last executing test programs: 16m5.44912841s ago: executing program 1 (id=664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x100000000, 0xa, 0xffffffffffffff27}) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000000)={[{@resgid}, {@oldalloc}]}, 0x1, 0x3fa, &(0x7f00000004c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnHy2zb2TXi6X27tpLpdLC+I0raTYIthKxY0LQbdCQzopIdMPkkhNmsVE/wFR14IbQS1KF3bdjYJbN1q3FhdCkdgoiGjkzEeSJjNJ2k5yYvL7wZvzvvOcOe/z5DBzzgszE8CeNZD9SSMORcT5JKJQfzyNiO5qrzeiUttvYX525Jf52ZEkFhdf/jGJJCLuz8+ONI6V1LcH6oPeiPjquST+8ebaeSenZ8aHy+XSRH18bOrS1WOT0zNPjl0avli6WLp8/OTTQyeGTg6eGmpbrb9+d+bWz/994fvKbx/9fuOndz5I4kz01WMr66hX/dgGYmDpf7JSZ0QMt+H4O0FHvZ6VdSadGzwp3eKkAABoKV1xD/evKERHLN+8FeLzr3NNDgAAAGiLxY6IRQAAAGCXS6z/AQAAYJdrfA7g/vzsSKPl+4mE7XXvbET01+pfqLdapDMq1W1vdEXE/vtJrPxaa1J72mMbiIi73576NGvR5HvIW60yFxH/bnb+k2r9/fVvQq+uP42IwTbMP7Bq/Feq/0wb5s+7fgD2pttnaxeytde/dOn+J5pc/zqbXLseRd7Xv8b938Ka+7/l+jta3P+9tMk5rn/43rVWsaz+Z249/0mjZfNn28cq6iHcm4v4T2ez+pOl+pMW9Z/f5ByFP66VWsXyrn/x/Ygj0bz+hmT93yc6NjpWLg3W/jadY+7LoY9bzZ93/dn539+i/o3O/9UHjtT6R31ePXfuZqvYxvWnP3Qnr1R73fVHXh+empo4HtGdvLj28RPr19vYp3GMrP6j/1v/9d+s/uw9oVL/P2SVz9W32fiNVXM+e+P6Z+vVn6398jz/Fx7x/L+1yTn+/8XbR1vFVq5/s5bNfzeprYUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCGNiL5I0mJEJNV+mhaLEQci4p+xPy1fmZx6YvTKa5cvZLGI/uhKR8fKpcGIKNTGSTY+Xu0vj0+sGj8VEQcj4t3Cvuq4OHKlfCHv4gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhyICL6IkmLEZFGxEIhTYvFvLMCAAAA2q4/7wQAAACALWf9DwAAALuf9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABb7ODh23eSiKic3ldtme56rCvXzICtluadAJCbjrwTAHLTmXcCQG4eco3vdgF2oWSDeG/LSE/bcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg5zpy6PadJCIqp/dVW6a7Hutq+ozD25gdsJXSvBMActOxXrBz+/IAtp+XOOxdzdf4wF6SbBDvXd6n8mCkZ8tyAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDn6au2JC1GRFrtp2mxGPG3iOiPrmR0rFwajIi/R8Q3ha6ebNyTd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC03eT0zPhwuVya0NHRybeT7Iw0ap2835kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjD5PTM+HC5XJqYzDsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIG+T0zPjw+VyaWITnZsPs/OKTt41AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQnz8DAAD//9b4DfQ=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3040018, 0x0, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f00000002c0)=0x5, 0x4) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 16m3.773850192s ago: executing program 1 (id=669): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x42, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d5a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x78}, 0x1, 0xffffffff00000003}, 0x0) mkdir(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005000000000090000880"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f00000003c0)={[{@errors_continue}, {@errors_continue}, {@utf8}, {@umask={'umask', 0x3d, 0x2396}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x5}}, {@errors_remount}, {@discard}]}, 0x5, 0x1531, &(0x7f0000002f80)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, '\x00\x00\r\x00'}]}}, 0x0}, 0x0) 16m3.041263627s ago: executing program 1 (id=671): syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000018110000000000000004000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 16m1.764077911s ago: executing program 1 (id=673): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r3, 0x0, 0x7}, 0x38) 16m0.511049375s ago: executing program 1 (id=678): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r3}, 0x14) 16m0.312588169s ago: executing program 1 (id=679): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6026843500140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa19004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002f3"], 0x0) 15m44.354815327s ago: executing program 32 (id=679): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6026843500140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa19004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002f3"], 0x0) 19.945032315s ago: executing program 0 (id=2632): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r5) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x2) syz_mount_image$fuse(0x0, 0x0, 0x80004, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b0efc268cbd67279c5e0f19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a1c6261571866a21a54d762495480"], 0xe, 0x2ac, &(0x7f0000000c00)="$eJzs3UFrK1UUAOAzSZrk6SJB3OjGAd/CVXl166ZRniB2pYygLqToeyBJEF4hYAVjV/0FLvs//Alu3PgPBLeCu3ZRGZlMpknbtKltTOH1+1a3c+ece3LvkK5y5lGUDo7/iHY7idp2bMdJEt2oReWnaAQA8PI4yfP4O79NZKO2+moAgHUo//+X7rsWAGA9Pv38i497OztPP0nTdrzRORxlSUQMD0dZOd97Ht/GIJ7Fk+jEaUR+phx/+NHO02ikhW48Hm5ERBYx/Oq3af7eXxGT+K3oRHdx/FZaisfD8SgbZfFKVV0avecb1R+deH1x/LsX42M4jqwZ77w9V/9mdOL3r+O7GMQ3UcTO4n/cStMP8p+Pf/iyWKaIT2qRtSb3zeT1NR0JAAAAAAAAAAAAAAAAAAAAAAAPwGaaJmX7nkn/npj27xmPsvrpZH4zrXTn++tU/YGSKlHZHyiPaYuecR5HVX+dJ2ma5tMbZ/GNeLPhxQIAAAAAAAAAAAAAAAAAAABQ2Pt+v787GDx7sZJB1Q2g+ln/bfNsz115K/b7u/WrE7ZuvtZ8t4Gi1mtvjkYjVrQtywaPinpWnrk1O9zPohxUB/Of8ix7SF57v0y63z9qRUymqk3u7ybL1mpXB/fL/FQz7roJ+eSROM3Pn2m7KvVCVHNFO998deHUP3n1AC/L896f5RlNrySTFhs3W33j7LwWfMBi0L68+q9XJ7zyK6N+5y8dAAAAAAAAAAAAAAAAAABgodmPfhdMHlwbWvvfigIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANZu9/78atCPi/JVLg/E0+Lp7poNmvNi7548IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAA/BvAAAA//9pyURa") syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f000001000000000100000034950c28"], 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) 13.513246929s ago: executing program 4 (id=2645): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) r6 = fsopen(&(0x7f0000000240)='virtiofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000100)='\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xd, 0x5, 0x5133, 0x54e1, 0x47419, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r7, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x12, r7, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x40) 11.963817519s ago: executing program 3 (id=2646): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000440)={0x2, &(0x7f0000000300)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}, {0x8, 0x1b, 0xfe, 0x4}]}) 11.315425182s ago: executing program 0 (id=2648): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0xc002, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$setregs(0xd, 0xffffffffffffffff, 0x4, &(0x7f0000000300)="dccfbc62af988a369e7c5617") bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 10.528876637s ago: executing program 4 (id=2649): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.976158597s ago: executing program 0 (id=2650): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$key(0xffffffffffffffff, 0x0, 0x2000) getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000000)) 8.82994111s ago: executing program 4 (id=2651): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="550a0000000000006111080000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 8.050728855s ago: executing program 2 (id=2652): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) setgroups(0x0, 0x0) keyctl$chown(0x4, r3, 0xee01, 0x0) keyctl$setperm(0x5, r3, 0x30925) keyctl$KEYCTL_MOVE(0x3, r3, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='spmi_write_begin\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000140)=ANY=[]) socket(0x10, 0x803, 0x0) 7.623591423s ago: executing program 3 (id=2653): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x8000, 0x8, 0x5, 0xa000000, {{0x5, 0x4, 0x0, 0x14, 0x14, 0x65, 0x0, 0x2, 0x4, 0x0, @local, @empty}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x25, 0x3, 0x0) r7 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, 0x0) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r6, 0x0, 0x0) fsmount(r5, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x24, r9, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x24}}, 0x2000c050) 6.426724566s ago: executing program 2 (id=2654): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10d240, 0x0) 6.329361628s ago: executing program 3 (id=2655): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6.18511085s ago: executing program 0 (id=2656): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r5) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x2) syz_mount_image$fuse(0x0, 0x0, 0x80004, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b0efc268cbd67279c5e0f19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a1c6261571866a21a54d762495480"], 0xe, 0x2ac, &(0x7f0000000c00)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r8, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f000001000000000100000034950c28"], 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) 6.18437046s ago: executing program 2 (id=2657): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) r4 = fsopen(&(0x7f0000000240)='virtiofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000100)='\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xd, 0x5, 0x5133, 0x54e1, 0x47419, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r5, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x12, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x40) 5.239431159s ago: executing program 3 (id=2658): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0xc002, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$setregs(0xd, 0xffffffffffffffff, 0x4, &(0x7f0000000300)="dccfbc62af988a369e7c5617") bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 3.261335817s ago: executing program 3 (id=2659): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 3.236810647s ago: executing program 2 (id=2660): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008413, &(0x7f0000000000)={[{@noblock_validity}, {@barrier}]}, 0x0, 0x517, &(0x7f00000000c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r1, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev, @in6=@local}}, {{@in6=@private1}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000100)={0x0, "2e0da0e6d96a5865147439fc9b356278d55a55c3aae49c46ec8a911ec3414152ab5c323c512f74a354c7dcc03dabba288dbe75db1c2a7959aff492ffa178c590", 0x3c}, 0x48, 0x0) 3.215214638s ago: executing program 4 (id=2661): openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) uname(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r5, &(0x7f00000021c0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9d6}}], 0x18}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) 1.774940256s ago: executing program 2 (id=2662): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) setgroups(0x0, 0x0) keyctl$chown(0x4, r3, 0xee01, 0x0) keyctl$setperm(0x5, r3, 0x30925) keyctl$KEYCTL_MOVE(0x3, r3, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000140)=ANY=[]) socket(0x10, 0x803, 0x0) 1.623555829s ago: executing program 4 (id=2663): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x8000, 0x8, 0x5, 0xa000000, {{0x5, 0x4, 0x0, 0x14, 0x14, 0x65, 0x0, 0x2, 0x4, 0x0, @local, @empty}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x25, 0x3, 0x0) r7 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, 0x0) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r6, 0x0, 0x0) fsmount(r5, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x24, r9, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x24}}, 0x2000c050) 1.52931408s ago: executing program 3 (id=2664): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$key(0xffffffffffffffff, 0x0, 0x2000) getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000000)) 541.285859ms ago: executing program 2 (id=2665): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001020004ffffffff00000000030000000600000000000000000000020000000000097d0000000000b6151cd01001223bbc14820e46a53714d09c411ce064d6c57d302a2aaa3e4d21480e068b0ef54099c945bc057aa649dcd046891f21d5af16974a7dfc3956456da9a013963562be3d86647633303420127d5acdece0daefe7311c7e6e440d28fa22cfd52cc7f405"], 0x0, 0x4a}, 0x20) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e80)=ANY=[@ANYBLOB="f80000001600010025bd700000000000fe8000000000000000000000000000aaff01000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001000004d233"], 0xf8}}, 0x0) 142.911607ms ago: executing program 0 (id=2666): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) symlink(0x0, 0x0) 67.956149ms ago: executing program 4 (id=2667): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0xc002, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$setregs(0xd, 0xffffffffffffffff, 0x4, &(0x7f0000000300)="dccfbc62af988a369e7c5617") bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 0s ago: executing program 0 (id=2668): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) r4 = fsopen(&(0x7f0000000240)='virtiofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000100)='\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xd, 0x5, 0x5133, 0x54e1, 0x47419, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r5, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x12, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x40) kernel console output (not intermixed with test programs): ][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 445.944349][ T28] audit: type=1326 audit(1759295418.835:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 446.100338][ T28] audit: type=1326 audit(1759295418.845:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 446.176034][ T28] audit: type=1326 audit(1759295418.845:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f24d118ef03 code=0x7ffc0000 [ 446.288969][ T28] audit: type=1326 audit(1759295418.845:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f24d118d97f code=0x7ffc0000 [ 446.374336][ T28] audit: type=1326 audit(1759295419.055:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f24d118ef57 code=0x7ffc0000 [ 446.397893][ T28] audit: type=1326 audit(1759295419.055:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f24d118d710 code=0x7ffc0000 [ 446.460432][ T28] audit: type=1326 audit(1759295419.055:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f24d118db2a code=0x7ffc0000 [ 446.560937][ T28] audit: type=1326 audit(1759295419.055:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 446.601408][ T28] audit: type=1326 audit(1759295419.095:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 446.888738][ T2970] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.043979][ T28] audit: type=1326 audit(1759295419.105:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 447.246697][ T2970] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.295669][ T8353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.325300][ T8416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.733'. [ 447.362117][ T8353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.757705][ T8429] Invalid ELF header magic: != ELF [ 447.997219][ T50] Bluetooth: hci4: command tx timeout [ 448.118335][ T8353] team0: Port device team_slave_0 added [ 448.539764][ T8353] team0: Port device team_slave_1 added [ 448.789490][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.803486][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.841388][ T8353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.261170][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.439215][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.687072][ T8353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.024661][ T8353] hsr_slave_0: entered promiscuous mode [ 450.056045][ T8353] hsr_slave_1: entered promiscuous mode [ 450.151259][ T8453] overlayfs: failed to resolve './file0': -2 [ 450.192160][ T8353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 450.231255][ T8353] Cannot create hsr debugfs directory [ 451.631940][ T8474] Invalid ELF header magic: != ELF [ 453.710516][ T8353] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 453.740558][ T8353] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 453.860081][ T8353] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 453.873628][ T8353] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 454.753657][ T8509] Invalid ELF header magic: != ELF [ 454.897961][ T8510] overlayfs: failed to resolve './file0': -2 [ 455.302675][ T2970] hsr_slave_0: left promiscuous mode [ 455.339307][ T2970] hsr_slave_1: left promiscuous mode [ 455.410348][ T2970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.448784][ T2970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.507143][ T2970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.541074][ T2970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.592455][ T2970] bridge_slave_0: left allmulticast mode [ 455.610055][ T2970] bridge_slave_0: left promiscuous mode [ 455.618464][ T2970] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.827934][ T2970] veth1_macvtap: left promiscuous mode [ 455.863724][ T2970] veth0_macvtap: left promiscuous mode [ 455.871803][ T2970] veth1_vlan: left promiscuous mode [ 455.883335][ T2970] veth0_vlan: left promiscuous mode [ 456.528483][ T8529] Invalid ELF header magic: != ELF [ 459.151439][ T2970] team0 (unregistering): Port device team_slave_1 removed [ 460.492550][ T2970] team0 (unregistering): Port device team_slave_0 removed [ 460.646086][ T2970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.719085][ T2970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.437785][ T2970] bond0 (unregistering): Released all slaves [ 461.578632][ T8353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.596863][ T8524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.751'. [ 461.946128][ T8353] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.032208][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.039660][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.470287][ T8571] Invalid ELF header magic: != ELF [ 464.111949][ T7597] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.119448][ T7597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.989189][ T8582] Invalid ELF header magic: != ELF [ 465.590530][ T8353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.234811][ T8618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.766'. [ 467.261373][ T8353] veth0_vlan: entered promiscuous mode [ 467.336509][ T8353] veth1_vlan: entered promiscuous mode [ 467.441412][ T8353] veth0_macvtap: entered promiscuous mode [ 467.465867][ T8353] veth1_macvtap: entered promiscuous mode [ 467.521444][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.538019][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.553568][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.567989][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.731572][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.774622][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.794988][ T8353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.039388][ T8630] Invalid ELF header magic: != ELF [ 469.716533][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.765852][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.776862][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.787616][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.797659][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.808484][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.823244][ T8353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.842345][ T8353] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.851669][ T8353] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.860817][ T8353] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.869990][ T8353] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.215197][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.227452][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.107297][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.170346][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.476812][ T8656] overlayfs: failed to resolve './file0': -2 [ 473.074494][ T8662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.774'. [ 474.226674][ T8672] Invalid ELF header magic: != ELF [ 475.668852][ T8680] Invalid ELF header magic: != ELF [ 475.831487][ T8691] fuse: Bad value for 'fd' [ 476.993685][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.784'. [ 477.948973][ T8711] overlayfs: failed to resolve './file0': -2 [ 479.765130][ T8725] syz.4.787[8725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.765284][ T8725] syz.4.787[8725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.807794][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 479.807809][ T28] audit: type=1326 audit(1759295452.705:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8724 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 479.999856][ T28] audit: type=1326 audit(1759295452.705:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8724 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 480.142577][ T28] audit: type=1326 audit(1759295452.705:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8724 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 481.610260][ T8735] Invalid ELF header magic: != ELF [ 482.344685][ T28] audit: type=1326 audit(1759295452.705:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8724 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 482.529043][ T28] audit: type=1326 audit(1759295452.705:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8724 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fed6e78ef03 code=0x7ffc0000 [ 482.599529][ T28] audit: type=1326 audit(1759295452.705:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8724 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fed6e78d97f code=0x7ffc0000 [ 482.658425][ T28] audit: type=1326 audit(1759295452.705:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8724 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fed6e78ef57 code=0x7ffc0000 [ 482.741952][ T28] audit: type=1326 audit(1759295452.725:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8724 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed6e78d710 code=0x7ffc0000 [ 482.854272][ T28] audit: type=1326 audit(1759295452.725:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8724 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fed6e78db2a code=0x7ffc0000 [ 482.910378][ T28] audit: type=1326 audit(1759295452.725:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8724 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 482.944134][ T8743] fuse: Bad value for 'fd' [ 484.182156][ T8754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.795'. [ 484.810487][ T8767] overlayfs: failed to resolve './file0': -2 [ 485.377119][ T8775] Invalid ELF header magic: != ELF [ 486.464741][ T8788] Invalid ELF header magic: != ELF [ 488.112412][ T8799] fuse: Bad value for 'fd' [ 491.363731][ T8830] Invalid ELF header magic: != ELF [ 495.086155][ T8872] Invalid ELF header magic: != ELF [ 495.298512][ T8878] Invalid ELF header magic: != ELF [ 495.958373][ T8880] fuse: Bad value for 'fd' [ 498.611229][ T8909] overlayfs: failed to resolve './file0': -2 [ 500.123247][ T8927] Invalid ELF header magic: != ELF [ 500.794202][ T8937] Invalid ELF header magic: != ELF [ 501.690854][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 501.690869][ T28] audit: type=1326 audit(1759295474.595:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 501.919389][ T28] audit: type=1326 audit(1759295474.595:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 501.963918][ T8945] fuse: Bad value for 'fd' [ 502.139160][ T28] audit: type=1326 audit(1759295474.635:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 502.590067][ T28] audit: type=1326 audit(1759295474.635:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 502.614187][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.620889][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.770993][ T28] audit: type=1326 audit(1759295474.635:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 502.812729][ T28] audit: type=1326 audit(1759295474.635:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 502.935346][ T28] audit: type=1326 audit(1759295474.635:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 503.070259][ T28] audit: type=1326 audit(1759295474.635:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 503.247119][ T28] audit: type=1326 audit(1759295474.635:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 503.271145][ T28] audit: type=1326 audit(1759295474.635:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 503.863181][ T8968] netlink: 104 bytes leftover after parsing attributes in process `syz.3.834'. [ 504.735236][ T8974] Invalid ELF header magic: != ELF [ 506.320302][ T8985] Invalid ELF header magic: != ELF [ 507.626276][ T8997] overlayfs: failed to resolve './file0': -2 [ 508.272661][ T9001] fuse: Bad value for 'fd' [ 512.456242][ T9043] Invalid ELF header magic: != ELF [ 514.750401][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.857'. [ 514.772702][ T9064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.857'. [ 516.569048][ T9101] Invalid ELF header magic: != ELF [ 520.413311][ T9145] capability: warning: `syz.4.871' uses deprecated v2 capabilities in a way that may be insecure [ 521.660689][ T9159] Invalid ELF header magic: != ELF [ 529.721193][ T9222] Invalid ELF header magic: != ELF [ 531.876195][ T9238] Invalid ELF header magic: != ELF [ 537.577358][ T9294] Invalid ELF header magic: != ELF [ 537.732872][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 537.732890][ T28] audit: type=1326 audit(1759295510.635:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9300 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 537.795935][ T28] audit: type=1326 audit(1759295510.665:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9300 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 537.854603][ T28] audit: type=1326 audit(1759295510.675:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9300 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 537.914269][ T28] audit: type=1326 audit(1759295510.675:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9300 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 539.196799][ T28] audit: type=1326 audit(1759295510.675:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9300 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 539.239902][ T28] audit: type=1326 audit(1759295510.685:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9300 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 539.392118][ T28] audit: type=1326 audit(1759295510.685:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9300 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 539.415482][ T28] audit: type=1326 audit(1759295510.685:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9300 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 539.438279][ T28] audit: type=1326 audit(1759295510.685:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9300 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 539.511226][ T28] audit: type=1326 audit(1759295510.685:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9300 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 542.422002][ T9354] Invalid ELF header magic: != ELF [ 548.994259][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 548.994275][ T28] audit: type=1326 audit(1759295521.895:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9428 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 549.122348][ T28] audit: type=1326 audit(1759295521.935:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9428 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 549.770063][ T28] audit: type=1326 audit(1759295521.935:337): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=unconfined pid=9428 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 549.900168][ T28] audit: type=1326 audit(1759295521.935:338): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=unconfined pid=9428 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 550.084932][ T9440] netlink: 56 bytes leftover after parsing attributes in process `syz.2.935'. [ 559.360639][ T9507] netlink: 'syz.0.955': attribute type 12 has an invalid length. [ 563.911383][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.918431][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.949158][ T9534] netlink: 'syz.4.961': attribute type 15 has an invalid length. [ 565.994814][ T9536] Bluetooth: hci4: command 0x0406 tx timeout [ 566.395778][ T9554] overlayfs: failed to clone upperpath [ 568.366783][ T9567] overlayfs: failed to clone upperpath [ 571.129877][ T28] audit: type=1326 audit(1759295544.025:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.2.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 571.226970][ T9613] syz.4.985[9613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 571.228101][ T9613] syz.4.985[9613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 571.541582][ T28] audit: type=1326 audit(1759295544.025:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.2.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 572.134201][ T28] audit: type=1326 audit(1759295544.035:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.2.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 572.270084][ T28] audit: type=1326 audit(1759295544.105:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.2.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 574.135252][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.996'. [ 574.144525][ T9642] bridge: RTM_NEWNEIGH with invalid ether address [ 574.801424][ T9643] overlayfs: failed to clone upperpath [ 574.960197][ T9645] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1001'. [ 576.787081][ T9669] tipc: Invalid UDP bearer configuration [ 576.787153][ T9669] tipc: Enabling of bearer rejected, failed to enable media [ 579.840777][ T9699] overlayfs: failed to resolve './file0': -2 [ 581.050865][ T9714] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 581.477216][ T28] audit: type=1326 audit(1759295555.354:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 581.552088][ T28] audit: type=1326 audit(1759295555.354:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 581.614474][ T28] audit: type=1326 audit(1759295555.454:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 581.750085][ T28] audit: type=1326 audit(1759295555.454:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 581.843717][ T28] audit: type=1326 audit(1759295555.484:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f24d11c1785 code=0x7ffc0000 [ 581.911045][ T28] audit: type=1326 audit(1759295555.494:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 581.943103][ T28] audit: type=1326 audit(1759295555.494:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 581.972571][ T28] audit: type=1326 audit(1759295555.494:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 582.155927][ T28] audit: type=1326 audit(1759295555.494:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 582.188259][ T28] audit: type=1326 audit(1759295555.494:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 585.643581][ T9769] xt_TCPMSS: Only works on TCP SYN packets [ 591.420554][ T9814] syz.4.1048[9814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 591.420720][ T9814] syz.4.1048[9814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 597.637492][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1072'. [ 599.277133][ T9897] overlayfs: failed to resolve './file0': -2 [ 604.190192][ T9938] overlayfs: failed to resolve './file0': -2 [ 607.628408][ T9975] overlayfs: failed to resolve './file0': -2 [ 608.339028][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 608.339045][ T28] audit: type=1326 audit(1759295582.231:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9982 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 608.371418][ T28] audit: type=1326 audit(1759295582.231:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9982 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 608.395424][ T28] audit: type=1326 audit(1759295582.231:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9982 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 608.432491][ T28] audit: type=1326 audit(1759295582.231:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9982 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 608.483534][ T28] audit: type=1326 audit(1759295582.231:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9982 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 608.506957][ T28] audit: type=1326 audit(1759295582.231:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9982 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 608.533293][ T28] audit: type=1326 audit(1759295582.251:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9982 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 608.561889][ T28] audit: type=1326 audit(1759295582.251:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9982 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 608.589349][ T28] audit: type=1326 audit(1759295582.251:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9982 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 608.618312][ T28] audit: type=1326 audit(1759295582.251:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9982 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 613.314248][T10013] overlayfs: failed to resolve './file0': -2 [ 615.839133][T10038] fuse: Bad value for 'group_id' [ 615.886790][T10040] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1122'. [ 617.130455][T10056] bridge: RTM_NEWNEIGH with invalid ether address [ 619.988089][T10081] fuse: Bad value for 'group_id' [ 621.784562][T10100] x_tables: duplicate underflow at hook 1 [ 625.623609][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 625.623627][ T28] audit: type=1326 audit(1759295598.803:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 625.674638][ T28] audit: type=1326 audit(1759295598.841:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 625.890557][ T28] audit: type=1326 audit(1759295598.841:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 625.914643][ T28] audit: type=1326 audit(1759295598.841:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 626.009497][ T28] audit: type=1326 audit(1759295598.841:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 626.044045][ T28] audit: type=1326 audit(1759295598.850:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 626.083059][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.090745][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.971814][T10137] x_tables: duplicate underflow at hook 1 [ 632.877479][ T28] audit: type=1326 audit(1759295598.850:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 633.097711][ T28] audit: type=1326 audit(1759295598.850:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 633.275098][ T28] audit: type=1326 audit(1759295598.850:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 634.409664][ T28] audit: type=1326 audit(1759295598.850:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 634.432730][ T28] audit: type=1326 audit(1759295598.850:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 634.844410][ T28] audit: type=1326 audit(1759295598.850:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 634.870505][ T28] audit: type=1326 audit(1759295598.850:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 635.354342][ T28] audit: type=1326 audit(1759295598.850:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 635.381282][ T28] audit: type=1326 audit(1759295599.046:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 635.409928][ T28] audit: type=1326 audit(1759295599.046:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 635.836976][T10163] veth0_vlan: entered allmulticast mode [ 637.385798][T10164] veth0_vlan: left promiscuous mode [ 637.393397][T10164] veth0_vlan: entered promiscuous mode [ 637.667446][T10173] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1160'. [ 638.831976][T10174] bridge0: port 3(gretap0) entered blocking state [ 638.848365][T10174] bridge0: port 3(gretap0) entered disabled state [ 638.855709][T10174] gretap0: entered allmulticast mode [ 638.863704][T10174] gretap0: entered promiscuous mode [ 638.872521][T10174] bridge0: port 3(gretap0) entered blocking state [ 638.880130][T10174] bridge0: port 3(gretap0) entered forwarding state [ 638.906329][T10175] gretap0: left allmulticast mode [ 638.913948][T10175] gretap0: left promiscuous mode [ 638.921101][T10175] bridge0: port 3(gretap0) entered disabled state [ 639.082178][T10182] fuse: Bad value for 'fd' [ 647.407078][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1177'. [ 647.417098][T10239] bridge: RTM_NEWNEIGH with invalid ether address [ 648.185589][T10248] overlayfs: failed to resolve './file0': -2 [ 650.735791][T10261] fuse: Bad value for 'fd' [ 651.942259][T10266] syz.0.1184[10266] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 651.942409][T10266] syz.0.1184[10266] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 652.345518][T10272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1186'. [ 652.456414][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1188'. [ 652.468351][T10276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1188'. [ 653.863606][T10281] netlink: 428 bytes leftover after parsing attributes in process `syz.3.1187'. [ 655.528768][T10289] bridge2: entered promiscuous mode [ 655.534964][T10289] bridge2: entered allmulticast mode [ 655.886438][T10296] fuse: Bad value for 'fd' [ 658.873762][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1197'. [ 658.883058][T10316] bridge: RTM_NEWNEIGH with invalid ether address [ 660.554228][T10332] fuse: Bad value for 'fd' [ 661.099305][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 661.099368][ T28] audit: type=1326 audit(1759295631.860:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 661.541565][ T28] audit: type=1326 audit(1759295631.860:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 661.569861][ T28] audit: type=1326 audit(1759295631.870:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 661.685150][ T28] audit: type=1326 audit(1759295631.870:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 661.750024][ T28] audit: type=1326 audit(1759295631.870:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 661.777528][ T28] audit: type=1326 audit(1759295631.879:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 661.803604][ T28] audit: type=1326 audit(1759295631.879:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 661.856139][ T28] audit: type=1326 audit(1759295631.879:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 661.946724][ T28] audit: type=1326 audit(1759295631.888:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 662.040704][ T28] audit: type=1326 audit(1759295631.888:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 663.116784][T10353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1207'. [ 663.127607][T10353] bridge: RTM_NEWNEIGH with invalid ether address [ 665.680240][T10375] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1218'. [ 671.474870][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1237'. [ 671.490349][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1237'. [ 672.955999][T10441] Invalid ELF header magic: != ELF [ 674.324714][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1240'. [ 674.333985][T10450] bridge: RTM_NEWNEIGH with invalid ether address [ 675.773353][T10472] overlayfs: failed to resolve './file0': -2 [ 680.153141][T10520] overlayfs: failed to resolve './file0': -2 [ 680.568502][T10524] netlink: 'syz.2.1264': attribute type 15 has an invalid length. [ 680.920753][T10523] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1266'. [ 682.500325][T10537] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1269'. [ 684.056399][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1275'. [ 684.066360][T10550] bridge: RTM_NEWNEIGH with invalid ether address [ 684.126552][T10552] netlink: 'syz.3.1276': attribute type 15 has an invalid length. [ 684.308635][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 684.308651][ T28] audit: type=1326 audit(1759295653.674:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 684.371314][ T28] audit: type=1326 audit(1759295653.674:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 684.443908][ T28] audit: type=1326 audit(1759295653.674:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 685.171578][ T28] audit: type=1326 audit(1759295653.674:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 685.233760][T10559] fuse: Unknown parameter 'grou00000000000000000000' [ 685.322666][ T28] audit: type=1326 audit(1759295653.674:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 685.345444][ T28] audit: type=1326 audit(1759295653.674:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 685.369720][ T28] audit: type=1326 audit(1759295653.674:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 685.468287][ T28] audit: type=1326 audit(1759295653.674:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 685.492061][ T28] audit: type=1326 audit(1759295653.683:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 685.539991][ T28] audit: type=1326 audit(1759295653.683:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 689.129000][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 689.138500][T10589] bridge: RTM_NEWNEIGH with invalid ether address [ 689.255515][T10591] Invalid ELF header magic: != ELF [ 690.113304][T10597] fuse: Unknown parameter 'group_i00000000000000000000' [ 690.580564][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 690.580611][ T28] audit: type=1326 audit(1759295659.464:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10596 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 691.084204][ T28] audit: type=1326 audit(1759295659.464:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10596 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 691.107754][ T28] audit: type=1326 audit(1759295659.473:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10596 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 691.131019][ T28] audit: type=1326 audit(1759295659.473:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10596 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 691.156572][ T28] audit: type=1326 audit(1759295659.473:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10596 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 691.242577][ T28] audit: type=1326 audit(1759295659.473:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10596 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 691.297165][ T28] audit: type=1326 audit(1759295659.473:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10596 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 691.333525][ T28] audit: type=1326 audit(1759295659.483:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10596 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 691.381798][ T28] audit: type=1326 audit(1759295659.483:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10596 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 691.426940][ T28] audit: type=1326 audit(1759295659.483:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10596 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 691.768588][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.775894][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 694.988067][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1297'. [ 694.997229][T10629] bridge: RTM_NEWNEIGH with invalid ether address [ 695.143011][T10631] Invalid ELF header magic: != ELF [ 695.965772][T10635] fuse: Unknown parameter 'group_i00000000000000000000' [ 701.444610][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1307'. [ 701.454728][T10664] bridge: RTM_NEWNEIGH with invalid ether address [ 702.818589][T10672] Invalid ELF header magic: != ELF [ 703.324190][T10679] fuse: Unknown parameter 'group_i00000000000000000000' [ 704.980432][T10695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1312'. [ 706.542461][T10696] tipc: Enabling of bearer rejected, failed to enable media [ 707.825073][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1318'. [ 707.834437][T10711] bridge: RTM_NEWNEIGH with invalid ether address [ 708.885032][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 709.293610][ T28] audit: type=1326 audit(1759295676.563:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10712 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 709.352535][ T28] audit: type=1326 audit(1759295676.600:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10712 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 709.421952][ T28] audit: type=1326 audit(1759295676.610:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10712 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 709.532024][ T28] audit: type=1326 audit(1759295676.619:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10712 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 709.603944][ T28] audit: type=1326 audit(1759295676.628:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10712 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 709.627069][ T28] audit: type=1326 audit(1759295676.647:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10712 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 709.649999][ T28] audit: type=1326 audit(1759295676.666:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10712 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 709.680964][ T28] audit: type=1326 audit(1759295676.666:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10712 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 709.737375][T10722] fuse: Unknown parameter 'group_id00000000000000000000' [ 710.545513][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1325'. [ 711.302174][T10747] overlayfs: failed to clone upperpath [ 711.327763][T10745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1328'. [ 711.337287][T10745] bridge: RTM_NEWNEIGH with invalid ether address [ 713.548874][T10764] Invalid ELF header magic: != ELF [ 716.832489][T10804] fuse: Bad value for 'fd' [ 721.634188][T10840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1360'. [ 722.001241][T10846] fuse: Bad value for 'fd' [ 723.913222][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1366'. [ 723.922492][T10858] bridge: RTM_NEWNEIGH with invalid ether address [ 728.574676][T10882] fuse: Bad value for 'fd' [ 728.887510][T10886] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1374'. [ 730.111025][T10894] netlink: 'syz.4.1377': attribute type 15 has an invalid length. [ 735.475970][T10928] netlink: 'syz.4.1389': attribute type 15 has an invalid length. [ 737.407452][T10939] fuse: Bad value for 'fd' [ 738.426665][T10948] overlayfs: failed to resolve './file0': -2 [ 739.129748][T10954] fuse: Bad value for 'fd' [ 741.359257][T10968] netlink: 'syz.3.1400': attribute type 15 has an invalid length. [ 742.770784][T10980] fuse: Bad value for 'fd' [ 745.699714][T10993] overlayfs: failed to resolve './file0': -2 [ 746.495038][T10998] fuse: Bad value for 'fd' [ 751.190431][T11014] netlink: 'syz.2.1411': attribute type 15 has an invalid length. [ 753.403628][T11027] Invalid ELF header magic: != ELF [ 754.502743][T11032] fuse: Bad value for 'fd' [ 754.784795][ T28] audit: type=1326 audit(1759295719.591:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 754.840657][ T28] audit: type=1326 audit(1759295719.591:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 754.918766][ T28] audit: type=1326 audit(1759295719.591:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 755.057561][ T28] audit: type=1326 audit(1759295719.591:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 755.204873][ T28] audit: type=1326 audit(1759295719.591:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 755.291211][ T28] audit: type=1326 audit(1759295719.591:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 755.414635][ T28] audit: type=1326 audit(1759295719.591:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 755.516567][ T28] audit: type=1326 audit(1759295719.591:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 755.620003][ T28] audit: type=1326 audit(1759295719.591:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 755.643873][ T28] audit: type=1326 audit(1759295719.591:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 757.709647][T11039] 9pnet_fd: p9_fd_create_unix (11039): problem connecting socket: ./file0: -111 [ 757.725211][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.733757][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 759.627084][T11076] Invalid ELF header magic: != ELF [ 760.351446][T11081] fuse: Bad value for 'fd' [ 760.833324][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 760.836092][ T28] audit: type=1326 audit(1759295725.288:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 760.959176][ T28] audit: type=1326 audit(1759295725.288:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 760.982609][ T28] audit: type=1326 audit(1759295725.288:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 761.011040][ T28] audit: type=1326 audit(1759295725.288:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 761.121846][ T28] audit: type=1326 audit(1759295725.288:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 761.147461][ T28] audit: type=1326 audit(1759295725.288:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 761.171536][ T28] audit: type=1326 audit(1759295725.288:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 761.352048][ T28] audit: type=1326 audit(1759295725.288:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 766.081963][T11117] fuse: Bad value for 'fd' [ 772.026748][T11166] netlink: 'syz.2.1453': attribute type 15 has an invalid length. [ 775.367759][T11190] fuse: Bad value for 'fd' [ 786.238530][T11281] netlink: 'syz.0.1485': attribute type 15 has an invalid length. [ 792.922300][T11331] overlayfs: failed to clone upperpath [ 795.090850][T11352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1508'. [ 795.113491][T11352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1508'. [ 797.642472][T11358] overlayfs: failed to clone upperpath [ 802.131293][T11400] fuse: Bad value for 'rootmode' [ 804.165972][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1526'. [ 804.176797][T11417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1526'. [ 804.239982][T11405] overlayfs: failed to clone upperpath [ 805.891036][T11438] fuse: Bad value for 'rootmode' [ 806.127133][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1533'. [ 806.143177][T11441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1533'. [ 808.044124][T11453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1537'. [ 808.058842][T11453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1537'. [ 810.350460][T11471] fuse: Bad value for 'rootmode' [ 811.147796][T11475] overlayfs: failed to clone upperpath [ 815.868602][T11508] xt_TPROXY: Can be used only with -p tcp or -p udp [ 818.136185][T11513] overlayfs: failed to clone upperpath [ 820.833420][T11537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1559'. [ 820.848872][T11537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1559'. [ 823.131792][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 823.138494][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 824.531514][T11556] overlayfs: failed to clone upperpath [ 825.883205][T11572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1570'. [ 825.894097][T11572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1570'. [ 829.880869][T11589] overlayfs: failed to clone upperpath [ 832.195814][T11602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1580'. [ 832.205966][T11602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1580'. [ 832.249907][ T28] audit: type=1326 audit(1759295792.085:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11607 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 832.340276][ T28] audit: type=1326 audit(1759295792.085:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11607 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 832.940923][ T28] audit: type=1326 audit(1759295792.085:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11607 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 832.984229][ T28] audit: type=1326 audit(1759295792.085:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11607 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 833.039944][ T28] audit: type=1326 audit(1759295792.085:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11607 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 833.084563][ T28] audit: type=1326 audit(1759295792.085:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11607 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 833.108039][ T28] audit: type=1326 audit(1759295792.085:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11607 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 836.283679][T11640] netlink: 'syz.2.1591': attribute type 15 has an invalid length. [ 838.021879][T11655] fuse: Unknown parameter 'fd18446744073709551615' [ 839.886338][T11666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1597'. [ 839.904594][T11666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1597'. [ 846.771650][T11698] fuse: Unknown parameter 'fd18446744073709551615' [ 852.339700][T11742] overlayfs: failed to resolve './file0': -2 [ 854.087387][T11766] Invalid ELF header magic: != ELF [ 857.637095][T11784] fuse: Unknown parameter 'fd18446744073709551615' [ 859.267886][T11806] overlayfs: failed to resolve './file0': -2 [ 859.820567][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1635'. [ 859.880400][T11814] bridge: RTM_NEWNEIGH with invalid ether address [ 861.119065][T11824] fuse: Bad value for 'fd' [ 864.644887][T11855] overlayfs: failed to resolve './file0': -2 [ 865.817189][T11864] overlayfs: failed to clone upperpath [ 866.313815][T11875] netlink: 'syz.2.1651': attribute type 15 has an invalid length. [ 868.314069][T11898] overlayfs: failed to resolve './file0': -2 [ 868.842972][T11906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1660'. [ 868.858429][T11906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1660'. [ 870.030384][T11908] overlayfs: failed to clone upperpath [ 870.469636][T11919] netlink: 'syz.2.1665': attribute type 15 has an invalid length. [ 873.934373][T11938] overlayfs: failed to clone upperpath [ 874.017752][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1671'. [ 874.031951][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1671'. [ 875.592151][T11953] netlink: 'syz.3.1676': attribute type 15 has an invalid length. [ 878.048586][T11973] overlayfs: failed to clone upperpath [ 878.300639][T11979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1683'. [ 878.316051][T11979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1683'. [ 880.223148][ T28] audit: type=1326 audit(1759295836.956:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11994 comm="syz.4.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 880.247274][ T28] audit: type=1326 audit(1759295836.956:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11994 comm="syz.4.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 880.271145][ T28] audit: type=1326 audit(1759295836.956:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11994 comm="syz.4.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 880.295698][ T28] audit: type=1326 audit(1759295836.956:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11994 comm="syz.4.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 880.321367][ T28] audit: type=1326 audit(1759295836.956:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11994 comm="syz.4.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 880.372590][ T28] audit: type=1326 audit(1759295836.956:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11994 comm="syz.4.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 880.691119][ T28] audit: type=1326 audit(1759295836.956:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11994 comm="syz.4.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 881.456567][T12006] overlayfs: failed to clone upperpath [ 885.848631][T12058] overlayfs: failed to clone upperpath [ 888.815770][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 888.822807][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 889.305636][T12081] overlayfs: failed to clone upperpath [ 894.685376][T12120] overlayfs: failed to clone upperpath [ 898.420493][T12161] overlayfs: failed to clone upperpath [ 902.005690][T12198] overlayfs: failed to clone upperpath [ 905.602991][T12238] overlayfs: failed to clone upperpath [ 918.045562][ T28] audit: type=1326 audit(1759295872.333:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12348 comm="syz.0.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 918.117497][ T28] audit: type=1326 audit(1759295872.333:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12348 comm="syz.0.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 918.141720][ T28] audit: type=1326 audit(1759295872.370:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12348 comm="syz.0.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 918.169278][ T28] audit: type=1326 audit(1759295872.370:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12348 comm="syz.0.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 918.193062][ T28] audit: type=1326 audit(1759295872.370:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12348 comm="syz.0.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 918.287579][T12351] xt_TPROXY: Can be used only with -p tcp or -p udp [ 919.073594][ T28] audit: type=1326 audit(1759295872.380:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12348 comm="syz.0.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 919.120315][ T28] audit: type=1326 audit(1759295872.380:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12348 comm="syz.0.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 919.188506][ T28] audit: type=1326 audit(1759295872.380:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12348 comm="syz.0.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 919.249384][ T28] audit: type=1326 audit(1759295872.380:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12348 comm="syz.0.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 919.298059][ T28] audit: type=1326 audit(1759295872.389:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12348 comm="syz.0.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b98eec9 code=0x7ffc0000 [ 921.803386][T12376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1802'. [ 921.820511][T12376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1802'. [ 924.418523][T12404] xt_TPROXY: Can be used only with -p tcp or -p udp [ 927.662989][T12426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1814'. [ 927.678076][T12426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1814'. [ 929.551655][T12440] netlink: 'syz.2.1818': attribute type 15 has an invalid length. [ 931.857913][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1825'. [ 931.868487][T12455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1825'. [ 935.548084][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 935.548186][ T28] audit: type=1107 audit(1759295888.627:596): pid=12487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 936.429805][T12495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1837'. [ 936.440725][T12495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1837'. [ 936.499860][T12498] netlink: 'syz.0.1834': attribute type 15 has an invalid length. [ 941.617727][T12545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1849'. [ 941.628850][T12545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1849'. [ 943.378652][T12558] fuse: Unknown parameter 'fd00000000000000000003' [ 945.987658][T12589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1863'. [ 946.009503][T12589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1863'. [ 953.302525][T12636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1876'. [ 953.313491][T12636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1876'. [ 954.499734][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 954.522061][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 955.359744][T12646] netlink: 'syz.4.1879': attribute type 15 has an invalid length. [ 956.150596][T12662] overlayfs: failed to clone upperpath [ 956.631358][T12667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1885'. [ 958.351270][T12682] overlayfs: failed to resolve './file0': -2 [ 959.625763][T12693] netlink: 'syz.3.1892': attribute type 15 has an invalid length. [ 960.449479][T12702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1894'. [ 960.461899][T12702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1894'. [ 961.953151][ T28] audit: type=1326 audit(1759295913.406:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12714 comm="syz.2.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 962.012973][ T28] audit: type=1326 audit(1759295913.434:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12714 comm="syz.2.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 962.100525][ T28] audit: type=1326 audit(1759295913.434:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12714 comm="syz.2.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 962.175388][ T28] audit: type=1326 audit(1759295913.434:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12714 comm="syz.2.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 962.241066][ T28] audit: type=1326 audit(1759295913.434:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12714 comm="syz.2.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 962.326646][ T28] audit: type=1326 audit(1759295913.434:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12714 comm="syz.2.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 962.367709][ T28] audit: type=1326 audit(1759295913.434:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12714 comm="syz.2.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 962.409202][ T28] audit: type=1326 audit(1759295913.434:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12714 comm="syz.2.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 962.434094][ T28] audit: type=1326 audit(1759295913.434:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12714 comm="syz.2.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 962.457530][ T28] audit: type=1326 audit(1759295913.434:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12714 comm="syz.2.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 963.315434][T12725] netlink: 'syz.0.1902': attribute type 15 has an invalid length. [ 964.617676][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1904'. [ 964.628649][T12733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1904'. [ 967.301680][T12752] netlink: 316 bytes leftover after parsing attributes in process `syz.3.1909'. [ 968.578086][T12768] netlink: 'syz.4.1913': attribute type 15 has an invalid length. [ 969.639085][T12773] syz.4.1916[12773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 969.639230][T12773] syz.4.1916[12773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 974.042996][T12787] xt_TPROXY: Can be used only with -p tcp or -p udp [ 975.152757][T12802] netlink: 'syz.2.1924': attribute type 15 has an invalid length. [ 977.291559][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 977.291585][ T28] audit: type=1326 audit(1759295927.755:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12820 comm="syz.4.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 977.376032][ T28] audit: type=1326 audit(1759295927.755:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12820 comm="syz.4.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 977.433026][ T28] audit: type=1326 audit(1759295927.765:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12820 comm="syz.4.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 977.497194][ T28] audit: type=1326 audit(1759295927.765:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12820 comm="syz.4.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 977.585828][ T28] audit: type=1326 audit(1759295927.765:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12820 comm="syz.4.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 977.649257][ T28] audit: type=1326 audit(1759295927.774:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12820 comm="syz.4.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 977.674799][ T28] audit: type=1326 audit(1759295927.774:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12820 comm="syz.4.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 978.434294][T12832] xt_TPROXY: Can be used only with -p tcp or -p udp [ 979.246047][T12836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1933'. [ 979.257518][T12836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1933'. [ 986.925949][T12907] xt_TPROXY: Can be used only with -p tcp or -p udp [ 987.800464][T12911] fuse: Bad value for 'fd' [ 988.395682][ T28] audit: type=1326 audit(1759295938.138:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12915 comm="syz.4.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 988.446972][ T28] audit: type=1326 audit(1759295938.138:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12915 comm="syz.4.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 988.491992][ T28] audit: type=1326 audit(1759295938.166:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12915 comm="syz.4.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 988.564511][ T28] audit: type=1326 audit(1759295938.166:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12915 comm="syz.4.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 988.647972][ T28] audit: type=1326 audit(1759295938.166:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12915 comm="syz.4.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 988.716834][ T28] audit: type=1326 audit(1759295938.176:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12915 comm="syz.4.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 988.778375][ T28] audit: type=1326 audit(1759295938.176:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12915 comm="syz.4.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 988.836050][ T28] audit: type=1326 audit(1759295938.176:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12915 comm="syz.4.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 988.954238][ T28] audit: type=1107 audit(1759295938.662:624): pid=12923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 989.528324][T12929] overlayfs: failed to resolve './file0': -2 [ 990.406689][T12941] fuse: Bad value for 'fd' [ 990.674116][T12946] xt_TPROXY: Can be used only with -p tcp or -p udp [ 991.908135][T12955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1964'. [ 993.897902][T12972] overlayfs: failed to resolve './file0': -2 [ 996.137636][T12990] fuse: Bad value for 'fd' [ 998.519541][T13009] overlayfs: failed to resolve './file0': -2 [ 1002.656197][T13027] fuse: Bad value for 'fd' [ 1006.535023][T13069] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2001'. [ 1007.461575][T13075] fuse: Bad value for 'fd' [ 1010.235191][T13098] syz.2.2009[13098] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1010.235351][T13098] syz.2.2009[13098] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1010.843052][T13106] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1017.463728][T13149] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1020.618834][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1020.625335][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1022.314809][ T28] audit: type=1326 audit(1759295969.792:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 1022.367772][ T28] audit: type=1326 audit(1759295969.792:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 1022.390713][ T28] audit: type=1326 audit(1759295969.792:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 1022.417004][ T28] audit: type=1326 audit(1759295969.792:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 1022.440192][ T28] audit: type=1326 audit(1759295969.792:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 1022.468876][ T28] audit: type=1326 audit(1759295969.792:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 1023.217712][ T28] audit: type=1326 audit(1759295969.792:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 1023.254696][ T28] audit: type=1326 audit(1759295969.802:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 1023.355116][ T28] audit: type=1326 audit(1759295969.802:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 1023.469281][ T28] audit: type=1326 audit(1759295969.802:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 1023.775425][T13187] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1032.234170][T13235] overlayfs: failed to clone upperpath [ 1050.637836][T13358] overlayfs: failed to resolve './file0': -2 [ 1056.218548][T13397] overlayfs: failed to resolve './file0': -2 [ 1062.856730][T13446] overlayfs: failed to resolve './file0': -2 [ 1069.068251][T13500] overlayfs: failed to resolve './file0': -2 [ 1075.695188][T13550] overlayfs: failed to resolve './file0': -2 [ 1080.168767][T13591] overlayfs: failed to resolve './file0': -2 [ 1083.238965][T13616] overlayfs: failed to clone upperpath [ 1083.305112][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2153'. [ 1083.319477][T13614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2153'. [ 1085.892476][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1085.899341][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1086.431834][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 1086.431851][ T28] audit: type=1326 audit(2000000015.658:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13639 comm="syz.2.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 1087.164005][ T28] audit: type=1326 audit(2000000015.667:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13639 comm="syz.2.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 1087.210505][T13644] overlayfs: failed to resolve './file0': -2 [ 1087.324818][ T28] audit: type=1326 audit(2000000015.667:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13639 comm="syz.2.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06abd8d710 code=0x7ffc0000 [ 1087.399645][ T28] audit: type=1326 audit(2000000015.667:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13639 comm="syz.2.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 1087.428661][ T28] audit: type=1326 audit(2000000015.667:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13639 comm="syz.2.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 1087.454019][ T28] audit: type=1326 audit(2000000015.667:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13639 comm="syz.2.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 1087.482211][ T28] audit: type=1326 audit(2000000015.667:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13639 comm="syz.2.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06abd8eec9 code=0x7ffc0000 [ 1090.150498][T13663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2164'. [ 1090.277108][T13665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2164'. [ 1090.695211][T13667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2165'. [ 1091.594959][T13676] fuse: Bad value for 'fd' [ 1091.952149][T13679] overlayfs: failed to clone upperpath [ 1093.611847][T13701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2175'. [ 1093.624739][T13701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2175'. [ 1096.200272][T13721] overlayfs: failed to clone upperpath [ 1097.292900][T13728] fuse: Bad value for 'fd' [ 1099.334630][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2179'. [ 1099.345858][T13730] bridge: RTM_NEWNEIGH with invalid ether address [ 1100.848340][T13750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2187'. [ 1100.858962][T13750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2187'. [ 1102.313615][T13761] fuse: Bad value for 'fd' [ 1104.719091][T13756] overlayfs: failed to clone upperpath [ 1107.517202][T13794] fuse: Bad value for 'fd' [ 1110.433496][T13811] overlayfs: failed to clone upperpath [ 1113.539284][T13840] fuse: Bad value for 'fd' [ 1116.832948][T13858] overlayfs: failed to clone upperpath [ 1119.450096][T13881] fuse: Bad value for 'fd' [ 1122.634531][T13900] overlayfs: failed to clone upperpath [ 1128.063852][T13942] overlayfs: failed to clone upperpath [ 1129.772283][T13955] fuse: Bad value for 'fd' [ 1134.516792][T13984] fuse: Bad value for 'fd' [ 1136.089840][T13974] overlayfs: failed to clone upperpath [ 1136.735680][T13997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2254'. [ 1136.840035][T14000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2254'. [ 1141.003370][T14028] fuse: Bad value for 'fd' [ 1143.069074][T14033] overlayfs: failed to clone upperpath [ 1147.612894][T14068] overlayfs: failed to resolve './file0': -2 [ 1149.061603][T14074] fuse: Bad value for 'fd' [ 1151.548844][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1151.555462][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1156.843607][T14114] fuse: Bad value for 'fd' [ 1158.002220][ T2949] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.266565][T14124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1158.279656][T14124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1158.289955][T14124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1158.298439][T14124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1158.307059][T14124] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1158.316938][T14124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1158.540128][ T2949] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.214039][ T2949] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.246971][T14115] overlayfs: failed to resolve './file0': -2 [ 1159.361863][ T2949] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.533025][ T50] Bluetooth: hci0: command tx timeout [ 1161.871489][T14122] chnl_net:caif_netlink_parms(): no params data found [ 1162.630555][T14122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.676075][T14122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.713630][T14122] bridge_slave_0: entered allmulticast mode [ 1162.727030][T14122] bridge_slave_0: entered promiscuous mode [ 1162.746817][ T50] Bluetooth: hci0: command tx timeout [ 1162.758493][T14122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.770503][T14122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.778001][T14122] bridge_slave_1: entered allmulticast mode [ 1162.786078][T14122] bridge_slave_1: entered promiscuous mode [ 1163.017972][T14170] fuse: Bad value for 'fd' [ 1163.287539][T14122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1164.113816][T14122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.415983][T14122] team0: Port device team_slave_0 added [ 1164.451066][T14122] team0: Port device team_slave_1 added [ 1164.981072][ T50] Bluetooth: hci0: command tx timeout [ 1165.536042][T14122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1165.562239][T14122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1165.621403][T14184] overlayfs: missing 'lowerdir' [ 1165.633017][T14122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1167.285869][ T50] Bluetooth: hci0: command tx timeout [ 1168.923804][T14122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1169.287773][T14122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1169.349175][T14122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1170.746104][T14122] hsr_slave_0: entered promiscuous mode [ 1170.814692][T14122] hsr_slave_1: entered promiscuous mode [ 1170.861372][T14122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1170.869201][T14122] Cannot create hsr debugfs directory [ 1172.140937][ T2949] hsr_slave_0: left promiscuous mode [ 1172.160229][ T2949] hsr_slave_1: left promiscuous mode [ 1172.184676][T14222] fuse: Bad value for 'fd' [ 1172.189910][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1172.213923][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1172.237475][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1172.249402][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.260895][ T2949] bridge_slave_1: left allmulticast mode [ 1172.271264][ T2949] bridge_slave_1: left promiscuous mode [ 1172.372275][ T2949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.385091][ T2949] bridge_slave_0: left allmulticast mode [ 1172.393219][ T2949] bridge_slave_0: left promiscuous mode [ 1172.399097][ T2949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.439106][ T2949] veth1_macvtap: left promiscuous mode [ 1172.445283][ T2949] veth0_macvtap: left promiscuous mode [ 1172.451444][ T2949] veth1_vlan: left promiscuous mode [ 1172.456985][ T2949] veth0_vlan: left promiscuous mode [ 1179.184940][ T2949] team0 (unregistering): Port device team_slave_1 removed [ 1179.247846][ T2949] team0 (unregistering): Port device team_slave_0 removed [ 1179.304155][ T2949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1179.364721][ T2949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1180.138415][ T2949] bond0 (unregistering): Released all slaves [ 1180.490606][T14232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2302'. [ 1180.499900][T14232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2302'. [ 1180.515876][T14232] gretap0: entered promiscuous mode [ 1180.521699][T14232] macsec1: entered promiscuous mode [ 1180.528711][T14232] macsec1: entered allmulticast mode [ 1180.534106][T14232] gretap0: entered allmulticast mode [ 1181.588767][T14258] fuse: Bad value for 'fd' [ 1183.511869][T14262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2310'. [ 1183.521877][T14270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2310'. [ 1186.215783][T14293] netlink: 'syz.4.2314': attribute type 4 has an invalid length. [ 1188.915863][T14122] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1188.970087][T14122] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1189.005696][T14122] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1189.043915][T14122] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1191.433620][T14122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1191.512527][T14122] 8021q: adding VLAN 0 to HW filter on device team0 [ 1191.602976][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.610560][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1191.620373][T14324] fuse: Bad value for 'fd' [ 1191.747518][ T7597] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.754881][ T7597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1194.515691][T14358] overlayfs: failed to clone upperpath [ 1195.111357][T14122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1195.561909][T14122] veth0_vlan: entered promiscuous mode [ 1196.093618][T14122] veth1_vlan: entered promiscuous mode [ 1196.617827][T14122] veth0_macvtap: entered promiscuous mode [ 1196.634802][T14122] veth1_macvtap: entered promiscuous mode [ 1196.696415][T14375] fuse: Bad value for 'fd' [ 1196.708311][T14122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1196.892600][T14122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1196.939271][T14122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1196.950625][T14122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1196.960827][T14122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1196.972642][T14122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1196.984641][T14122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1196.996271][T14122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1197.007448][T14122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.157639][T14122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1197.713486][T14122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.750165][T14122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1197.805993][T14122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.848561][T14122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1197.895423][T14122] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.968830][T14122] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.997742][T14122] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.067909][T14122] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.479067][T14193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1199.514293][T14193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1200.001660][T14404] overlayfs: failed to clone upperpath [ 1200.700211][ T6338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1200.708180][ T6338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.388344][T14418] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1202.274081][T14425] fuse: Bad value for 'fd' [ 1203.604636][T14443] loop0: detected capacity change from 0 to 512 [ 1203.724848][T14443] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1203.773483][T14443] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1203.822171][T14443] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1203.977883][T14443] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1204.033086][T14443] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 1204.070136][T14443] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1204.204820][T14461] overlayfs: failed to clone upperpath [ 1204.783125][T14443] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2339: bg 0: block 34: padding at end of block bitmap is not set [ 1204.993855][T14443] Quota error (device loop0): write_blk: dquota write failed [ 1205.026760][T14443] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1205.069875][T14443] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.2339: Failed to acquire dquot type 1 [ 1205.108151][T14443] EXT4-fs (loop0): 1 truncate cleaned up [ 1205.272327][T14443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1206.049478][T14475] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1207.576258][T14122] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1208.825505][T14514] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2348'. [ 1210.261749][T14522] overlayfs: failed to clone upperpath [ 1211.613789][T14532] fuse: Bad value for 'fd' [ 1213.347566][T14538] syz.3.2357[14538] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1213.347735][T14538] syz.3.2357[14538] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1213.507439][T14538] syz.3.2357[14538] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1213.551803][T14538] syz.3.2357[14538] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1213.911785][T14544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2359'. [ 1213.934439][T14544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2359'. [ 1215.147244][T14556] loop0: detected capacity change from 0 to 512 [ 1215.175371][T14556] EXT4-fs: Ignoring removed oldalloc option [ 1215.343178][T14556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1216.077431][T14568] overlayfs: failed to clone upperpath [ 1217.514941][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1217.521520][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1218.559213][T14122] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1218.606674][T14584] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1219.585577][T14590] loop0: detected capacity change from 0 to 512 [ 1219.633395][T14590] EXT4-fs: Ignoring removed mblk_io_submit option [ 1219.640101][T14590] EXT4-fs: Ignoring removed mblk_io_submit option [ 1219.694713][T14590] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1219.748738][T14590] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1219.854960][T14590] EXT4-fs (loop0): 1 truncate cleaned up [ 1219.879489][T14590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1220.958394][T14122] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1224.338993][T14630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2380'. [ 1224.349940][T14630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2380'. [ 1225.672088][T14637] overlayfs: failed to resolve './bus': -2 [ 1225.696535][T14637] overlayfs: failed to resolve './bus': -2 [ 1227.135702][T14653] netlink: 'syz.3.2387': attribute type 15 has an invalid length. [ 1227.465220][T14658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2390'. [ 1227.489476][T14658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2390'. [ 1229.151526][T14672] fuse: Bad value for 'fd' [ 1230.438872][T14679] overlayfs: failed to resolve './file0': -2 [ 1230.791522][T14683] overlayfs: failed to clone upperpath [ 1232.085303][T14691] netlink: 'syz.0.2399': attribute type 15 has an invalid length. [ 1233.351142][T14702] fuse: Bad value for 'fd' [ 1235.714734][T14709] overlayfs: failed to clone upperpath [ 1236.029765][T14124] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1236.069663][T14124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1236.079825][T14124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1236.089082][T14124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1236.097284][T14124] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1236.234751][T14124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1237.379352][ T6338] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.333313][ T6338] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.437005][T14124] Bluetooth: hci1: command tx timeout [ 1238.547405][ T6338] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.881237][ T6338] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.923042][T14740] netlink: 'syz.4.2414': attribute type 15 has an invalid length. [ 1239.407453][T14725] chnl_net:caif_netlink_parms(): no params data found [ 1240.290915][T14725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.307261][T14725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.336870][T14725] bridge_slave_0: entered allmulticast mode [ 1240.371448][T14725] bridge_slave_0: entered promiscuous mode [ 1240.490469][T14725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.497954][T14725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.546646][T14725] bridge_slave_1: entered allmulticast mode [ 1240.569659][T14725] bridge_slave_1: entered promiscuous mode [ 1240.660486][T14124] Bluetooth: hci1: command tx timeout [ 1240.953127][T14725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1241.849049][T14725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1241.878713][T14770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2418'. [ 1241.887731][T14770] bridge: RTM_NEWNEIGH with invalid ether address [ 1242.947574][T14124] Bluetooth: hci1: command tx timeout [ 1243.366719][T14725] team0: Port device team_slave_0 added [ 1243.501740][T14725] team0: Port device team_slave_1 added [ 1243.546980][T14725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1243.554015][T14725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1243.602118][T14725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1243.885452][T14794] overlayfs: failed to clone upperpath [ 1244.039619][ T6338] gretap0 (unregistering): left allmulticast mode [ 1245.034824][T14725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1245.042135][T14725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1245.104313][T14725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1245.107606][T14124] Bluetooth: hci1: command tx timeout [ 1245.409801][T14725] hsr_slave_0: entered promiscuous mode [ 1245.434195][T14725] hsr_slave_1: entered promiscuous mode [ 1246.430516][T14814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2427'. [ 1246.443202][T14817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2427'. [ 1249.018527][ T6338] hsr_slave_0: left promiscuous mode [ 1249.040719][ T6338] hsr_slave_1: left promiscuous mode [ 1249.047691][ T6338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1249.057011][ T6338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1249.073710][ T6338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1249.082163][ T6338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1249.169663][ T6338] bridge_slave_1: left allmulticast mode [ 1249.179528][ T6338] bridge_slave_1: left promiscuous mode [ 1249.204517][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.262488][ T6338] bridge_slave_0: left allmulticast mode [ 1249.280572][ T6338] bridge_slave_0: left promiscuous mode [ 1249.540717][ T6338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.138239][T14846] overlayfs: failed to clone upperpath [ 1251.261559][ T6338] veth1_macvtap: left promiscuous mode [ 1251.572604][ T6338] veth0_macvtap: left promiscuous mode [ 1251.702459][ T6338] veth1_vlan: left promiscuous mode [ 1251.712862][ T6338] veth0_vlan: left promiscuous mode [ 1253.372976][ T6338] team0 (unregistering): Port device team_slave_1 removed [ 1253.449042][ T6338] team0 (unregistering): Port device team_slave_0 removed [ 1253.528141][ T6338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1253.608285][ T6338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1254.436990][ T6338] bond0 (unregistering): Released all slaves [ 1254.669549][T14857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2437'. [ 1254.679509][T14858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2437'. [ 1257.626414][T14725] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1257.654775][T14725] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1257.671506][T14725] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1258.630750][T14725] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1260.661867][T14921] overlayfs: failed to clone upperpath [ 1261.007691][T14725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1261.056730][T14725] 8021q: adding VLAN 0 to HW filter on device team0 [ 1261.377853][ T6338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.385319][ T6338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.238067][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.245641][ T6338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1266.978343][T14725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1267.280553][T14725] veth0_vlan: entered promiscuous mode [ 1267.343098][T14725] veth1_vlan: entered promiscuous mode [ 1267.884787][T14725] veth0_macvtap: entered promiscuous mode [ 1267.905386][T14725] veth1_macvtap: entered promiscuous mode [ 1268.167715][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1268.179034][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1268.189915][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1268.201857][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1268.212393][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1268.235399][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1268.703792][T14725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1269.033858][T14992] netlink: 'syz.3.2456': attribute type 4 has an invalid length. [ 1269.187710][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.250986][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.294328][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.325868][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.363705][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.410579][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.438513][T14725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1269.575584][T14725] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.624012][T14725] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.677094][T14725] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.712634][T14725] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.791742][T15002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2458'. [ 1269.802778][T15002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2458'. [ 1270.193408][T10592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.257557][T10592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.422544][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.437432][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.822450][ T28] audit: type=1326 audit(2000000190.017:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.3.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 1272.957161][ T28] audit: type=1326 audit(2000000190.045:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.3.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 1273.068649][ T28] audit: type=1326 audit(2000000190.045:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.3.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 1273.609504][ T28] audit: type=1326 audit(2000000190.054:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.3.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d118eec9 code=0x7ffc0000 [ 1274.045687][T15039] loop2: detected capacity change from 0 to 512 [ 1274.231012][T15039] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2465: casefold flag without casefold feature [ 1274.329888][T15039] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2465: couldn't read orphan inode 15 (err -117) [ 1274.422872][T15039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1275.486673][T15060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2467'. [ 1275.497656][T15060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2467'. [ 1275.929355][T15065] netlink: 'syz.3.2468': attribute type 4 has an invalid length. [ 1277.325467][T14725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1278.501378][T15091] loop2: detected capacity change from 0 to 128 [ 1278.593396][ T28] audit: type=1800 audit(2000000195.414:672): pid=15091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2472" name="bus" dev="loop2" ino=1048612 res=0 errno=0 [ 1278.753179][T15091] syz.2.2472: attempt to access beyond end of device [ 1278.753179][T15091] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 1279.249223][T15107] loop2: detected capacity change from 0 to 1024 [ 1280.045515][T15107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1280.211658][T15116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2478'. [ 1280.222480][T15116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2478'. [ 1280.998362][T14725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1281.790212][T15133] netlink: 'syz.3.2482': attribute type 4 has an invalid length. [ 1282.941674][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1282.948380][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1283.904486][T14238] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1285.229238][T15173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2492'. [ 1285.240020][T15173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2492'. [ 1285.242558][T14238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1285.291134][T14238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1286.293489][T14238] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1286.360302][T14238] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1286.378229][T14238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.396772][T14238] usb 3-1: config 0 descriptor?? [ 1286.748395][ T6338] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.266686][ T6338] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.641536][T14238] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 1287.821050][T14238] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1287.967304][ T6338] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.915547][T15198] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1288.927220][T15198] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1288.936651][T15198] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1288.952298][T15198] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1288.963340][T15198] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1288.974601][T15198] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1289.026821][ T6338] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.101516][T14119] usb 3-1: USB disconnect, device number 2 [ 1289.142491][T15194] netlink: 'syz.0.2496': attribute type 4 has an invalid length. [ 1290.514778][T15209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2500'. [ 1290.526961][T15210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2500'. [ 1290.617611][T14124] Bluetooth: hci0: command 0x0406 tx timeout [ 1291.228327][T14124] Bluetooth: hci2: command tx timeout [ 1292.143796][T15196] chnl_net:caif_netlink_parms(): no params data found [ 1292.931962][T15240] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1293.523204][T14124] Bluetooth: hci2: command tx timeout [ 1293.585149][T15196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.594006][T15196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.601824][T15196] bridge_slave_0: entered allmulticast mode [ 1293.609402][T15196] bridge_slave_0: entered promiscuous mode [ 1293.619771][T15196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.627468][T15196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.634974][T15196] bridge_slave_1: entered allmulticast mode [ 1293.644841][T15196] bridge_slave_1: entered promiscuous mode [ 1294.708313][T15252] netlink: 'syz.0.2507': attribute type 4 has an invalid length. [ 1295.073475][T15196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1295.158399][T15196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.751612][T14124] Bluetooth: hci2: command tx timeout [ 1296.108844][T15196] team0: Port device team_slave_0 added [ 1296.129349][T15263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2511'. [ 1296.139042][T15264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2511'. [ 1296.182443][T15196] team0: Port device team_slave_1 added [ 1296.337573][T15196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1296.354608][T15196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1296.392521][T15196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1296.571671][ T6338] hsr_slave_0: left promiscuous mode [ 1296.599230][ T6338] hsr_slave_1: left promiscuous mode [ 1296.620459][ T6338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1296.639257][ T6338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1296.660904][ T6338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1296.683957][ T6338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1296.735063][ T6338] bridge_slave_1: left allmulticast mode [ 1296.753078][ T6338] bridge_slave_1: left promiscuous mode [ 1296.762054][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.836107][ T6338] bridge_slave_0: left allmulticast mode [ 1296.870178][ T6338] bridge_slave_0: left promiscuous mode [ 1296.885970][ T6338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.043035][ T6338] veth1_macvtap: left promiscuous mode [ 1297.059595][ T6338] veth0_macvtap: left promiscuous mode [ 1297.079456][ T6338] veth1_vlan: left promiscuous mode [ 1297.097473][ T6338] veth0_vlan: left promiscuous mode [ 1297.982679][T14124] Bluetooth: hci2: command tx timeout [ 1302.666005][ T6338] team0 (unregistering): Port device team_slave_1 removed [ 1302.723159][ T6338] team0 (unregistering): Port device team_slave_0 removed [ 1302.780864][ T6338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1302.844255][ T6338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1303.505249][ T6338] bond0 (unregistering): Released all slaves [ 1303.599509][T15196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1303.606889][T15196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1303.634607][T15196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1303.672906][T15306] netlink: 'syz.0.2519': attribute type 4 has an invalid length. [ 1303.681375][T15311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2521'. [ 1303.691218][T15312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2521'. [ 1303.851200][T15320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2524'. [ 1303.865989][T15321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2524'. [ 1304.053583][T15328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2525'. [ 1305.184647][T15196] hsr_slave_0: entered promiscuous mode [ 1305.604296][T15196] hsr_slave_1: entered promiscuous mode [ 1305.674842][T15196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1305.696193][T15196] Cannot create hsr debugfs directory [ 1305.839950][T15340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2526'. [ 1309.532642][T15372] netlink: 'syz.4.2532': attribute type 4 has an invalid length. [ 1310.140278][T15196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1310.196166][T15196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1310.278645][T15196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1310.364331][T15196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1310.931508][T15196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1311.020618][T15196] 8021q: adding VLAN 0 to HW filter on device team0 [ 1311.034876][T14193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.042368][T14193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1311.066680][T15390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2534'. [ 1311.094566][T14193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.102276][T14193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1311.144081][T15390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2534'. [ 1311.312900][T15196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1312.954589][T15196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1313.078093][T15196] veth0_vlan: entered promiscuous mode [ 1313.101107][T15196] veth1_vlan: entered promiscuous mode [ 1313.265230][T15196] veth0_macvtap: entered promiscuous mode [ 1313.294118][T15196] veth1_macvtap: entered promiscuous mode [ 1313.316125][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1313.327682][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.050319][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1314.092056][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.113210][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1314.149912][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.191781][T15196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1314.227075][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1314.271562][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.307223][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1314.339337][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.371351][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1314.397880][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.426704][T15196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1314.722234][T15196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.946642][T15196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.956782][T15196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.965682][T15196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.048295][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.073598][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.225173][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.251798][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.888545][T15459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2490'. [ 1316.900312][T15459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2490'. [ 1318.226620][T15475] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2546'. [ 1319.950749][T15490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2550'. [ 1321.442453][T15505] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1325.436194][T14167] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1325.541087][T15549] loop2: detected capacity change from 0 to 1024 [ 1325.549161][T15549] EXT4-fs: Ignoring removed orlov option [ 1325.555126][T15549] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1325.611485][T15549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1325.639447][T14167] usb 4-1: Using ep0 maxpacket: 8 [ 1325.679777][T14167] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1325.749706][T14167] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.828815][T14167] usb 4-1: config 0 descriptor?? [ 1329.456962][T15577] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2563'. [ 1329.715119][T14725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1329.727207][T15580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2565'. [ 1329.737930][T15580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2565'. [ 1329.899747][T14167] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1329.926745][T14167] asix: probe of 4-1:0.0 failed with error -71 [ 1329.950985][T14167] usb 4-1: USB disconnect, device number 2 [ 1330.038776][T15585] loop2: detected capacity change from 0 to 1024 [ 1330.068050][T15585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1331.782623][T14725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1334.105800][T15628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2576'. [ 1334.117157][T15628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2576'. [ 1335.993894][ T28] audit: type=1326 audit(2000000249.097:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15639 comm="syz.4.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 1337.903712][T15648] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2579'. [ 1338.951376][ T28] audit: type=1326 audit(2000000249.097:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15639 comm="syz.4.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 1339.115672][ T28] audit: type=1326 audit(2000000249.330:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15639 comm="syz.4.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 1339.324863][ T28] audit: type=1326 audit(2000000249.330:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15639 comm="syz.4.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 1339.348189][ T28] audit: type=1326 audit(2000000249.330:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15639 comm="syz.4.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 1339.415389][ T28] audit: type=1326 audit(2000000249.340:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15639 comm="syz.4.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 1339.453085][ T28] audit: type=1326 audit(2000000249.340:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15639 comm="syz.4.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 1339.476501][ T28] audit: type=1326 audit(2000000249.340:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15639 comm="syz.4.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6e78eec9 code=0x7ffc0000 [ 1341.907446][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2592'. [ 1341.916707][T15681] tipc: Started in network mode [ 1341.922711][T15681] tipc: Node identity ac14141b, cluster identity 4711 [ 1341.934409][T15681] tipc: New replicast peer: 255.255.0.0 [ 1341.940486][T15681] tipc: Enabled bearer , priority 10 [ 1343.238712][ T788] tipc: Node number set to 2886997019 [ 1345.873525][T15717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2601'. [ 1345.885828][T15717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2601'. [ 1348.624961][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1348.631471][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1352.781683][T15763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2613'. [ 1352.793955][T15763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2613'. [ 1353.599943][T15765] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2615'. [ 1361.107961][T15810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2629'. [ 1361.557481][T15813] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1363.444872][T15832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2635'. [ 1365.586540][T15840] overlayfs: failed to clone upperpath [ 1367.242338][T15198] Bluetooth: hci1: command 0x0406 tx timeout [ 1368.025446][T15864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2644'. [ 1378.217467][T15911] netlink: 'syz.0.2656': attribute type 4 has an invalid length. [ 1378.578911][T15925] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1381.956236][T15952] ================================================================== [ 1381.964405][T15952] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x598/0x11f0 [ 1381.972217][T15952] Read of size 4 at addr ffff88805e61a0a0 by task syz.2.2665/15952 [ 1381.980230][T15952] [ 1381.982684][T15952] CPU: 0 PID: 15952 Comm: syz.2.2665 Not tainted syzkaller #0 [ 1381.990600][T15952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1382.000843][T15952] Call Trace: [ 1382.004145][T15952] [ 1382.007116][T15952] dump_stack_lvl+0x16c/0x230 [ 1382.011872][T15952] ? __lock_acquire+0x7c80/0x7c80 [ 1382.016976][T15952] ? show_regs_print_info+0x20/0x20 [ 1382.022377][T15952] ? load_image+0x3b0/0x3b0 [ 1382.026915][T15952] ? __virt_addr_valid+0x469/0x540 [ 1382.032064][T15952] print_report+0xac/0x220 [ 1382.036525][T15952] ? xfrm_alloc_spi+0x598/0x11f0 [ 1382.041495][T15952] kasan_report+0x117/0x150 [ 1382.046045][T15952] ? xfrm_alloc_spi+0x598/0x11f0 [ 1382.051023][T15952] xfrm_alloc_spi+0x598/0x11f0 [ 1382.055867][T15952] ? xfrm_alloc_spi+0x2a1/0x11f0 [ 1382.060923][T15952] ? verify_spi_info+0x120/0x120 [ 1382.065893][T15952] ? xfrm_find_acq+0x79/0x90 [ 1382.070720][T15952] xfrm_alloc_userspi+0x5d1/0xa90 [ 1382.075969][T15952] ? end_current_label_crit_section+0x170/0x170 [ 1382.082361][T15952] ? apparmor_capable+0x137/0x1a0 [ 1382.087418][T15952] ? xfrm_dump_policy_done+0x90/0x90 [ 1382.093002][T15952] ? __nla_parse+0x40/0x50 [ 1382.097564][T15952] xfrm_user_rcv_msg+0x596/0x870 [ 1382.102646][T15952] ? lockdep_hardirqs_on+0x98/0x150 [ 1382.107980][T15952] ? xfrm_netlink_rcv+0x90/0x90 [ 1382.112891][T15952] ? __local_bh_enable_ip+0x12e/0x1c0 [ 1382.118403][T15952] ? __dev_queue_xmit+0x245/0x35a0 [ 1382.123759][T15952] ? __mutex_trylock_common+0x153/0x250 [ 1382.129395][T15952] netlink_rcv_skb+0x216/0x480 [ 1382.134294][T15952] ? xfrm_netlink_rcv+0x90/0x90 [ 1382.139185][T15952] ? netlink_ack+0x1110/0x1110 [ 1382.143996][T15952] ? netlink_deliver_tap+0x2e/0x1b0 [ 1382.149250][T15952] ? __lock_acquire+0x7c80/0x7c80 [ 1382.154317][T15952] xfrm_netlink_rcv+0x79/0x90 [ 1382.160353][T15952] netlink_unicast+0x751/0x8d0 [ 1382.165178][T15952] netlink_sendmsg+0x8c1/0xbe0 [ 1382.170072][T15952] ? netlink_getsockopt+0x580/0x580 [ 1382.175804][T15952] ? aa_sock_msg_perm+0x94/0x150 [ 1382.180938][T15952] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1382.186739][T15952] ? security_socket_sendmsg+0x80/0xa0 [ 1382.192636][T15952] ? netlink_getsockopt+0x580/0x580 [ 1382.198007][T15952] ____sys_sendmsg+0x5bf/0x950 [ 1382.203029][T15952] ? __asan_memset+0x22/0x40 [ 1382.207805][T15952] ? __sys_sendmsg_sock+0x30/0x30 [ 1382.212966][T15952] ? __import_iovec+0x5f2/0x860 [ 1382.218076][T15952] ? import_iovec+0x73/0xa0 [ 1382.222827][T15952] ___sys_sendmsg+0x220/0x290 [ 1382.227768][T15952] ? __sys_sendmsg+0x270/0x270 [ 1382.232903][T15952] __se_sys_sendmsg+0x1a5/0x270 [ 1382.237937][T15952] ? __x64_sys_sendmsg+0x80/0x80 [ 1382.242967][T15952] ? lockdep_hardirqs_on+0x98/0x150 [ 1382.248513][T15952] do_syscall_64+0x55/0xb0 [ 1382.253362][T15952] ? clear_bhb_loop+0x40/0x90 [ 1382.258373][T15952] ? clear_bhb_loop+0x40/0x90 [ 1382.263218][T15952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1382.269251][T15952] RIP: 0033:0x7f3b77f8eec9 [ 1382.274021][T15952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1382.294475][T15952] RSP: 002b:00007f3b78e2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1382.303212][T15952] RAX: ffffffffffffffda RBX: 00007f3b781e6180 RCX: 00007f3b77f8eec9 [ 1382.311935][T15952] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000007 [ 1382.320309][T15952] RBP: 00007f3b78011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1382.328728][T15952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1382.336879][T15952] R13: 00007f3b781e6218 R14: 00007f3b781e6180 R15: 00007ffdfdb5f918 [ 1382.345002][T15952] [ 1382.348123][T15952] [ 1382.350743][T15952] Allocated by task 15245: [ 1382.355451][T15952] kasan_set_track+0x4e/0x70 [ 1382.360099][T15952] __kasan_slab_alloc+0x6c/0x80 [ 1382.365009][T15952] slab_post_alloc_hook+0x6e/0x4d0 [ 1382.370172][T15952] kmem_cache_alloc+0x11e/0x2e0 [ 1382.375073][T15952] xfrm_state_alloc+0x22/0x2a0 [ 1382.379886][T15952] __find_acq_core+0x7d8/0x19d0 [ 1382.384882][T15952] xfrm_find_acq+0x6a/0x90 [ 1382.389343][T15952] xfrm_alloc_userspi+0x57a/0xa90 [ 1382.394492][T15952] xfrm_user_rcv_msg+0x596/0x870 [ 1382.399468][T15952] netlink_rcv_skb+0x216/0x480 [ 1382.404277][T15952] xfrm_netlink_rcv+0x79/0x90 [ 1382.409186][T15952] netlink_unicast+0x751/0x8d0 [ 1382.414032][T15952] netlink_sendmsg+0x8c1/0xbe0 [ 1382.419032][T15952] ____sys_sendmsg+0x5bf/0x950 [ 1382.423986][T15952] ___sys_sendmsg+0x220/0x290 [ 1382.428920][T15952] __se_sys_sendmsg+0x1a5/0x270 [ 1382.433842][T15952] do_syscall_64+0x55/0xb0 [ 1382.438307][T15952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1382.444291][T15952] [ 1382.446661][T15952] The buggy address belongs to the object at ffff88805e61a000 [ 1382.446661][T15952] which belongs to the cache xfrm_state of size 848 [ 1382.460687][T15952] The buggy address is located 160 bytes inside of [ 1382.460687][T15952] freed 848-byte region [ffff88805e61a000, ffff88805e61a350) [ 1382.474594][T15952] [ 1382.476949][T15952] The buggy address belongs to the physical page: [ 1382.483498][T15952] page:ffffea0001798600 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805e61a000 pfn:0x5e618 [ 1382.495019][T15952] head:ffffea0001798600 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1382.504006][T15952] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1382.512135][T15952] page_type: 0xffffffff() [ 1382.516514][T15952] raw: 00fff00000000840 ffff8881412bb140 dead000000000122 0000000000000000 [ 1382.525151][T15952] raw: ffff88805e61a000 000000008010000b 00000001ffffffff 0000000000000000 [ 1382.533773][T15952] page dumped because: kasan: bad access detected [ 1382.540322][T15952] page_owner tracks the page as allocated [ 1382.546158][T15952] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6286, tgid 6275 (syz.1.109), ts 151611802944, free_ts 150854342121 [ 1382.567063][T15952] post_alloc_hook+0x1cd/0x210 [ 1382.571925][T15952] get_page_from_freelist+0x195c/0x19f0 [ 1382.577582][T15952] __alloc_pages+0x1e3/0x460 [ 1382.582225][T15952] alloc_slab_page+0x5d/0x170 [ 1382.586957][T15952] new_slab+0x87/0x2e0 [ 1382.591082][T15952] ___slab_alloc+0xc6d/0x1300 [ 1382.595990][T15952] kmem_cache_alloc+0x1b7/0x2e0 [ 1382.601150][T15952] xfrm_state_alloc+0x22/0x2a0 [ 1382.606121][T15952] pfkey_add+0x6e1/0x2da0 [ 1382.610587][T15952] pfkey_sendmsg+0xbed/0x1050 [ 1382.615427][T15952] ____sys_sendmsg+0x5bf/0x950 [ 1382.620242][T15952] ___sys_sendmsg+0x220/0x290 [ 1382.625065][T15952] __se_sys_sendmsg+0x1a5/0x270 [ 1382.630048][T15952] do_syscall_64+0x55/0xb0 [ 1382.634552][T15952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1382.640504][T15952] page last free stack trace: [ 1382.645295][T15952] free_unref_page_prepare+0x7ce/0x8e0 [ 1382.650881][T15952] free_unref_page+0x32/0x2e0 [ 1382.655605][T15952] free_large_kmalloc+0x101/0x1a0 [ 1382.660856][T15952] bpf_check+0x62c6/0xe970 [ 1382.665499][T15952] bpf_prog_load+0x11cb/0x16d0 [ 1382.670302][T15952] __sys_bpf+0x55a/0x800 [ 1382.674587][T15952] __x64_sys_bpf+0x7c/0x90 [ 1382.679040][T15952] do_syscall_64+0x55/0xb0 [ 1382.683502][T15952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1382.689572][T15952] [ 1382.691959][T15952] Memory state around the buggy address: [ 1382.697716][T15952] ffff88805e619f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1382.706082][T15952] ffff88805e61a000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1382.714279][T15952] >ffff88805e61a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1382.722906][T15952] ^ [ 1382.728487][T15952] ffff88805e61a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1382.736599][T15952] ffff88805e61a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1382.745920][T15952] ================================================================== [ 1382.754601][T15952] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1382.761933][T15952] CPU: 0 PID: 15952 Comm: syz.2.2665 Not tainted syzkaller #0 [ 1382.770235][T15952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1382.780621][T15952] Call Trace: [ 1382.784318][T15952] [ 1382.787476][T15952] dump_stack_lvl+0x16c/0x230 [ 1382.792439][T15952] ? show_regs_print_info+0x20/0x20 [ 1382.797775][T15952] ? load_image+0x3b0/0x3b0 [ 1382.802333][T15952] panic+0x2c0/0x710 [ 1382.806370][T15952] ? bpf_jit_dump+0xd0/0xd0 [ 1382.811369][T15952] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 1382.817502][T15952] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1382.823558][T15952] ? _raw_spin_unlock+0x40/0x40 [ 1382.828922][T15952] ? print_memory_metadata+0x314/0x400 [ 1382.834634][T15952] ? xfrm_alloc_spi+0x598/0x11f0 [ 1382.839864][T15952] check_panic_on_warn+0x84/0xa0 [ 1382.845455][T15952] ? xfrm_alloc_spi+0x598/0x11f0 [ 1382.850844][T15952] end_report+0x6f/0x140 [ 1382.855182][T15952] kasan_report+0x128/0x150 [ 1382.860076][T15952] ? xfrm_alloc_spi+0x598/0x11f0 [ 1382.865362][T15952] xfrm_alloc_spi+0x598/0x11f0 [ 1382.870497][T15952] ? xfrm_alloc_spi+0x2a1/0x11f0 [ 1382.875597][T15952] ? verify_spi_info+0x120/0x120 [ 1382.880596][T15952] ? xfrm_find_acq+0x79/0x90 [ 1382.885267][T15952] xfrm_alloc_userspi+0x5d1/0xa90 [ 1382.890605][T15952] ? end_current_label_crit_section+0x170/0x170 [ 1382.897694][T15952] ? apparmor_capable+0x137/0x1a0 [ 1382.902896][T15952] ? xfrm_dump_policy_done+0x90/0x90 [ 1382.908419][T15952] ? __nla_parse+0x40/0x50 [ 1382.912923][T15952] xfrm_user_rcv_msg+0x596/0x870 [ 1382.918163][T15952] ? lockdep_hardirqs_on+0x98/0x150 [ 1382.923696][T15952] ? xfrm_netlink_rcv+0x90/0x90 [ 1382.928612][T15952] ? __local_bh_enable_ip+0x12e/0x1c0 [ 1382.934261][T15952] ? __dev_queue_xmit+0x245/0x35a0 [ 1382.939599][T15952] ? __mutex_trylock_common+0x153/0x250 [ 1382.945387][T15952] netlink_rcv_skb+0x216/0x480 [ 1382.950232][T15952] ? xfrm_netlink_rcv+0x90/0x90 [ 1382.955218][T15952] ? netlink_ack+0x1110/0x1110 [ 1382.960145][T15952] ? netlink_deliver_tap+0x2e/0x1b0 [ 1382.965841][T15952] ? __lock_acquire+0x7c80/0x7c80 [ 1382.971311][T15952] xfrm_netlink_rcv+0x79/0x90 [ 1382.976452][T15952] netlink_unicast+0x751/0x8d0 [ 1382.981527][T15952] netlink_sendmsg+0x8c1/0xbe0 [ 1382.986538][T15952] ? netlink_getsockopt+0x580/0x580 [ 1382.992086][T15952] ? aa_sock_msg_perm+0x94/0x150 [ 1382.997379][T15952] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1383.002731][T15952] ? security_socket_sendmsg+0x80/0xa0 [ 1383.008263][T15952] ? netlink_getsockopt+0x580/0x580 [ 1383.013529][T15952] ____sys_sendmsg+0x5bf/0x950 [ 1383.018577][T15952] ? __asan_memset+0x22/0x40 [ 1383.023499][T15952] ? __sys_sendmsg_sock+0x30/0x30 [ 1383.028594][T15952] ? __import_iovec+0x5f2/0x860 [ 1383.033802][T15952] ? import_iovec+0x73/0xa0 [ 1383.038389][T15952] ___sys_sendmsg+0x220/0x290 [ 1383.043513][T15952] ? __sys_sendmsg+0x270/0x270 [ 1383.048469][T15952] __se_sys_sendmsg+0x1a5/0x270 [ 1383.053571][T15952] ? __x64_sys_sendmsg+0x80/0x80 [ 1383.058594][T15952] ? lockdep_hardirqs_on+0x98/0x150 [ 1383.063865][T15952] do_syscall_64+0x55/0xb0 [ 1383.068329][T15952] ? clear_bhb_loop+0x40/0x90 [ 1383.073067][T15952] ? clear_bhb_loop+0x40/0x90 [ 1383.077883][T15952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1383.083919][T15952] RIP: 0033:0x7f3b77f8eec9 [ 1383.088376][T15952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1383.108203][T15952] RSP: 002b:00007f3b78e2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1383.116764][T15952] RAX: ffffffffffffffda RBX: 00007f3b781e6180 RCX: 00007f3b77f8eec9 [ 1383.125141][T15952] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000007 [ 1383.133188][T15952] RBP: 00007f3b78011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1383.141210][T15952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1383.149525][T15952] R13: 00007f3b781e6218 R14: 00007f3b781e6180 R15: 00007ffdfdb5f918 [ 1383.157568][T15952] [ 1383.161157][T15952] Kernel Offset: disabled [ 1383.165522][T15952] Rebooting in 86400 seconds..