last executing test programs: 40m34.129566483s ago: executing program 4 (id=287): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mprotect(&(0x7f00001a7000/0x1000)=nil, 0x1000, 0x1000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000a000000800004801300010062726f6164636173742d6c696e6b000024"], 0x94}}, 0x0) 40m32.464861797s ago: executing program 4 (id=291): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d7, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) 40m31.219082575s ago: executing program 4 (id=296): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00'], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) lchown(0x0, 0x0, 0x0) io_setup(0x7f, 0x0) 40m30.15712249s ago: executing program 4 (id=298): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@test_dummy_encryption_v1}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 40m29.109280375s ago: executing program 4 (id=304): socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x4004010) 40m28.707626691s ago: executing program 4 (id=307): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x38, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) 40m27.085384024s ago: executing program 32 (id=307): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x38, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) 40m25.438370727s ago: executing program 5 (id=308): futex(0x0, 0x2, 0x4, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='sched_switch\x00', r3}, 0x18) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000050000000800000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000580), 0x1000, r4}, 0x38) 40m24.58259604s ago: executing program 5 (id=316): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@test_dummy_encryption_v1}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 40m22.799280325s ago: executing program 5 (id=320): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 40m22.673739297s ago: executing program 5 (id=321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x5a, &(0x7f0000000000), 0x1, 0x2b0, &(0x7f0000001780)="$eJzs3M1qE10cx/Ffk+bp29Mmz6NW240H3ehm0HoFobQgRpTaiG8IUzLVkJiUTMBEBOvWlTfhprgSd4J4A8UrcOdCKIJ01VVHMpM0aZJC1baT2O+Hwjkz/2Y45/xPJicwJxt3Xj/JLbvWsl1WZMBoUFrVlpRQRFEFBuplxK//o1aruvgms/nq1t1715Kp1NyCMfPJxSszxpiJsx+fPn977lN57Pb7iQ9DWk883Pgx83V9cn1qY3vxcdY1WdcUimVjm6VisWwv5R2Tybo5y5ibecd2HZMtuE5pV3w5X1xZqRq7kBkfXSk5rmvsQtXknKopF025VDX2IztbMJZlmfHRegtHdOxE9vVfjYFJHmpbELpSKWnPSppW+9xIr4XWKAAAEJqu6//aX4v+Xv/vyXtxsEPZh9JrCws26/+/UqxePvDX//e7fi1k/Q8AAAAAAAAAAAAAAAAAAAAAQD/Y8ry45zV2+nvxmOTv8PH88158RNKopDFJ/0oalzQhKS4pIen6mPS/pBOSTko6JWlS0mlJZyRNtVwr5K6ii616bhrlr+b/P5H/fvbH+Y82r7Xv/L+LhdNZdOD9f7y1bNwdlr6vVtKVdFAG8fmrqblLxpdovmqzUklHd+KXg7jZHR/y500tPtM1PqwL54N4LTZ7I9UWn1Zm53jbO8wxOM4ss6Nrfi1rr3hQa86PIe2OD2p6MDj6fCQ9we9wq89ydj7vlHquEuzOr02h3mhPa2VEHaHhgxnMaOeV+7cS641mdFa+qSea0V5pfMqF1YzGLdw/E9otCUeomf39/mwgAAAAAAAAAAAAAAAAAKAXHNbjhC+/NJ/bDbuPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0+xkAAP//Caf2bg==") open(0x0, 0x64042, 0x169) 40m22.555547019s ago: executing program 33 (id=321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x5a, &(0x7f0000000000), 0x1, 0x2b0, &(0x7f0000001780)="$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") open(0x0, 0x64042, 0x169) 24m0.902389618s ago: executing program 6 (id=3193): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) 23m59.861492912s ago: executing program 6 (id=3199): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) io_uring_setup(0x3efa, &(0x7f0000000000)={0x0, 0x0, 0x1840, 0x2, 0x10000}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000200)=0x20008, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') 23m55.579510874s ago: executing program 6 (id=3213): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0), 0x0, 0x4001c00) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r5, &(0x7f0000002080)={0x2020}, 0x2020) 23m54.556700379s ago: executing program 6 (id=3216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) futimesat(r0, &(0x7f0000000440)='./file1\x00', &(0x7f0000000400)={{r5, r6/1000+10000}, {0x0, 0x2710}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x18) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") 23m52.360547341s ago: executing program 6 (id=3223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x8000, &(0x7f0000000440)={[{@errors_remount}, {@grpid}, {@init_itable}, {@orlov}, {@grpid}]}, 0x0, 0x63b, &(0x7f0000001bc0)="$eJzs3c9rG9kdAPDvjCwnTtw6KaU0aUsNPSRQothpaNqekvTQHAINNIdSeoiJ7dRE+UHsQOIG4kAPLbRQSq+l5NJ/oPRafC29lcJubnteyC5Ldvewu0TLjEa2Ikux1rYsbebzgZHevBnpva9GT++NRqMJoLSms5s04lhEXEsiptqWTbatk00vPnh0PZuSaDR+8X4SSZHXWv9lcX84u0maj/nfxYivVbaWu/xw9eZcvdH0OOL0yq27p5cfrp5aujV3Y+HGwu3ZMz86e27mx7P/2Zs4Dxf3ly7//Nt/+t1vfrj4//qpJM7H1epv56Mjjr0y3Xx1IwuxPX8sIs5liS6vC+ynSvF+rEbEN2IqKvlc01Qs/XGolQMGqlFp9k+N8QZQOkkMuwbAcLTGAa19+0HsB4+y5xey2wdd4h8r9t4P5vtGh14kbXtGWW7EkT0ofy0iPnt0/G/ZFD2+hxjbg3J6lv8kIr7ZbfsnefxH8kiz+NNI2x6XpWeK7zay+v10F3VI2tL9vf8e76K0V32R+Nu3Qxb/+eI+y7/Y4/m3+4pnumO+bO0PgOFYv1B05NlAJDb7v2xk2Br/RDH+2dD4V35sqLPv2one/V+6B8++vXz8N9at/2/19wfzPjztGIclsfbRle5PWe3MeOcPl/7Sq/zptvFfNmXlt8aCfdj10PD5k4jjHfH/Pn/pk43tn3QZ/2arXOuzjJ+99d6lXst2Gf+uNZ5GnOi6/7P5fs9SHccnk2gdnzw7e3pxqb4w07ztWsa///vrf/Qqf9jxZ9v/0Cvxr36rueT12z/Lu9tnGf+88vRWM3Vgy7LJbeNP3x1Pruap8fx2s3mNJ5eLVZp3D+ZWVu6deX1dWuvk97PN+E9+r3v77xF/vvMx0frI7MPdX9580foc7bTL7f+y0eeKvWTxz/d4/2+3/f/cZxkf/+r+d7ouaL0kr8S/+Z3ExA5jAgAAAAAAgLJK82OwSVrbSKdprTjw9vU4lNbvLK98f/HO/dvzESfz30NW09aR7qnmfJLNzxa/h23Nn+mY/0FEHI2Iv1Ym8vna9Wp9ftjBAwAAAAAAAAAAAAAAAAAAwIg4XJz//7K4HtiHlTSt1YZdK2DfDPICc8Bo0/6hvPL2vz/XWwNGjP4fyqtr+/ehAKWgqUN5af9QXto/lJf2D+Wl/UN59W7/W5Y8GXRdAAAAAIA9c/S768/GImLtJxP5lBkvllWHWjNg0DrauCOBUCKVYVcAGJqNDt/p/1A6fe3jf1L8OeDgqwMMQdItMx8cNF7f+Ne7PhIAAAAAAAAAAAAAGIATx9afJc7/h1Jy2h+U187O/6/s/KHAyOj2hz/+BAjKwT4+lFwfXwIc7LXA+f8AAAAAAAAAAAAAsG8m8ylJa8XPgCcjTWu1iK9ExJGoJotL9YWZiPhqRLxdqR7I5meHXWkAAAAAAAAAAAAAAAAAAAB4wyw/XL05V68v3GtPfLol581OtK54Oir1aU9EMvAi0ujImYiIUYh9MImxtpwkYi3b8nvxzMnu3z8xCq9PkRjyBxMAAAAAAAAAAAAAAAAAAJRQ27nH3R3/+z7XCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD23+b1/weXGHaMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCX0+cBAAD///ULOhA=") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000000000f9ffff00"/24], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r4}, 0x10) r5 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000340)={0x0, {{0xa, 0x2, 0x0, @mcast1}}}, 0x88) 23m52.305133732s ago: executing program 6 (id=3224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x51d2, &(0x7f0000000140)={0x0, 0x3957, 0x1000, 0x2, 0x402d7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000711828000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0xd8da7}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r5}, 0x10) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf25001700000000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) 23m52.132266624s ago: executing program 34 (id=3224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x51d2, &(0x7f0000000140)={0x0, 0x3957, 0x1000, 0x2, 0x402d7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000711828000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0xd8da7}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r5}, 0x10) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf25001700000000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) 2.920252018s ago: executing program 2 (id=10161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) close(r1) 2.896717839s ago: executing program 2 (id=10163): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = dup(r0) write$UHID_INPUT(r6, &(0x7f0000000000)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b09719b711b5d52101b080d29308f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6fa94fc488ec2c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1386abdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060fb30e900caab415db6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf475bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d060000008926407a4eddd5d0fc5a752f9000", 0xd54}}, 0x1051) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000001040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.184921609s ago: executing program 3 (id=10191): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x1fa3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x34, 0x2c, 0xd21, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0xffe0, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48054}, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 2.13687548s ago: executing program 3 (id=10192): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000340)=@x86={0x4, 0xfe, 0xff, 0x0, 0x8f5, 0xa, 0x81, 0x3, 0x28, 0x8, 0x6, 0x3, 0x0, 0x8, 0xe0e7, 0x4, 0x6, 0x2, 0x9, '\x00', 0x2, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"]) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.13648356s ago: executing program 7 (id=10193): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$inet(0x2, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x125d, &(0x7f0000001080)) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fstatfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.1362641s ago: executing program 3 (id=10194): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes128, 0x1, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') open(&(0x7f0000000080)='./bus\x00', 0x169242, 0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) 2.10853521s ago: executing program 3 (id=10196): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f0000000640)={0xb33, 0x5, 0x2, 0xc679, 0x2, [0x7, 0xff, 0x7, 0x3]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40c040, &(0x7f0000000080)={[{@data_journal}]}, 0x1, 0x53a, &(0x7f00000000c0)="$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") 1.801141234s ago: executing program 0 (id=10202): r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x4000}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc018aec0, &(0x7f00000000c0)={0x4}) 1.689876596s ago: executing program 7 (id=10203): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) close(r1) 1.612322987s ago: executing program 7 (id=10206): socketpair(0x1, 0x1, 0x0, &(0x7f00000005c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000200)='fib_table_lookup\x00', r2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 1.571680307s ago: executing program 7 (id=10207): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005300000085000000080000009500000000000000a94be0c51261be6a99e5e06bb0a232d5e107000000000000007cde9e8f4b9197701b547edf612a03f1737d951d7a617558b674e1c4fdfd771ebe7c33af3e4917be59ac67f0bbabcb8f41c23ba8f91633a8b9c70e804744dc081ac69cfea08e4e5a06f70c67a8f2888d6fd95f20202866918c3c3771bc3f325a6386a9d49e3c13b32461acf0be4b31638c29187d748841f439547b4dac15e52a4b6a2981eb4afadbbdf9157fa588f475c4cd2e44e2129dc6b93993909613e8"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.329813601s ago: executing program 2 (id=10208): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 1.311535801s ago: executing program 2 (id=10209): pipe(&(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0xfffffffd) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001640)=ANY=[@ANYBLOB="02010009080000000000000000000000030005000000000002000000ac1414000000000000000000030006000000000002000000ac1414c21ba6699a7b5cae00"], 0x40}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="020100030a0000000000000000000000020010000000000200000000000000000300050000000000020000009d1414000000000000000000030006000000000002000000ac14"], 0x50}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0xffc, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xc, &(0x7f0000000500)=ANY=[], 0x0, 0x10, 0x0, 0x0, 0x0, 0x7e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_access(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x56) io_getevents(r3, 0x1, 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000300)={r4, r5+60000000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xc, [@volatile={0x7, 0x0, 0x0, 0x9, 0x1}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x2, 0xffffffffffffffff}, @typedef={0xe, 0x0, 0x0, 0x8, 0x2}, @restrict={0xb}]}, {0x0, [0x30, 0x30, 0x5f, 0x30, 0x5f, 0x5f, 0x2e, 0x61, 0x5f, 0x61]}}, &(0x7f0000000040), 0x58, 0x0, 0x3bf7, 0xe195, 0x0, @void, @value}, 0x28) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 1.184608133s ago: executing program 3 (id=10210): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000000)={[{@nogrpid}, {@jqfmt_vfsv0}, {@test_dummy_encryption}, {@debug}, {@nobarrier}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) r1 = syz_io_uring_setup(0x94f, &(0x7f00000016c0), &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) io_uring_enter(r1, 0x7, 0x464f, 0x1, &(0x7f0000000000), 0x8) io_uring_enter(r1, 0x1815, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x231a, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r0, &(0x7f00000005c0), &(0x7f0000000b40)=""/31}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x5, 0x2, 0x8, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) fallocate(0xffffffffffffffff, 0x20, 0x4000, 0x8000) io_uring_setup(0x38d8, &(0x7f0000001ec0)={0x0, 0x0, 0x8}) 623.986981ms ago: executing program 7 (id=10214): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 576.577562ms ago: executing program 0 (id=10216): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) 499.074723ms ago: executing program 0 (id=10218): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16=r0], 0xdd12}], 0x1}, 0x10) 483.540513ms ago: executing program 0 (id=10219): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000001600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}, {@noblock_validity}, {@usrquota}]}, 0x1, 0x443, &(0x7f0000001040)="$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") close(r1) 398.791145ms ago: executing program 0 (id=10220): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x6) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/195, 0xc3}], 0x1, 0x1fff, 0x3) 348.595575ms ago: executing program 0 (id=10222): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000009c0)='m ', 0x2}], 0x1}, 0x8005) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) 339.254935ms ago: executing program 1 (id=10223): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 317.514196ms ago: executing program 1 (id=10224): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$inet(0x2, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x125d, &(0x7f0000001080)) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fstatfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 214.672067ms ago: executing program 3 (id=10225): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) r4 = syz_open_pts(r3, 0x0) read(r4, &(0x7f0000000240)=""/220, 0xdc) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x4092, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) fchown(0xffffffffffffffff, r1, r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0xffffeffa, 0x18, 0x2, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x5102}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x119102, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff486800090400", @ANYRESOCT=0x0], 0x0) 183.326378ms ago: executing program 2 (id=10226): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 100.004489ms ago: executing program 1 (id=10227): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000380)=@x86={0xc, 0x1, 0x96, 0x0, 0x9, 0x8, 0x5, 0x0, 0x2, 0x81, 0x78, 0x3, 0x0, 0x7, 0xc, 0x1, 0x1, 0x6, 0x10, '\x00', 0x9, 0x3}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x75, 0x0, 0x181, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x4001000000000005, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 44.84687ms ago: executing program 2 (id=10228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x141840, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='rpcgss_import_ctx\x00', r5}, 0xffffffffffffff3c) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="16000000ffff000004000000ff00000000000000ef012c09f77cf62b5c65efa6b30b64a74a790760d59f212bf2753de255", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r6, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) bind$bt_sco(r6, &(0x7f0000000280)={0x1f, @none}, 0x8) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000580)={0x2000, 0x0, &(0x7f0000000040)={&(0x7f00000034c0)=ANY=[@ANYBLOB="020e0000100000000000000000000000030005000000000002000000ac1e0001000000000000000003000600000000000200000000000000000000000000000008001200000002"], 0x80}}, 0x4008844) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140), 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r8, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000ffdbdf250500000005000a005d0000000c00040007000000000000000c00020004000000000000000c00050008000000000000000c000300000000000100000005000a002c0000000c000200070000000000000024e7c62d1958dab2e6723df1c8a318bc8f9afb431e45ee4e88ee2fd1f1777c39b8bc6fa25c9cd1379e5733594e77eca4aee3783ee574e7eb529654d1f5de0b068366247b58b591f8683eda026af6e2f41f8f1ec29c67432691f497073c44a4a4f72b19fb5aaa15eedf202e2693426cc2f6"], 0x60}}, 0x4880) 44.57217ms ago: executing program 1 (id=10229): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, 0x0) utimes(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB], 0x48) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 0'], 0x79) 26.67295ms ago: executing program 1 (id=10230): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0xeeee8000, 0x1000, &(0x7f0000004000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x0, 0xdddd1000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1f9, 0x0, 0x8080000, 0x2000, &(0x7f0000004000/0x2000)=nil}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 17.20469ms ago: executing program 7 (id=10231): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 0s ago: executing program 1 (id=10232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x9}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): .675522][T30787] netlink: 'syz.1.8003': attribute type 4 has an invalid length. [ 2214.690182][T30787] netlink: 'syz.1.8003': attribute type 4 has an invalid length. [ 2215.109051][T30806] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8010'. [ 2215.134986][T30806] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8010'. [ 2215.864051][T30853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8031'. [ 2217.139658][T30885] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2217.410346][T30892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8047'. [ 2217.622448][ T28] audit: type=1326 audit(2000000297.326:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30891 comm="syz.3.8048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2217.686730][ T28] audit: type=1326 audit(2000000297.326:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30891 comm="syz.3.8048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2217.816169][T30900] overlayfs: failed to clone upperpath [ 2217.835657][T30900] syz.7.8050[30900] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2217.835744][T30900] syz.7.8050[30900] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2217.913202][ T28] audit: type=1400 audit(2000000297.556:4064): avc: denied { lock } for pid=30908 comm="syz.7.8055" path="socket:[96724]" dev="sockfs" ino=96724 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2217.941022][T30912] 9pnet: p9_errstr2errno: server reported unknown error [ 2217.950012][ T28] audit: type=1326 audit(2000000297.556:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30908 comm="syz.7.8055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2217.980324][ T28] audit: type=1326 audit(2000000297.556:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30908 comm="syz.7.8055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2218.004180][ T28] audit: type=1326 audit(2000000297.556:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30908 comm="syz.7.8055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2218.202453][T30918] syz.2.8057[30918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2218.202541][T30918] syz.2.8057[30918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2218.814167][T30964] syz.0.8077[30964] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2218.826555][T30964] syz.0.8077[30964] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2218.840270][T30964] syz.0.8077[30964] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2218.853963][T30964] syz.0.8077[30964] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2218.900162][T30970] device veth1_macvtap left promiscuous mode [ 2218.937344][T30970] device macsec0 entered promiscuous mode [ 2218.985257][T30971] tipc: Started in network mode [ 2218.990878][T30971] tipc: Node identity 7f000001, cluster identity 4711 [ 2218.998169][T30971] lo: MTU too low for tipc bearer [ 2219.003970][T30971] tipc: Enabling of bearer rejected, failed to enable media [ 2219.060138][T30979] lo: MTU too low for tipc bearer [ 2219.065281][T30979] tipc: Enabling of bearer rejected, failed to enable media [ 2219.077842][T30979] tipc: Enabling of bearer rejected, failed to enable media [ 2220.208164][T31000] device syzkaller0 entered promiscuous mode [ 2220.277098][T31003] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8093'. [ 2220.350271][ T28] audit: type=1326 audit(2000000299.846:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31007 comm="syz.1.8095" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f653238e929 code=0x0 [ 2220.644828][T31023] incfs: Can't find or create .index dir in ./file0 [ 2220.657647][T31023] incfs: mount failed -5 [ 2220.705573][T15547] Bluetooth: hci0: Frame reassembly failed (-84) [ 2221.826952][ T28] audit: type=1326 audit(2000000301.138:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31039 comm="syz.7.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2221.850707][ T28] audit: type=1326 audit(2000000301.138:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31039 comm="syz.7.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2221.874699][ T28] audit: type=1326 audit(2000000301.138:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31039 comm="syz.7.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2222.913216][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2222.913287][T24858] Bluetooth: hci0: command 0x1003 tx timeout [ 2224.313911][T31476] device ip6gretap0 entered promiscuous mode [ 2224.320150][T31476] device vlan0 entered promiscuous mode [ 2224.564049][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 2224.564066][ T28] audit: type=1326 audit(2000000303.732:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31492 comm="syz.3.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2224.690371][ T28] audit: type=1326 audit(2000000303.769:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31492 comm="syz.3.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2224.875298][ T28] audit: type=1326 audit(2000000303.769:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31492 comm="syz.3.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2224.900204][ T28] audit: type=1326 audit(2000000303.769:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31492 comm="syz.3.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2224.933012][ T28] audit: type=1326 audit(2000000303.769:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31492 comm="syz.3.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2224.960749][ T28] audit: type=1326 audit(2000000303.769:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31492 comm="syz.3.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2225.004793][ T28] audit: type=1326 audit(2000000303.769:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31492 comm="syz.3.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2225.038402][ T28] audit: type=1326 audit(2000000303.769:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31492 comm="syz.3.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2225.066145][ T28] audit: type=1326 audit(2000000303.769:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31492 comm="syz.3.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2225.096713][ T28] audit: type=1326 audit(2000000303.769:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31492 comm="syz.3.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2229.969182][T31559] device wireguard0 entered promiscuous mode [ 2231.953229][T31600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8168'. [ 2235.996552][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 2240.120250][ T28] audit: type=1326 audit(2000000314.255:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31649 comm="syz.1.8177" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f653238e929 code=0x0 [ 2240.183826][T31667] syz.1.8180[31667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2240.183910][T31667] syz.1.8180[31667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2240.200170][T31670] xt_hashlimit: max too large, truncated to 1048576 [ 2240.345537][T31684] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8187'. [ 2241.947246][T31717] syz.7.8197[31717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2241.947327][T31717] syz.7.8197[31717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2241.963420][T31717] syz.7.8197[31717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2241.977751][T31717] syz.7.8197[31717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2243.789303][T31745] futex_wake_op: syz.3.8207 tries to shift op by -1; fix this program [ 2243.890926][T31749] syz.1.8205[31749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2243.891010][T31749] syz.1.8205[31749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2248.938571][T31797] device veth9 entered promiscuous mode [ 2249.017908][T31800] tipc: Failed to remove unknown binding: 66,1,1/0:3577883203/3577883205 [ 2249.475855][ T28] audit: type=1400 audit(2000000326.725:4110): avc: denied { read } for pid=31824 comm="syz.2.8231" name="file0" dev="tmpfs" ino=8275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2249.506362][ T28] audit: type=1400 audit(2000000326.753:4111): avc: denied { add_name } for pid=31824 comm="syz.2.8231" name="file0" dev="tmpfs" ino=8275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 2250.376627][T31842] syz.3.8236[31842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2250.376705][T31842] syz.3.8236[31842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2250.602084][T31843] syz.0.8237[31843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2250.613983][T31843] syz.0.8237[31843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2250.977761][ T28] audit: type=1326 audit(2000000328.119:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31845 comm="syz.1.8238" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f653238e929 code=0x0 [ 2252.203020][T31877] overlayfs: failed to clone upperpath [ 2253.407953][T31894] xt_hashlimit: size too large, truncated to 1048576 [ 2255.510033][T31916] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 2255.517441][T31916] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 2255.524729][T31916] IPv6: ADDRCONF(NETDEV_CHANGE): 30ªX¹¦D: link becomes ready [ 2255.532559][T31916] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 2255.540095][T31916] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 2255.547611][T31916] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 2255.556270][T31916] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2255.566230][T31916] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 2255.594627][T31919] netlink: 120 bytes leftover after parsing attributes in process `syz.2.8260'. [ 2255.693448][T31919] 9pnet: Could not find request transport: rdma [ 2258.709075][T31954] overlayfs: failed to clone upperpath [ 2258.798755][T31972] device wireguard0 entered promiscuous mode [ 2260.678337][T32014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8289'. [ 2261.342968][T32026] IPv6: sit4: Disabled Multicast RS [ 2261.667795][T32036] device veth17 entered promiscuous mode [ 2264.209290][T32083] overlayfs: failed to clone upperpath [ 2265.263835][T32091] 9pnet_virtio: no channels available for device syz [ 2266.166245][ T28] audit: type=1326 audit(2000000001.043:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32104 comm="syz.7.8317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2266.275907][ T28] audit: type=1326 audit(2000000001.043:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32104 comm="syz.7.8317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2266.301942][ T28] audit: type=1326 audit(2000000001.070:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32104 comm="syz.7.8317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2266.325704][ T28] audit: type=1326 audit(2000000001.070:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32104 comm="syz.7.8317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2266.349734][ T28] audit: type=1326 audit(2000000001.070:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32104 comm="syz.7.8317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2266.373801][ T28] audit: type=1326 audit(2000000001.070:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32104 comm="syz.7.8317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2266.397971][ T28] audit: type=1326 audit(2000000001.070:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32104 comm="syz.7.8317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2266.786102][ T28] audit: type=1326 audit(2000000001.070:4120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32104 comm="syz.7.8317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2266.814472][ T28] audit: type=1326 audit(2000000001.070:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32104 comm="syz.7.8317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2266.839328][ T28] audit: type=1326 audit(2000000001.070:4122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32104 comm="syz.7.8317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2271.445364][T32173] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2271.459937][T32173] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 2271.482141][T32173] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 2271.492707][T32173] IPv6: ADDRCONF(NETDEV_CHANGE): 00ªX¹¦Dö»: link becomes ready [ 2271.502016][T32173] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 2271.511824][T32173] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 2271.519910][T32173] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 2271.528786][T32173] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2272.192266][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 2272.192283][ T28] audit: type=1326 audit(2000000006.599:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32190 comm="syz.0.8340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebf8e929 code=0x7ffc0000 [ 2272.223845][ T28] audit: type=1326 audit(2000000006.599:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32190 comm="syz.0.8340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebf8e929 code=0x7ffc0000 [ 2272.247940][ T28] audit: type=1326 audit(2000000006.599:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32190 comm="syz.0.8340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfebf8e929 code=0x7ffc0000 [ 2272.272768][ T28] audit: type=1326 audit(2000000006.599:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32190 comm="syz.0.8340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebf8e929 code=0x7ffc0000 [ 2272.297182][ T28] audit: type=1326 audit(2000000006.599:4166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32190 comm="syz.0.8340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebf8e929 code=0x7ffc0000 [ 2272.323090][ T28] audit: type=1326 audit(2000000006.599:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32190 comm="syz.0.8340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfebf8e929 code=0x7ffc0000 [ 2272.347474][ T28] audit: type=1326 audit(2000000006.599:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32190 comm="syz.0.8340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebf8e929 code=0x7ffc0000 [ 2272.371539][ T28] audit: type=1326 audit(2000000006.599:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32190 comm="syz.0.8340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebf8e929 code=0x7ffc0000 [ 2272.403441][ T28] audit: type=1326 audit(2000000006.599:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32190 comm="syz.0.8340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfebf8e929 code=0x7ffc0000 [ 2272.427641][ T28] audit: type=1326 audit(2000000006.599:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32190 comm="syz.0.8340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebf8e929 code=0x7ffc0000 [ 2272.883558][T32200] overlayfs: failed to resolve './file1': -2 [ 2276.852944][T32260] device syzkaller0 entered promiscuous mode [ 2277.699130][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 2277.699149][ T28] audit: type=1400 audit(2000000011.492:4229): avc: denied { create } for pid=32261 comm="syz.7.8362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2277.794502][T32277] netlink: 'syz.2.8366': attribute type 3 has an invalid length. [ 2278.529336][ T28] audit: type=1400 audit(2000000012.451:4230): avc: denied { append } for pid=32283 comm="syz.0.8369" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2279.919606][ T28] audit: type=1400 audit(2000000013.559:4231): avc: denied { remount } for pid=32295 comm="syz.3.8371" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2280.446071][ T28] audit: type=1400 audit(2000000014.224:4232): avc: denied { read write } for pid=32306 comm="syz.0.8374" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 2280.519250][ T28] audit: type=1400 audit(2000000014.224:4233): avc: denied { open } for pid=32306 comm="syz.0.8374" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 2280.573592][ T28] audit: type=1400 audit(2000000014.251:4234): avc: denied { mounton } for pid=32306 comm="syz.0.8374" path="/1600/file0" dev="tmpfs" ino=8763 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2280.607985][ T28] audit: type=1400 audit(2000000014.251:4235): avc: denied { mount } for pid=32306 comm="syz.0.8374" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2280.696414][ T28] audit: type=1400 audit(2000000014.344:4236): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2280.732830][ T28] audit: type=1400 audit(2000000014.482:4237): avc: denied { execute } for pid=32310 comm="syz.3.8375" dev="tmpfs" ino=4914 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2280.754368][ T28] audit: type=1400 audit(2000000014.482:4238): avc: denied { execute_no_trans } for pid=32310 comm="syz.3.8375" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=4914 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2281.682221][T32339] serio: Serial port ptm0 [ 2286.229692][T32394] futex_wake_op: syz.1.8398 tries to shift op by -1; fix this program [ 2286.724009][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 2286.724024][ T28] audit: type=1400 audit(2000000020.021:4283): avc: denied { getopt } for pid=32396 comm="syz.7.8399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2286.828255][T32408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32408 comm=syz.2.8401 [ 2286.841110][ T28] audit: type=1400 audit(2000000020.057:4284): avc: denied { getopt } for pid=32396 comm="syz.7.8399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2286.841146][ T28] audit: type=1400 audit(2000000020.057:4285): avc: denied { write } for pid=32396 comm="syz.7.8399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2286.884453][ T28] audit: type=1400 audit(2000000020.168:4286): avc: denied { ioctl } for pid=32406 comm="syz.2.8401" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=99393 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2286.919871][T32410] overlayfs: failed to clone upperpath [ 2287.058172][ T28] audit: type=1400 audit(2000000020.325:4287): avc: denied { read } for pid=32398 comm="syz.3.8400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2288.078895][ T28] audit: type=1326 audit(2000000021.267:4288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32436 comm="syz.0.8410" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdfebf8e929 code=0x0 [ 2288.183965][T32439] overlayfs: failed to clone lowerpath [ 2288.234315][T32439] overlayfs: failed to resolve './file1': -2 [ 2288.686169][ T28] audit: type=1400 audit(2000000021.830:4289): avc: denied { create } for pid=32436 comm="syz.0.8410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2288.716491][ T28] audit: type=1400 audit(2000000021.830:4290): avc: denied { name_bind } for pid=32443 comm="syz.1.8411" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 2289.463291][ T28] audit: type=1400 audit(2000000022.540:4291): avc: denied { read write } for pid=32451 comm="syz.0.8415" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2289.523183][ T28] audit: type=1400 audit(2000000022.540:4292): avc: denied { open } for pid=32451 comm="syz.0.8415" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2294.327218][T32506] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8430'. [ 2294.339968][T32506] netem: unknown loss type 13 [ 2294.344694][T32506] netem: change failed [ 2294.349094][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 2294.349108][ T28] audit: type=1400 audit(2000000027.054:4301): avc: denied { ioctl } for pid=32497 comm="syz.0.8427" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2294.386757][T32521] netlink: 'syz.3.8434': attribute type 27 has an invalid length. [ 2294.679148][T32521] tipc: Resetting bearer [ 2295.337316][T32537] overlayfs: failed to clone upperpath [ 2295.508624][T32538] netlink: 'syz.1.8435': attribute type 13 has an invalid length. [ 2295.517230][T32538] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 2295.524884][T32538] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 2295.532637][T32538] 0ªX¹¦D: refused to change device tx_queue_len [ 2295.539177][T32538] IPv6: ADDRCONF(NETDEV_CHANGE): 30ªX¹¦D: link becomes ready [ 2295.546916][T32538] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2295.550779][ T28] audit: type=1400 audit(2000000028.162:4302): avc: denied { create } for pid=32525 comm="syz.1.8435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2296.352575][ T28] audit: type=1400 audit(2000000028.873:4303): avc: denied { connect } for pid=32544 comm="syz.0.8440" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2296.375967][ T28] audit: type=1400 audit(2000000028.873:4304): avc: denied { write } for pid=32544 comm="syz.0.8440" laddr=172.20.20.10 lport=255 faddr=172.20.20.170 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2296.747304][T32555] netlink: 'syz.7.8442': attribute type 12 has an invalid length. [ 2299.092981][ T28] audit: type=1400 audit(2000000031.429:4305): avc: denied { ioctl } for pid=32566 comm="syz.2.8445" path="socket:[100461]" dev="sockfs" ino=100461 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2299.116773][T32571] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 2299.871575][ T28] audit: type=1400 audit(2000000032.149:4306): avc: denied { read } for pid=32574 comm="syz.0.8447" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2299.895780][ T28] audit: type=1400 audit(2000000032.149:4307): avc: denied { open } for pid=32574 comm="syz.0.8447" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2299.956810][ T28] audit: type=1400 audit(2000000032.168:4308): avc: denied { ioctl } for pid=32574 comm="syz.0.8447" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2300.494783][T32587] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 2300.506226][T32587] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 2300.516384][T32587] IPv6: ADDRCONF(NETDEV_CHANGE): 30ªX¹¦D: link becomes ready [ 2300.527663][T32587] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 2300.539983][T32587] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 2300.600850][T32587] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 2300.631304][T32587] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2300.671773][T32587] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 2301.231888][T32601] netlink: 'syz.2.8451': attribute type 13 has an invalid length. [ 2301.241013][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2301.248917][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2301.258523][T32601] 1ªX¹¦D: refused to change device tx_queue_len [ 2301.267896][T32601] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2304.013165][T32604] syz.1.8453[32604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2304.013326][T32604] syz.1.8453[32604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2305.021251][ T28] audit: type=1400 audit(2000000036.885:4309): avc: denied { write } for pid=32629 comm="syz.0.8460" name="event2" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2305.081346][ T28] audit: type=1400 audit(2000000036.885:4310): avc: denied { open } for pid=32629 comm="syz.0.8460" path="/dev/input/event2" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2305.107832][ T28] audit: type=1400 audit(2000000036.885:4311): avc: denied { ioctl } for pid=32629 comm="syz.0.8460" path="/dev/input/event2" dev="devtmpfs" ino=275 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2305.223986][T32638] 9pnet_fd: Insufficient options for proto=fd [ 2305.874294][T32646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8464'. [ 2306.492954][T32651] overlayfs: failed to resolve './file0': -2 [ 2307.675369][ T28] audit: type=1326 audit(2000000039.322:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32654 comm="syz.3.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2307.732986][ T28] audit: type=1326 audit(2000000039.322:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32654 comm="syz.3.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2307.761046][ T28] audit: type=1326 audit(2000000039.322:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32654 comm="syz.3.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2307.788361][ T28] audit: type=1326 audit(2000000039.322:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32654 comm="syz.3.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2307.833394][ T28] audit: type=1326 audit(2000000039.322:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32654 comm="syz.3.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2307.857204][ T28] audit: type=1326 audit(2000000039.322:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32654 comm="syz.3.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2307.880830][ T28] audit: type=1326 audit(2000000039.349:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32654 comm="syz.3.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2307.939823][ T28] audit: type=1326 audit(2000000039.349:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32654 comm="syz.3.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2308.083033][ T28] audit: type=1326 audit(2000000039.349:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32654 comm="syz.3.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2308.114587][ T28] audit: type=1326 audit(2000000039.349:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32654 comm="syz.3.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2309.503782][T32685] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 2309.521192][T32685] device veth1_macvtap entered promiscuous mode [ 2309.527600][T32685] device macsec0 left promiscuous mode [ 2309.541012][T32685] device veth9 left promiscuous mode [ 2309.547780][T32685] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 2309.555299][T32685] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 2309.583339][T31262] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2309.591302][T31262] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 2309.599271][T31262] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 2309.790666][T32691] netlink: 'syz.1.8476': attribute type 4 has an invalid length. [ 2312.491307][T32711] IPv6: Can't replace route, no match found [ 2313.030734][T32720] overlayfs: failed to clone upperpath [ 2313.238532][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 2313.238549][ T28] audit: type=1400 audit(2000000044.491:4338): avc: denied { ioctl } for pid=32721 comm="syz.0.8485" path="socket:[99824]" dev="sockfs" ino=99824 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2313.279525][ T28] audit: type=1400 audit(2000000044.491:4339): avc: denied { relabelfrom } for pid=32721 comm="syz.0.8485" name="NETLINK" dev="sockfs" ino=99824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2313.349153][ T28] audit: type=1400 audit(2000000044.491:4340): avc: denied { relabelto } for pid=32721 comm="syz.0.8485" name="NETLINK" dev="sockfs" ino=99824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 2313.384716][ T28] audit: type=1400 audit(2000000044.592:4341): avc: denied { read } for pid=32721 comm="syz.0.8485" path="socket:[99824]" dev="sockfs" ino=99824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=sock_file permissive=1 [ 2313.409968][ T28] audit: type=1400 audit(2000000044.592:4342): avc: denied { read } for pid=32721 comm="syz.0.8485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2314.009495][ T28] audit: type=1400 audit(2000000045.109:4343): avc: denied { setopt } for pid=32729 comm="syz.3.8488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2320.177351][ T338] futex_wake_op: syz.0.8505 tries to shift op by -1; fix this program [ 2322.003595][ T374] xt_CT: No such helper "snmp_trap" [ 2322.655653][ T28] audit: type=1400 audit(2000000053.177:4344): avc: denied { read } for pid=384 comm="syz.0.8518" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2322.843475][ T28] audit: type=1400 audit(2000000053.177:4345): avc: denied { bind } for pid=384 comm="syz.0.8518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2324.444800][ T28] audit: type=1400 audit(2000000054.820:4346): avc: denied { nlmsg_write } for pid=397 comm="syz.3.8522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2327.432351][ T441] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8531'. [ 2327.556232][ T439] fuse: Bad value for 'fd' [ 2329.821389][ T28] audit: type=1400 audit(2000000059.804:4347): avc: denied { ioctl } for pid=459 comm="syz.3.8537" path="socket:[100126]" dev="sockfs" ino=100126 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2329.915927][ T463] 9pnet: p9_errstr2errno: server reported unknown error @þLì²¼ O00000000000000000007 [ 2329.940448][ T463] tipc: Cannot configure node identity twice [ 2330.013972][ T463] device lo entered promiscuous mode [ 2330.254239][ T463] device tunl0 entered promiscuous mode [ 2330.263916][ T463] device gre0 entered promiscuous mode [ 2330.270073][ T463] device 30ªX¹¦D entered promiscuous mode [ 2330.372287][ T463] device erspan0 entered promiscuous mode [ 2330.386141][ T463] device ip_vti0 entered promiscuous mode [ 2330.392558][ T463] device ip6_vti0 entered promiscuous mode [ 2330.399394][ T463] device sit0 entered promiscuous mode [ 2330.405595][ T463] device ip6tnl0 entered promiscuous mode [ 2330.411881][ T463] device ip6gre0 entered promiscuous mode [ 2330.418587][ T463] device ip6gretap0 entered promiscuous mode [ 2330.425295][ T463] device vcan0 entered promiscuous mode [ 2330.431657][ T463] device dummy0 entered promiscuous mode [ 2330.438407][ T463] device veth0 entered promiscuous mode [ 2331.899667][ T463] device veth1 entered promiscuous mode [ 2331.933445][ T463] device wg0 entered promiscuous mode [ 2331.939559][ T463] device wg1 entered promiscuous mode [ 2331.945804][ T463] device veth0_to_bridge entered promiscuous mode [ 2331.952895][ T463] device bridge_slave_0 entered promiscuous mode [ 2331.960118][ T463] device veth0_to_bond entered promiscuous mode [ 2331.967213][ T463] device bond_slave_0 entered promiscuous mode [ 2331.974161][ T463] device veth1_to_bond entered promiscuous mode [ 2332.252084][ T463] device bond_slave_1 entered promiscuous mode [ 2332.259085][ T463] device veth0_to_team entered promiscuous mode [ 2332.265826][ T463] device team_slave_0 entered promiscuous mode [ 2332.272885][ T463] device veth1_to_team entered promiscuous mode [ 2332.283197][ T463] device team_slave_1 entered promiscuous mode [ 2332.560396][ T481] syz.1.8539[481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2332.560478][ T481] syz.1.8539[481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2332.568804][ T463] device veth1_to_batadv entered promiscuous mode [ 2333.092523][ T463] device batadv_slave_1 entered promiscuous mode [ 2333.099248][ T463] device veth0_to_hsr entered promiscuous mode [ 2333.150688][ T481] netlink: 236 bytes leftover after parsing attributes in process `syz.1.8539'. [ 2333.374725][ T463] device hsr_slave_0 entered promiscuous mode [ 2333.381416][ T463] device veth1_to_hsr entered promiscuous mode [ 2333.388412][ T463] device hsr_slave_1 entered promiscuous mode [ 2333.397351][ T463] device veth1_virt_wifi entered promiscuous mode [ 2333.404409][ T463] device veth0_virt_wifi entered promiscuous mode [ 2333.411825][ T463] device veth2 entered promiscuous mode [ 2333.425953][ T463] device veth3 entered promiscuous mode [ 2333.432630][ T463] device nicvf0 entered promiscuous mode [ 2333.439190][ T463] device bridge1 entered promiscuous mode [ 2333.447173][ T463] device veth4 entered promiscuous mode [ 2333.453231][ T463] device veth5 entered promiscuous mode [ 2333.459516][ T463] device veth6 entered promiscuous mode [ 2333.465507][ T463] device veth7 entered promiscuous mode [ 2333.471965][ T463] device vti0 entered promiscuous mode [ 2333.478007][ T463] device ip6tnl1 entered promiscuous mode [ 2333.484753][ T463] device sit1 entered promiscuous mode [ 2333.490776][ T463] device bridge2 entered promiscuous mode [ 2333.497370][ T463] device gre1 entered promiscuous mode [ 2333.504110][ T463] device ip6tnl2 entered promiscuous mode [ 2333.510747][ T463] device bridge0 entered promiscuous mode [ 2333.525611][ T463] device veth8 entered promiscuous mode [ 2333.531900][ T463] device veth9 entered promiscuous mode [ 2333.538247][ T463] device veth10 entered promiscuous mode [ 2333.544494][ T463] device veth11 entered promiscuous mode [ 2333.551016][ T463] device syztnl2 entered promiscuous mode [ 2333.557503][ T463] device bridge3 entered promiscuous mode [ 2333.563837][ T463] device sit2 entered promiscuous mode [ 2333.570383][ T463] device syztnl1 entered promiscuous mode [ 2333.576789][ T463] device veth12 entered promiscuous mode [ 2334.226345][ T463] device veth13 entered promiscuous mode [ 2334.232847][ T463] device veth14 entered promiscuous mode [ 2334.239037][ T463] device veth15 entered promiscuous mode [ 2334.245855][ T463] device ip6gre1 entered promiscuous mode [ 2334.252487][ T463] device bridge4 entered promiscuous mode [ 2334.259487][ T463] device bridge5 entered promiscuous mode [ 2334.265960][ T463] device bridge6 entered promiscuous mode [ 2334.272522][ T463] device ip6gre2 entered promiscuous mode [ 2334.279271][ T463] device gre2 entered promiscuous mode [ 2334.285333][ T463] device bridge7 entered promiscuous mode [ 2334.291618][ T463] device xfrm0 entered promiscuous mode [ 2334.297873][ T463] device ip6tnl3 entered promiscuous mode [ 2334.304614][ T463] device veth1.0001 entered promiscuous mode [ 2334.311524][ T463] device sit3 entered promiscuous mode [ 2334.317539][ T463] device syztnl0 entered promiscuous mode [ 2334.324712][ T463] device ip6gre3 entered promiscuous mode [ 2334.331453][ T463] device ip6erspan0 entered promiscuous mode [ 2334.338561][ T463] device bridge8 entered promiscuous mode [ 2334.345697][ T463] device sit4 entered promiscuous mode [ 2334.352047][ T463] device veth16 entered promiscuous mode [ 2334.439659][T31252] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 2334.451072][T31252] IPv6: ADDRCONF(NETDEV_CHANGE): veth17: link becomes ready [ 2335.265457][ T507] incfs: Error accessing: ./file0. [ 2335.270819][ T507] incfs: mount failed -2 [ 2335.516984][ T509] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831036522994172386 ! [ 2336.522317][ T28] audit: type=1400 audit(2000000065.573:4348): avc: denied { create } for pid=516 comm="syz.0.8552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 2336.557264][ T28] audit: type=1400 audit(2000000065.592:4349): avc: denied { sys_admin } for pid=516 comm="syz.0.8552" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 2337.871327][ T539] netlink: 'syz.3.8555': attribute type 27 has an invalid length. [ 2337.886487][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2337.903430][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 2337.911011][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 2337.950779][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): 00ªX¹¦Dö»: link becomes ready [ 2338.621675][ T28] audit: type=1400 audit(2000000067.853:4350): avc: denied { create } for pid=535 comm="syz.7.8556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 2338.781167][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 2338.790250][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 2338.865585][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 2338.889672][ T534] device syz_tun left promiscuous mode [ 2338.901199][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2338.919030][ T534] device syz_tun entered promiscuous mode [ 2338.926054][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 2338.974259][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 2338.982461][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2339.008300][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2339.190488][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1.1: link becomes ready [ 2339.201579][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2339.212648][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2339.235057][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2339.242889][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 2339.251493][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2339.260570][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2339.269301][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2339.277912][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2339.286153][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2339.295230][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2339.303673][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2339.312453][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2339.321049][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2339.329736][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2339.338072][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2339.346349][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 2339.354341][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 2339.362141][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 2339.370113][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 2339.378112][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 2339.385883][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 2339.393713][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 2339.401707][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 2339.409612][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 2339.417353][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 2339.425436][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 2339.433256][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 2340.307747][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2340.321821][ T561] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 2341.670347][ T28] audit: type=1400 audit(2000000070.733:4351): avc: denied { bind } for pid=579 comm="syz.3.8567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2342.642176][ T28] audit: type=1326 audit(2000000071.628:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=591 comm="syz.7.8571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2342.870565][ T28] audit: type=1326 audit(2000000071.628:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=591 comm="syz.7.8571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2342.914969][ T28] audit: type=1326 audit(2000000071.656:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=591 comm="syz.7.8571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2342.945763][ T28] audit: type=1326 audit(2000000071.656:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=591 comm="syz.7.8571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2342.996314][ T28] audit: type=1326 audit(2000000071.656:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=591 comm="syz.7.8571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2343.025676][ T28] audit: type=1326 audit(2000000071.656:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=591 comm="syz.7.8571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2343.054153][ T28] audit: type=1326 audit(2000000071.656:4358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=591 comm="syz.7.8571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2343.083985][ T28] audit: type=1326 audit(2000000071.656:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=591 comm="syz.7.8571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2343.151387][ T28] audit: type=1326 audit(2000000071.665:4360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=591 comm="syz.7.8571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2343.396865][ T28] audit: type=1326 audit(2000000071.665:4361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=591 comm="syz.7.8571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2343.991312][ T613] 9pnet_fd: Insufficient options for proto=fd [ 2345.813599][ T633] netlink: 'syz.1.8581': attribute type 27 has an invalid length. [ 2346.169038][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2346.177297][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 2346.187545][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 2346.876148][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): 30ªX¹¦D: link becomes ready [ 2346.884420][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 2346.892778][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 2346.900854][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 2346.913971][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2346.921669][ T636] device dummy0 left promiscuous mode [ 2346.967534][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 2347.019789][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge7: link becomes ready [ 2347.035146][ T636] device dummy0 entered promiscuous mode [ 2347.065153][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2347.074166][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2347.095529][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2347.117510][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1.1: link becomes ready [ 2347.146531][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2347.166917][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2347.187112][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 2347.390003][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2347.426967][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 2347.435553][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2347.443976][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2347.452409][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2347.462772][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2347.473569][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2347.483160][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2347.501111][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2347.513363][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2347.522974][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2347.542987][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2347.555737][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2347.565983][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 2347.575826][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 2347.584754][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 2347.598211][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 2347.610515][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 2347.626829][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 2347.639469][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 2347.655181][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 2347.665084][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 2347.675062][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 2347.684110][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 2347.695633][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 2347.705559][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 2347.715631][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 2347.724804][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth17: link becomes ready [ 2347.732709][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 2347.740828][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth19: link becomes ready [ 2347.748827][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth18: link becomes ready [ 2347.757441][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr.3: link becomes ready [ 2347.766521][ T657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8584'. [ 2349.033786][ T675] netlink: 'syz.1.8590': attribute type 29 has an invalid length. [ 2349.042181][ T675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8590'. [ 2349.051290][ T675] netlink: 'syz.1.8590': attribute type 29 has an invalid length. [ 2349.059188][ T675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8590'. [ 2350.630328][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 2350.630344][ T28] audit: type=1400 audit(2000000079.004:4397): avc: denied { ioctl } for pid=689 comm="syz.2.8597" path="socket:[101049]" dev="sockfs" ino=101049 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2350.993517][ T28] audit: type=1400 audit(2000000079.290:4398): avc: denied { bind } for pid=689 comm="syz.2.8597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2354.446396][ T742] overlayfs: failed to clone upperpath [ 2354.914904][ T744] syz.0.8610[744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2354.916827][ T744] syz.0.8610[744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2355.178214][ T28] audit: type=1400 audit(2000000083.093:4399): avc: denied { write } for pid=740 comm="syz.0.8610" name="mcfilter6" dev="proc" ino=4026532341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 2355.214926][ T743] netlink: 236 bytes leftover after parsing attributes in process `syz.0.8610'. [ 2356.543205][ T750] netlink: 'syz.7.8612': attribute type 13 has an invalid length. [ 2356.553127][ T750] 0ªX¹¦D: refused to change device tx_queue_len [ 2356.568082][ T750] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2357.496980][ T28] audit: type=1326 audit(2000000085.345:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=755 comm="syz.0.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebf8e929 code=0x7fc00000 [ 2357.521187][ T28] audit: type=1400 audit(2000000085.345:4401): avc: denied { read } for pid=755 comm="syz.0.8613" path="socket:[101536]" dev="sockfs" ino=101536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2357.942961][ T28] audit: type=1400 audit(2000000085.751:4402): avc: denied { ioctl } for pid=759 comm="syz.2.8615" path="socket:[101122]" dev="sockfs" ino=101122 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2358.333281][ T28] audit: type=1326 audit(2000000086.093:4403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=755 comm="syz.0.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdfebf8e929 code=0x7fc00000 [ 2358.539127][ T769] overlayfs: failed to clone lowerpath [ 2358.571758][ T28] audit: type=1400 audit(2000000086.305:4404): avc: denied { mount } for pid=766 comm="syz.3.8616" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2358.651441][ T28] audit: type=1400 audit(2000000086.305:4405): avc: denied { write } for pid=766 comm="syz.3.8616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2358.867014][ T28] audit: type=1400 audit(2000000086.434:4406): avc: denied { block_suspend } for pid=757 comm="syz.1.8614" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2358.960049][ T28] audit: type=1400 audit(2000000086.693:4407): avc: denied { name_bind } for pid=788 comm="syz.0.8621" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 2358.984568][ T28] audit: type=1400 audit(2000000086.720:4408): avc: denied { watch watch_reads } for pid=785 comm="syz.3.8620" path="/1795" dev="tmpfs" ino=9778 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2359.257297][ T794] xt_bpf: check failed: parse error [ 2359.947134][ T801] syz.1.8623[801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2359.949506][ T801] syz.1.8623[801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2363.253011][ T28] audit: type=1400 audit(2000000090.634:4409): avc: denied { getopt } for pid=830 comm="syz.0.8631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2363.306768][ T819] netlink: 996 bytes leftover after parsing attributes in process `syz.2.8628'. [ 2363.686182][ T28] audit: type=1400 audit(2000000090.976:4410): avc: denied { read } for pid=842 comm="syz.0.8635" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2364.198096][ T28] audit: type=1400 audit(2000000090.985:4411): avc: denied { open } for pid=842 comm="syz.0.8635" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2364.235292][ T28] audit: type=1400 audit(2000000090.994:4412): avc: denied { ioctl } for pid=842 comm="syz.0.8635" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2364.670627][ T858] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 2364.682381][ T28] audit: type=1400 audit(2000000091.963:4413): avc: denied { mac_admin } for pid=855 comm="syz.7.8636" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2364.785984][ T863] syz.0.8637[863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2364.788243][ T863] syz.0.8637[863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2365.377241][ T28] audit: type=1400 audit(2000000091.973:4414): avc: denied { relabelto } for pid=855 comm="syz.7.8636" name="1179" dev="tmpfs" ino=6424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 2365.494827][ T28] audit: type=1400 audit(2000000091.973:4415): avc: denied { associate } for pid=855 comm="syz.7.8636" name="1179" dev="tmpfs" ino=6424 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 2365.580679][ T28] audit: type=1400 audit(2000000092.665:4416): avc: denied { write } for pid=13942 comm="syz-executor" name="1179" dev="tmpfs" ino=6424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 2365.761290][ T28] audit: type=1400 audit(2000000092.665:4417): avc: denied { remove_name } for pid=13942 comm="syz-executor" name="binderfs" dev="tmpfs" ino=6428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 2365.798879][ T28] audit: type=1400 audit(2000000092.665:4418): avc: denied { rmdir } for pid=13942 comm="syz-executor" name="1179" dev="tmpfs" ino=6424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 2367.604272][ T882] 9pnet_fd: Insufficient options for proto=fd [ 2368.586635][ T894] overlayfs: failed to resolve './file1': -2 [ 2371.851825][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 2371.893343][ T28] audit: type=1326 audit(2000000098.572:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=922 comm="syz.1.8652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653238e929 code=0x7ffc0000 [ 2371.930433][ T28] audit: type=1326 audit(2000000098.572:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=922 comm="syz.1.8652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653238e929 code=0x7ffc0000 [ 2372.027684][ T28] audit: type=1326 audit(2000000098.572:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=922 comm="syz.1.8652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f653238e929 code=0x7ffc0000 [ 2372.368541][ T28] audit: type=1326 audit(2000000098.572:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=922 comm="syz.1.8652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653238e929 code=0x7ffc0000 [ 2372.419531][ T28] audit: type=1326 audit(2000000098.572:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=922 comm="syz.1.8652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653238e929 code=0x7ffc0000 [ 2372.759712][ T28] audit: type=1326 audit(2000000098.572:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=922 comm="syz.1.8652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f653238e929 code=0x7ffc0000 [ 2372.789906][ T28] audit: type=1326 audit(2000000098.572:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=922 comm="syz.1.8652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653238e929 code=0x7ffc0000 [ 2372.815945][ T28] audit: type=1326 audit(2000000098.572:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=922 comm="syz.1.8652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653238e929 code=0x7ffc0000 [ 2372.916296][ T28] audit: type=1326 audit(2000000098.572:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=922 comm="syz.1.8652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f653238e929 code=0x7ffc0000 [ 2372.945852][ T28] audit: type=1326 audit(2000000098.572:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=922 comm="syz.1.8652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653238e929 code=0x7ffc0000 [ 2373.495015][ T954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8658'. [ 2373.503967][ T954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8658'. [ 2373.513068][ T954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8658'. [ 2373.522254][ T954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8658'. [ 2373.598270][ T958] netlink: 'syz.0.8659': attribute type 4 has an invalid length. [ 2373.610484][ T958] netlink: 'syz.0.8659': attribute type 4 has an invalid length. [ 2375.561238][ T984] netlink: 116 bytes leftover after parsing attributes in process `syz.3.8661'. [ 2377.616699][ T1004] overlayfs: unrecognized mount option "/" or missing value [ 2377.668074][ T1004] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2377.831869][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 2377.831885][ T28] audit: type=1400 audit(2000000103.908:4442): avc: denied { mounton } for pid=990 comm="syz.0.8669" path="/1662/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 2377.930202][ T28] audit: type=1400 audit(2000000103.963:4443): avc: denied { unlink } for pid=990 comm="syz.0.8669" name="#81" dev="tmpfs" ino=9101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2377.952732][ T28] audit: type=1400 audit(2000000103.972:4444): avc: denied { mount } for pid=990 comm="syz.0.8669" name="/" dev="overlay" ino=9096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2377.996473][ T28] audit: type=1400 audit(2000000104.175:4445): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2378.138013][ T1013] netlink: 25 bytes leftover after parsing attributes in process `syz.7.8673'. [ 2378.186978][ T1013] device 30ªX¹¦D entered promiscuous mode [ 2378.227593][ T1010] netlink: 45349 bytes leftover after parsing attributes in process `syz.7.8673'. [ 2378.234799][ T28] audit: type=1400 audit(2000000104.184:4446): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2378.237213][ T1010] 0ªX¹¦Dö»: renamed from 30ªX¹¦D [ 2378.413080][ T1010] device 00ªX¹¦Dö» left promiscuous mode [ 2378.522508][ T1022] netlink: 'syz.3.8676': attribute type 4 has an invalid length. [ 2378.535126][ T1022] netlink: 'syz.3.8676': attribute type 4 has an invalid length. [ 2381.417290][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 2381.424752][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 2381.432175][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): 00ªX¹¦Dö»: link becomes ready [ 2381.440073][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 2381.447699][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 2381.455267][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 2381.463988][ T1050] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2381.594683][ T28] audit: type=1400 audit(2000000107.544:4447): avc: denied { write } for pid=1047 comm="syz.7.8683" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 2384.989400][ T28] audit: type=1400 audit(2000000110.719:4448): avc: denied { shutdown } for pid=1079 comm="syz.0.8690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2385.948377][ T28] audit: type=1400 audit(2000000111.605:4449): avc: denied { create } for pid=1098 comm="syz.3.8696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2386.080528][ T1104] syz.0.8694[1104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2386.080696][ T1104] syz.0.8694[1104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2386.333902][ T1103] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2386.983728][ T1108] overlayfs: failed to clone upperpath [ 2387.711826][ T1108] device veth0_vlan entered promiscuous mode [ 2387.721516][T31262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2387.870334][ T1123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8702'. [ 2387.925930][ T1125] netlink: 136 bytes leftover after parsing attributes in process `syz.1.8700'. [ 2387.935438][ T1125] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 2390.568478][ T1162] x_tables: unsorted entry at hook 3 [ 2390.870665][ T28] audit: type=1326 audit(2000000116.156:4450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1159 comm="syz.2.8711" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0500b8e929 code=0x0 [ 2391.572276][ T1171] overlayfs: failed to resolve './file0': -2 [ 2391.663608][ T1177] overlayfs: failed to clone upperpath [ 2394.654834][ T28] audit: type=1400 audit(2000000119.645:4451): avc: denied { read } for pid=1201 comm="syz.1.8723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2395.253607][ T1211] overlayfs: failed to clone lowerpath [ 2395.266530][ T1210] overlayfs: failed to clone upperpath [ 2395.515617][ T28] audit: type=1400 audit(2000000120.420:4452): avc: denied { setopt } for pid=1212 comm="syz.2.8726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2395.643029][ T28] audit: type=1400 audit(2000000120.549:4453): avc: denied { create } for pid=1223 comm="syz.1.8729" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2395.669146][ T1224] overlayfs: missing 'lowerdir' [ 2397.921927][ T28] audit: type=1326 audit(2000000122.598:4454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1240 comm="syz.3.8733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2397.953784][ T28] audit: type=1326 audit(2000000122.607:4455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1240 comm="syz.3.8733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2398.175340][ T28] audit: type=1326 audit(2000000122.607:4456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1240 comm="syz.3.8733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2398.200188][ T28] audit: type=1326 audit(2000000122.607:4457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1240 comm="syz.3.8733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2398.234728][ T28] audit: type=1326 audit(2000000122.607:4458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1240 comm="syz.3.8733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2398.288908][ T28] audit: type=1326 audit(2000000122.607:4459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1240 comm="syz.3.8733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2398.352881][ T28] audit: type=1326 audit(2000000122.607:4460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1240 comm="syz.3.8733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2398.376876][ T28] audit: type=1326 audit(2000000122.607:4461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1240 comm="syz.3.8733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2398.401901][ T28] audit: type=1326 audit(2000000122.607:4462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1240 comm="syz.3.8733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2398.426242][ T28] audit: type=1326 audit(2000000122.607:4463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1240 comm="syz.3.8733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3d2938e963 code=0x7ffc0000 [ 2400.590487][ T1274] overlayfs: failed to clone upperpath [ 2404.467917][ T1322] fuse: Bad value for 'fd' [ 2406.863293][ T1357] device dummy0 entered promiscuous mode [ 2409.474261][ T1391] netlink: 'syz.7.8769': attribute type 4 has an invalid length. [ 2411.039776][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 2411.039793][ T28] audit: type=1400 audit(2000000134.763:4495): avc: denied { write } for pid=1405 comm="syz.0.8773" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2411.800425][ T1414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8774'. [ 2411.811427][ T1414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8774'. [ 2413.795077][ T1406] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8772'. [ 2415.131471][ T1442] netlink: 9 bytes leftover after parsing attributes in process `syz.2.8780'. [ 2415.266137][ T1442] device 31ªX¹¦D entered promiscuous mode [ 2415.623707][ T1442] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8780'. [ 2415.632718][ T1442] 0ªX¹¦D: renamed from 31ªX¹¦D [ 2415.912140][ T1442] device 30ªX¹¦D left promiscuous mode [ 2415.918547][ T1442] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2417.996524][ T28] audit: type=1400 audit(2000000141.178:4496): avc: denied { append } for pid=1460 comm="syz.0.8786" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2418.655536][ T1468] tipc: Enabling of bearer rejected, failed to enable media [ 2419.240408][ T1476] xt_hashlimit: max too large, truncated to 1048576 [ 2419.296451][ T28] audit: type=1400 audit(2000000142.369:4497): avc: denied { wake_alarm } for pid=1470 comm="syz.1.8788" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2419.606231][ T1476] device veth0 entered promiscuous mode [ 2419.629369][ T1476] device veth0 left promiscuous mode [ 2420.826493][ T28] audit: type=1400 audit(2000000143.800:4498): avc: denied { map } for pid=1488 comm="syz.0.8794" path="socket:[103440]" dev="sockfs" ino=103440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 2421.099927][ T28] audit: type=1326 audit(2000000144.049:4499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.7.8798" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x0 [ 2421.750094][ T1511] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8799'. [ 2421.892598][ T1516] netlink: 112 bytes leftover after parsing attributes in process `syz.2.8800'. [ 2422.286999][ T1522] syz.1.8801[1522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2422.287102][ T1522] syz.1.8801[1522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2423.197981][ T1522] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2425.074169][ T1549] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8808'. [ 2425.083637][ T1549] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8808'. [ 2426.569417][ T1565] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2426.578389][ T1565] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2432.257357][ T1624] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8827'. [ 2437.235398][ T28] audit: type=1326 audit(2000000158.937:4500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1665 comm="syz.7.8838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x7fc00000 [ 2437.405092][ T28] audit: type=1326 audit(2000000159.038:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1665 comm="syz.7.8838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x7fc00000 [ 2437.872730][ T1685] fuse: Unknown parameter 'subj_user' [ 2438.356415][ T1696] device veth0_vlan left promiscuous mode [ 2438.642131][ T1702] device pim6reg1 entered promiscuous mode [ 2439.337511][ T1711] incfs: Backing dir is not set, filesystem can't be mounted. [ 2439.345274][ T1711] incfs: mount failed -2 [ 2439.641529][ T28] audit: type=1400 audit(2000000161.161:4502): avc: denied { getopt } for pid=1719 comm="syz.2.8850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2439.674108][ T1720] 9pnet_fd: Insufficient options for proto=fd [ 2439.983400][ T1723] xt_hashlimit: size too large, truncated to 1048576 [ 2441.932424][ T1747] overlayfs: bad mount option "redirect_dir=on:/" [ 2441.941779][ T1742] overlayfs: failed to clone upperpath [ 2443.847531][ T1769] netlink: 'syz.2.8860': attribute type 13 has an invalid length. [ 2445.673128][ T28] audit: type=1400 audit(2000000166.736:4503): avc: denied { listen } for pid=1785 comm="syz.3.8867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2445.692888][ T28] audit: type=1400 audit(2000000166.736:4504): avc: denied { accept } for pid=1785 comm="syz.3.8867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2445.730845][ T28] audit: type=1400 audit(2000000166.782:4505): avc: denied { write } for pid=1785 comm="syz.3.8867" path="socket:[103422]" dev="sockfs" ino=103422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2448.538653][ T28] audit: type=1326 audit(2000000169.385:4506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1810 comm="syz.3.8873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2938e929 code=0x7fc00000 [ 2448.959309][ T28] audit: type=1400 audit(2000000169.763:4507): avc: denied { ioctl } for pid=1815 comm="syz.0.8875" path="socket:[103895]" dev="sockfs" ino=103895 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2449.208536][ T28] audit: type=1400 audit(2000000169.994:4508): avc: denied { mounton } for pid=1825 comm="syz.7.8877" path="/1231/file0" dev="tmpfs" ino=6721 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2449.232194][ T1826] I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2449.242097][ T1826] FAT-fs (loop15): unable to read boot sector [ 2449.280755][ T28] audit: type=1326 audit(2000000170.058:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1810 comm="syz.3.8873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d2938e929 code=0x7fc00000 [ 2451.238210][ T1851] netlink: 'syz.1.8883': attribute type 27 has an invalid length. [ 2452.935189][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2452.971840][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 2452.988720][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 2453.004984][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): 30ªX¹¦D: link becomes ready [ 2453.013107][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 2453.020916][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 2453.028882][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 2453.041647][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2453.049151][ T1856] device dummy0 left promiscuous mode [ 2453.086470][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 2453.102304][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge7: link becomes ready [ 2453.117408][ T1856] device dummy0 entered promiscuous mode [ 2453.195127][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2453.203445][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2453.212595][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2453.221512][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2453.230857][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2453.239825][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2453.248992][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2453.257969][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr.3: link becomes ready [ 2453.274017][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2453.282490][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2453.291714][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 2453.299832][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 2453.308327][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 2453.316312][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 2453.324284][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 2453.332369][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 2453.341048][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 2453.349298][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 2453.357217][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth18: link becomes ready [ 2453.365499][ T1868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8888'. [ 2453.592583][ T1878] overlayfs: failed to resolve './file2': -2 [ 2453.730630][ T28] audit: type=1326 audit(2000000174.175:4510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1886 comm="syz.2.8893" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0500b8e929 code=0x0 [ 2453.942149][ T1875] device veth18 entered promiscuous mode [ 2453.955274][ T1875] device veth19 entered promiscuous mode [ 2454.967782][ T28] audit: type=1400 audit(2000000175.227:4511): avc: denied { bind } for pid=1891 comm="syz.0.8894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2455.002094][ T1903] overlayfs: failed to clone upperpath [ 2455.011500][ T1901] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8895'. [ 2455.041049][ T1905] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8897'. [ 2456.489063][ T28] audit: type=1400 audit(2000000176.713:4512): avc: denied { ioctl } for pid=1918 comm="syz.7.8900" path="socket:[104033]" dev="sockfs" ino=104033 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2459.586160][ T1935] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 2459.593682][ T1935] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 2459.601116][ T1935] IPv6: ADDRCONF(NETDEV_CHANGE): 00ªX¹¦Dö»: link becomes ready [ 2459.609045][ T1935] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 2459.617278][ T1935] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 2459.624936][ T1935] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 2459.633944][ T1935] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2462.646756][ T1981] netlink: 392 bytes leftover after parsing attributes in process `syz.2.8911'. [ 2463.801947][ T28] audit: type=1400 audit(2000000182.851:4513): avc: denied { create } for pid=1982 comm="syz.7.8913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2463.846315][ T28] audit: type=1400 audit(2000000183.433:4514): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2464.148431][ T28] audit: type=1400 audit(2000000183.783:4515): avc: denied { write } for pid=1991 comm="syz.0.8918" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2464.287681][ T2006] netlink: 76 bytes leftover after parsing attributes in process `syz.7.8919'. [ 2464.798137][ T28] audit: type=1326 audit(2000000183.940:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1994 comm="syz.7.8919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2465.201206][ T28] audit: type=1326 audit(2000000183.940:4517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1994 comm="syz.7.8919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2465.228081][ T28] audit: type=1326 audit(2000000183.950:4518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1994 comm="syz.7.8919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2465.674802][ T2014] tipc: Enabling of bearer rejected, already enabled [ 2466.256411][ T28] audit: type=1326 audit(2000000183.950:4519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1994 comm="syz.7.8919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2466.282190][ T28] audit: type=1326 audit(2000000183.950:4520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1994 comm="syz.7.8919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2466.305869][ T28] audit: type=1326 audit(2000000183.959:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1994 comm="syz.7.8919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2466.528634][ T28] audit: type=1326 audit(2000000183.968:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1994 comm="syz.7.8919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x7ffc0000 [ 2468.437203][ T2050] netlink: 96 bytes leftover after parsing attributes in process `syz.7.8930'. [ 2468.448194][ T2050] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8930'. [ 2468.457589][ T2050] netlink: 84 bytes leftover after parsing attributes in process `syz.7.8930'. [ 2469.296676][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 2469.296696][ T28] audit: type=1326 audit(2000000188.500:4595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2051 comm="syz.0.8931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebf8e929 code=0x7ffc0000 [ 2469.328828][ T28] audit: type=1326 audit(2000000188.500:4596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2051 comm="syz.0.8931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebf8e929 code=0x7ffc0000 [ 2469.538558][ T28] audit: type=1326 audit(2000000188.565:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2051 comm="syz.0.8931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fdfebf8e929 code=0x7ffc0000 [ 2469.795173][ T28] audit: type=1326 audit(2000000188.565:4598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2051 comm="syz.0.8931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebf8e929 code=0x7ffc0000 [ 2469.828955][ T28] audit: type=1326 audit(2000000188.565:4599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2051 comm="syz.0.8931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebf8e929 code=0x7ffc0000 [ 2469.868546][ T28] audit: type=1326 audit(2000000188.565:4600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2051 comm="syz.0.8931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fdfebf8e929 code=0x7ffc0000 [ 2470.208694][ T28] audit: type=1326 audit(2000000189.377:4601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2051 comm="syz.0.8931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebf8e929 code=0x7ffc0000 [ 2470.232486][ T28] audit: type=1326 audit(2000000189.377:4602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2051 comm="syz.0.8931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebf8e929 code=0x7ffc0000 [ 2470.416343][ T28] audit: type=1400 audit(2000000189.534:4603): avc: denied { accept } for pid=2075 comm="syz.2.8938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2470.624651][ T2078] overlayfs: unrecognized mount option "verity=require" or missing value [ 2470.679050][ T28] audit: type=1326 audit(2000000189.811:4604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2084 comm="syz.7.8940" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd18e929 code=0x0 [ 2471.552017][ T2097] xt_hashlimit: size too large, truncated to 1048576 [ 2471.753242][ T2095] overlayfs: failed to clone upperpath [ 2471.891166][T31067] Bluetooth: hci0: Frame reassembly failed (-84) [ 2472.418212][ T2110] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8946'. [ 2472.474324][ T2111] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8946'. [ 2474.139341][T31422] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2476.126980][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 2476.127000][ T28] audit: type=1400 audit(2000000194.813:4607): avc: denied { lock } for pid=2143 comm="syz.2.8956" path="socket:[104357]" dev="sockfs" ino=104357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 2476.270173][ T2155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8954'. [ 2476.280395][ T2155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8954'. [ 2476.289795][ T2155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8954'. [ 2476.299146][ T2155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8954'. [ 2476.349624][ T2157] syz.1.8955[2157] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2476.349745][ T2157] syz.1.8955[2157] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2477.100645][ T2159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8958'. [ 2477.121119][ T2159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8958'. [ 2477.626243][ T2164] device veth1_macvtap left promiscuous mode [ 2477.633910][ T2164] device veth1_macvtap entered promiscuous mode [ 2477.647828][ T2164] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 2477.696960][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2477.705997][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2477.714084][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1.1: link becomes ready [ 2477.723523][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2477.733463][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2477.749756][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2477.758525][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2477.780048][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 2477.861530][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2477.869954][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2477.891598][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2477.901563][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2478.719433][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2478.736149][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2478.746733][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2478.759152][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2478.772971][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2478.786695][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2478.795408][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2478.874422][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2478.900703][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2478.932255][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2478.945499][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2478.954345][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2478.973672][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 2478.993402][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 2479.003601][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 2479.012507][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 2479.028090][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 2479.052056][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 2479.069303][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 2479.086579][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 2479.103933][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 2479.121506][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan.3: link becomes ready [ 2479.156734][T25361] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 2479.164346][T25361] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 2479.192688][T25361] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 2479.578212][T25361] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 2480.120449][ T2201] netlink: 'syz.0.8969': attribute type 12 has an invalid length. [ 2480.256313][ T28] audit: type=1326 audit(2000000198.653:4608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2204 comm="syz.3.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2480.333789][ T28] audit: type=1326 audit(2000000198.653:4609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2204 comm="syz.3.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2480.343474][T25361] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 2480.401593][ T28] audit: type=1326 audit(2000000198.653:4610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2204 comm="syz.3.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2480.405065][ T2207] 9pnet_fd: Insufficient options for proto=fd [ 2480.431295][ T28] audit: type=1326 audit(2000000198.653:4611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2204 comm="syz.3.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2480.616176][ T28] audit: type=1326 audit(2000000198.653:4612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2204 comm="syz.3.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2480.646644][ T28] audit: type=1326 audit(2000000198.653:4613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2204 comm="syz.3.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3d2938e929 code=0x7ffc0000 [ 2480.670566][ T28] audit: type=1326 audit(2000000198.653:4614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2204 comm="syz.3.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3d2938e963 code=0x7ffc0000 [ 2480.695302][ T28] audit: type=1326 audit(2000000198.653:4615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2204 comm="syz.3.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3d2938d3df code=0x7ffc0000 [ 2480.720702][ T28] audit: type=1326 audit(2000000198.653:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2204 comm="syz.3.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3d2938e9b7 code=0x7ffc0000 [ 2482.295272][ T2233] overlayfs: failed to clone upperpath [ 2483.019315][ T2241] netlink: 'syz.7.8980': attribute type 27 has an invalid length. [ 2483.359330][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 2483.788225][ T2245] 9pnet_fd: Insufficient options for proto=fd [ 2484.214735][ T2256] netlink: 'syz.1.8982': attribute type 12 has an invalid length. [ 2484.363724][ T2258] 9pnet_fd: Insufficient options for proto=fd [ 2484.580092][ T2262] overlayfs: missing 'lowerdir' [ 2484.599348][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 2484.606465][ T28] audit: type=1400 audit(2000000202.622:4651): avc: denied { mount } for pid=2259 comm="syz.3.8985" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 2484.855811][ T2266] 9pnet_fd: Insufficient options for proto=fd [ 2484.917177][ T2270] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2484.924567][ T2270] IPv6: NLM_F_CREATE should be set when creating new route [ 2484.931887][ T2270] IPv6: NLM_F_CREATE should be set when creating new route [ 2486.288098][ T2285] overlayfs: failed to clone upperpath [ 2487.328270][ T28] audit: type=1400 audit(2000000205.179:4652): avc: denied { mount } for pid=2282 comm="syz.7.8993" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 2490.386593][ T2332] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9003'. [ 2490.395664][ T2332] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9003'. [ 2490.624446][ T2339] netlink: 'syz.2.9006': attribute type 27 has an invalid length. [ 2490.635257][ T2339] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2490.824487][ T2339] device veth0_vlan left promiscuous mode [ 2490.841434][ T2339] device veth0_vlan entered promiscuous mode [ 2490.861524][ T2339] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 2490.922358][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2490.947498][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2490.964409][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1.1: link becomes ready [ 2490.976371][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2490.987191][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2490.997824][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 2491.006746][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2491.015771][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 2491.030425][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2491.039071][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2491.049437][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2491.125944][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2491.139416][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2491.148078][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2491.157586][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2491.170031][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2491.179452][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2491.187924][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2491.196863][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2491.205699][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2491.253053][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2491.317289][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2491.360114][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan4094: link becomes ready [ 2491.400016][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 2491.696609][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 2491.823053][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 2492.093950][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 2492.103210][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 2492.113589][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 2492.122939][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 2492.132347][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 2492.478020][ T28] audit: type=1400 audit(2000000209.932:4653): avc: denied { create } for pid=2356 comm="syz.3.9012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2493.896240][ T2392] 9pnet_fd: Insufficient options for proto=fd [ 2493.955009][ T28] audit: type=1400 audit(2000000211.289:4654): avc: denied { write } for pid=2400 comm="syz.0.9028" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2493.979669][ T2402] hub 8-0:1.0: USB hub found [ 2493.984446][ T2402] hub 8-0:1.0: 1 port detected [ 2494.266334][ T2407] IPv6: sit3: Disabled Multicast RS [ 2494.403610][ T2406] overlayfs: failed to clone upperpath [ 2495.194536][ T2425] 9pnet_fd: Insufficient options for proto=fd [ 2495.238277][ T2429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9037'. [ 2495.321735][ T2439] 9pnet_fd: Insufficient options for proto=fd [ 2496.579402][ T2465] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9053'. [ 2496.588592][ T2465] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9053'. [ 2498.017057][ T2494] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9059'. [ 2499.057871][ T28] audit: type=1400 audit(2000000216.005:4655): avc: denied { ioctl } for pid=2503 comm="syz.1.9066" path="socket:[105830]" dev="sockfs" ino=105830 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2499.094887][ T2509] 9pnet_fd: Insufficient options for proto=fd [ 2500.241851][ T28] audit: type=1400 audit(2000000217.104:4656): avc: denied { ioctl } for pid=2541 comm="syz.3.9085" path="socket:[105296]" dev="sockfs" ino=105296 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2500.536290][ T2559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9093'. [ 2500.545571][ T2559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9093'. [ 2500.554807][ T2559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9093'. [ 2500.564313][ T2561] 9pnet_fd: Insufficient options for proto=fd [ 2500.595589][ T28] audit: type=1400 audit(2000000217.418:4657): avc: denied { setopt } for pid=2564 comm="syz.3.9094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2502.958649][ T2634] netlink: 48 bytes leftover after parsing attributes in process `syz.7.9120'. [ 2503.002075][ T2640] netlink: 11 bytes leftover after parsing attributes in process `syz.7.9126'. [ 2503.002167][ T28] audit: type=1400 audit(2000000219.651:4658): avc: denied { audit_write } for pid=2637 comm="syz.2.9125" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2503.058053][ T28] audit: type=1107 audit(2000000219.679:4659): pid=2637 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 2503.094593][ T28] audit: type=1400 audit(2000000219.734:4660): avc: denied { getopt } for pid=2646 comm="syz.2.9128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2503.371235][ T2653] netlink: 'syz.7.9127': attribute type 6 has an invalid length. [ 2503.888640][ T2657] netlink: 'syz.2.9131': attribute type 13 has an invalid length. [ 2503.896655][ T2657] netlink: 'syz.2.9131': attribute type 27 has an invalid length. [ 2503.957143][ T28] audit: type=1400 audit(2000000220.528:4661): avc: denied { getopt } for pid=2664 comm="syz.1.9135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2506.138131][ T2680] 9pnet_fd: Insufficient options for proto=fd [ 2506.182164][ T28] audit: type=1400 audit(2000000222.577:4662): avc: denied { name_bind } for pid=2686 comm="syz.2.9142" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 2506.311957][ T2712] 9pnet_fd: Insufficient options for proto=fd [ 2506.561957][ T28] audit: type=1400 audit(2000000222.928:4663): avc: denied { create } for pid=2718 comm="syz.0.9156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2506.625380][ T28] audit: type=1400 audit(2000000222.956:4664): avc: denied { write } for pid=2718 comm="syz.0.9156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2507.521343][ T2761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9175'. [ 2507.798875][ T2786] netlink: 'syz.0.9185': attribute type 2 has an invalid length. [ 2507.823976][ T2788] netlink: 'syz.0.9186': attribute type 4 has an invalid length. [ 2507.901655][ T28] audit: type=1400 audit(2000000224.128:4665): avc: denied { create } for pid=2790 comm="syz.0.9188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2507.926462][ T28] audit: type=1400 audit(2000000224.128:4666): avc: denied { bind } for pid=2790 comm="syz.0.9188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2508.014800][ T28] audit: type=1400 audit(2000000224.275:4667): avc: denied { write } for pid=2799 comm="syz.0.9192" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2508.042366][ T28] audit: type=1400 audit(2000000224.303:4668): avc: denied { open } for pid=2799 comm="syz.0.9192" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2508.096279][ T2806] 9pnet_fd: Insufficient options for proto=fd [ 2508.225396][ T28] audit: type=1400 audit(2000000224.469:4669): avc: denied { map } for pid=2816 comm="syz.2.9196" path="socket:[106605]" dev="sockfs" ino=106605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2508.251453][ T2819] hub 8-0:1.0: USB hub found [ 2508.256312][ T2819] hub 8-0:1.0: 1 port detected [ 2508.259891][ T28] audit: type=1400 audit(2000000224.488:4670): avc: denied { read accept } for pid=2816 comm="syz.2.9196" path="socket:[106605]" dev="sockfs" ino=106605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2508.478758][ T2847] /dev/loop7: Can't open blockdev [ 2509.387080][ T2861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9218'. [ 2509.602191][ T2885] fuse: Bad value for 'fd' [ 2509.655538][ T28] audit: type=1400 audit(2000000225.789:4671): avc: denied { getopt } for pid=2888 comm="syz.3.9231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2509.775706][ T2897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9232'. [ 2509.915494][ T2918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9245'. [ 2510.562179][ T2985] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9277'. [ 2510.571870][ T2985] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9277'. [ 2510.581332][ T2985] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9277'. [ 2510.590950][ T2985] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9277'. [ 2510.615201][ T2993] 9pnet_fd: Insufficient options for proto=fd [ 2510.652974][ T3003] overlayfs: failed to clone upperpath [ 2516.327211][ T3163] 9pnet_fd: Insufficient options for proto=fd [ 2517.478724][ T3223] 9pnet_fd: Insufficient options for proto=fd [ 2518.781575][ T3238] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9389'. [ 2520.253626][ T3320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9426'. [ 2520.328943][ T28] audit: type=1400 audit(2000004330.645:4672): avc: denied { setopt } for pid=3323 comm="syz.2.9428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2520.349197][ T28] audit: type=1400 audit(2000004330.645:4673): avc: denied { read } for pid=3323 comm="syz.2.9428" lport=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2520.456569][ T3328] futex_wake_op: syz.3.9430 tries to shift op by -1; fix this program [ 2520.551346][ T3335] 9pnet_fd: Insufficient options for proto=fd [ 2520.606210][ T3345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9438'. [ 2520.733027][ T3357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9442'. [ 2520.743155][ T3357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9442'. [ 2521.026309][ T3379] netlink: 44 bytes leftover after parsing attributes in process `syz.7.9453'. [ 2521.697765][ T3414] 9pnet_fd: Insufficient options for proto=fd [ 2522.632376][ T3461] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9488'. [ 2524.922293][ T28] audit: type=1400 audit(2000004334.879:4674): avc: denied { read } for pid=3512 comm="syz.0.9512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2524.973724][ T28] audit: type=1400 audit(2000004334.944:4675): avc: denied { setopt } for pid=3512 comm="syz.0.9512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2525.084228][ T3532] 9pnet_fd: Insufficient options for proto=fd [ 2526.770299][ T3554] overlayfs: failed to clone lowerpath [ 2526.809326][ T3559] syz.3.9529[3559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2526.809411][ T3559] syz.3.9529[3559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2527.747731][ T3565] 9pnet_fd: Insufficient options for proto=fd [ 2527.788494][ T3567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9532'. [ 2528.811243][ T3590] syz.1.9541[3590] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2528.811322][ T3590] syz.1.9541[3590] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2528.910771][ T3611] 9pnet_fd: Insufficient options for proto=fd [ 2529.127375][ T3628] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=112 sclass=netlink_audit_socket pid=3628 comm=syz.2.9559 [ 2529.155670][ T28] audit: type=1400 audit(2000004338.802:4676): avc: denied { connect } for pid=3629 comm="syz.2.9560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2529.258960][ T3642] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9566'. [ 2529.268033][ T3642] netlink: 43 bytes leftover after parsing attributes in process `syz.2.9566'. [ 2529.278144][ T3642] netlink: 'syz.2.9566': attribute type 5 has an invalid length. [ 2529.286146][ T3642] netlink: 43 bytes leftover after parsing attributes in process `syz.2.9566'. [ 2529.472487][ T28] audit: type=1400 audit(2000004339.088:4677): avc: denied { mount } for pid=3656 comm="syz.1.9573" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2530.176894][ T28] audit: type=1400 audit(2000004339.743:4678): avc: denied { relabelfrom } for pid=3709 comm="syz.7.9597" name="NETLINK" dev="sockfs" ino=108498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_kobject_uevent_socket permissive=1 [ 2530.187273][ T3710] SELinux: Context system_u:object_r:syslogd_initrc_exec_t:s0 is not valid (left unmapped). [ 2530.213225][ T28] audit: type=1400 audit(2000004339.771:4679): avc: denied { relabelto } for pid=3709 comm="syz.7.9597" name="NETLINK" dev="sockfs" ino=108498 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_kobject_uevent_socket permissive=1 trawcon="system_u:object_r:syslogd_initrc_exec_t:s0" [ 2530.540716][ T3728] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9606'. [ 2531.443097][ T3744] 9pnet_fd: Insufficient options for proto=fd [ 2531.623361][ T3759] syz.1.9619[3759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2531.623443][ T3759] syz.1.9619[3759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2532.565052][ T3791] netlink: 108 bytes leftover after parsing attributes in process `syz.0.9633'. [ 2532.592416][ T3791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9633'. [ 2532.680761][ T3805] futex_wake_op: syz.0.9640 tries to shift op by -1; fix this program [ 2532.711692][ T3810] 9pnet_fd: Insufficient options for proto=fd [ 2536.312778][ T3893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=3893 comm=syz.0.9672 [ 2536.469407][ T3905] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9678'. [ 2536.612458][ T28] audit: type=1400 audit(2000004345.678:4680): avc: denied { module_load } for pid=3911 comm="syz.2.9681" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=7343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 2537.075171][ T28] audit: type=1326 audit(2000004346.103:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3952 comm="syz.2.9700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0500b8e929 code=0x7ffc0000 [ 2537.119346][ T28] audit: type=1326 audit(2000004346.130:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3952 comm="syz.2.9700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0500b8e929 code=0x7ffc0000 [ 2537.151712][ T28] audit: type=1326 audit(2000004346.130:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3952 comm="syz.2.9700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0500b8e929 code=0x7ffc0000 [ 2537.199645][ T28] audit: type=1326 audit(2000004346.130:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3952 comm="syz.2.9700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0500b8e929 code=0x7ffc0000 [ 2537.224159][ T28] audit: type=1326 audit(2000004346.130:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3952 comm="syz.2.9700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0500b8e929 code=0x7ffc0000 [ 2537.259339][ T28] audit: type=1326 audit(2000004346.130:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3952 comm="syz.2.9700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0500b8e929 code=0x7ffc0000 [ 2537.261800][ T3962] 9pnet_fd: Insufficient options for proto=fd [ 2537.301314][ T28] audit: type=1326 audit(2000004346.130:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3952 comm="syz.2.9700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0500b8e929 code=0x7ffc0000 [ 2537.368006][ T28] audit: type=1326 audit(2000004346.130:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3952 comm="syz.2.9700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0500b8e929 code=0x7ffc0000 [ 2537.430167][ T28] audit: type=1326 audit(2000004346.130:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3952 comm="syz.2.9700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0500b8e929 code=0x7ffc0000 [ 2540.089630][ T4047] xt_hashlimit: size too large, truncated to 1048576 [ 2540.353079][ T4069] overlayfs: failed to clone upperpath [ 2540.576504][T25354] kernel write not supported for file bpf-prog (pid: 25354 comm: kworker/0:12) [ 2540.628251][ T4087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9758'. [ 2540.887159][ T4110] overlayfs: failed to clone upperpath [ 2541.007525][ T4114] 9pnet_fd: Insufficient options for proto=fd [ 2543.092851][T25362] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 2544.782256][ T4244] 9pnet_fd: Insufficient options for proto=fd [ 2546.358424][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 2546.358441][ T28] audit: type=1400 audit(2000004354.668:4695): avc: denied { read } for pid=4292 comm="syz.1.9847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2546.463341][ T28] audit: type=1400 audit(2000004354.770:4696): avc: denied { read } for pid=4299 comm="syz.0.9849" name="loop9" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2546.489998][ T4300] loop9: detected capacity change from 0 to 8 [ 2546.519522][ T28] audit: type=1400 audit(2000004354.788:4697): avc: denied { open } for pid=4299 comm="syz.0.9849" path="/dev/loop9" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2546.547978][ T4304] xt_hashlimit: size too large, truncated to 1048576 [ 2546.575919][ T28] audit: type=1400 audit(2000004354.788:4698): avc: denied { ioctl } for pid=4299 comm="syz.0.9849" path="/dev/loop9" dev="devtmpfs" ino=127 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2547.324600][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 2547.356910][ T4323] SELinux: Context system_u:object_r:iptables_initrc_exec_t:s0 is not valid (left unmapped). [ 2547.368135][ T28] audit: type=1400 audit(2000004355.610:4699): avc: denied { relabelto } for pid=4322 comm="syz.3.9856" name="file1" dev="tmpfs" ino=11382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:iptables_initrc_exec_t:s0" [ 2547.410881][ T28] audit: type=1400 audit(2000004355.610:4700): avc: denied { associate } for pid=4322 comm="syz.3.9856" name="file1" dev="tmpfs" ino=11382 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:iptables_initrc_exec_t:s0" [ 2547.831892][ T28] audit: type=1400 audit(2000004356.034:4701): avc: denied { mounton } for pid=4354 comm="syz.0.9870" path="/proc/6486/task" dev="proc" ino=109364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2548.493297][ T4378] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9880'. [ 2548.520069][ T4380] 9pnet_fd: Insufficient options for proto=fd [ 2548.995249][ T4417] hub 8-0:1.0: USB hub found [ 2549.001419][ T4417] hub 8-0:1.0: 1 port detected [ 2550.286203][ T4445] hub 8-0:1.0: USB hub found [ 2550.291012][ T4445] hub 8-0:1.0: 1 port detected [ 2551.594137][ T4478] syz.7.9922[4478] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2551.594225][ T4478] syz.7.9922[4478] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2552.667014][ T4528] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9945'. [ 2553.529152][ T4540] hub 8-0:1.0: USB hub found [ 2553.534204][ T4540] hub 8-0:1.0: 1 port detected [ 2553.701140][ T4556] overlayfs: failed to clone upperpath [ 2554.134209][ T4580] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 2555.186939][ T4616] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9982'. [ 2555.196157][ T4616] netem: change failed [ 2556.002825][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 2556.418295][ T28] audit: type=1326 audit(2000004363.963:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.2.10013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0500b8e929 code=0x7ffc0000 [ 2556.443072][ T28] audit: type=1326 audit(2000004363.963:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.2.10013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0500b8e929 code=0x7ffc0000 [ 2556.478148][ T28] audit: type=1326 audit(2000004363.963:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.2.10013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0500b8e929 code=0x7ffc0000 [ 2556.502663][ T28] audit: type=1326 audit(2000004363.963:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.2.10013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0500b8e963 code=0x7ffc0000 [ 2556.528762][ T28] audit: type=1326 audit(2000004363.963:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.2.10013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0500b8d3df code=0x7ffc0000 [ 2556.554532][ T28] audit: type=1326 audit(2000004363.963:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.2.10013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0500b8e9b7 code=0x7ffc0000 [ 2556.578915][ T28] audit: type=1326 audit(2000004363.981:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.2.10013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0500b8d290 code=0x7ffc0000 [ 2556.603688][ T28] audit: type=1326 audit(2000004363.981:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.2.10013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0500b8d58a code=0x7ffc0000 [ 2556.627362][ T28] audit: type=1326 audit(2000004363.981:4710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.2.10013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0500b8e929 code=0x7ffc0000 [ 2556.651647][ T28] audit: type=1326 audit(2000004363.981:4711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.2.10013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0500b8e929 code=0x7ffc0000 [ 2556.733896][ T4697] overlayfs: failed to clone upperpath [ 2556.937376][ T4705] 9pnet_fd: Insufficient options for proto=fd [ 2557.249829][ T4707] sch_fq: defrate 2048 ignored. [ 2557.338059][ T4721] 9pnet_fd: Insufficient options for proto=fd [ 2557.364050][ T4715] syz.7.10027[4715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2557.364157][ T4715] syz.7.10027[4715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2557.436783][ T4729] overlayfs: failed to clone upperpath [ 2557.837840][ T4764] 9pnet_fd: Insufficient options for proto=fd [ 2558.138339][ T4750] overlayfs: failed to clone upperpath [ 2558.588600][ T4790] 9pnet_fd: Insufficient options for proto=fd [ 2559.358252][ T4825] hub 8-0:1.0: USB hub found [ 2559.363852][ T4825] hub 8-0:1.0: 1 port detected [ 2559.412536][ T4831] netlink: 'syz.3.10077': attribute type 15 has an invalid length. [ 2559.434884][ T4834] xt_hashlimit: size too large, truncated to 1048576 [ 2560.110779][ T4845] 9pnet_fd: Insufficient options for proto=fd [ 2560.369330][ T4854] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2561.849984][ T4895] 9pnet_fd: Insufficient options for proto=fd [ 2562.707024][ T4906] IPv6: Can't replace route, no match found [ 2562.731249][ T4912] overlayfs: failed to clone upperpath [ 2562.739302][ T4910] netlink: 96 bytes leftover after parsing attributes in process `syz.2.10107'. [ 2563.636014][ T4937] 9pnet_fd: Insufficient options for proto=fd [ 2566.336905][ T5043] incfs: Backing dir is not set, filesystem can't be mounted. [ 2566.344630][ T5043] incfs: mount failed -2 [ 2566.365435][ T5047] overlayfs: failed to clone upperpath [ 2566.744927][ T5085] bridge0: port 1(vlan0) entered blocking state [ 2566.751371][ T5085] bridge0: port 1(vlan0) entered disabled state [ 2566.873434][ T5089] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10179'. [ 2567.082606][ T5114] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2567.373555][ T5136] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10199'. [ 2567.630242][ T5148] syz.7.10203[5148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2567.630313][ T5148] syz.7.10203[5148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2567.659545][ T5150] 9pnet_fd: Insufficient options for proto=fd [ 2567.690871][ T5152] device wg2 entered promiscuous mode [ 2568.264846][ T5164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10211'. [ 2569.144985][ T5201] overlayfs: failed to clone upperpath [ 2569.339890][ C0] general protection fault, probably for non-canonical address 0xdffffc000000005b: 0000 [#1] PREEMPT SMP KASAN [ 2569.351644][ C0] KASAN: null-ptr-deref in range [0x00000000000002d8-0x00000000000002df] [ 2569.360065][ C0] CPU: 0 PID: 5205 Comm: syz.2.10228 Tainted: G W 6.1.138-syzkaller-00055-gd8780220fd00 #0 [ 2569.371422][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2569.381472][ C0] RIP: 0010:find_match+0xb7/0xf20 [ 2569.386512][ C0] Code: 7c 05 00 00 74 08 48 89 df e8 d5 b6 63 fd 48 89 d8 bb d8 02 00 00 48 03 18 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 ab b6 63 fd 48 8b 1b 48 85 db 0f 84 [ 2569.406144][ C0] RSP: 0018:ffffc90000006e20 EFLAGS: 00010202 [ 2569.412561][ C0] RAX: 000000000000005b RBX: 00000000000002d8 RCX: dffffc0000000000 [ 2569.420527][ C0] RDX: ffff888152a16540 RSI: 0000000000000000 RDI: 0000000000000000 [ 2569.428492][ C0] RBP: ffffc90000006ed8 R08: ffffc90000007200 R09: ffffc90000007210 [ 2569.436473][ C0] R10: 0000000000000000 R11: 1ffff92000000e62 R12: 0000000000000201 [ 2569.444445][ C0] R13: 1ffff110278d7ac4 R14: 0000000000000000 R15: 0000000000000003 [ 2569.452583][ C0] FS: 00007f050195a6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2569.461507][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2569.468173][ C0] CR2: 00007f6ebdee86ec CR3: 000000013a9c9000 CR4: 00000000003506b0 [ 2569.476144][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2569.484131][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2569.492092][ C0] Call Trace: [ 2569.495365][ C0] [ 2569.498209][ C0] ? debug_smp_processor_id+0x17/0x20 [ 2569.503585][ C0] ? irqtime_account_irq+0xc4/0x240 [ 2569.508908][ C0] rt6_nh_find_match+0xd9/0x140 [ 2569.513811][ C0] nexthop_for_each_fib6_nh+0x107/0x200 [ 2569.519365][ C0] ? __cfi_rt6_nh_find_match+0x10/0x10 [ 2569.525001][ C0] __find_rr_leaf+0x50f/0x900 [ 2569.529685][ C0] ? rt6_remove_exception+0x330/0x330 [ 2569.535339][ C0] ? enqueue_task_fair+0xb91/0x1d10 [ 2569.540546][ C0] fib6_table_lookup+0x2c1/0x9a0 [ 2569.545480][ C0] ? __cfi_enqueue_task_fair+0x10/0x10 [ 2569.550961][ C0] ? __cfi_fib6_table_lookup+0x10/0x10 [ 2569.556424][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 2569.561987][ C0] ip6_pol_route+0x14c/0x1110 [ 2569.566667][ C0] ? get_stack_info_noinstr+0x1b/0x130 [ 2569.572130][ C0] ? __cfi_ip6_pol_route+0x10/0x10 [ 2569.577246][ C0] ip6_pol_route_output+0x51/0x80 [ 2569.582269][ C0] ? __cfi_ip6_pol_route_output+0x10/0x10 [ 2569.588006][ C0] fib6_rule_action+0x1d5/0x720 [ 2569.592887][ C0] fib_rules_lookup+0x4ae/0x900 [ 2569.597755][ C0] ? __cfi_fib_rules_lookup+0x10/0x10 [ 2569.603144][ C0] ? 0xffffffffa0000658 [ 2569.607434][ C0] fib6_rule_lookup+0x179/0x580 [ 2569.612311][ C0] ? __cfi_ip6_pol_route_output+0x10/0x10 [ 2569.618073][ C0] ? __cfi_fib6_rule_lookup+0x10/0x10 [ 2569.623480][ C0] ? unwind_get_return_address+0x4d/0x90 [ 2569.629200][ C0] ? arch_stack_walk+0xfc/0x150 [ 2569.634060][ C0] ? __cfi_ip6_pol_route_output+0x10/0x10 [ 2569.639784][ C0] ip6_route_output_flags_noref+0x283/0x340 [ 2569.645676][ C0] ip6_route_output_flags+0x3c/0x200 [ 2569.650983][ C0] ip6_dst_lookup_tail+0x220/0x1460 [ 2569.656609][ C0] ? __kasan_kmalloc+0x95/0xb0 [ 2569.661394][ C0] ? __kmalloc_node_track_caller+0xb1/0x1e0 [ 2569.667298][ C0] ? __alloc_skb+0x224/0x7e0 [ 2569.671887][ C0] ? __pskb_copy_fclone+0xa7/0xeb0 [ 2569.677014][ C0] ? tipc_bearer_xmit_skb+0x28e/0x380 [ 2569.682384][ C0] ? handle_softirqs+0x1d7/0x600 [ 2569.687323][ C0] ? __irq_exit_rcu+0x52/0xf0 [ 2569.691994][ C0] ? irq_exit_rcu+0x9/0x10 [ 2569.696407][ C0] ? __schedule+0xb8f/0x14e0 [ 2569.701022][ C0] ? schedule+0xbd/0x170 [ 2569.705263][ C0] ? schedule_timeout+0xa6/0x2e0 [ 2569.710287][ C0] ? unix_wait_for_peer+0x1e5/0x2e0 [ 2569.715482][ C0] ? unix_dgram_sendmsg+0x1034/0x18e0 [ 2569.720848][ C0] ? ____sys_sendmsg+0x5a9/0x990 [ 2569.725789][ C0] ? ___sys_sendmsg+0x21c/0x290 [ 2569.730632][ C0] ? x64_sys_call+0x3f5/0x9a0 [ 2569.735326][ C0] ? do_syscall_64+0x4c/0xa0 [ 2569.739918][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2569.745994][ C0] ? ip6_dst_lookup+0x60/0x60 [ 2569.750669][ C0] ? dst_cache_per_cpu_get+0x1d5/0x340 [ 2569.756127][ C0] ip6_dst_lookup_flow+0x49/0xc0 [ 2569.761071][ C0] ? __cfi_ip6_dst_lookup_flow+0x10/0x10 [ 2569.766700][ C0] tipc_udp_xmit+0x306/0x8b0 [ 2569.771321][ C0] ? tipc_udp_xmit+0x95/0x8b0 [ 2569.776378][ C0] ? tipc_udp_msg2addr+0x1d0/0x1d0 [ 2569.781526][ C0] ? memcpy+0x56/0x70 [ 2569.786259][ C0] ? __copy_skb_header+0x49f/0x630 [ 2569.791485][ C0] tipc_udp_send_msg+0x227/0x320 [ 2569.796429][ C0] tipc_bearer_xmit_skb+0x28e/0x380 [ 2569.801815][ C0] ? __skb_clone+0x47a/0x790 [ 2569.806787][ C0] ? __cfi_tipc_bearer_xmit_skb+0x10/0x10 [ 2569.812875][ C0] ? skb_clone+0x228/0x380 [ 2569.817299][ C0] tipc_disc_timeout+0x6a2/0x830 [ 2569.822236][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 2569.827692][ C0] ? __kasan_check_write+0x14/0x20 [ 2569.832808][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 2569.838358][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 2569.843844][ C0] call_timer_fn+0x46/0x2a0 [ 2569.848351][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 2569.853807][ C0] __run_timers+0x639/0x9a0 [ 2569.858314][ C0] ? calc_index+0x200/0x200 [ 2569.862821][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 2569.868033][ C0] run_timer_softirq+0x6a/0xf0 [ 2569.872802][ C0] handle_softirqs+0x1d7/0x600 [ 2569.877562][ C0] ? irqtime_account_irq+0xc4/0x240 [ 2569.882767][ C0] __irq_exit_rcu+0x52/0xf0 [ 2569.887288][ C0] irq_exit_rcu+0x9/0x10 [ 2569.891524][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 2569.897156][ C0] [ 2569.900079][ C0] [ 2569.903008][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2569.908993][ C0] RIP: 0010:__schedule+0xb8f/0x14e0 [ 2569.914196][ C0] Code: 42 0f b6 04 20 84 c0 0f 85 3b 03 00 00 48 8b 44 24 48 80 20 fc 4c 89 ef 48 8b 74 24 28 e8 99 cd 11 fc 48 89 c7 e8 e1 e4 5d fc <48> 8b 44 24 70 48 c7 84 24 80 00 00 00 0e 36 e0 45 4a c7 04 20 00 [ 2569.933799][ C0] RSP: 0018:ffffc9000db5f420 EFLAGS: 00000282 [ 2569.939864][ C0] RAX: 0000000080000001 RBX: 0000000000000000 RCX: 0000000000000000 [ 2569.947833][ C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 00000000ffffffff [ 2569.955828][ C0] RBP: ffffc9000db5f528 R08: dffffc0000000000 R09: ffffed102a542ca9 [ 2569.963885][ C0] R10: ffffed102a542ca9 R11: 1ffff1102a542ca8 R12: dffffc0000000000 [ 2569.972459][ C0] R13: ffff888152a16540 R14: ffff8881f70388a0 R15: 1ffff1103ee07114 [ 2569.980529][ C0] ? release_firmware_map_entry+0x194/0x194 [ 2569.986433][ C0] ? avc_has_perm+0x158/0x240 [ 2569.991112][ C0] schedule+0xbd/0x170 [ 2569.995622][ C0] schedule_timeout+0xa6/0x2e0 [ 2570.000384][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 2570.005755][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 2570.011563][ C0] ? prepare_to_wait_exclusive+0x191/0x1d0 [ 2570.017464][ C0] unix_wait_for_peer+0x1e5/0x2e0 [ 2570.022486][ C0] ? unix_find_other+0x880/0x880 [ 2570.027515][ C0] ? __cfi_autoremove_wake_function+0x10/0x10 [ 2570.033595][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 2570.038828][ C0] ? kasan_check_range+0x1af/0x290 [ 2570.043936][ C0] ? security_unix_may_send+0x8c/0xb0 [ 2570.049311][ C0] unix_dgram_sendmsg+0x1034/0x18e0 [ 2570.054518][ C0] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 2570.060173][ C0] ? security_socket_sendmsg+0x93/0xb0 [ 2570.065638][ C0] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 2570.071186][ C0] ____sys_sendmsg+0x5a9/0x990 [ 2570.075959][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 2570.080992][ C0] ? import_iovec+0x7c/0xb0 [ 2570.085498][ C0] ___sys_sendmsg+0x21c/0x290 [ 2570.090261][ C0] ? __sys_sendmsg+0x270/0x270 [ 2570.095034][ C0] ? up_read+0x56/0x1d0 [ 2570.099229][ C0] __sys_sendmmsg+0x274/0x460 [ 2570.103926][ C0] ? __cfi___sys_sendmmsg+0x10/0x10 [ 2570.109139][ C0] ? __bpf_trace_sys_enter+0x62/0x70 [ 2570.114435][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 2570.119307][ C0] x64_sys_call+0x3f5/0x9a0 [ 2570.123864][ C0] do_syscall_64+0x4c/0xa0 [ 2570.128409][ C0] ? clear_bhb_loop+0x15/0x70 [ 2570.133114][ C0] ? clear_bhb_loop+0x15/0x70 [ 2570.137796][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2570.143702][ C0] RIP: 0033:0x7f0500b8e929 [ 2570.148131][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2570.167749][ C0] RSP: 002b:00007f050195a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2570.176173][ C0] RAX: ffffffffffffffda RBX: 00007f0500db5fa0 RCX: 00007f0500b8e929 [ 2570.184143][ C0] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004 [ 2570.192240][ C0] RBP: 00007f0500c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 2570.200257][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2570.208671][ C0] R13: 0000000000000000 R14: 00007f0500db5fa0 R15: 00007fff42c31258 [ 2570.216651][ C0] [ 2570.219675][ C0] Modules linked in: [ 2570.223666][ C0] ---[ end trace 0000000000000000 ]--- [ 2570.229161][ C0] RIP: 0010:find_match+0xb7/0xf20 [ 2570.234234][ C0] Code: 7c 05 00 00 74 08 48 89 df e8 d5 b6 63 fd 48 89 d8 bb d8 02 00 00 48 03 18 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 ab b6 63 fd 48 8b 1b 48 85 db 0f 84 [ 2570.254157][ C0] RSP: 0018:ffffc90000006e20 EFLAGS: 00010202 [ 2570.260286][ C0] RAX: 000000000000005b RBX: 00000000000002d8 RCX: dffffc0000000000 [ 2570.268313][ C0] RDX: ffff888152a16540 RSI: 0000000000000000 RDI: 0000000000000000 [ 2570.276360][ C0] RBP: ffffc90000006ed8 R08: ffffc90000007200 R09: ffffc90000007210 [ 2570.284432][ C0] R10: 0000000000000000 R11: 1ffff92000000e62 R12: 0000000000000201 [ 2570.292438][ C0] R13: 1ffff110278d7ac4 R14: 0000000000000000 R15: 0000000000000003 [ 2570.300453][ C0] FS: 00007f050195a6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2570.309433][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2570.316061][ C0] CR2: 00007f6ebdee86ec CR3: 000000013a9c9000 CR4: 00000000003506b0 [ 2570.324053][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2570.332152][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2570.340184][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 2570.347609][ C0] Kernel Offset: disabled [ 2570.351936][ C0] Rebooting in 86400 seconds..