Extracting prog: 1m50.758534671s
Minimizing prog: 1h0m0.984434191s
Simplifying prog options: 0s
Extracting C: 1m31.34904418s
Simplifying C: 28m17.964064046s


extracting reproducer from 27 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-getsockopt$sock_cred-socket$nl_generic-syz_genetlink_get_family_id$ethtool-prlimit64-sched_setscheduler-getpid-sched_setscheduler-bpf$MAP_CREATE-ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-openat$dma_heap-bpf$MAP_CREATE-setreuid-setfsuid-syz_open_dev$loop-syz_init_net_socket$bt_l2cap-getsockopt$bt_BT_VOICE-ioctl$IOC_PR_RESERVE-bpf$MAP_GET_NEXT_KEY-sendmsg$ETHTOOL_MSG_LINKINFO_GET-syz_clone3
detailed listing:
executing program 0:
unshare(0x26000400)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgrp(0xffffffffffffffff)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={<r3=>0x0}, &(0x7f0000000080)=0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000088}, 0x0)
sched_setscheduler(r0, 0x3, &(0x7f0000000100)=0x1)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f00000005c0)={{0x1, 0x5, 0x10, 0x6, 'syz0\x00', 0x12000000}, 0x2, 0x20000000, 0x7f, r3, 0x3, 0xa, 'syz0\x00', &(0x7f0000000180)=['ethtool\x00', '(\x00', 'ethtool\x00'], 0x12})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48)
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
r11 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x10d002)
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_VOICE(r12, 0x112, 0xb, 0x0, &(0x7f00000000c0))
ioctl$IOC_PR_RESERVE(r11, 0x401070c9, 0x0)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r10, &(0x7f00000006c0), 0x0}, 0x20)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYRES8=r1, @ANYRES16=r5, @ANYBLOB="01000000000100"/22, @ANYRES32=r7, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4008010}, 0x4008044)
syz_clone3(&(0x7f0000000540)={0x200, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r1, r1], 0x2}, 0x58)

program crashed: WARNING in free_nsproxy
single: successfully extracted reproducer
found reproducer with 30 syscalls
minimizing guilty program
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-getsockopt$sock_cred-socket$nl_generic-syz_genetlink_get_family_id$ethtool-prlimit64-sched_setscheduler-getpid-sched_setscheduler-bpf$MAP_CREATE-ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-openat$dma_heap-bpf$MAP_CREATE-setreuid-setfsuid-syz_open_dev$loop-syz_init_net_socket$bt_l2cap-getsockopt$bt_BT_VOICE-ioctl$IOC_PR_RESERVE-bpf$MAP_GET_NEXT_KEY-sendmsg$ETHTOOL_MSG_LINKINFO_GET
detailed listing:
executing program 0:
unshare(0x26000400)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgrp(0xffffffffffffffff)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={<r3=>0x0}, &(0x7f0000000080)=0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000088}, 0x0)
sched_setscheduler(r0, 0x3, &(0x7f0000000100)=0x1)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f00000005c0)={{0x1, 0x5, 0x10, 0x6, 'syz0\x00', 0x12000000}, 0x2, 0x20000000, 0x7f, r3, 0x3, 0xa, 'syz0\x00', &(0x7f0000000180)=['ethtool\x00', '(\x00', 'ethtool\x00'], 0x12})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48)
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
r11 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x10d002)
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_VOICE(r12, 0x112, 0xb, 0x0, &(0x7f00000000c0))
ioctl$IOC_PR_RESERVE(r11, 0x401070c9, 0x0)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r10, &(0x7f00000006c0), 0x0}, 0x20)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYRES8=r1, @ANYRES16=r5, @ANYBLOB="01000000000100"/22, @ANYRES32=r7, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4008010}, 0x4008044)

program crashed: WARNING in free_nsproxy
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-getsockopt$sock_cred-socket$nl_generic-syz_genetlink_get_family_id$ethtool-prlimit64-sched_setscheduler-getpid-sched_setscheduler-bpf$MAP_CREATE-ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-openat$dma_heap-bpf$MAP_CREATE-setreuid-setfsuid-syz_open_dev$loop-syz_init_net_socket$bt_l2cap-getsockopt$bt_BT_VOICE-ioctl$IOC_PR_RESERVE-bpf$MAP_GET_NEXT_KEY
detailed listing:
executing program 0:
unshare(0x26000400)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000080)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000088}, 0x0)
sched_setscheduler(r0, 0x3, &(0x7f0000000100)=0x1)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000005c0)={{0x1, 0x5, 0x10, 0x6, 'syz0\x00', 0x12000000}, 0x2, 0x20000000, 0x7f, r2, 0x3, 0xa, 'syz0\x00', &(0x7f0000000180)=['ethtool\x00', '(\x00', 'ethtool\x00'], 0x12})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48)
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
r7 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x10d002)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_VOICE(r8, 0x112, 0xb, 0x0, &(0x7f00000000c0))
ioctl$IOC_PR_RESERVE(r7, 0x401070c9, 0x0)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r6, &(0x7f00000006c0), 0x0}, 0x20)

program crashed: WARNING in free_nsproxy
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-getsockopt$sock_cred-socket$nl_generic-syz_genetlink_get_family_id$ethtool-prlimit64-sched_setscheduler-getpid-sched_setscheduler-bpf$MAP_CREATE-ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-openat$dma_heap-bpf$MAP_CREATE-setreuid-setfsuid-syz_open_dev$loop-syz_init_net_socket$bt_l2cap-getsockopt$bt_BT_VOICE-ioctl$IOC_PR_RESERVE
detailed listing:
executing program 0:
unshare(0x26000400)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000080)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000088}, 0x0)
sched_setscheduler(r0, 0x3, &(0x7f0000000100)=0x1)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000005c0)={{0x1, 0x5, 0x10, 0x6, 'syz0\x00', 0x12000000}, 0x2, 0x20000000, 0x7f, r2, 0x3, 0xa, 'syz0\x00', &(0x7f0000000180)=['ethtool\x00', '(\x00', 'ethtool\x00'], 0x12})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48)
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
r6 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x10d002)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_VOICE(r7, 0x112, 0xb, 0x0, &(0x7f00000000c0))
ioctl$IOC_PR_RESERVE(r6, 0x401070c9, 0x0)

program crashed: WARNING in free_nsproxy
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-getsockopt$sock_cred-socket$nl_generic-syz_genetlink_get_family_id$ethtool-prlimit64-sched_setscheduler-getpid-sched_setscheduler-bpf$MAP_CREATE-ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-openat$dma_heap-bpf$MAP_CREATE-setreuid-setfsuid-syz_open_dev$loop-syz_init_net_socket$bt_l2cap-getsockopt$bt_BT_VOICE
detailed listing:
executing program 0:
unshare(0x26000400)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000080)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000088}, 0x0)
sched_setscheduler(r0, 0x3, &(0x7f0000000100)=0x1)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000005c0)={{0x1, 0x5, 0x10, 0x6, 'syz0\x00', 0x12000000}, 0x2, 0x20000000, 0x7f, r2, 0x3, 0xa, 'syz0\x00', &(0x7f0000000180)=['ethtool\x00', '(\x00', 'ethtool\x00'], 0x12})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48)
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x10d002)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_VOICE(r6, 0x112, 0xb, 0x0, &(0x7f00000000c0))

program crashed: WARNING in free_nsproxy
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-getsockopt$sock_cred-socket$nl_generic-syz_genetlink_get_family_id$ethtool-prlimit64-sched_setscheduler-getpid-sched_setscheduler-bpf$MAP_CREATE-ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-openat$dma_heap-bpf$MAP_CREATE-setreuid-setfsuid-syz_open_dev$loop-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
unshare(0x26000400)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000080)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000088}, 0x0)
sched_setscheduler(r0, 0x3, &(0x7f0000000100)=0x1)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000005c0)={{0x1, 0x5, 0x10, 0x6, 'syz0\x00', 0x12000000}, 0x2, 0x20000000, 0x7f, r2, 0x3, 0xa, 'syz0\x00', &(0x7f0000000180)=['ethtool\x00', '(\x00', 'ethtool\x00'], 0x12})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48)
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x10d002)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program crashed: WARNING in free_nsproxy
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-getsockopt$sock_cred-socket$nl_generic-syz_genetlink_get_family_id$ethtool-prlimit64-sched_setscheduler-getpid-sched_setscheduler-bpf$MAP_CREATE-ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-openat$dma_heap-bpf$MAP_CREATE-setreuid-setfsuid-syz_open_dev$loop
detailed listing:
executing program 0:
unshare(0x26000400)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000080)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000088}, 0x0)
sched_setscheduler(r0, 0x3, &(0x7f0000000100)=0x1)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000005c0)={{0x1, 0x5, 0x10, 0x6, 'syz0\x00', 0x12000000}, 0x2, 0x20000000, 0x7f, r2, 0x3, 0xa, 'syz0\x00', &(0x7f0000000180)=['ethtool\x00', '(\x00', 'ethtool\x00'], 0x12})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48)
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x10d002)

program did not crash
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-getsockopt$sock_cred-socket$nl_generic-syz_genetlink_get_family_id$ethtool-prlimit64-sched_setscheduler-getpid-sched_setscheduler-bpf$MAP_CREATE-ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-openat$dma_heap-bpf$MAP_CREATE-setreuid-setfsuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
unshare(0x26000400)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000080)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000088}, 0x0)
sched_setscheduler(r0, 0x3, &(0x7f0000000100)=0x1)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000005c0)={{0x1, 0x5, 0x10, 0x6, 'syz0\x00', 0x12000000}, 0x2, 0x20000000, 0x7f, r2, 0x3, 0xa, 'syz0\x00', &(0x7f0000000180)=['ethtool\x00', '(\x00', 'ethtool\x00'], 0x12})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48)
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program crashed: WARNING in free_nsproxy
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-getsockopt$sock_cred-socket$nl_generic-syz_genetlink_get_family_id$ethtool-prlimit64-sched_setscheduler-getpid-sched_setscheduler-bpf$MAP_CREATE-ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-openat$dma_heap-bpf$MAP_CREATE-setreuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
unshare(0x26000400)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000080)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000088}, 0x0)
sched_setscheduler(r0, 0x3, &(0x7f0000000100)=0x1)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000005c0)={{0x1, 0x5, 0x10, 0x6, 'syz0\x00', 0x12000000}, 0x2, 0x20000000, 0x7f, r2, 0x3, 0xa, 'syz0\x00', &(0x7f0000000180)=['ethtool\x00', '(\x00', 'ethtool\x00'], 0x12})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48)
setreuid(0xffffffffffffffff, 0xee00)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program did not crash
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-getsockopt$sock_cred-socket$nl_generic-syz_genetlink_get_family_id$ethtool-prlimit64-sched_setscheduler-getpid-sched_setscheduler-bpf$MAP_CREATE-ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-openat$dma_heap-bpf$MAP_CREATE-setfsuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
unshare(0x26000400)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000080)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000088}, 0x0)
sched_setscheduler(r0, 0x3, &(0x7f0000000100)=0x1)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000005c0)={{0x1, 0x5, 0x10, 0x6, 'syz0\x00', 0x12000000}, 0x2, 0x20000000, 0x7f, r2, 0x3, 0xa, 'syz0\x00', &(0x7f0000000180)=['ethtool\x00', '(\x00', 'ethtool\x00'], 0x12})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48)
setfsuid(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program did not crash
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-getsockopt$sock_cred-socket$nl_generic-syz_genetlink_get_family_id$ethtool-prlimit64-sched_setscheduler-getpid-sched_setscheduler-bpf$MAP_CREATE-ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-openat$dma_heap-setreuid-setfsuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
unshare(0x26000400)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000080)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000088}, 0x0)
sched_setscheduler(r0, 0x3, &(0x7f0000000100)=0x1)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000005c0)={{0x1, 0x5, 0x10, 0x6, 'syz0\x00', 0x12000000}, 0x2, 0x20000000, 0x7f, r2, 0x3, 0xa, 'syz0\x00', &(0x7f0000000180)=['ethtool\x00', '(\x00', 'ethtool\x00'], 0x12})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program crashed: WARNING in free_nsproxy
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-getsockopt$sock_cred-socket$nl_generic-syz_genetlink_get_family_id$ethtool-prlimit64-sched_setscheduler-getpid-sched_setscheduler-bpf$MAP_CREATE-ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-setreuid-setfsuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
unshare(0x26000400)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000080)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000088}, 0x0)
sched_setscheduler(r0, 0x3, &(0x7f0000000100)=0x1)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000005c0)={{0x1, 0x5, 0x10, 0x6, 'syz0\x00', 0x12000000}, 0x2, 0x20000000, 0x7f, r2, 0x3, 0xa, 'syz0\x00', &(0x7f0000000180)=['ethtool\x00', '(\x00', 'ethtool\x00'], 0x12})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program crashed: WARNING in free_nsproxy
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-getsockopt$sock_cred-socket$nl_generic-syz_genetlink_get_family_id$ethtool-prlimit64-sched_setscheduler-getpid-sched_setscheduler-bpf$MAP_CREATE-ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-setreuid-setfsuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
unshare(0x26000400)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000080)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000088}, 0x0)
sched_setscheduler(r0, 0x3, &(0x7f0000000100)=0x1)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000005c0)={{0x1, 0x5, 0x10, 0x6, 'syz0\x00', 0x12000000}, 0x2, 0x20000000, 0x7f, r2, 0x3, 0xa, 'syz0\x00', &(0x7f0000000180)=['ethtool\x00', '(\x00', 'ethtool\x00'], 0x12})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program crashed: WARNING in free_nsproxy
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-getsockopt$sock_cred-socket$nl_generic-syz_genetlink_get_family_id$ethtool-prlimit64-sched_setscheduler-getpid-sched_setscheduler-bpf$MAP_CREATE-ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE-mmap-socketpair$unix-connect$unix-sendmmsg$unix-setreuid-setfsuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
unshare(0x26000400)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000080)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000088}, 0x0)
sched_setscheduler(r0, 0x3, &(0x7f0000000100)=0x1)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000005c0)={{0x1, 0x5, 0x10, 0x6, 'syz0\x00', 0x12000000}, 0x2, 0x20000000, 0x7f, r2, 0x3, 0xa, 'syz0\x00', &(0x7f0000000180)=['ethtool\x00', '(\x00', 'ethtool\x00'], 0x12})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program crashed: WARNING in free_nsproxy
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-getsockopt$sock_cred-socket$nl_generic-syz_genetlink_get_family_id$ethtool-prlimit64-sched_setscheduler-getpid-sched_setscheduler-bpf$MAP_CREATE-ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE-mmap-socketpair$unix-connect$unix-setreuid-setfsuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
unshare(0x26000400)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000080)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000088}, 0x0)
sched_setscheduler(r0, 0x3, &(0x7f0000000100)=0x1)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000005c0)={{0x1, 0x5, 0x10, 0x6, 'syz0\x00', 0x12000000}, 0x2, 0x20000000, 0x7f, r2, 0x3, 0xa, 'syz0\x00', &(0x7f0000000180)=['ethtool\x00', '(\x00', 'ethtool\x00'], 0x12})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program crashed: WARNING in free_nsproxy
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-getsockopt$sock_cred-socket$nl_generic-syz_genetlink_get_family_id$ethtool-prlimit64-sched_setscheduler-getpid-sched_setscheduler-bpf$MAP_CREATE-ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE-mmap-socketpair$unix-setreuid-setfsuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
unshare(0x26000400)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000080)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000088}, 0x0)
sched_setscheduler(r0, 0x3, &(0x7f0000000100)=0x1)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000005c0)={{0x1, 0x5, 0x10, 0x6, 'syz0\x00', 0x12000000}, 0x2, 0x20000000, 0x7f, r2, 0x3, 0xa, 'syz0\x00', &(0x7f0000000180)=['ethtool\x00', '(\x00', 'ethtool\x00'], 0x12})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program crashed: WARNING in free_nsproxy
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-getsockopt$sock_cred-socket$nl_generic-syz_genetlink_get_family_id$ethtool-prlimit64-sched_setscheduler-getpid-sched_setscheduler-bpf$MAP_CREATE-ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE-mmap-setreuid-setfsuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
unshare(0x26000400)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000080)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000088}, 0x0)
sched_setscheduler(r0, 0x3, &(0x7f0000000100)=0x1)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000005c0)={{0x1, 0x5, 0x10, 0x6, 'syz0\x00', 0x12000000}, 0x2, 0x20000000, 0x7f, r2, 0x3, 0xa, 'syz0\x00', &(0x7f0000000180)=['ethtool\x00', '(\x00', 'ethtool\x00'], 0x12})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program crashed: WARNING in nsproxy_ns_active_get
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-getsockopt$sock_cred-socket$nl_generic-syz_genetlink_get_family_id$ethtool-prlimit64-sched_setscheduler-getpid-sched_setscheduler-bpf$MAP_CREATE-ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE-setreuid-setfsuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
unshare(0x26000400)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000080)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000088}, 0x0)
sched_setscheduler(r0, 0x3, &(0x7f0000000100)=0x1)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000005c0)={{0x1, 0x5, 0x10, 0x6, 'syz0\x00', 0x12000000}, 0x2, 0x20000000, 0x7f, r2, 0x3, 0xa, 'syz0\x00', &(0x7f0000000180)=['ethtool\x00', '(\x00', 'ethtool\x00'], 0x12})
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program crashed: WARNING in free_nsproxy
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-getsockopt$sock_cred-socket$nl_generic-syz_genetlink_get_family_id$ethtool-prlimit64-sched_setscheduler-getpid-sched_setscheduler-bpf$MAP_CREATE-setreuid-setfsuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
unshare(0x26000400)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000088}, 0x0)
sched_setscheduler(r0, 0x3, &(0x7f0000000100)=0x1)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program crashed: WARNING in free_nsproxy
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-getsockopt$sock_cred-socket$nl_generic-syz_genetlink_get_family_id$ethtool-prlimit64-sched_setscheduler-getpid-sched_setscheduler-setreuid-setfsuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
unshare(0x26000400)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000088}, 0x0)
sched_setscheduler(r0, 0x3, &(0x7f0000000100)=0x1)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program crashed: WARNING in free_nsproxy
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-getsockopt$sock_cred-socket$nl_generic-syz_genetlink_get_family_id$ethtool-prlimit64-sched_setscheduler-getpid-setreuid-setfsuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
unshare(0x26000400)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000088}, 0x0)
sched_setscheduler(r0, 0x3, &(0x7f0000000100)=0x1)
getpid()
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program crashed: WARNING in free_nsproxy
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-getsockopt$sock_cred-socket$nl_generic-syz_genetlink_get_family_id$ethtool-prlimit64-sched_setscheduler-setreuid-setfsuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
unshare(0x26000400)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000088}, 0x0)
sched_setscheduler(r0, 0x3, &(0x7f0000000100)=0x1)
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program crashed: WARNING in free_nsproxy
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-getsockopt$sock_cred-socket$nl_generic-syz_genetlink_get_family_id$ethtool-prlimit64-setreuid-setfsuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
unshare(0x26000400)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000088}, 0x0)
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program crashed: WARNING in free_nsproxy
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-getsockopt$sock_cred-socket$nl_generic-syz_genetlink_get_family_id$ethtool-setreuid-setfsuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
unshare(0x26000400)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program crashed: WARNING in free_nsproxy
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-getsockopt$sock_cred-socket$nl_generic-setreuid-setfsuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
unshare(0x26000400)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program crashed: WARNING in free_nsproxy
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-getsockopt$sock_cred-setreuid-setfsuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
unshare(0x26000400)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program crashed: WARNING in free_nsproxy
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-openat$zero-setreuid-setfsuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
unshare(0x26000400)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program crashed: WARNING in free_nsproxy
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-getpgrp-setreuid-setfsuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
unshare(0x26000400)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program crashed: WARNING in free_nsproxy
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_clone-setreuid-setfsuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
unshare(0x26000400)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program crashed: WARNING in free_nsproxy
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-setreuid-setfsuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
unshare(0x26000400)
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program crashed: WARNING in free_nsproxy
testing program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setreuid-setfsuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program crashed: WARNING in alloc_pid
extracting C reproducer
testing compiled C program (duration=45.382614415s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setreuid-setfsuid-syz_init_net_socket$bt_l2cap
program crashed: WARNING in alloc_pid
simplifying C reproducer
testing compiled C program (duration=45.382614415s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setreuid-setfsuid-syz_init_net_socket$bt_l2cap
program crashed: WARNING in alloc_pid
testing compiled C program (duration=45.382614415s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setreuid-setfsuid-syz_init_net_socket$bt_l2cap
program crashed: WARNING in put_mnt_ns
a never seen crash title: WARNING in put_mnt_ns, ignore
testing compiled C program (duration=45.382614415s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setreuid-setfsuid-syz_init_net_socket$bt_l2cap
program crashed: WARNING in nsproxy_ns_active_put
a never seen crash title: WARNING in nsproxy_ns_active_put, ignore
testing compiled C program (duration=45.382614415s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setreuid-setfsuid-syz_init_net_socket$bt_l2cap
program did not crash
testing compiled C program (duration=45.382614415s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setreuid-setfsuid-syz_init_net_socket$bt_l2cap
program crashed: WARNING in alloc_pid
testing compiled C program (duration=45.382614415s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setreuid-setfsuid-syz_init_net_socket$bt_l2cap
program crashed: WARNING in alloc_pid
testing compiled C program (duration=45.382614415s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setreuid-setfsuid-syz_init_net_socket$bt_l2cap
program crashed: WARNING in alloc_pid
testing compiled C program (duration=45.382614415s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setreuid-setfsuid-syz_init_net_socket$bt_l2cap
program crashed: WARNING in alloc_pid
testing compiled C program (duration=45.382614415s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setreuid-setfsuid-syz_init_net_socket$bt_l2cap
program crashed: WARNING in alloc_pid
testing compiled C program (duration=45.382614415s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setreuid-setfsuid-syz_init_net_socket$bt_l2cap
program crashed: WARNING in alloc_pid
testing compiled C program (duration=45.382614415s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setreuid-setfsuid-syz_init_net_socket$bt_l2cap
program crashed: WARNING in alloc_pid
testing compiled C program (duration=45.382614415s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setreuid-setfsuid-syz_init_net_socket$bt_l2cap
program crashed: WARNING in alloc_pid
testing compiled C program (duration=45.382614415s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setreuid-setfsuid-syz_init_net_socket$bt_l2cap
program crashed: WARNING in nsproxy_ns_active_put
a never seen crash title: WARNING in nsproxy_ns_active_put, ignore
testing compiled C program (duration=45.382614415s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setreuid-setfsuid-syz_init_net_socket$bt_l2cap
program crashed: WARNING in alloc_pid
testing compiled C program (duration=45.382614415s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setreuid-setfsuid-syz_init_net_socket$bt_l2cap
program crashed: WARNING in alloc_pid
testing compiled C program (duration=45.382614415s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setreuid-setfsuid-syz_init_net_socket$bt_l2cap
program crashed: WARNING in alloc_pid
testing compiled C program (duration=45.382614415s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setreuid-setfsuid-syz_init_net_socket$bt_l2cap
program crashed: WARNING in alloc_pid
testing program (duration=45.382614415s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setreuid-setfsuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program crashed: WARNING in alloc_pid
validation run: crashed=true
testing program (duration=45.382614415s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setreuid-setfsuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program crashed: WARNING in alloc_pid
validation run: crashed=true
testing program (duration=45.382614415s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setreuid-setfsuid-syz_init_net_socket$bt_l2cap
detailed listing:
executing program 0:
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

program crashed: WARNING in alloc_pid
validation run: crashed=true
reproducing took 1h39m14.739498993s
repro crashed as (corrupted=false):
------------[ cut here ]------------
WARNING: ./include/linux/ns_common.h:288 at __ns_ref_active_get include/linux/ns_common.h:288 [inline], CPU#0: syz-executor/5934
WARNING: ./include/linux/ns_common.h:288 at alloc_pid+0xad6/0xc70 kernel/pid.c:285, CPU#0: syz-executor/5934
Modules linked in:
CPU: 0 UID: 0 PID: 5934 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
RIP: 0010:__ns_ref_active_get include/linux/ns_common.h:288 [inline]
RIP: 0010:alloc_pid+0xad6/0xc70 kernel/pid.c:285
Code: cc e8 7e d6 34 00 be 02 00 00 00 eb 0a e8 72 d6 34 00 be 01 00 00 00 48 89 df e8 05 32 04 03 e9 84 fa ff ff e8 5b d6 34 00 90 <0f> 0b 90 e9 2c fd ff ff e8 4d d6 34 00 90 0f 0b 90 e9 5b fd ff ff
RSP: 0018:ffffc90003f3f9d8 EFLAGS: 00010293
RAX: ffffffff818ca9d5 RBX: ffff88807363c6c8 RCX: ffff88802aee9e80
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
RBP: ffff88807eb36f01 R08: ffff88807363c6cb R09: 1ffff1100e6c78d9
R10: dffffc0000000000 R11: ffffed100e6c78da R12: dffffc0000000000
R13: 1ffff1100fd66e01 R14: ffff88807363c560 R15: dffffc0000000000
FS:  000055557253b500(0000) GS:ffff888125ec2000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa21c1156c0 CR3: 0000000031be2000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 copy_process+0x18e7/0x3930 kernel/fork.c:2196
 kernel_clone+0x21e/0x840 kernel/fork.c:2609
 __do_sys_clone kernel/fork.c:2750 [inline]
 __se_sys_clone kernel/fork.c:2734 [inline]
 __x64_sys_clone+0x18b/0x1e0 kernel/fork.c:2734
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa21b385e13
Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00
RSP: 002b:00007ffed2722fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa21b385e13
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
R10: 000055557253b7d0 R11: 0000000000000246 R12: 0000000000000000
R13: 00000000000927c0 R14: 000000000001f3f2 R15: 00007ffed2723170
 </TASK>

final repro crashed as (corrupted=false):
------------[ cut here ]------------
WARNING: ./include/linux/ns_common.h:288 at __ns_ref_active_get include/linux/ns_common.h:288 [inline], CPU#0: syz-executor/5934
WARNING: ./include/linux/ns_common.h:288 at alloc_pid+0xad6/0xc70 kernel/pid.c:285, CPU#0: syz-executor/5934
Modules linked in:
CPU: 0 UID: 0 PID: 5934 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
RIP: 0010:__ns_ref_active_get include/linux/ns_common.h:288 [inline]
RIP: 0010:alloc_pid+0xad6/0xc70 kernel/pid.c:285
Code: cc e8 7e d6 34 00 be 02 00 00 00 eb 0a e8 72 d6 34 00 be 01 00 00 00 48 89 df e8 05 32 04 03 e9 84 fa ff ff e8 5b d6 34 00 90 <0f> 0b 90 e9 2c fd ff ff e8 4d d6 34 00 90 0f 0b 90 e9 5b fd ff ff
RSP: 0018:ffffc90003f3f9d8 EFLAGS: 00010293
RAX: ffffffff818ca9d5 RBX: ffff88807363c6c8 RCX: ffff88802aee9e80
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
RBP: ffff88807eb36f01 R08: ffff88807363c6cb R09: 1ffff1100e6c78d9
R10: dffffc0000000000 R11: ffffed100e6c78da R12: dffffc0000000000
R13: 1ffff1100fd66e01 R14: ffff88807363c560 R15: dffffc0000000000
FS:  000055557253b500(0000) GS:ffff888125ec2000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa21c1156c0 CR3: 0000000031be2000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 copy_process+0x18e7/0x3930 kernel/fork.c:2196
 kernel_clone+0x21e/0x840 kernel/fork.c:2609
 __do_sys_clone kernel/fork.c:2750 [inline]
 __se_sys_clone kernel/fork.c:2734 [inline]
 __x64_sys_clone+0x18b/0x1e0 kernel/fork.c:2734
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa21b385e13
Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00
RSP: 002b:00007ffed2722fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa21b385e13
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
R10: 000055557253b7d0 R11: 0000000000000246 R12: 0000000000000000
R13: 00000000000927c0 R14: 000000000001f3f2 R15: 00007ffed2723170
 </TASK>