last executing test programs: 58.192704942s ago: executing program 1 (id=40): r0 = socket$packet(0x11, 0xa, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000480)) 58.123351703s ago: executing program 1 (id=42): creat(&(0x7f0000000500)='./bus\x00', 0x69) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x24018, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0), 0x181882, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x40400c1}, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='io_uring_file_get\x00', r2}, 0x18) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000340)={0xa0, 0x4a60d2fa4f11418a, 0x0, {{0x5, 0x1, 0x0, 0xfffffffffffffffb, 0xffffffff, 0x6, {0x3, 0x100000000000014, 0x0, 0x2, 0xe9, 0x5, 0xffffffff, 0x991, 0x19, 0x2000, 0xfb83, 0x0, 0x0, 0x7f}}, {0x0, 0x1f}}}, 0xa0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="050000000600000008000000ad00000000000000", @ANYRES32, @ANYBLOB="0000000400"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000eaffffffffffffff00000000000000000000000000736f776d02ff77b62167164a3c51a86ba37babb018d5413a35d75cf18998aba1d4b9926b5d4df7fbd2112ebc3d7b38a5d8d462a50efc9023845c9cca79454df53c503c5b67df0aee6a67a8770896251bc848253875c7385d3524f359af0ec2ece71933fcde7cbd547d963a7a47aa553357e96dc79d3012ef03d4452f7a28d4fb1ab53982c043bb0d19aa496b1dfe54f8b13b8584acf198c7271a959bef4d00401ea740d4a419d7571a48fc0173227163849f272ce5be73b8314cb2467e"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r8, 0x0, '\x00', 0x0, r0, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = gettid() tkill(r9, 0x12) 57.218790437s ago: executing program 1 (id=45): r0 = syz_open_dev$evdev(&(0x7f0000000900), 0x0, 0x20000) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) 56.641921646s ago: executing program 1 (id=50): r0 = socket$netlink(0x10, 0x3, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x388, 0xffffffff, 0xd0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, [0x0, 0x80ffff7f], [], 'bridge_slave_1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0x7, 0x2}}}, {{@ipv6={@private1, @rand_addr=' \x01\x00', [0x0, 0x0, 0x0, 0xffffffff], [], 'geneve1\x00', 'macvlan0\x00', {}, {0xff}}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r6, &(0x7f0000000080)=""/11, 0xb) close(r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYBLOB="0000408b00"/17, @ANYRES32=r2, @ANYBLOB="009cdfd500000001002b0300000000000000000000000000000000000137f8135e96518433b8dc3eef2496abd9ae645adfd467997ef6b4d924f95935d8f04e252e1ef900"], 0x50) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYBLOB="782aaaa45a9b721e845c849159b1fbce927b69133996e8a296a23c3d48b5d2df7a48d712bdf19fbc0fd013a88e28a7342813c4c295ba765da5132d969f95656bd8f77ce82a3aeb87f7cd7e6b5e312ca94c4590402fbb56e4646ec256d64baa9f59daa4389fc4512e92bde01e81ae083e020ded32242f8daf886f2a3f91", @ANYRES32], 0x96, 0x2ac, &(0x7f0000000e80)="$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") setresuid(0xee01, 0x0, 0xffffffffffffffff) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') 56.32092872s ago: executing program 1 (id=53): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000080)='./file0\x00', 0x450, &(0x7f0000005f80)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2, 0x5558, &(0x7f0000000a00)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000340)=""/19, &(0x7f0000000080)=0x13) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5) mount$bind(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x825, 0x0) 55.916357926s ago: executing program 1 (id=54): creat(&(0x7f0000000500)='./bus\x00', 0x69) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x24018, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0), 0x181882, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x40400c1}, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='io_uring_file_get\x00', r2}, 0x18) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000340)={0xa0, 0x4a60d2fa4f11418a, 0x0, {{0x5, 0x1, 0x0, 0xfffffffffffffffb, 0xffffffff, 0x6, {0x3, 0x100000000000014, 0x0, 0x2, 0xe9, 0x5, 0xffffffff, 0x991, 0x19, 0x2000, 0xfb83, 0x0, 0x0, 0x7f}}, {0x0, 0x1f}}}, 0xa0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="050000000600000008000000ad00000000000000", @ANYRES32, @ANYBLOB="0000000400"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000eaffffffffffffff00000000000000000000000000736f776d02ff77b62167164a3c51a86ba37babb018d5413a35d75cf18998aba1d4b9926b5d4df7fbd2112ebc3d7b38a5d8d462a50efc9023845c9cca79454df53c503c5b67df0aee6a67a8770896251bc848253875c7385d3524f359af0ec2ece71933fcde7cbd547d963a7a47aa553357e96dc79d3012ef03d4452f7a28d4fb1ab53982c043bb0d19aa496b1dfe54f8b13b8584acf198c7271a959bef4d00401ea740d4a419d7571a48fc0173227163849f272ce5be73b8314cb2467e"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r8, 0x0, '\x00', 0x0, r0, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmmsg$inet6(r7, 0x0, 0x0, 0x4001c00) tkill(0x0, 0x12) 55.879076017s ago: executing program 32 (id=54): creat(&(0x7f0000000500)='./bus\x00', 0x69) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x24018, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0), 0x181882, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x40400c1}, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='io_uring_file_get\x00', r2}, 0x18) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000340)={0xa0, 0x4a60d2fa4f11418a, 0x0, {{0x5, 0x1, 0x0, 0xfffffffffffffffb, 0xffffffff, 0x6, {0x3, 0x100000000000014, 0x0, 0x2, 0xe9, 0x5, 0xffffffff, 0x991, 0x19, 0x2000, 0xfb83, 0x0, 0x0, 0x7f}}, {0x0, 0x1f}}}, 0xa0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="050000000600000008000000ad00000000000000", @ANYRES32, @ANYBLOB="0000000400"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000eaffffffffffffff00000000000000000000000000736f776d02ff77b62167164a3c51a86ba37babb018d5413a35d75cf18998aba1d4b9926b5d4df7fbd2112ebc3d7b38a5d8d462a50efc9023845c9cca79454df53c503c5b67df0aee6a67a8770896251bc848253875c7385d3524f359af0ec2ece71933fcde7cbd547d963a7a47aa553357e96dc79d3012ef03d4452f7a28d4fb1ab53982c043bb0d19aa496b1dfe54f8b13b8584acf198c7271a959bef4d00401ea740d4a419d7571a48fc0173227163849f272ce5be73b8314cb2467e"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r8, 0x0, '\x00', 0x0, r0, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmmsg$inet6(r7, 0x0, 0x0, 0x4001c00) tkill(0x0, 0x12) 51.352968174s ago: executing program 5 (id=97): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x3) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x2, 0x2, 0x0, 0x10022, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040), 0x2000000}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 50.214036871s ago: executing program 5 (id=108): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) listen(0xffffffffffffffff, 0x3) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x2, 0x2, 0x0, 0x10022, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000040), 0x2000000}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 49.370957004s ago: executing program 5 (id=121): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}], [], 0x6b}}) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x17a) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000080)='./file0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) lseek(r6, 0xffffffffffffff5c, 0x3) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1f, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x24000001) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 49.109024688s ago: executing program 5 (id=124): r0 = socket$netlink(0x10, 0x3, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x388, 0xffffffff, 0xd0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, [0x0, 0x80ffff7f], [], 'bridge_slave_1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0x7, 0x2}}}, {{@ipv6={@private1, @rand_addr=' \x01\x00', [0x0, 0x0, 0x0, 0xffffffff], [], 'geneve1\x00', 'macvlan0\x00', {}, {0xff}}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r6, &(0x7f0000000080)=""/11, 0xb) close(r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYBLOB="0000408b00"/17, @ANYRES32=r2, @ANYBLOB="009cdfd500000001002b0300000000000000000000000000000000000137f8135e96518433b8dc3eef2496abd9ae645adfd467997ef6b4d924f95935d8f04e252e1ef900"], 0x50) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000c40)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c666c7573682c726f6469722c726f6469722c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c001762a07a915c8f6c3378b924fc250bdae45cd22bb33f29d72cf1c8410df88b83b9710b49374a748455718cc4af5f3ced9aa10632d595e9c8c3a89f41b650b9ebd4886ae65bf02b7c8ea4e76ef2cc241ac9f89f2753df98db0ba9558c753363f296424ec60e703fac2db7e9f31283852e115cf6acb8d77b3e5d68", @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYBLOB="782aaaa45a9b721e845c849159b1fbce927b69133996e8a296a23c3d48b5d2df7a48d712bdf19fbc0fd013a88e28a7342813c4c295ba765da5132d969f95656bd8f77ce82a3aeb87f7cd7e6b5e312ca94c4590402fbb56e4646ec256d64baa9f59daa4389fc4512e92bde01e81ae083e020ded32242f8daf886f2a3f91", @ANYRES32], 0x96, 0x2ac, &(0x7f0000000e80)="$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") setresuid(0xee01, 0x0, 0xffffffffffffffff) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) 46.461167837s ago: executing program 5 (id=136): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}], [], 0x6b}}) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x17a) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000080)='./file0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) lseek(r6, 0xffffffffffffff5c, 0x3) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1f, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x24000001) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 45.714011678s ago: executing program 5 (id=139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x5, 0xeb, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r0, &(0x7f0000000480), 0x0}, 0x20) 45.63524159s ago: executing program 33 (id=139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x5, 0xeb, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r0, &(0x7f0000000480), 0x0}, 0x20) 8.602174522s ago: executing program 3 (id=465): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}], [], 0x6b}}) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x17a) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) lseek(r6, 0xffffffffffffff5c, 0x3) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="430fc73e0f2390b9800000c00f32350c0100720000ea0000ea20d835080000000f22d89c66baf80cb83879e4876f66bafc0cec66b88e008ec02d1aa80000460f1c460036460f01cb", 0x48}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1f, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x24000001) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 7.619971727s ago: executing program 3 (id=467): r0 = socket$netlink(0x10, 0x3, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x388, 0xffffffff, 0xd0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, [0x0, 0x80ffff7f], [], 'bridge_slave_1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0x7, 0x2}}}, {{@ipv6={@private1, @rand_addr=' \x01\x00', [0x0, 0x0, 0x0, 0xffffffff], [], 'geneve1\x00', 'macvlan0\x00', {}, {0xff}}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r6, &(0x7f0000000080)=""/11, 0xb) close(r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYBLOB="782aaaa45a9b721e845c849159b1fbce927b69133996e8a296a23c3d48b5d2df7a48d712bdf19fbc0fd013a88e28a7342813c4c295ba765da5132d969f95656bd8f77ce82a3aeb87f7cd7e6b5e312ca94c4590402fbb56e4646ec256d64baa9f59daa4389fc4512e92bde01e81ae083e020ded32242f8daf886f2a3f91", @ANYRES32], 0x96, 0x2ac, &(0x7f0000000e80)="$eJzs3T9ra2UYAPDnpGkSdEgEJxE8oINTabu6pEgLxUxKBnXQYluQJggtFPyDsZOri6OriyC4+SVc/AaCq+BmwcK5nOScm6Q3zU3KTXv//H5L377ned7zvG9PKR3Ok09f758cpnF88c1f0WgkUWlHOy6TaEUlSt/FlPYPAQA8yy6zLP7NRpbJSyKisbqyAIAVWvrv/28rLwkAWLEPPvzovZ1OZ/f9NG3EXv/7827+n33+dXR95zg+j14cxWY04yoie2g03suybFBNc614qz847+aZ/U/+KNbf+SdimL8VzWgNp6bz9zu7W+nIRP4gr+Ol4v7tPH87mvHqjPvvd3a3Z+RHtxZvvzlR/0Y048/P4ovoxeGwiFF+VCK+3UrTd7Mf//v647y8PD8ZnHfrw7ixbO2OfzQAAAAAAAAAAAAAAAAAAAAAADzHNoreOfUY9u/Jp4r+O2tX+TfrkZZa0/15RvlJudC1/kCDLH4q+/NspmmaFYHj/Gq8Vo3q/ewaAAAAAAAAAAAAAAAAAAAAni5nX351ctDrHZ0+kUHZDaB8rf+267QnZt6I+cH18b0qxXDOyrFWxiQRc8vIN7Fwzf8XbQ9ud3Sv3FTzL78uvM7Pj997MVhfIOaWg0oxKJ+uk4Nk9hnWo5xplA/J75MxtVjwprWbLmVLPX61mZeaSx9C7eXhYDAnJpJ5hb3z9+jkipnk+i5qw1Odmb5eDCbSp2Maiz/P+W/KIxLdOgAAAAAAAAAAAAAAAAAAYKXGL/3OuHgxN7WS1VdWFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcqfHn/y8xGBTJCwTX4vTsnrcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAC+BBAAAA//8Z62Kk") setresuid(0xee01, 0x0, 0xffffffffffffffff) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) 6.07823597s ago: executing program 3 (id=474): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x3) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x2, 0x2, 0x0, 0x10022, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000040), 0x2000000}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 5.271964412s ago: executing program 3 (id=479): r0 = socket$netlink(0x10, 0x3, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x388, 0xffffffff, 0xd0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, [0x0, 0x80ffff7f], [], 'bridge_slave_1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0x7, 0x2}}}, {{@ipv6={@private1, @rand_addr=' \x01\x00', [0x0, 0x0, 0x0, 0xffffffff], [], 'geneve1\x00', 'macvlan0\x00', {}, {0xff}}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r6, &(0x7f0000000080)=""/11, 0xb) close(r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYBLOB="782aaaa45a9b721e845c849159b1fbce927b69133996e8a296a23c3d48b5d2df7a48d712bdf19fbc0fd013a88e28a7342813c4c295ba765da5132d969f95656bd8f77ce82a3aeb87f7cd7e6b5e312ca94c4590402fbb56e4646ec256d64baa9f59daa4389fc4512e92bde01e81ae083e020ded32242f8daf886f2a3f91", @ANYRES32], 0x96, 0x2ac, &(0x7f0000000e80)="$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") setresuid(0xee01, 0x0, 0xffffffffffffffff) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) 4.295100426s ago: executing program 0 (id=481): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0xbe, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) keyctl$clear(0x3, 0xfffffffffffffffd) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000000c0)='\x00', 0x0) keyctl$get_security(0x11, 0x0, &(0x7f0000000300)=""/214, 0xd6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) 3.652990136s ago: executing program 3 (id=487): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}], [], 0x6b}}) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x17a) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000080)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) lseek(r5, 0xffffffffffffff5c, 0x3) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="430fc73e0f2390b9800000c00f32350c0100720000ea0000ea20d835080000000f22d89c66baf80cb83879e4876f66bafc0cec66b88e008ec02d1aa80000460f1c460036460f01cb", 0x48}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x24000001) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.756665789s ago: executing program 0 (id=489): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x1, 0x40000, 0x1, {0x0, 0x0, 0x0, 0x0, 0x30}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0xb1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40091}, 0x4004014) 2.399414704s ago: executing program 0 (id=492): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x3) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x2, 0x2, 0x0, 0x10022, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040), 0x2000000}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 2.132310249s ago: executing program 3 (id=495): creat(&(0x7f0000000500)='./bus\x00', 0x69) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x24018, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0), 0x181882, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x40400c1}, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='io_uring_file_get\x00', r2}, 0x18) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000340)={0xa0, 0x4a60d2fa4f11418a, 0x0, {{0x5, 0x1, 0x0, 0xfffffffffffffffb, 0xffffffff, 0x6, {0x3, 0x100000000000014, 0x0, 0x2, 0xe9, 0x5, 0xffffffff, 0x991, 0x19, 0x2000, 0xfb83, 0x0, 0x0, 0x7f}}, {0x0, 0x1f}}}, 0xa0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="050000000600000008000000ad00000000000000", @ANYRES32, @ANYBLOB="0000000400"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000eaffffffffffffff00000000000000000000000000736f776d02ff77b62167164a3c51a86ba37babb018d5413a35d75cf18998aba1d4b9926b5d4df7fbd2112ebc3d7b38a5d8d462a50efc9023845c9cca79454df53c503c5b67df0aee6a67a8770896251bc848253875c7385d3524f359af0ec2ece71933fcde7cbd547d963a7a47aa553357e96dc79d3012ef03d4452f7a28d4fb1ab53982c043bb0d19aa496b1dfe54f8b13b8584acf198c7271a959bef4d00401ea740d4a419d7571a48fc0173227163849f272ce5be73b8314cb2467e"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r7, 0x0, '\x00', 0x0, r0, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmmsg$inet6(r6, 0x0, 0x0, 0x4001c00) r8 = gettid() tkill(r8, 0x12) 2.085864199s ago: executing program 34 (id=495): creat(&(0x7f0000000500)='./bus\x00', 0x69) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x24018, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0), 0x181882, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x40400c1}, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='io_uring_file_get\x00', r2}, 0x18) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000340)={0xa0, 0x4a60d2fa4f11418a, 0x0, {{0x5, 0x1, 0x0, 0xfffffffffffffffb, 0xffffffff, 0x6, {0x3, 0x100000000000014, 0x0, 0x2, 0xe9, 0x5, 0xffffffff, 0x991, 0x19, 0x2000, 0xfb83, 0x0, 0x0, 0x7f}}, {0x0, 0x1f}}}, 0xa0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="050000000600000008000000ad00000000000000", @ANYRES32, @ANYBLOB="0000000400"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000eaffffffffffffff00000000000000000000000000736f776d02ff77b62167164a3c51a86ba37babb018d5413a35d75cf18998aba1d4b9926b5d4df7fbd2112ebc3d7b38a5d8d462a50efc9023845c9cca79454df53c503c5b67df0aee6a67a8770896251bc848253875c7385d3524f359af0ec2ece71933fcde7cbd547d963a7a47aa553357e96dc79d3012ef03d4452f7a28d4fb1ab53982c043bb0d19aa496b1dfe54f8b13b8584acf198c7271a959bef4d00401ea740d4a419d7571a48fc0173227163849f272ce5be73b8314cb2467e"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r7, 0x0, '\x00', 0x0, r0, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmmsg$inet6(r6, 0x0, 0x0, 0x4001c00) r8 = gettid() tkill(r8, 0x12) 1.587250857s ago: executing program 4 (id=498): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, r0, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.178334753s ago: executing program 4 (id=500): creat(&(0x7f0000000500)='./bus\x00', 0x69) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x24018, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0), 0x181882, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x40400c1}, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='io_uring_file_get\x00', r2}, 0x18) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000340)={0xa0, 0x4a60d2fa4f11418a, 0x0, {{0x5, 0x1, 0x0, 0xfffffffffffffffb, 0xffffffff, 0x6, {0x3, 0x100000000000014, 0x0, 0x2, 0xe9, 0x5, 0xffffffff, 0x991, 0x19, 0x2000, 0xfb83, 0x0, 0x0, 0x7f}}, {0x0, 0x1f}}}, 0xa0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="050000000600000008000000ad00000000000000", @ANYRES32, @ANYBLOB="0000000400"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000eaffffffffffffff00000000000000000000000000736f776d02ff77b62167164a3c51a86ba37babb018d5413a35d75cf18998aba1d4b9926b5d4df7fbd2112ebc3d7b38a5d8d462a50efc9023845c9cca79454df53c503c5b67df0aee6a67a8770896251bc848253875c7385d3524f359af0ec2ece71933fcde7cbd547d963a7a47aa553357e96dc79d3012ef03d4452f7a28d4fb1ab53982c043bb0d19aa496b1dfe54f8b13b8584acf198c7271a959bef4d00401ea740d4a419d7571a48fc0173227163849f272ce5be73b8314cb2467e"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r7, 0x0, '\x00', 0x0, r0, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmmsg$inet6(r6, 0x0, 0x0, 0x4001c00) r8 = gettid() tkill(r8, 0x12) 880.350467ms ago: executing program 2 (id=501): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x40}]}}}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 790.653548ms ago: executing program 0 (id=502): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x90, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x58, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x101}, @IFLA_BR_MULTI_BOOLOPT={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xa0}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffffb}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 275.990236ms ago: executing program 6 (id=503): prlimit64(0x0, 0x7, &(0x7f0000000540)={0x1, 0x6}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) 216.529947ms ago: executing program 6 (id=504): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) readv(r0, &(0x7f0000000940)=[{&(0x7f00000007c0)=""/221, 0xdd}], 0x1) 216.120957ms ago: executing program 6 (id=505): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000003740)) 209.183877ms ago: executing program 4 (id=506): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000480), 0x0}, 0x20) 190.307567ms ago: executing program 2 (id=507): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000100)) 166.182928ms ago: executing program 2 (id=508): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000980)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000d00)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) 155.909778ms ago: executing program 6 (id=509): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x80, {0x1, 0x0, 0x4, 0x3, 0x3, 0x80000001}}) 149.464538ms ago: executing program 4 (id=510): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x84, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0x2, @in6=@private1, 0x0, 0x4}, {{@in6=@loopback, 0x0, 0x6c}, 0xa}]}]}, 0x13c}}, 0x0) 140.222558ms ago: executing program 2 (id=511): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0xffffffffffffff95, 0x2000c044, &(0x7f0000001100)={0xa, 0x0, 0x2000, @loopback}, 0x1c) 108.117159ms ago: executing program 6 (id=512): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x8000003, 0x25dfdbfb, {0x2, 0x80, 0x0, 0xfd, 0x7, 0x0, 0x0, 0x0, 0x8}, [@FRA_DST={0x8, 0x1, @broadcast}]}, 0x24}}, 0x0) 78.757669ms ago: executing program 4 (id=513): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@ipv6_newroute={0x2c, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, [@RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4805}, 0x4) 72.639259ms ago: executing program 2 (id=514): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0x1, 0x46c, &(0x7f0000000f00)="$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") open(&(0x7f0000000300)='.\x02\x00', 0x14927e, 0x44) 58.19528ms ago: executing program 0 (id=515): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) 38.93303ms ago: executing program 0 (id=516): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48990}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x24040800) 24.37677ms ago: executing program 2 (id=517): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x3) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x2, 0x2, 0x0, 0x10022, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000040), 0x2000000}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 9.46049ms ago: executing program 6 (id=518): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}], [], 0x6b}}) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x17a) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000080)='./file0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) lseek(r6, 0xffffffffffffff5c, 0x3) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="430fc73e0f2390b9800000c00f32350c0100720000ea0000ea20d835080000000f22d89c66baf80cb83879e4876f66bafc0cec66b88e008ec02d1aa80000460f1c460036460f01cb", 0x48}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1f, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x24000001) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=519): creat(&(0x7f0000000500)='./bus\x00', 0x69) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x24018, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0), 0x181882, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x40400c1}, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='io_uring_file_get\x00', r2}, 0x18) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000340)={0xa0, 0x4a60d2fa4f11418a, 0x0, {{0x5, 0x1, 0x0, 0xfffffffffffffffb, 0xffffffff, 0x6, {0x3, 0x100000000000014, 0x0, 0x2, 0xe9, 0x5, 0xffffffff, 0x991, 0x19, 0x2000, 0xfb83, 0x0, 0x0, 0x7f}}, {0x0, 0x1f}}}, 0xa0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="050000000600000008000000ad00000000000000", @ANYRES32, @ANYBLOB="0000000400"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000eaffffffffffffff00000000000000000000000000736f776d02ff77b62167164a3c51a86ba37babb018d5413a35d75cf18998aba1d4b9926b5d4df7fbd2112ebc3d7b38a5d8d462a50efc9023845c9cca79454df53c503c5b67df0aee6a67a8770896251bc848253875c7385d3524f359af0ec2ece71933fcde7cbd547d963a7a47aa553357e96dc79d3012ef03d4452f7a28d4fb1ab53982c043bb0d19aa496b1dfe54f8b13b8584acf198c7271a959bef4d00401ea740d4a419d7571a48fc0173227163849f272ce5be73b8314cb2467e"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r7, 0x0, '\x00', 0x0, r0, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmmsg$inet6(r6, 0x0, 0x0, 0x4001c00) r8 = gettid() tkill(r8, 0x12) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.96' (ED25519) to the list of known hosts. [ 21.600659][ T23] audit: type=1400 audit(1747232841.950:81): avc: denied { mounton } for pid=328 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.602323][ T328] cgroup1: Unknown subsys name 'net' [ 21.623934][ T23] audit: type=1400 audit(1747232841.950:82): avc: denied { mount } for pid=328 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.629552][ T328] cgroup1: Unknown subsys name 'net_prio' [ 21.657862][ T328] cgroup1: Unknown subsys name 'devices' [ 21.664326][ T23] audit: type=1400 audit(1747232842.010:83): avc: denied { unmount } for pid=328 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.891493][ T328] cgroup1: Unknown subsys name 'hugetlb' [ 21.897767][ T328] cgroup1: Unknown subsys name 'rlimit' [ 22.069124][ T23] audit: type=1400 audit(1747232842.420:84): avc: denied { setattr } for pid=328 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=9696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.093384][ T23] audit: type=1400 audit(1747232842.420:85): avc: denied { mounton } for pid=328 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.097225][ T331] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.118854][ T23] audit: type=1400 audit(1747232842.420:86): avc: denied { mount } for pid=328 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.151376][ T23] audit: type=1400 audit(1747232842.480:87): avc: denied { relabelto } for pid=331 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.177557][ T23] audit: type=1400 audit(1747232842.480:88): avc: denied { write } for pid=331 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.204071][ T23] audit: type=1400 audit(1747232842.540:89): avc: denied { read } for pid=328 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.229656][ T23] audit: type=1400 audit(1747232842.540:90): avc: denied { open } for pid=328 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.229930][ T328] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.761183][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.768627][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.776914][ T338] device bridge_slave_0 entered promiscuous mode [ 22.784305][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.791361][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.799249][ T338] device bridge_slave_1 entered promiscuous mode [ 22.827261][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.834333][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.842028][ T340] device bridge_slave_0 entered promiscuous mode [ 22.860170][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.867472][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.875074][ T340] device bridge_slave_1 entered promiscuous mode [ 22.955254][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.962638][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.970903][ T341] device bridge_slave_0 entered promiscuous mode [ 22.980946][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.988486][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.996182][ T341] device bridge_slave_1 entered promiscuous mode [ 23.036369][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.043758][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.051701][ T342] device bridge_slave_0 entered promiscuous mode [ 23.059187][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.066975][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.074818][ T342] device bridge_slave_1 entered promiscuous mode [ 23.134313][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.141693][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.149573][ T339] device bridge_slave_0 entered promiscuous mode [ 23.157232][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.164823][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.172652][ T339] device bridge_slave_1 entered promiscuous mode [ 23.187118][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.194228][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.201613][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.208667][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.294018][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.301393][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.309098][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.316557][ T339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.335708][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.345077][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.353325][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.360536][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.374530][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.382420][ T340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.390221][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.397541][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.431967][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.439208][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.446676][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.453823][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.468755][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.476505][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.484188][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.492815][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.500687][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.508897][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.516419][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.524030][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.531570][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.538890][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.546804][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.554314][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.583457][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.591983][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.600527][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.607681][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.616026][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.624853][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.631930][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.649915][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.657883][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.688945][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.697393][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.707213][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.716564][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.724186][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.732542][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.741725][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.749028][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.756770][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.766164][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.773302][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.781089][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.789681][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.796732][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.804694][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.813362][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.820689][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.828399][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.836630][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.844237][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.852282][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.887800][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.897436][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.906975][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.916010][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.925228][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.933380][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.942516][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.951956][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.961398][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.968607][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.977073][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.985958][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.994969][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.002650][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.011071][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.019466][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.027780][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.036554][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.048475][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.057554][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.065909][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.074551][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.100848][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.109790][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.131182][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.139486][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.148267][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.157448][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.167209][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.176232][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.199182][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.207898][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.216503][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.225522][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.234632][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.243663][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.252504][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.261311][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.279889][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.288718][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.297149][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.306111][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.315068][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.323746][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.344072][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.352734][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.361619][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.370595][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.379106][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.387635][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.398638][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.406868][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.432377][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.441138][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.450621][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.458888][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.468030][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.477354][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.486250][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.494858][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.503909][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.512495][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.521734][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.531112][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.556476][ T340] request_module fs-gadgetfs succeeded, but still no fs? [ 24.569226][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.580968][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.692601][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.703836][ T366] syz.4.5 (366) used greatest stack depth: 23008 bytes left [ 24.711916][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.726539][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.735208][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.744976][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.754878][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.755622][ T368] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 24.763691][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.782785][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.797821][ T373] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 25.036282][ T373] syz.4.6 (373) used greatest stack depth: 22432 bytes left [ 25.049916][ T377] ====================================================== [ 25.049916][ T377] WARNING: the mand mount option is being deprecated and [ 25.049916][ T377] will be removed in v5.15! [ 25.049916][ T377] ====================================================== [ 25.360746][ T377] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 25.795607][ T377] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x0000000000000814, [ 25.972661][ T377] EXT4-fs error (device loop3): ext4_validate_block_bitmap:409: comm syz.3.8: bg 0: block 2: invalid block bitmap [ 25.985651][ T377] EXT4-fs (loop3): Remounting filesystem read-only [ 26.054289][ T391] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 26.062758][ T391] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 26.074025][ T391] F2FS-fs (loop4): invalid crc value [ 26.081331][ T391] F2FS-fs (loop4): Found nat_bits in checkpoint [ 26.163438][ T405] overlayfs: overlapping lowerdir path [ 26.309236][ T391] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 26.317281][ T391] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 26.352621][ T409] tmpfs: Bad value for 'huge' [ 26.548457][ T417] EXT4-fs (loop3): Test dummy encryption mode enabled [ 26.557579][ T417] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,test_dummy_encryption,inlinecrypt,delalloc,data_err=abort,errors=remount-ro,grpid,quota, [ 26.582056][ T420] capability: warning: `syz.4.11' uses deprecated v2 capabilities in a way that may be insecure [ 27.208088][ T23] kauditd_printk_skb: 57 callbacks suppressed [ 27.208099][ T23] audit: type=1400 audit(1747232847.270:148): avc: denied { create } for pid=388 comm="syz.4.11" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.240810][ T421] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 27.241027][ T23] audit: type=1400 audit(1747232847.550:149): avc: denied { mounton } for pid=410 comm="syz.1.13" path="/1/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 27.279132][ T23] audit: type=1400 audit(1747232847.590:150): avc: denied { read append open } for pid=388 comm="syz.4.11" path="/3/file0/cgroup.controllers" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.489101][ T437] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 27.749506][ T23] audit: type=1400 audit(1747232848.080:151): avc: denied { write } for pid=416 comm="syz.3.19" path="/5/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.823283][ T435] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 27.905001][ T23] audit: type=1400 audit(1747232848.250:152): avc: denied { create } for pid=445 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.927421][ T23] audit: type=1400 audit(1747232848.250:153): avc: denied { write } for pid=445 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.949501][ T23] audit: type=1400 audit(1747232848.250:154): avc: denied { nlmsg_write } for pid=445 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.990045][ T443] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 28.000255][ T23] audit: type=1400 audit(1747232848.350:155): avc: denied { create } for pid=451 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 28.020037][ T23] audit: type=1400 audit(1747232848.350:156): avc: denied { read } for pid=451 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 28.041156][ T23] audit: type=1400 audit(1747232848.350:157): avc: denied { create } for pid=442 comm="syz.2.23" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 28.233593][ T454] EXT4-fs (loop3): Test dummy encryption mode enabled [ 28.242181][ T454] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 28.462934][ T454] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 29.071600][ T462] EXT4-fs (loop1): Test dummy encryption mode enabled [ 29.081999][ T462] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 29.499264][ T475] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 29.630524][ T462] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 29.936421][ T485] EXT4-fs (loop4): Test dummy encryption mode enabled [ 29.951891][ T485] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,test_dummy_encryption,inlinecrypt,delalloc,data_err=abort,errors=remount-ro,grpid,quota, [ 30.360902][ T492] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 30.412275][ T497] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.764828][ T504] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 30.969428][ T508] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 30.980669][ T508] ext4 filesystem being mounted at /7/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 30.986996][ T522] netlink: 168 bytes leftover after parsing attributes in process `syz.0.44'. [ 32.367227][ T534] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 32.521215][ T539] EXT4-fs (loop3): Test dummy encryption mode enabled [ 32.571362][ T539] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,test_dummy_encryption,inlinecrypt,delalloc,data_err=abort,errors=remount-ro,grpid,quota, [ 32.675385][ T546] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 32.686957][ T338] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 32.698098][ T338] FAT-fs (loop1): Filesystem has been set read-only [ 32.705968][ T338] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 33.050322][ T338] syz-executor (338) used greatest stack depth: 20960 bytes left [ 33.528339][ T23] kauditd_printk_skb: 35 callbacks suppressed [ 33.528351][ T23] audit: type=1400 audit(1747232853.870:193): avc: denied { setopt } for pid=575 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.528527][ T563] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.631138][ T580] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 33.738491][ T563] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.785484][ T563] device bridge_slave_0 entered promiscuous mode [ 33.833389][ T563] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.849012][ T563] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.858317][ T563] device bridge_slave_1 entered promiscuous mode [ 33.968304][ T23] audit: type=1400 audit(1747232854.310:194): avc: denied { create } for pid=563 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.972941][ T588] netlink: 45 bytes leftover after parsing attributes in process `syz.4.64'. [ 33.992415][ T23] audit: type=1400 audit(1747232854.340:195): avc: denied { write } for pid=563 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.023120][ T586] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 34.047955][ T23] audit: type=1400 audit(1747232854.340:196): avc: denied { read } for pid=563 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.251205][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.263043][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.316651][ T594] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 34.381059][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.392796][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.401663][ T470] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.409561][ T470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.420302][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.430119][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.440115][ T470] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.447669][ T470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.468003][ T597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.67'. [ 34.484663][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.493162][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.501914][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.511081][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.519857][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.529957][ T9] device bridge_slave_1 left promiscuous mode [ 34.537109][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.546374][ T9] device bridge_slave_0 left promiscuous mode [ 34.555140][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.613456][ T23] audit: type=1400 audit(1747232855.960:197): avc: denied { getopt } for pid=608 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.800389][ T612] netlink: 20 bytes leftover after parsing attributes in process `syz.3.72'. [ 35.819090][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.827826][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.839554][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.851425][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.870401][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.879592][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.898444][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.908319][ T619] EXT4-fs (loop4): Test dummy encryption mode enabled [ 35.913046][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.916484][ T619] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 35.926236][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.943078][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.956005][ T23] audit: type=1400 audit(1747232856.310:198): avc: denied { write } for pid=622 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.007058][ T23] audit: type=1400 audit(1747232856.350:199): avc: denied { mount } for pid=563 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.038868][ T23] audit: type=1400 audit(1747232856.350:200): avc: denied { mounton } for pid=563 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=12822 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.193105][ T23] audit: type=1400 audit(1747232856.540:201): avc: denied { read append } for pid=632 comm="syz.5.79" name="rtc0" dev="devtmpfs" ino=9701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 36.413559][ T636] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 36.602065][ T23] audit: type=1400 audit(1747232856.540:202): avc: denied { open } for pid=632 comm="syz.5.79" path="/dev/rtc0" dev="devtmpfs" ino=9701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 36.810034][ T645] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 37.251270][ T666] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 37.700380][ T680] [ 37.702806][ T680] ********************************************************** [ 37.716639][ T680] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 37.724700][ T680] ** ** [ 37.734925][ T680] ** trace_printk() being used. Allocating extra memory. ** [ 37.742868][ T680] ** ** [ 37.756652][ T680] ** This means that this is a DEBUG kernel and it is ** [ 37.765023][ T680] ** unsafe for production use. ** [ 37.772803][ T680] ** ** [ 37.780775][ T680] ** If you see this message and you are not debugging ** [ 37.789894][ T680] ** the kernel, report this immediately to your vendor! ** [ 37.799227][ T680] ** ** [ 37.800079][ T682] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 37.806962][ T680] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 37.827856][ T680] ********************************************************** [ 38.955239][ T718] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 38.966556][ T723] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 39.011933][ T23] kauditd_printk_skb: 2 callbacks suppressed [ 39.011945][ T23] audit: type=1400 audit(1747232859.360:205): avc: denied { write } for pid=727 comm="syz.2.112" name="001" dev="devtmpfs" ino=9626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 39.043619][ T23] audit: type=1400 audit(1747232859.370:206): avc: denied { ioctl } for pid=726 comm="syz.4.115" path="socket:[16791]" dev="sockfs" ino=16791 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.155383][ T734] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 39.165366][ T734] ext4 filesystem being mounted at /21/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 39.408489][ T23] audit: type=1400 audit(1747232859.750:207): avc: denied { read write } for pid=740 comm="syz.4.118" name="uhid" dev="devtmpfs" ino=9704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 39.437981][ T23] audit: type=1400 audit(1747232859.750:208): avc: denied { open } for pid=740 comm="syz.4.118" path="/dev/uhid" dev="devtmpfs" ino=9704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 39.793519][ T755] EXT4-fs (loop4): Test dummy encryption mode enabled [ 39.800724][ T755] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 40.112272][ T765] EXT4-fs (loop2): Test dummy encryption mode enabled [ 40.420459][ T765] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 42.197166][ T23] audit: type=1400 audit(1747232862.540:209): avc: denied { block_suspend } for pid=773 comm="syz.4.129" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 42.426678][ T23] audit: type=1400 audit(1747232862.630:210): avc: denied { write } for pid=774 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 42.499995][ T783] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 42.541240][ T563] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 42.555442][ T563] FAT-fs (loop5): Filesystem has been set read-only [ 42.562723][ T563] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 42.613380][ T783] erofs: (device loop4): vle_extent_lookback: bogus lookback distance @ nid 36 [ 42.625373][ T786] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 42.643147][ T783] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress, in[64, 4032] out[1851] [ 42.655479][ T783] ------------[ cut here ]------------ [ 42.661604][ T783] WARNING: CPU: 1 PID: 783 at fs/erofs/decompressor.c:174 z_erofs_lz4_decompress+0x954/0xd40 [ 42.672330][ T783] Modules linked in: [ 42.676317][ T783] CPU: 1 PID: 783 Comm: syz.4.133 Not tainted 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 42.687369][ T783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 42.698616][ T783] RIP: 0010:z_erofs_lz4_decompress+0x954/0xd40 [ 42.709240][ T783] Code: 48 8b 5d b8 0f 85 67 03 00 00 44 8b 0b 48 c7 c6 11 89 3c 85 48 c7 c2 c0 af d7 84 44 8b 6d a4 44 89 e9 45 89 f0 e8 bc 6f 30 02 <0f> 0b 44 89 e8 48 c7 c7 20 b0 d7 84 48 c7 c6 40 b0 d7 84 ba 02 00 [ 42.731422][ T783] RSP: 0018:ffff8881f2bc6c38 EFLAGS: 00010246 [ 42.738642][ T783] RAX: d5ac7e575edc5b00 RBX: ffff8881f2bc7240 RCX: d5ac7e575edc5b00 [ 42.747938][ T783] RDX: ffffc9000254b000 RSI: 0000000000014294 RDI: 0000000000014295 [ 42.757619][ T783] RBP: ffff8881f2bc6cf0 R08: dffffc0000000000 R09: ffffed103edea9b8 [ 42.766189][ T783] R10: ffffed103edea9b8 R11: 1ffff1103edea9b7 R12: 1ffff1103e578e48 [ 42.774465][ T783] R13: 0000000000000040 R14: 0000000000000fc0 R15: ffff8881de912fc0 [ 42.782531][ T783] FS: 00007fe1b13746c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 42.791868][ T783] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.798661][ T783] CR2: 000000110c2f3165 CR3: 00000001de4bb000 CR4: 00000000003426a0 [ 42.806925][ T783] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.815376][ T783] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.823617][ T783] Call Trace: [ 42.826902][ T783] ? z_erofs_lz4_prepare_destpages+0x650/0x650 [ 42.833140][ T783] z_erofs_decompress+0x592/0xf80 [ 42.838603][ T783] z_erofs_vle_unzip_all+0x137a/0x1980 [ 42.844388][ T783] ? z_erofs_onlinepage_endio+0x140/0x140 [ 42.850356][ T783] ? __kasan_check_write+0x14/0x20 [ 42.855878][ T783] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 42.861709][ T783] ? _raw_spin_lock+0xe0/0xe0 [ 42.866851][ T783] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 42.873426][ T783] ? finish_wait+0x17f/0x190 [ 42.878250][ T783] z_erofs_submit_and_unzip+0x1254/0x12c0 [ 42.884916][ T783] ? z_erofs_do_read_page+0x2430/0x2430 [ 42.891149][ T783] ? init_wait_entry+0xe0/0xe0 [ 42.896264][ T783] ? z_erofs_vle_normalaccess_readpages+0xa60/0xa60 [ 42.903247][ T783] ? mem_cgroup_commit_charge+0x70/0x1b0 [ 42.908902][ T783] z_erofs_vle_normalaccess_readpage+0x24e/0x540 [ 42.915477][ T783] ? z_erofs_rcu_callback+0x30/0x30 [ 42.921081][ T783] ? __lru_cache_add+0x1f4/0x250 [ 42.926388][ T783] ? lru_cache_add+0x15/0x20 [ 42.931332][ T783] ? add_to_page_cache_lru+0x18e/0x210 [ 42.937171][ T783] ? z_erofs_rcu_callback+0x30/0x30 [ 42.943407][ T783] do_read_cache_page+0x65d/0xa20 [ 42.949495][ T783] read_cache_page+0x50/0x70 [ 42.955049][ T783] erofs_namei+0x152/0xfa0 [ 42.959847][ T783] ? d_hash_and_lookup+0x1e0/0x1e0 [ 42.966482][ T783] ? __kasan_check_write+0x14/0x20 [ 42.971706][ T783] erofs_lookup+0xa5/0x2c0 [ 42.976556][ T783] __lookup_slow+0x2cd/0x410 [ 42.981281][ T783] ? lookup_one_len+0x2c0/0x2c0 [ 42.986172][ T783] ? __kasan_check_write+0x14/0x20 [ 42.991489][ T783] lookup_slow+0x57/0x70 [ 42.996221][ T783] walk_component+0x237/0x400 [ 43.000993][ T783] ? path_put_conditional+0x90/0x90 [ 43.006334][ T783] path_lookupat+0x179/0x3f0 [ 43.010925][ T783] filename_lookup+0x1bf/0x5f0 [ 43.015782][ T783] ? hashlen_string+0x120/0x120 [ 43.020877][ T783] ? strncpy_from_user+0x1cd/0x310 [ 43.025987][ T783] ? getname_flags+0x206/0x500 [ 43.030757][ T783] user_path_at_empty+0x43/0x50 [ 43.035960][ T783] do_mount+0x137/0xd40 [ 43.040329][ T783] ? copy_mount_string+0x30/0x30 [ 43.045448][ T783] ? switch_fpu_return+0x197/0x3b0 [ 43.051212][ T783] ? copy_mount_options+0xd3/0x340 [ 43.056581][ T783] ? fpu__clear+0x3b0/0x3b0 [ 43.061366][ T783] ? task_work_run+0x15e/0x170 [ 43.066273][ T783] ksys_mount+0xc5/0x100 [ 43.070633][ T783] __x64_sys_mount+0xbf/0xd0 [ 43.075940][ T783] do_syscall_64+0xcf/0x170 [ 43.080565][ T783] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 43.086744][ T783] RIP: 0033:0x7fe1b2d0b969 [ 43.091150][ T783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.111018][ T783] RSP: 002b:00007fe1b1374038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 43.119502][ T783] RAX: ffffffffffffffda RBX: 00007fe1b2f32fa0 RCX: 00007fe1b2d0b969 [ 43.127579][ T783] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 43.135714][ T783] RBP: 00007fe1b2d8dab1 R08: 0000000000000000 R09: 0000000000000000 [ 43.143695][ T783] R10: 0000000000100000 R11: 0000000000000246 R12: 0000000000000000 [ 43.151827][ T783] R13: 0000000000000000 R14: 00007fe1b2f32fa0 R15: 00007ffd12c722a8 [ 43.159791][ T783] ---[ end trace 7d0fb081a62d121e ]--- [ 43.170249][ T791] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 43.195400][ T783] erofs: (device loop4): z_erofs_vle_normalaccess_readpage: failed to read, err [-117] [ 43.352854][ T23] audit: type=1400 audit(1747232863.700:211): avc: denied { create } for pid=795 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.426302][ T23] audit: type=1400 audit(1747232863.760:212): avc: denied { unmount } for pid=340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.460515][ T23] audit: type=1400 audit(1747232863.770:213): avc: denied { getopt } for pid=795 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.484441][ T23] audit: type=1400 audit(1747232863.830:214): avc: denied { mount } for pid=794 comm="syz.4.137" name="/" dev="overlay" ino=17226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.814757][ T802] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.822587][ T802] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.823936][ T808] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 43.831385][ T802] device bridge_slave_0 entered promiscuous mode [ 43.837806][ T808] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 43.839628][ T808] F2FS-fs (loop3): invalid crc value [ 43.845880][ T802] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.855634][ T808] F2FS-fs (loop3): Found nat_bits in checkpoint [ 43.885519][ T802] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.905414][ T802] device bridge_slave_1 entered promiscuous mode [ 43.932308][ T808] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 43.941498][ T808] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 44.048543][ T802] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.056109][ T802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.063801][ T802] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.071440][ T802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.166670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.175613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.184766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.213014][ T834] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 44.483049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.501252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.510021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.519423][ T843] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 44.538082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.546829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.562032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.571034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.588129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.596768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.611279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.620949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.631579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.640116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.733187][ T23] kauditd_printk_skb: 1 callbacks suppressed [ 44.733197][ T23] audit: type=1400 audit(1747232865.080:216): avc: denied { getopt } for pid=848 comm="syz.3.155" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.739366][ T470] device bridge_slave_1 left promiscuous mode [ 44.768472][ T470] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.785231][ T470] device bridge_slave_0 left promiscuous mode [ 44.791968][ T470] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.321205][ T23] audit: type=1400 audit(1747232865.670:217): avc: denied { create } for pid=865 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.321800][ T854] EXT4-fs (loop6): Test dummy encryption mode enabled [ 45.348269][ T854] EXT4-fs (loop6): Unsupported blocksize for fs encryption [ 45.368727][ T23] audit: type=1400 audit(1747232865.710:218): avc: denied { getopt } for pid=865 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.431719][ T854] EXT4-fs (loop6): Unsupported blocksize for fs encryption [ 45.606979][ T868] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 45.748333][ T876] usb usb8: usbfs: process 876 (syz.6.162) did not claim interface 0 before use [ 45.868190][ T877] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 45.900758][ T23] audit: type=1400 audit(1747232866.250:219): avc: denied { create } for pid=882 comm="syz.6.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.922506][ T23] audit: type=1400 audit(1747232866.270:220): avc: denied { getopt } for pid=882 comm="syz.6.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.990741][ T23] audit: type=1400 audit(1747232866.340:221): avc: denied { write } for pid=890 comm="syz.6.171" name="rtc0" dev="devtmpfs" ino=9701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 46.481128][ T899] EXT4-fs (loop6): Test dummy encryption mode enabled [ 46.488360][ T899] EXT4-fs (loop6): Unsupported blocksize for fs encryption [ 46.498505][ T23] audit: type=1400 audit(1747232866.640:222): avc: denied { accept } for pid=892 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.683184][ T906] device bridge6 entered promiscuous mode [ 46.751831][ T903] EXT4-fs (loop4): Test dummy encryption mode enabled [ 46.770984][ T903] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,test_dummy_encryption,inlinecrypt,delalloc,data_err=abort,errors=remount-ro,grpid,quota, [ 46.937661][ T899] EXT4-fs (loop6): Unsupported blocksize for fs encryption [ 48.142715][ T938] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 48.159324][ T945] netlink: 56 bytes leftover after parsing attributes in process `syz.0.185'. [ 48.799474][ T952] EXT4-fs (loop2): Test dummy encryption mode enabled [ 48.806695][ T952] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 49.139954][ T946] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 49.475873][ T961] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 49.800410][ T975] netlink: 16 bytes leftover after parsing attributes in process `syz.3.193'. [ 49.810830][ T975] netlink: 30 bytes leftover after parsing attributes in process `syz.3.193'. [ 49.927196][ T977] IPv6: sit1: Disabled Multicast RS [ 51.419422][ T989] EXT4-fs (loop3): Test dummy encryption mode enabled [ 51.427210][ T989] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 51.512518][ T992] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 51.602110][ T988] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 51.779024][ T108] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 51.862803][ T1009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.205'. [ 51.899808][ T1009] netlink: 16 bytes leftover after parsing attributes in process `syz.3.205'. [ 51.928971][ T1009] netlink: 16 bytes leftover after parsing attributes in process `syz.3.205'. [ 51.958948][ T1003] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 52.055486][ T1013] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 52.069097][ T1013] ext4 filesystem being mounted at /41/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 52.239692][ T108] usb 1-1: unable to get BOS descriptor or descriptor too short [ 52.329129][ T108] usb 1-1: config 1 interface 0 has no altsetting 0 [ 52.509178][ T108] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 52.525060][ T108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.556379][ T108] usb 1-1: Product: syz [ 52.570587][ T108] usb 1-1: Manufacturer: syz [ 52.584311][ T108] usb 1-1: SerialNumber: syz [ 54.568911][ C0] sched: RT throttling activated [ 55.058846][ T1057] netlink: 28 bytes leftover after parsing attributes in process `syz.6.219'. [ 55.159049][ T108] usbhid 1-1:1.0: can't add hid device: -71 [ 55.165711][ T108] usbhid: probe of 1-1:1.0 failed with error -71 [ 55.178121][ T108] usb 1-1: USB disconnect, device number 2 [ 55.202628][ T1057] IPv6: Can't replace route, no match found [ 55.323900][ T1065] netlink: 12 bytes leftover after parsing attributes in process `syz.6.223'. [ 55.346193][ T1067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.224'. [ 55.356371][ T23] audit: type=1400 audit(1747232875.690:223): avc: denied { setopt } for pid=1068 comm="syz.4.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.400245][ T1067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.224'. [ 55.413175][ T1073] netlink: 32 bytes leftover after parsing attributes in process `syz.4.225'. [ 55.423760][ T23] audit: type=1400 audit(1747232875.760:224): avc: denied { remove_name } for pid=145 comm="syslogd" name="messages" dev="tmpfs" ino=9825 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.449191][ T23] audit: type=1400 audit(1747232875.760:225): avc: denied { rename } for pid=145 comm="syslogd" name="messages" dev="tmpfs" ino=9825 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.523323][ T23] audit: type=1400 audit(1747232875.760:226): avc: denied { create } for pid=145 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.684167][ T1079] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 56.119397][ T1093] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 56.336697][ T23] audit: type=1400 audit(1747232876.680:227): avc: denied { nlmsg_read } for pid=1100 comm="syz.6.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.593701][ T23] audit: type=1400 audit(1747232876.940:228): avc: denied { write } for pid=1106 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.792365][ T1116] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 56.989392][ T1118] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 57.041708][ T23] audit: type=1400 audit(1747232877.390:229): avc: denied { write } for pid=1122 comm="syz.4.244" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.094289][ T1125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'. [ 57.104476][ T1125] netlink: 32 bytes leftover after parsing attributes in process `syz.4.245'. [ 57.123540][ T1130] usb usb8: usbfs: process 1130 (syz.0.243) did not claim interface 6 before use [ 57.234322][ T1121] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 59.229496][ T1158] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 59.289260][ T1155] EXT4-fs (loop3): Test dummy encryption mode enabled [ 59.306879][ T23] audit: type=1400 audit(1747232879.650:230): avc: denied { setopt } for pid=1165 comm="syz.6.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.362279][ T1155] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,test_dummy_encryption,inlinecrypt,delalloc,data_err=abort,errors=remount-ro,grpid,quota, [ 59.458770][ T23] audit: type=1400 audit(1747232879.740:231): avc: denied { create } for pid=1174 comm="syz.6.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.501675][ T23] audit: type=1400 audit(1747232879.740:232): avc: denied { getopt } for pid=1174 comm="syz.6.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.664044][ T1189] EXT4-fs (loop6): Test dummy encryption mode enabled [ 60.682953][ T1189] EXT4-fs (loop6): Unsupported blocksize for fs encryption [ 61.388488][ T1198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.265'. [ 61.481065][ T23] audit: type=1400 audit(1747232881.830:233): avc: denied { read } for pid=1199 comm="syz.3.266" name="usbmon6" dev="devtmpfs" ino=9615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.579401][ T23] audit: type=1400 audit(1747232881.850:234): avc: denied { open } for pid=1199 comm="syz.3.266" path="/dev/usbmon6" dev="devtmpfs" ino=9615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.603437][ T23] audit: type=1400 audit(1747232881.920:235): avc: denied { ioctl } for pid=1199 comm="syz.3.266" path="/dev/usbmon6" dev="devtmpfs" ino=9615 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.859930][ T1189] EXT4-fs (loop6): Unsupported blocksize for fs encryption [ 61.958684][ T23] audit: type=1400 audit(1747232882.300:236): avc: denied { read write } for pid=1205 comm="syz.3.268" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 61.973334][ T1208] binder: 1205:1208 ioctl c00c620f 0 returned -14 [ 62.016233][ T23] audit: type=1400 audit(1747232882.300:237): avc: denied { open } for pid=1205 comm="syz.3.268" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.045808][ T23] audit: type=1400 audit(1747232882.320:238): avc: denied { ioctl } for pid=1205 comm="syz.3.268" path="/dev/binderfs/binder1" dev="binder" ino=14 ioctlcmd=0x620f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.624364][ T1233] EXT4-fs (loop6): Test dummy encryption mode enabled [ 62.629296][ T1229] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 62.723782][ T1233] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodiscard,test_dummy_encryption,inlinecrypt,delalloc,data_err=abort,errors=remount-ro,grpid,quota, [ 64.613473][ T1248] EXT4-fs (loop4): Test dummy encryption mode enabled [ 64.622822][ T1248] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 64.895078][ T1247] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 64.962820][ T23] audit: type=1400 audit(1747232885.310:239): avc: denied { append } for pid=1267 comm="syz.2.290" name="001" dev="devtmpfs" ino=9602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 66.102272][ T13] cfg80211: failed to load regulatory.db [ 66.160314][ T23] audit: type=1400 audit(1747232886.510:240): avc: denied { write } for pid=1293 comm="syz.0.296" path="socket:[21715]" dev="sockfs" ino=21715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.422707][ T1312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.297'. [ 66.449088][ T1312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.297'. [ 66.491658][ T1312] netlink: 'syz.2.297': attribute type 2 has an invalid length. [ 66.579496][ T23] audit: type=1400 audit(1747232886.930:241): avc: denied { write } for pid=1321 comm="syz.2.309" name="tcp" dev="proc" ino=4026532574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 66.879039][ T1327] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 67.288445][ T1350] netlink: 'syz.6.323': attribute type 21 has an invalid length. [ 67.309018][ T1350] netlink: 24 bytes leftover after parsing attributes in process `syz.6.323'. [ 67.367867][ T1357] netlink: 28 bytes leftover after parsing attributes in process `syz.6.325'. [ 67.510199][ T1364] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 68.087870][ T23] audit: type=1400 audit(1747232888.430:242): avc: denied { ioctl } for pid=1380 comm="syz.4.331" path="socket:[22268]" dev="sockfs" ino=22268 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.619502][ T1399] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 68.658658][ T1405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.341'. [ 68.682188][ T1402] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 68.696952][ T1405] netlink: 24 bytes leftover after parsing attributes in process `syz.4.341'. [ 68.944768][ T1426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.348'. [ 69.904952][ T1448] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 70.080978][ T1461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 70.405781][ T1459] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 70.491169][ T1467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 70.598368][ T1457] EXT4-fs (loop4): Test dummy encryption mode enabled [ 70.661656][ T1457] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,test_dummy_encryption,inlinecrypt,delalloc,data_err=abort,errors=remount-ro,grpid,quota, [ 71.022218][ T1496] netlink: 40 bytes leftover after parsing attributes in process `syz.3.368'. [ 71.393549][ T23] audit: type=1400 audit(1747232891.740:243): avc: denied { getopt } for pid=1506 comm="syz.3.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.514634][ T1504] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 71.628173][ T1525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.374'. [ 71.880929][ T1534] EXT4-fs (loop3): Test dummy encryption mode enabled [ 71.897564][ T1534] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,test_dummy_encryption,inlinecrypt,delalloc,data_err=abort,errors=remount-ro,grpid,quota, [ 72.402089][ T1144] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 73.063488][ T1556] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 73.169046][ T1144] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.173913][ T1568] netlink: 32 bytes leftover after parsing attributes in process `syz.3.393'. [ 73.180876][ T1144] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 73.228967][ T1144] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 73.320983][ T1144] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 73.338965][ T1144] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 73.352110][ T1144] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 73.440571][ T1144] usb 5-1: config 1 interface 1 has no altsetting 0 [ 73.609041][ T1144] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.623840][ T1144] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.649865][ T1144] usb 5-1: Product: syz [ 73.661700][ T1144] usb 5-1: Manufacturer: syz [ 73.675686][ T1144] usb 5-1: SerialNumber: syz [ 73.709022][ T1536] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 74.156122][ T1144] usb 5-1: USB disconnect, device number 2 [ 74.278272][ T1606] netlink: 8 bytes leftover after parsing attributes in process `syz.6.407'. [ 75.410846][ T1627] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 76.453740][ T23] audit: type=1400 audit(1747232896.800:244): avc: denied { read } for pid=1660 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.501382][ T1662] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 76.776102][ T23] audit: type=1400 audit(1747232897.120:245): avc: denied { ioctl } for pid=1667 comm="syz.0.426" path="socket:[25616]" dev="sockfs" ino=25616 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.033806][ T1684] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 77.485137][ T1697] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 78.074805][ T1716] FAT-fs (loop4): Directory bread(block 64) failed [ 78.099032][ T1716] FAT-fs (loop4): Directory bread(block 65) failed [ 78.114987][ T1716] FAT-fs (loop4): Directory bread(block 66) failed [ 78.138974][ T1716] FAT-fs (loop4): Directory bread(block 67) failed [ 78.161431][ T1716] FAT-fs (loop4): Directory bread(block 68) failed [ 78.190771][ T1716] FAT-fs (loop4): Directory bread(block 69) failed [ 78.221155][ T1716] FAT-fs (loop4): Directory bread(block 70) failed [ 78.261158][ T1716] FAT-fs (loop4): Directory bread(block 71) failed [ 78.268036][ T1716] FAT-fs (loop4): Directory bread(block 72) failed [ 78.315696][ T1716] FAT-fs (loop4): Directory bread(block 73) failed [ 78.469331][ T1727] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 79.380556][ T1755] EXT4-fs (loop4): Test dummy encryption mode enabled [ 79.439504][ T1755] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,test_dummy_encryption,inlinecrypt,delalloc,data_err=abort,errors=remount-ro,grpid,quota, [ 79.677775][ T1774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.458'. [ 79.687933][ T1774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.458'. [ 79.700050][ T1774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.458'. [ 80.060177][ T1767] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 80.439713][ T1795] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 80.611542][ T1798] EXT4-fs (loop6): Test dummy encryption mode enabled [ 80.629759][ T1798] EXT4-fs (loop6): Unsupported blocksize for fs encryption [ 80.905995][ T1798] EXT4-fs (loop6): Unsupported blocksize for fs encryption [ 80.956102][ T1807] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 83.232312][ T1839] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 83.649629][ T1851] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 83.716543][ T1853] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 85.230857][ T1868] device bridge12 entered promiscuous mode [ 85.346483][ T342] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 85.364877][ T342] FAT-fs (loop3): Filesystem has been set read-only [ 85.503491][ T342] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 86.537939][ T1910] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 86.941441][ T1924] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 87.105080][ T1926] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.112384][ T1926] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.120937][ T1926] device bridge_slave_0 entered promiscuous mode [ 87.129189][ T1926] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.137393][ T1926] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.146092][ T1926] device bridge_slave_1 entered promiscuous mode [ 87.339898][ T1926] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.347270][ T1926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.355421][ T1926] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.363812][ T1926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.748606][ T470] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.767126][ T470] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.785387][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.797322][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.832802][ T7] device bridge_slave_1 left promiscuous mode [ 87.849602][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.858545][ T7] device bridge_slave_0 left promiscuous mode [ 87.865795][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.312323][ T1947] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 88.722087][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.732356][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.741651][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.748868][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.756823][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.767939][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.776574][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.783675][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.799890][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.808269][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.830912][ T1945] device bridge17 entered promiscuous mode [ 88.872175][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.882626][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.899466][ T23] audit: type=1400 audit(1747232909.240:246): avc: denied { write } for pid=1962 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.906384][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.937592][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.959646][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.973822][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.983735][ T1969] IPv6: NLM_F_REPLACE set, but no existing node found! [ 89.017835][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.030336][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.073022][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.092973][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.122550][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.137753][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.229609][ T7] ================================================================== [ 89.239720][ T7] BUG: KASAN: null-ptr-deref in tcf_idrinfo_destroy+0xb9/0x220 [ 89.248513][ T7] Read of size 4 at addr 0000000000000010 by task kworker/u4:0/7 [ 89.257425][ T7] [ 89.260344][ T7] CPU: 1 PID: 7 Comm: kworker/u4:0 Tainted: G W 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 89.272123][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 89.282960][ T7] Workqueue: netns cleanup_net [ 89.287841][ T7] Call Trace: [ 89.291278][ T7] __dump_stack+0x1e/0x20 [ 89.295733][ T7] dump_stack+0x15b/0x1b8 [ 89.300081][ T7] ? thaw_kernel_threads+0x220/0x220 [ 89.305377][ T7] ? show_regs_print_info+0x18/0x18 [ 89.310725][ T7] ? disable_trace_on_warning+0x3d/0x60 [ 89.316623][ T7] ? tcf_idrinfo_destroy+0xb9/0x220 [ 89.321979][ T7] ? tcf_idrinfo_destroy+0xb9/0x220 [ 89.327189][ T7] __kasan_report+0xe4/0x120 [ 89.331790][ T7] ? tcf_idrinfo_destroy+0xb9/0x220 [ 89.337169][ T7] kasan_report+0x30/0x60 [ 89.341494][ T7] check_memory_region+0x274/0x280 [ 89.347319][ T7] __kasan_check_read+0x11/0x20 [ 89.352620][ T7] tcf_idrinfo_destroy+0xb9/0x220 [ 89.357725][ T7] ? tcf_idr_check_alloc+0x4a0/0x4a0 [ 89.363281][ T7] ? gact_exit_net+0xfd/0x150 [ 89.368060][ T7] police_exit_net+0xe3/0x150 [ 89.372924][ T7] ? police_init_net+0x1f0/0x1f0 [ 89.379252][ T7] cleanup_net+0x5fd/0xb40 [ 89.383664][ T7] ? ops_init+0x4a0/0x4a0 [ 89.388096][ T7] ? read_word_at_a_time+0x12/0x20 [ 89.393332][ T7] ? strscpy+0x9b/0x290 [ 89.397493][ T7] process_one_work+0x73b/0xcc0 [ 89.402625][ T7] worker_thread+0xa5c/0x13b0 [ 89.408092][ T7] kthread+0x31e/0x3a0 [ 89.413314][ T7] ? worker_clr_flags+0x190/0x190 [ 89.418698][ T7] ? kthread_blkcg+0xd0/0xd0 [ 89.423803][ T7] ret_from_fork+0x1f/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 89.428511][ T7] ================================================================== [ 89.437028][ T7] Disabling lock debugging due to kernel taint [ 89.635707][ T7] kasan: CONFIG_KASAN_INLINE enabled [ 89.641137][ T7] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 89.650850][ T7] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 89.658465][ T7] CPU: 0 PID: 7 Comm: kworker/u4:0 Tainted: G B W 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 89.669573][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 89.680236][ T7] Workqueue: netns cleanup_net [ 89.685367][ T7] RIP: 0010:tcf_idrinfo_destroy+0xc0/0x220 [ 89.691359][ T7] Code: 40 e8 b4 6b af 00 48 85 c0 0f 84 1a 01 00 00 49 89 c4 4c 8d 68 20 4c 89 ef be 04 00 00 00 e8 37 05 1b fe 4c 89 e8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 ba 00 00 00 45 8b 6d 00 31 ff 44 89 ee [ 89.711755][ T7] RSP: 0018:ffff8881f5db7b60 EFLAGS: 00010202 [ 89.718231][ T7] RAX: 0000000000000002 RBX: ffff8881f19fe120 RCX: ffff8881f5d68000 [ 89.727012][ T7] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 89.736991][ T7] RBP: ffff8881f5db7c08 R08: 0000000000000004 R09: 0000000000000003 [ 89.745743][ T7] R10: fffffbfff0ca7a5c R11: 1ffffffff0ca7a5c R12: fffffffffffffff0 [ 89.753882][ T7] R13: 0000000000000010 R14: ffffffff861b59f0 R15: dffffc0000000000 [ 89.761953][ T7] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 89.771324][ T7] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.778545][ T7] CR2: 0000559514666fc0 CR3: 0000000005c0e000 CR4: 00000000003406b0 [ 89.787490][ T7] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 89.795572][ T7] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 89.803964][ T7] Call Trace: [ 89.807695][ T7] ? tcf_idr_check_alloc+0x4a0/0x4a0 [ 89.813659][ T7] ? gact_exit_net+0xfd/0x150 [ 89.818529][ T7] police_exit_net+0xe3/0x150 [ 89.823522][ T7] ? police_init_net+0x1f0/0x1f0 [ 89.828665][ T7] cleanup_net+0x5fd/0xb40 [ 89.833166][ T7] ? ops_init+0x4a0/0x4a0 [ 89.837483][ T7] ? read_word_at_a_time+0x12/0x20 [ 89.842781][ T7] ? strscpy+0x9b/0x290 [ 89.846933][ T7] process_one_work+0x73b/0xcc0 [ 89.851896][ T7] worker_thread+0xa5c/0x13b0 [ 89.856739][ T7] kthread+0x31e/0x3a0 [ 89.861037][ T7] ? worker_clr_flags+0x190/0x190 [ 89.866881][ T7] ? kthread_blkcg+0xd0/0xd0 [ 89.871997][ T7] ret_from_fork+0x1f/0x30 [ 89.876631][ T7] Modules linked in: [ 89.882479][ T7] ---[ end trace 7d0fb081a62d121f ]--- [ 89.888163][ T7] RIP: 0010:tcf_idrinfo_destroy+0xc0/0x220 [ 89.894551][ T7] Code: 40 e8 b4 6b af 00 48 85 c0 0f 84 1a 01 00 00 49 89 c4 4c 8d 68 20 4c 89 ef be 04 00 00 00 e8 37 05 1b fe 4c 89 e8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 ba 00 00 00 45 8b 6d 00 31 ff 44 89 ee [ 89.915445][ T7] RSP: 0018:ffff8881f5db7b60 EFLAGS: 00010202 [ 89.921874][ T7] RAX: 0000000000000002 RBX: ffff8881f19fe120 RCX: ffff8881f5d68000 [ 89.930182][ T7] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 89.938335][ T7] RBP: ffff8881f5db7c08 R08: 0000000000000004 R09: 0000000000000003 [ 89.946994][ T7] R10: fffffbfff0ca7a5c R11: 1ffffffff0ca7a5c R12: fffffffffffffff0 [ 89.955643][ T7] R13: 0000000000000010 R14: ffffffff861b59f0 R15: dffffc0000000000 [ 89.964381][ T7] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 89.974145][ T7] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.988951][ T7] CR2: 0000559514666fc0 CR3: 0000000005c0e000 CR4: 00000000003406b0 [ 89.997119][ T7] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 90.005157][ T7] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 90.013298][ T7] Kernel panic - not syncing: Fatal exception [ 90.019460][ T7] Kernel Offset: disabled [ 90.023864][ T7] Rebooting in 86400 seconds..