier+0x7e/0x600 [ 2183.702215][ T4189] ip6gre_exit_batch_net+0x5a8/0x5f0 [ 2183.707595][ T4189] ? __cfi_ip6gre_exit_batch_net+0x10/0x10 [ 2183.713446][ T4189] ? __cfi_ip6gre_exit_batch_net+0x10/0x10 [ 2183.719294][ T4189] cleanup_net+0x62d/0xb00 [ 2183.723735][ T4189] ? __cfi_cleanup_net+0x10/0x10 [ 2183.728721][ T4189] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 2183.734098][ T4189] process_one_work+0x71f/0xc40 [ 2183.738994][ T4189] worker_thread+0xa29/0x11f0 [ 2183.743690][ T4189] kthread+0x281/0x320 [ 2183.747851][ T4189] ? __cfi_worker_thread+0x10/0x10 [ 2183.753227][ T4189] ? __cfi_kthread+0x10/0x10 [ 2183.757858][ T4189] ret_from_fork+0x1f/0x30 [ 2183.762285][ T4189] [ 2183.765307][ T4189] ---[ end trace 0000000000000000 ]--- [ 2183.772209][T22320] ------------[ cut here ]------------ [ 2183.777673][T22320] WARNING: CPU: 0 PID: 22320 at lib/ref_tracker.c:110 ref_tracker_free+0x5de/0x7c0 [ 2183.787063][T22320] Modules linked in: [ 2183.791017][T22320] CPU: 0 PID: 22320 Comm: kworker/0:2 Tainted: G W 6.1.141-syzkaller-00033-g36d69f6a49eb #0 [ 2183.802489][T22320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2183.812787][T22320] Workqueue: events iterate_cleanup_work [ 2183.818641][T22320] RIP: 0010:ref_tracker_free+0x5de/0x7c0 [ 2183.824487][T22320] Code: 85 e8 8e 70 5b 02 43 0f b6 04 2c 84 c0 4c 8b 74 24 08 0f 85 c9 01 00 00 41 8b 3f e8 dc e8 ff ff 4c 89 f6 eb 84 e8 72 f1 e5 fe <0f> 0b 4d 85 ff 0f 85 d3 fa ff ff 4c 8b 24 24 4d 8d 74 24 0c 4c 89 [ 2183.844162][T22320] RSP: 0018:ffffc9000e107b20 EFLAGS: 00010293 [ 2183.850264][T22320] RAX: ffffffff828a05ae RBX: 1ffff92001c20f68 RCX: ffff88811bba8000 [ 2183.858279][T22320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e107be0 [ 2183.866264][T22320] RBP: ffffc9000e107c50 R08: dffffc0000000000 R09: ffffc9000e107b60 [ 2183.874285][T22320] R10: fffff52001c20f7c R11: 1ffff92001c20f6c R12: ffff88810b93d820 [ 2183.882295][T22320] R13: dffffc0000000000 R14: ffffc9000e107b60 R15: ffff88810e47e2b8 [ 2183.890306][T22320] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2183.899265][T22320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2183.905862][T22320] CR2: 0000200000937000 CR3: 0000000006e0f000 CR4: 00000000003506b0 [ 2183.913906][T22320] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2183.921889][T22320] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2183.929890][T22320] Call Trace: [ 2183.933169][T22320] [ 2183.936103][T22320] ? __this_cpu_preempt_check+0x13/0x20 [ 2183.941695][T22320] ? __perf_event_task_sched_in+0x188/0x1d0 [ 2183.947599][T22320] ? __cfi_ref_tracker_free+0x10/0x10 [ 2183.953045][T22320] ? __cfi_device_cmp+0x10/0x10 [ 2183.958098][T22320] ? __kasan_check_read+0x11/0x20 [ 2183.963145][T22320] ? nf_ct_iterate_cleanup_net+0xe8/0x130 [ 2183.968958][T22320] iterate_cleanup_work+0x105/0x1f0 [ 2183.974173][T22320] ? __cfi_iterate_cleanup_work+0x10/0x10 [ 2183.979938][T22320] ? __schedule+0xb8f/0x14e0 [ 2183.984546][T22320] process_one_work+0x71f/0xc40 [ 2183.989437][T22320] worker_thread+0xa29/0x11f0 [ 2183.994127][T22320] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 2183.999640][T22320] kthread+0x281/0x320 [ 2184.003713][T22320] ? __cfi_worker_thread+0x10/0x10 [ 2184.008870][T22320] ? __cfi_kthread+0x10/0x10 [ 2184.013461][T22320] ret_from_fork+0x1f/0x30 [ 2184.017913][T22320] [ 2184.020937][T22320] ---[ end trace 0000000000000000 ]--- [ 2184.038599][ T1078] bridge0: port 2(bridge_slave_1) entered disabled state [ 2184.167312][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2184.180911][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2184.217989][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2184.232239][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2184.242243][ T1078] bridge0: port 1(bridge_slave_0) entered blocking state [ 2184.249336][ T1078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2184.258595][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2184.267158][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2184.275751][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 2184.282810][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2184.290647][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2184.298989][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2184.308332][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2184.318158][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2186.332534][T28940] device veth0_vlan entered promiscuous mode [ 2186.345194][T28940] device veth1_macvtap entered promiscuous mode [ 2186.366113][ T28] audit: type=1400 audit(2000002969.328:2679): avc: denied { mounton } for pid=28940 comm="syz-executor" path="/root/syzkaller.C7Dl04/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 2186.396445][T28997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7986'. [ 2186.402997][ T28] audit: type=1400 audit(2000002969.358:2680): avc: denied { mounton } for pid=28940 comm="syz-executor" path="/root/syzkaller.C7Dl04/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 2186.442855][ T28] audit: type=1400 audit(2000002969.358:2681): avc: denied { mounton } for pid=28940 comm="syz-executor" path="/root/syzkaller.C7Dl04/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=76713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 2186.468141][T28073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2186.484850][ T28] audit: type=1400 audit(2000002969.358:2682): avc: denied { mounton } for pid=28940 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 2186.516071][ T28] audit: type=1400 audit(2000002969.358:2683): avc: denied { mounton } for pid=28940 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 2186.541604][T28073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2186.551200][T28073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2186.598566][T28073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2186.622192][T28073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2186.630541][T28073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2186.639001][T28073] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2187.337806][T28073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2187.347682][T28073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2187.360339][T28073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2187.436341][T28073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2187.459347][ T28] audit: type=1326 audit(2000002970.428:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29015 comm="syz.0.7991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b538e929 code=0x7ffc0000 [ 2187.466888][T28073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2187.490239][ T28] audit: type=1326 audit(2000002970.428:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29015 comm="syz.0.7991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70b538e929 code=0x7ffc0000 [ 2188.708114][ T28] audit: type=1326 audit(2000002970.428:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29015 comm="syz.0.7991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b538e929 code=0x7ffc0000 [ 2188.768655][T28073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2188.798635][ T28] audit: type=1326 audit(2000002970.428:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29015 comm="syz.0.7991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70b538e929 code=0x7ffc0000 [ 2188.823913][ T28] audit: type=1326 audit(2000002970.428:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29015 comm="syz.0.7991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b538e929 code=0x7ffc0000 [ 2190.997386][T29037] device pim6reg1 entered promiscuous mode [ 2192.007302][ T4189] device veth1_macvtap left promiscuous mode [ 2192.013997][ T4189] device veth0_vlan left promiscuous mode [ 2192.996576][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 2192.996591][ T28] audit: type=1326 audit(2000002975.958:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29076 comm="syz.1.8003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7fc00000 [ 2193.056656][ T28] audit: type=1326 audit(2000002976.018:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29076 comm="syz.1.8003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7fc00000 [ 2193.116543][ T28] audit: type=1326 audit(2000002976.078:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29076 comm="syz.1.8003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7fc00000 [ 2193.176575][ T28] audit: type=1326 audit(2000002976.138:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29076 comm="syz.1.8003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7fc00000 [ 2193.249299][ T28] audit: type=1326 audit(2000002976.218:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29076 comm="syz.1.8003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7fc00000 [ 2193.296554][ T28] audit: type=1326 audit(2000002976.258:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29076 comm="syz.1.8003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7fc00000 [ 2193.384501][T29085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8005'. [ 2193.665442][ T28] audit: type=1326 audit(2000002976.628:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29076 comm="syz.1.8003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7fc00000 [ 2193.689099][ T28] audit: type=1326 audit(2000002976.628:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29076 comm="syz.1.8003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb88b8e929 code=0x7fc00000 [ 2193.722814][ T28] audit: type=1326 audit(2000002976.628:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29076 comm="syz.1.8003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb88b8e929 code=0x7fc00000 [ 2200.090643][T29130] bridge0: port 2(00ªX¹¦Dö») entered blocking state [ 2200.097459][T29130] bridge0: port 2(00ªX¹¦Dö») entered disabled state [ 2200.104698][T29130] device 00ªX¹¦Dö» entered promiscuous mode [ 2201.012498][T29140] loop5: detected capacity change from 0 to 512 [ 2201.045289][T29140] EXT4-fs (loop5): Test dummy encryption mode enabled [ 2201.062463][T29140] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 2201.121464][T29140] EXT4-fs (loop5): 1 truncate cleaned up [ 2201.158807][T29140] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2201.804223][T29153] device batadv_slave_0 entered promiscuous mode [ 2203.311661][T29160] input: syz1 as /devices/virtual/input/input6 [ 2203.371591][ T28] audit: type=1400 audit(2000002986.278:2726): avc: denied { ioctl } for pid=29134 comm="syz.5.8017" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2203.484934][ T28] audit: type=1400 audit(2000002986.338:2727): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=793 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2205.661927][T28940] EXT4-fs (loop5): unmounting filesystem. [ 2205.694187][ T28] audit: type=1400 audit(2000002986.338:2728): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=793 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2205.720446][ T28] audit: type=1400 audit(2000002986.338:2729): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=793 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2206.078690][T29186] loop5: detected capacity change from 0 to 512 [ 2206.113558][T29186] EXT4-fs: Ignoring removed i_version option [ 2206.119755][T29186] EXT4-fs: Ignoring removed nobh option [ 2206.125408][T29186] ext4: Unknown parameter 'dont_appraise' [ 2206.163670][T29184] overlayfs: failed to clone upperpath [ 2206.330006][ T393] ================================================================== [ 2206.338084][ T393] BUG: KASAN: use-after-free in tcp_metrics_flush_all+0xd3/0x210 [ 2206.345814][ T393] Read of size 4 at addr ffff88810b93d80c by task kworker/u4:24/393 [ 2206.353795][ T393] [ 2206.356119][ T393] CPU: 0 PID: 393 Comm: kworker/u4:24 Tainted: G W 6.1.141-syzkaller-00033-g36d69f6a49eb #0 [ 2206.367572][ T393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2206.377630][ T393] Workqueue: netns cleanup_net [ 2206.382423][ T393] Call Trace: [ 2206.385702][ T393] [ 2206.388634][ T393] __dump_stack+0x21/0x24 [ 2206.392971][ T393] dump_stack_lvl+0xee/0x150 [ 2206.397649][ T393] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2206.402675][ T393] ? __cfi__printk+0x8/0x8 [ 2206.407092][ T393] ? tcp_metrics_flush_all+0xd3/0x210 [ 2206.412461][ T393] print_address_description+0x71/0x210 [ 2206.418009][ T393] print_report+0x4a/0x60 [ 2206.422340][ T393] kasan_report+0x122/0x150 [ 2206.426878][ T393] ? tcp_metrics_flush_all+0xd3/0x210 [ 2206.432309][ T393] kasan_check_range+0x280/0x290 [ 2206.437254][ T393] __kasan_check_read+0x11/0x20 [ 2206.442109][ T393] tcp_metrics_flush_all+0xd3/0x210 [ 2206.447312][ T393] ? __cfi_tcp_net_metrics_exit_batch+0x10/0x10 [ 2206.453560][ T393] tcp_net_metrics_exit_batch+0x10/0x20 [ 2206.459111][ T393] cleanup_net+0x62d/0xb00 [ 2206.463532][ T393] ? __cfi_cleanup_net+0x10/0x10 [ 2206.468465][ T393] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 2206.473930][ T393] process_one_work+0x71f/0xc40 [ 2206.478783][ T393] worker_thread+0xa29/0x11f0 [ 2206.483458][ T393] kthread+0x281/0x320 [ 2206.487524][ T393] ? __cfi_worker_thread+0x10/0x10 [ 2206.492630][ T393] ? __cfi_kthread+0x10/0x10 [ 2206.497218][ T393] ret_from_fork+0x1f/0x30 [ 2206.501635][ T393] [ 2206.504643][ T393] [ 2206.507051][ T393] Allocated by task 285: [ 2206.511294][ T393] kasan_set_track+0x4b/0x70 [ 2206.515891][ T393] kasan_save_alloc_info+0x25/0x30 [ 2206.521011][ T393] __kasan_slab_alloc+0x72/0x80 [ 2206.525868][ T393] slab_post_alloc_hook+0x4f/0x2d0 [ 2206.531001][ T393] kmem_cache_alloc+0x16e/0x330 [ 2206.535873][ T393] copy_net_ns+0x145/0x5c0 [ 2206.540295][ T393] create_new_namespaces+0x3a2/0x660 [ 2206.545588][ T393] unshare_nsproxy_namespaces+0x120/0x170 [ 2206.551323][ T393] ksys_unshare+0x4ac/0x7b0 [ 2206.555836][ T393] __x64_sys_unshare+0x38/0x40 [ 2206.560611][ T393] x64_sys_call+0x767/0x9a0 [ 2206.565127][ T393] do_syscall_64+0x4c/0xa0 [ 2206.569548][ T393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2206.575446][ T393] [ 2206.577769][ T393] Freed by task 4189: [ 2206.581746][ T393] kasan_set_track+0x4b/0x70 [ 2206.586442][ T393] kasan_save_free_info+0x31/0x50 [ 2206.591475][ T393] ____kasan_slab_free+0x132/0x180 [ 2206.596591][ T393] __kasan_slab_free+0x11/0x20 [ 2206.601357][ T393] slab_free_freelist_hook+0xc2/0x190 [ 2206.606737][ T393] kmem_cache_free+0x12d/0x300 [ 2206.611511][ T393] cleanup_net+0xa58/0xb00 [ 2206.615930][ T393] process_one_work+0x71f/0xc40 [ 2206.620784][ T393] worker_thread+0xa29/0x11f0 [ 2206.625456][ T393] kthread+0x281/0x320 [ 2206.629524][ T393] ret_from_fork+0x1f/0x30 [ 2206.633948][ T393] [ 2206.636263][ T393] Last potentially related work creation: [ 2206.641968][ T393] kasan_save_stack+0x3a/0x60 [ 2206.646644][ T393] __kasan_record_aux_stack+0xb6/0xc0 [ 2206.652016][ T393] kasan_record_aux_stack_noalloc+0xb/0x10 [ 2206.657821][ T393] insert_work+0x51/0x300 [ 2206.662148][ T393] __queue_work+0x9b1/0xd30 [ 2206.666643][ T393] delayed_work_timer_fn+0x61/0x80 [ 2206.671758][ T393] call_timer_fn+0x46/0x2a0 [ 2206.676265][ T393] __run_timers+0x667/0x9a0 [ 2206.680776][ T393] run_timer_softirq+0xb8/0xf0 [ 2206.685534][ T393] handle_softirqs+0x1d7/0x600 [ 2206.690288][ T393] __irq_exit_rcu+0x52/0xf0 [ 2206.694775][ T393] irq_exit_rcu+0x9/0x10 [ 2206.698996][ T393] sysvec_call_function_single+0xa6/0xc0 [ 2206.704610][ T393] asm_sysvec_call_function_single+0x1b/0x20 [ 2206.710567][ T393] [ 2206.712866][ T393] Second to last potentially related work creation: [ 2206.719423][ T393] kasan_save_stack+0x3a/0x60 [ 2206.724082][ T393] __kasan_record_aux_stack+0xb6/0xc0 [ 2206.729435][ T393] kasan_record_aux_stack_noalloc+0xb/0x10 [ 2206.735225][ T393] insert_work+0x51/0x300 [ 2206.739538][ T393] __queue_work+0x9b1/0xd30 [ 2206.744023][ T393] queue_work_on+0xd2/0x140 [ 2206.748505][ T393] __xfrm_state_insert+0xa12/0xcd0 [ 2206.753603][ T393] xfrm_state_add+0x57b/0xe50 [ 2206.758264][ T393] pfkey_add+0x1cda/0x2ca0 [ 2206.762658][ T393] pfkey_sendmsg+0xbae/0xfe0 [ 2206.767235][ T393] ____sys_sendmsg+0x5a9/0x990 [ 2206.771980][ T393] ___sys_sendmsg+0x21c/0x290 [ 2206.776643][ T393] __sys_sendmmsg+0x274/0x460 [ 2206.781298][ T393] __x64_sys_sendmmsg+0xa0/0xb0 [ 2206.786126][ T393] x64_sys_call+0x3f5/0x9a0 [ 2206.790609][ T393] do_syscall_64+0x4c/0xa0 [ 2206.795037][ T393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2206.800910][ T393] [ 2206.803212][ T393] The buggy address belongs to the object at ffff88810b93d780 [ 2206.803212][ T393] which belongs to the cache net_namespace of size 4224 [ 2206.817504][ T393] The buggy address is located 140 bytes inside of [ 2206.817504][ T393] 4224-byte region [ffff88810b93d780, ffff88810b93e800) [ 2206.830845][ T393] [ 2206.833150][ T393] The buggy address belongs to the physical page: [ 2206.839535][ T393] page:ffffea00042e4e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88810b938000 pfn:0x10b938 [ 2206.851056][ T393] head:ffffea00042e4e00 order:3 compound_mapcount:0 compound_pincount:0 [ 2206.859358][ T393] flags: 0x4000000000010200(slab|head|zone=1) [ 2206.865420][ T393] raw: 4000000000010200 ffffea0004385008 ffffea00042ffa08 ffff8881002adc80 [ 2206.873983][ T393] raw: ffff88810b938000 0000000000070003 00000001ffffffff 0000000000000000 [ 2206.882539][ T393] page dumped because: kasan: bad access detected [ 2206.888927][ T393] page_owner tracks the page as allocated [ 2206.894617][ T393] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 285, tgid 285 (syz-executor), ts 21596099472, free_ts 20776640477 [ 2206.915780][ T393] post_alloc_hook+0x1f5/0x210 [ 2206.920539][ T393] prep_new_page+0x1c/0x110 [ 2206.925024][ T393] get_page_from_freelist+0x2c7b/0x2cf0 [ 2206.930560][ T393] __alloc_pages+0x19e/0x3a0 [ 2206.935132][ T393] alloc_slab_page+0x6e/0xf0 [ 2206.939704][ T393] new_slab+0x98/0x3d0 [ 2206.943763][ T393] ___slab_alloc+0x6f6/0xb50 [ 2206.948421][ T393] __slab_alloc+0x5e/0xa0 [ 2206.952737][ T393] kmem_cache_alloc+0x1b0/0x330 [ 2206.957569][ T393] copy_net_ns+0x145/0x5c0 [ 2206.961981][ T393] create_new_namespaces+0x3a2/0x660 [ 2206.967251][ T393] unshare_nsproxy_namespaces+0x120/0x170 [ 2206.972955][ T393] ksys_unshare+0x4ac/0x7b0 [ 2206.977446][ T393] __x64_sys_unshare+0x38/0x40 [ 2206.982194][ T393] x64_sys_call+0x767/0x9a0 [ 2206.986683][ T393] do_syscall_64+0x4c/0xa0 [ 2206.991099][ T393] page last free stack trace: [ 2206.995752][ T393] free_unref_page_prepare+0x742/0x750 [ 2207.001195][ T393] free_unref_page+0x8f/0x530 [ 2207.005882][ T393] __free_pages+0x67/0x100 [ 2207.010281][ T393] __free_slab+0xca/0x1a0 [ 2207.014594][ T393] discard_slab+0x29/0x40 [ 2207.018909][ T393] __slab_free+0x201/0x280 [ 2207.023307][ T393] ___cache_free+0xbf/0xd0 [ 2207.027706][ T393] qlist_free_all+0xc6/0x140 [ 2207.032283][ T393] kasan_quarantine_reduce+0x14a/0x170 [ 2207.037728][ T393] __kasan_slab_alloc+0x24/0x80 [ 2207.042560][ T393] slab_post_alloc_hook+0x4f/0x2d0 [ 2207.047654][ T393] kmem_cache_alloc+0x16e/0x330 [ 2207.052500][ T393] vm_area_dup+0x27/0x280 [ 2207.056811][ T393] __split_vma+0x1b6/0x840 [ 2207.061209][ T393] do_mas_align_munmap+0x2f6/0x11b0 [ 2207.066392][ T393] do_mas_munmap+0x241/0x2b0 [ 2207.070986][ T393] [ 2207.073290][ T393] Memory state around the buggy address: [ 2207.078900][ T393] ffff88810b93d700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2207.086940][ T393] ffff88810b93d780: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2207.094982][ T393] >ffff88810b93d800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2207.103018][ T393] ^ [ 2207.107323][ T393] ffff88810b93d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2207.115361][ T393] ffff88810b93d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2207.123412][ T393] ================================================================== [ 2207.131530][ T393] Disabling lock debugging due to kernel taint [ 2207.507145][ T28] audit: type=1400 audit(2000002990.468:2730): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 2207.549824][ T28] audit: type=1400 audit(2000002990.498:2731): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2207.571428][ T28] audit: type=1400 audit(2000002990.498:2732): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2207.593258][ T28] audit: type=1400 audit(2000002990.498:2733): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2207.613965][ T28] audit: type=1400 audit(2000002990.498:2734): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2207.634556][ T28] audit: type=1400 audit(2000002990.498:2735): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1