last executing test programs: 41m19.817765653s ago: executing program 0 (id=2956): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x80}, 0x1, 0x7}, 0x0) 41m19.317668562s ago: executing program 0 (id=2967): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000005340), &(0x7f00000053c0)=0x80) 41m19.171346532s ago: executing program 0 (id=2969): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@private0, 0x0, 0x0, 0x4e22, 0x0, 0x2}, {0x0, 0x9, 0x0, 0x2}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@broadcast, 0x4d3, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x34ff, 0x4, 0x0, 0xb7}}, 0xe8) 41m19.041677155s ago: executing program 0 (id=2972): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x272) 41m18.960413636s ago: executing program 0 (id=2975): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xd4000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44) r2 = syz_open_dev$loop(&(0x7f0000003400), 0x3, 0x8080) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x0) 41m18.570352222s ago: executing program 0 (id=2983): rt_sigaction(0xd, &(0x7f0000000380)={&(0x7f0000000000)="ca00d1dd41ef196ec86686e2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r2) 41m18.162224421s ago: executing program 32 (id=2983): rt_sigaction(0xd, &(0x7f0000000380)={&(0x7f0000000000)="ca00d1dd41ef196ec86686e2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r2) 3.762605922s ago: executing program 5 (id=32772): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x100, 0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x0, 0x3c}, 0xa, @in6=@mcast2, 0x6, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 3.64355338s ago: executing program 5 (id=32773): mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000002380)=ANY=[]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}}) io_uring_enter(r2, 0x351e, 0x483, 0x0, 0x0, 0x0) 3.19959573s ago: executing program 5 (id=32782): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x78, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x34, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR="5bb4"]}]}}]}]}]}}]}, 0x78}}, 0x20040054) 2.729565165s ago: executing program 5 (id=32786): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x2, 0x0, 0x1, 0x1}}, 0x26) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000140)) 2.48246207s ago: executing program 5 (id=32788): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @local, 0x2}, 0x19) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000140)={0x0, [{0x1, 0x8, 0x3, &(0x7f0000000300)="d4"}, {0x1, 0x0, 0x7, 0x0}, {0x3, 0x8, 0x401, &(0x7f0000000440)="92"}, {0x2, 0x0, 0xfffffff1, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x3, 0x0, 0x428, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x2, 0x0, 0xa, 0x0}, {0x1, 0x0, 0xd9d, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x4, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x8, 0x0}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.177696617s ago: executing program 3 (id=32791): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffc1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) 1.994473507s ago: executing program 3 (id=32794): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000ac0), &(0x7f00000001c0)=0x8) 1.949699691s ago: executing program 5 (id=32795): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 1.807141794s ago: executing program 4 (id=32797): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 1.663911769s ago: executing program 1 (id=32798): r0 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) 1.521610747s ago: executing program 4 (id=32799): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r0, 0x0) pipe2$9p(&(0x7f0000002480), 0x80000) 1.484911137s ago: executing program 2 (id=32800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', 0x0, r1, 0x3, 0x2, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0xd, 0x4}, 0x50) 1.481295937s ago: executing program 1 (id=32801): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.385655327s ago: executing program 4 (id=32802): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000000ba, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd71}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.133382423s ago: executing program 1 (id=32803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 935.814469ms ago: executing program 3 (id=32804): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0, 0xeeef0000}) 743.478763ms ago: executing program 3 (id=32805): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa312, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000027c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0x1}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) 692.210349ms ago: executing program 2 (id=32806): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x8004745a, &(0x7f0000005280)) 549.688681ms ago: executing program 1 (id=32807): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x11c) fadvise64(r0, 0x4, 0xfc, 0x4) 484.575473ms ago: executing program 2 (id=32808): timer_create(0x7, 0x0, &(0x7f0000000000)=0x0) clock_gettime(0x5, &(0x7f0000000800)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000840)={{r1, r2+10000000}, {0x0, 0x989680}}, 0x0) timer_create(0x7, 0x0, &(0x7f0000000000)=0x0) clock_gettime(0x5, &(0x7f0000000800)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000840)={{r4, r5+10000000}, {0x0, 0x989680}}, 0x0) rt_sigaction(0x2e, &(0x7f0000000940)={0x0, 0x40000001, 0x0, {[0x41]}}, 0x0, 0x8, &(0x7f0000000a80)) 435.8258ms ago: executing program 4 (id=32809): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) listen(0xffffffffffffffff, 0x3) getegid() 346.782341ms ago: executing program 1 (id=32810): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000001040)=[{&(0x7f00000001c0)=""/200, 0xd4e5}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/25, 0x19}, {&(0x7f0000000440)=""/123, 0x4ab51092}, {&(0x7f0000000dc0)=""/203, 0xcb}, {&(0x7f0000001a00)=""/4096}, {&(0x7f0000000f80)=""/145}], 0x6, &(0x7f0000000ec0)=""/137, 0x89, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 338.666407ms ago: executing program 2 (id=32811): sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}], 0x30}, 0x80) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 243.347713ms ago: executing program 3 (id=32812): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000140)=[@in={0x2, 0x4e23, @private=0xa010102}, @in6={0xa, 0x4e23, 0x400, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}]}, &(0x7f0000000100)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000540)={r1, 0x8, 0xe, 0x2, 0x3, 0x100, 0x6, 0xe5, {r3, @in6={{0xa, 0x4e22, 0x8001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, 0x9, 0x1, 0xffff, 0xb95, 0x3}}, &(0x7f00000003c0)=0xb0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000400)={r4, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x6}, 0x90) 229.245154ms ago: executing program 4 (id=32813): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000780)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffc, @local, 0x4}, 0x1c) r1 = socket(0x2, 0x2, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x114a, 0x0) 218.839113ms ago: executing program 1 (id=32814): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 148.018477ms ago: executing program 2 (id=32815): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup2(r0, r0) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1261, 0x0) 65.335243ms ago: executing program 2 (id=32816): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x23, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) 726.358µs ago: executing program 3 (id=32817): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x100004) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) mkdir(0x0, 0x5) 0s ago: executing program 4 (id=32818): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004f00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) kernel console output (not intermixed with test programs): 2134.793954][T30701] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 2134.793974][T30701] overlayfs: missing 'lowerdir' [ 2135.642937][T30744] sit0: left allmulticast mode [ 2135.996134][T30744] netlink: 'syz.4.25838': attribute type 1 has an invalid length. [ 2135.996160][T30744] netlink: 1 bytes leftover after parsing attributes in process `syz.4.25838'. [ 2137.126845][T30766] kAFS: No cell specified [ 2137.673459][T30780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.25850'. [ 2138.773372][T30785] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2139.128382][T30803] overlayfs: failed to clone upperpath [ 2139.498468][T30815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.25867'. [ 2139.991782][T30833] netlink: 4 bytes leftover after parsing attributes in process `syz.5.25874'. [ 2140.203333][T30841] netlink: 156 bytes leftover after parsing attributes in process `syz.5.25876'. [ 2140.203362][T30841] netlink: 12 bytes leftover after parsing attributes in process `syz.5.25876'. [ 2140.203379][T30841] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25876'. [ 2140.456564][T30848] netlink: 24 bytes leftover after parsing attributes in process `syz.5.25881'. [ 2141.468341][T30896] netlink: 'syz.5.25904': attribute type 4 has an invalid length. [ 2141.720467][T30909] netlink: 'syz.5.25910': attribute type 4 has an invalid length. [ 2141.754530][T30909] netlink: 'syz.5.25910': attribute type 4 has an invalid length. [ 2142.260782][T30922] overlayfs: failed to clone upperpath [ 2142.706225][T30927] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 2144.652899][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 2144.652989][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 2145.069403][T30970] netlink: 'syz.4.25940': attribute type 4 has an invalid length. [ 2145.082029][T30970] netlink: 'syz.4.25940': attribute type 17 has an invalid length. [ 2145.375353][T30983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.25946'. [ 2145.614805][T31000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25954'. [ 2145.681165][T31000] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2145.902862][T31010] overlayfs: failed to resolve './file1/file0': -2 [ 2146.382424][T31034] fuse: Bad value for 'user_id' [ 2146.382446][T31034] fuse: Bad value for 'user_id' [ 2146.398647][T31035] veth10: entered promiscuous mode [ 2146.398700][T31035] veth10: entered allmulticast mode [ 2146.977104][T31060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25982'. [ 2147.670043][T31096] tmpfs: Unknown parameter 'n' [ 2147.875059][T31106] netlink: 268 bytes leftover after parsing attributes in process `syz.4.26004'. [ 2148.030613][T31108] overlayfs: failed to clone upperpath [ 2151.954667][ T38] audit: type=1326 audit(2049.394:10925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31206 comm="syz.3.26050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2151.955044][ T38] audit: type=1326 audit(2049.394:10926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31206 comm="syz.3.26050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2151.955332][ T38] audit: type=1326 audit(2049.394:10927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31206 comm="syz.3.26050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2151.955812][ T38] audit: type=1326 audit(2049.394:10928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31206 comm="syz.3.26050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2152.045778][ T38] audit: type=1326 audit(2049.488:10929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31206 comm="syz.3.26050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2152.052938][ T38] audit: type=1326 audit(2049.488:10930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31206 comm="syz.3.26050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2152.065192][ T38] audit: type=1326 audit(2049.507:10931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31206 comm="syz.3.26050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2152.074718][ T38] audit: type=1326 audit(2049.507:10932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31206 comm="syz.3.26050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2152.076056][ T38] audit: type=1326 audit(2049.516:10933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31206 comm="syz.3.26050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2152.076124][ T38] audit: type=1326 audit(2049.516:10934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31206 comm="syz.3.26050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2152.221015][T31213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26053'. [ 2153.193923][T31248] netlink: 'syz.4.26069': attribute type 4 has an invalid length. [ 2153.199269][T31247] overlayfs: failed to clone lowerpath [ 2159.243537][T31353] lo speed is unknown, defaulting to 1000 [ 2159.300643][T31359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.26115'. [ 2159.303102][T31359] netlink: 'syz.5.26115': attribute type 10 has an invalid length. [ 2159.305644][T31359] syz_tun: entered promiscuous mode [ 2159.310526][T31359] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2160.104101][T31381] lo speed is unknown, defaulting to 1000 [ 2160.315639][T31391] netlink: 108 bytes leftover after parsing attributes in process `syz.3.26128'. [ 2163.611270][T31429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26143'. [ 2164.424864][T31451] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2164.424899][T31451] overlayfs: missing 'lowerdir' [ 2164.496978][ T38] kauditd_printk_skb: 6 callbacks suppressed [ 2164.497002][ T38] audit: type=1326 audit(2061.085:10941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31449 comm="syz.3.26153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x0 [ 2165.837658][T31487] netlink: 'syz.2.26164': attribute type 1 has an invalid length. [ 2166.474354][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2167.110438][ T38] audit: type=1326 audit(2063.618:10942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31510 comm="syz.2.26179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x50000 [ 2167.110500][ T38] audit: type=1326 audit(2063.618:10943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31510 comm="syz.2.26179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x50000 [ 2167.110549][ T38] audit: type=1326 audit(2063.618:10944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31510 comm="syz.2.26179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x50000 [ 2167.110597][ T38] audit: type=1326 audit(2063.618:10945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31510 comm="syz.2.26179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x50000 [ 2167.110645][ T38] audit: type=1326 audit(2063.618:10946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31510 comm="syz.2.26179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x50000 [ 2167.110693][ T38] audit: type=1326 audit(2063.618:10947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31510 comm="syz.2.26179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x50000 [ 2167.110752][ T38] audit: type=1326 audit(2063.618:10948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31510 comm="syz.2.26179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x50000 [ 2167.110801][ T38] audit: type=1326 audit(2063.618:10949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31510 comm="syz.2.26179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x50000 [ 2167.110848][ T38] audit: type=1326 audit(2063.618:10950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31510 comm="syz.2.26179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x50000 [ 2167.414223][T31514] fuse: Invalid rootmode [ 2169.071434][T31547] netlink: 68 bytes leftover after parsing attributes in process `syz.3.26196'. [ 2169.510509][T31565] netlink: 368 bytes leftover after parsing attributes in process `syz.3.26204'. [ 2169.835160][ T38] kauditd_printk_skb: 1723 callbacks suppressed [ 2169.835181][ T38] audit: type=1326 audit(2066.170:12674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31510 comm="syz.2.26179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x50000 [ 2169.835233][ T38] audit: type=1326 audit(2066.180:12675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31510 comm="syz.2.26179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x50000 [ 2169.835281][ T38] audit: type=1326 audit(2066.180:12676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31510 comm="syz.2.26179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x50000 [ 2169.835329][ T38] audit: type=1326 audit(2066.180:12677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31510 comm="syz.2.26179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x50000 [ 2169.835376][ T38] audit: type=1326 audit(2066.180:12678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31510 comm="syz.2.26179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x50000 [ 2169.835424][ T38] audit: type=1326 audit(2066.180:12679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31510 comm="syz.2.26179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x50000 [ 2169.835472][ T38] audit: type=1326 audit(2066.180:12680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31510 comm="syz.2.26179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x50000 [ 2169.835520][ T38] audit: type=1326 audit(2066.180:12681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31510 comm="syz.2.26179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x50000 [ 2169.835569][ T38] audit: type=1326 audit(2066.180:12682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31510 comm="syz.2.26179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x50000 [ 2169.835619][ T38] audit: type=1326 audit(2066.180:12683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31510 comm="syz.2.26179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x50000 [ 2171.481084][T31603] netlink: 84 bytes leftover after parsing attributes in process `syz.1.26218'. [ 2171.481119][T31603] netlink: 68 bytes leftover after parsing attributes in process `syz.1.26218'. [ 2177.631481][T31758] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2177.631517][T31758] overlayfs: missing 'lowerdir' [ 2178.612379][T31807] overlayfs: missing 'workdir' [ 2181.256863][T31877] futex_wake_op: syz.1.26340 tries to shift op by -1; fix this program [ 2184.814167][T32021] netlink: 40 bytes leftover after parsing attributes in process `syz.1.26407'. [ 2188.486057][T32060] lo speed is unknown, defaulting to 1000 [ 2188.784604][T32071] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2188.784627][T32071] overlayfs: missing 'lowerdir' [ 2191.227163][T32151] overlayfs: failed to clone upperpath [ 2191.524171][T32161] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2191.524205][T32161] overlayfs: missing 'lowerdir' [ 2193.801169][T32234] netlink: 'syz.1.26498': attribute type 4 has an invalid length. [ 2193.801194][T32234] netlink: 17 bytes leftover after parsing attributes in process `syz.1.26498'. [ 2194.384831][T32248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26505'. [ 2194.708993][T32252] 9pnet_fd: Insufficient options for proto=fd [ 2196.142772][T32282] lo speed is unknown, defaulting to 1000 [ 2196.341951][T32292] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2196.611880][T32313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26537'. [ 2197.338747][T32340] lo speed is unknown, defaulting to 1000 [ 2198.336979][ T38] kauditd_printk_skb: 84 callbacks suppressed [ 2198.337000][ T38] audit: type=1326 audit(2092.920:12768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32377 comm="syz.3.26566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2198.340407][ T38] audit: type=1326 audit(2092.920:12769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32377 comm="syz.3.26566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2198.340464][ T38] audit: type=1326 audit(2092.920:12770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32377 comm="syz.3.26566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2198.414454][ T38] audit: type=1326 audit(2092.920:12771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32377 comm="syz.3.26566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2198.414897][ T38] audit: type=1326 audit(2092.986:12772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32377 comm="syz.3.26566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2198.427140][ T38] audit: type=1326 audit(2092.986:12773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32377 comm="syz.3.26566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2198.427820][ T38] audit: type=1326 audit(2093.004:12774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32377 comm="syz.3.26566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2198.430145][ T38] audit: type=1326 audit(2093.004:12775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32377 comm="syz.3.26566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2198.430204][ T38] audit: type=1326 audit(2093.004:12776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32377 comm="syz.3.26566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2198.430257][ T38] audit: type=1326 audit(2093.004:12777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32377 comm="syz.3.26566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2198.809303][T32391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26571'. [ 2201.049096][T32485] 9pnet_fd: Insufficient options for proto=fd [ 2201.172829][T32487] 9pnet_fd: Insufficient options for proto=fd [ 2202.115564][T32525] lo speed is unknown, defaulting to 1000 [ 2203.088175][T32555] lo speed is unknown, defaulting to 1000 [ 2203.162406][T32562] netlink: 20 bytes leftover after parsing attributes in process `syz.3.26654'. [ 2203.734913][T32587] 9pnet_fd: Insufficient options for proto=fd [ 2203.856831][T32590] 9pnet_fd: Insufficient options for proto=fd [ 2204.107067][T32599] netlink: 24 bytes leftover after parsing attributes in process `syz.3.26671'. [ 2204.906781][T32634] overlayfs: failed to clone upperpath [ 2205.880891][T32662] netlink: 36 bytes leftover after parsing attributes in process `syz.1.26699'. [ 2206.022728][ T38] kauditd_printk_skb: 38 callbacks suppressed [ 2206.022743][ T38] audit: type=1326 audit(2100.126:12816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32664 comm="syz.2.26700" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x0 [ 2206.526207][ T38] audit: type=1326 audit(2100.595:12817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32678 comm="syz.1.26706" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x0 [ 2206.659781][T32684] overlayfs: missing 'lowerdir' [ 2207.258756][T32705] netlink: 3744 bytes leftover after parsing attributes in process `syz.5.26715'. [ 2207.277262][T32716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26723'. [ 2207.277292][T32716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26723'. [ 2207.277309][T32716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26723'. [ 2207.719163][T32732] lo speed is unknown, defaulting to 1000 [ 2209.578170][T32743] lo speed is unknown, defaulting to 1000 [ 2209.711246][ T38] audit: type=1326 audit(2103.588:12818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32758 comm="syz.3.26743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2209.714933][ T38] audit: type=1326 audit(2103.588:12819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32758 comm="syz.3.26743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2209.714993][ T38] audit: type=1326 audit(2103.588:12820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32758 comm="syz.3.26743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2209.715041][ T38] audit: type=1326 audit(2103.588:12821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32758 comm="syz.3.26743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2209.715090][ T38] audit: type=1326 audit(2103.588:12822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32758 comm="syz.3.26743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2209.715138][ T38] audit: type=1326 audit(2103.597:12823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32758 comm="syz.3.26743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2209.715185][ T38] audit: type=1326 audit(2103.597:12824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32758 comm="syz.3.26743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2209.937651][T32761] overlayfs: failed to clone upperpath [ 2210.135869][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 2210.135945][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 2211.010548][ T337] 9pnet: Could not find request transport: f [ 2211.401473][ T358] overlayfs: failed to clone upperpath [ 2212.387443][ T386] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2212.387466][ T386] overlayfs: missing 'lowerdir' [ 2213.105690][ T407] wg2: Caught tx_queue_len zero misconfig [ 2213.229069][ T409] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2213.408002][ T419] overlayfs: missing 'lowerdir' [ 2215.874160][ T501] netlink: 'syz.2.26840': attribute type 1 has an invalid length. [ 2217.872715][ T572] lo speed is unknown, defaulting to 1000 [ 2221.884718][ T639] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2224.862625][ T38] audit: type=1326 audit(2117.802:12825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=691 comm="syz.3.26922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2224.862821][ T38] audit: type=1326 audit(2117.802:12826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=691 comm="syz.3.26922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2224.864430][ T38] audit: type=1326 audit(2117.802:12827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=691 comm="syz.3.26922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2224.864854][ T38] audit: type=1326 audit(2117.802:12828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=691 comm="syz.3.26922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2224.865808][ T38] audit: type=1326 audit(2117.802:12829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=691 comm="syz.3.26922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2224.865910][ T38] audit: type=1326 audit(2117.802:12830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=691 comm="syz.3.26922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2224.866152][ T38] audit: type=1326 audit(2117.802:12831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=691 comm="syz.3.26922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2224.867356][ T38] audit: type=1326 audit(2117.802:12832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=691 comm="syz.3.26922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2224.867759][ T38] audit: type=1326 audit(2117.802:12833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=691 comm="syz.3.26922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2224.872611][ T38] audit: type=1326 audit(2117.821:12834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=691 comm="syz.3.26922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2225.543143][ T715] netlink: 32 bytes leftover after parsing attributes in process `syz.2.26932'. [ 2228.175705][ T784] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2228.652813][ T816] netlink: 'syz.4.26973': attribute type 4 has an invalid length. [ 2228.654736][ T815] tmpfs: Bad value for 'nr_blocks' [ 2228.716696][ T813] lo speed is unknown, defaulting to 1000 [ 2229.780843][ T856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.26995'. [ 2231.226193][ T882] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 2231.226274][ T882] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2233.196063][ T918] 9pnet_fd: Insufficient options for proto=fd [ 2234.368664][ T974] overlayfs: missing 'lowerdir' [ 2234.446307][ T981] netlink: 'syz.4.27044': attribute type 4 has an invalid length. [ 2234.995394][ T1004] netlink: 156 bytes leftover after parsing attributes in process `syz.4.27054'. [ 2234.995424][ T1004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27054'. [ 2235.639201][ T1039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27066'. [ 2238.302206][ T1119] lo speed is unknown, defaulting to 1000 [ 2238.763660][ T1168] netlink: 32 bytes leftover after parsing attributes in process `syz.3.27119'. [ 2239.410107][ T1193] overlay: Unknown parameter 'appraise' [ 2244.116543][ T1225] tipc: Disabling bearer [ 2251.501720][ T1398] netlink: 24 bytes leftover after parsing attributes in process `syz.4.27209'. [ 2251.575937][ T1398] netlink: 24 bytes leftover after parsing attributes in process `syz.4.27209'. [ 2251.747810][ T1402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27212'. [ 2253.265982][ T38] kauditd_printk_skb: 7 callbacks suppressed [ 2253.266002][ T38] audit: type=1326 audit(2144.458:12842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1440 comm="syz.2.27232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2253.266405][ T38] audit: type=1326 audit(2144.458:12843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1440 comm="syz.2.27232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2253.266555][ T38] audit: type=1326 audit(2144.458:12844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1440 comm="syz.2.27232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd15cfcdf10 code=0x7ffc0000 [ 2253.266983][ T38] audit: type=1326 audit(2144.458:12845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1440 comm="syz.2.27232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd15cfcdf10 code=0x7ffc0000 [ 2253.267360][ T38] audit: type=1326 audit(2144.458:12846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1440 comm="syz.2.27232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2253.267782][ T38] audit: type=1326 audit(2144.458:12847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1440 comm="syz.2.27232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2253.273717][ T38] audit: type=1326 audit(2144.468:12848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1440 comm="syz.2.27232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2253.273783][ T38] audit: type=1326 audit(2144.468:12849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1440 comm="syz.2.27232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2253.273836][ T38] audit: type=1326 audit(2144.468:12850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1440 comm="syz.2.27232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2253.275705][ T38] audit: type=1326 audit(2144.468:12851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1440 comm="syz.2.27232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2253.283854][ T1443] netlink: 'syz.4.27231': attribute type 4 has an invalid length. [ 2253.340681][ T1445] netlink: 'syz.4.27231': attribute type 4 has an invalid length. [ 2253.657156][ T1449] netlink: 28 bytes leftover after parsing attributes in process `syz.2.27235'. [ 2253.754252][ T1453] netlink: 120 bytes leftover after parsing attributes in process `syz.5.27225'. [ 2253.754288][ T1453] netlink: 12 bytes leftover after parsing attributes in process `syz.5.27225'. [ 2253.754304][ T1453] netlink: 16 bytes leftover after parsing attributes in process `syz.5.27225'. [ 2253.979674][ T1457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27238'. [ 2254.507557][ T1475] tipc: Failed to remove unknown binding: 66,1,1/10005162:1284918950/1284918952 [ 2256.454433][ T1552] netlink: 24 bytes leftover after parsing attributes in process `syz.2.27281'. [ 2257.229873][ T1574] overlayfs: failed to clone upperpath [ 2266.638553][ T1772] 9pnet: Could not find request transport: f [ 2268.642901][ T1800] netlink: 40 bytes leftover after parsing attributes in process `syz.4.27384'. [ 2269.172693][ T1807] netlink: 104 bytes leftover after parsing attributes in process `syz.3.27388'. [ 2271.598128][ T1877] lo speed is unknown, defaulting to 1000 [ 2271.627505][ T1879] netlink: 16 bytes leftover after parsing attributes in process `syz.3.27419'. [ 2271.959015][ T1890] netlink: 104 bytes leftover after parsing attributes in process `syz.5.27425'. [ 2272.067837][ T1893] overlayfs: missing 'lowerdir' [ 2272.526200][ T1907] netlink: 'syz.2.27434': attribute type 4 has an invalid length. [ 2272.526223][ T1907] netlink: 'syz.2.27434': attribute type 5 has an invalid length. [ 2272.526237][ T1907] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.27434'. [ 2274.650739][ T1946] lo speed is unknown, defaulting to 1000 [ 2274.741799][ T1950] overlayfs: failed to clone upperpath [ 2275.644886][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 2275.644948][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 2276.104684][ T1980] 9pnet_fd: Insufficient options for proto=fd [ 2279.225757][ T2050] lo speed is unknown, defaulting to 1000 [ 2280.841977][ T2062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27503'. [ 2281.986071][ T38] kauditd_printk_skb: 18 callbacks suppressed [ 2281.986092][ T38] audit: type=1326 audit(2171.404:12870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2086 comm="syz.2.27517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2281.986147][ T38] audit: type=1326 audit(2171.404:12871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2086 comm="syz.2.27517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2281.989936][ T38] audit: type=1326 audit(2171.404:12872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2086 comm="syz.2.27517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2281.989997][ T38] audit: type=1326 audit(2171.404:12873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2086 comm="syz.2.27517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2281.990207][ T38] audit: type=1326 audit(2171.404:12874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2086 comm="syz.2.27517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2281.990851][ T38] audit: type=1326 audit(2171.404:12875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2086 comm="syz.2.27517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2281.996813][ T38] audit: type=1326 audit(2171.413:12876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2086 comm="syz.2.27517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2281.996871][ T38] audit: type=1326 audit(2171.413:12877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2086 comm="syz.2.27517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2282.001075][ T38] audit: type=1326 audit(2171.413:12878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2086 comm="syz.2.27517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2282.001551][ T38] audit: type=1326 audit(2171.413:12879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2086 comm="syz.2.27517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2284.038199][ T2156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.27549'. [ 2284.121976][ T2143] overlayfs: missing 'lowerdir' [ 2284.917191][ T2193] netlink: 24 bytes leftover after parsing attributes in process `syz.4.27566'. [ 2287.459987][ T2228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27580'. [ 2287.460017][ T2228] netlink: 24 bytes leftover after parsing attributes in process `syz.1.27580'. [ 2287.505024][ T2228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27580'. [ 2287.505050][ T2228] netlink: 24 bytes leftover after parsing attributes in process `syz.1.27580'. [ 2290.661077][ T2309] netlink: 'syz.1.27614': attribute type 4 has an invalid length. [ 2290.718060][ T2312] netlink: 'syz.1.27614': attribute type 4 has an invalid length. [ 2291.318188][ T2334] 9pnet_fd: Insufficient options for proto=fd [ 2293.467673][ T38] kauditd_printk_skb: 39 callbacks suppressed [ 2293.467694][ T38] audit: type=1326 audit(2182.165:12919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2344 comm="syz.1.27631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2293.467748][ T38] audit: type=1326 audit(2182.165:12920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2344 comm="syz.1.27631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2293.467806][ T38] audit: type=1326 audit(2182.175:12921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2344 comm="syz.1.27631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2293.467853][ T38] audit: type=1326 audit(2182.175:12922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2344 comm="syz.1.27631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2293.467902][ T38] audit: type=1326 audit(2182.175:12923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2344 comm="syz.1.27631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2293.540389][ T2348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27630'. [ 2294.104217][ T2362] 9pnet_fd: Insufficient options for proto=fd [ 2294.714452][ T2385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27645'. [ 2294.714493][ T2385] netlink: 'syz.2.27645': attribute type 14 has an invalid length. [ 2294.714509][ T2385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27645'. [ 2294.749306][ T2385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27645'. [ 2294.749356][ T2385] netlink: 'syz.2.27645': attribute type 14 has an invalid length. [ 2294.749373][ T2385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27645'. [ 2295.194263][ T2399] overlayfs: failed to clone upperpath [ 2295.200021][ T2397] lo speed is unknown, defaulting to 1000 [ 2296.798126][ T38] audit: type=1326 audit(2185.299:12924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2422 comm="syz.4.27664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2296.798328][ T38] audit: type=1326 audit(2185.299:12925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2422 comm="syz.4.27664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2296.799597][ T38] audit: type=1326 audit(2185.299:12926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2422 comm="syz.4.27664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2296.799655][ T38] audit: type=1326 audit(2185.299:12927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2422 comm="syz.4.27664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2296.799705][ T38] audit: type=1326 audit(2185.299:12928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2422 comm="syz.4.27664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2297.785821][ T2465] overlayfs: missing 'lowerdir' [ 2297.892745][ T2474] netlink: 'syz.1.27682': attribute type 4 has an invalid length. [ 2300.323318][ T2533] netlink: 'syz.2.27703': attribute type 1 has an invalid length. [ 2300.379494][ T2533] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2305.706666][ T2533] bond4 (unregistering): Released all slaves [ 2305.764970][ T2557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27709'. [ 2306.111883][ T2634] overlayfs: failed to clone upperpath [ 2306.307740][ T2642] 9pnet_fd: Insufficient options for proto=fd [ 2307.935357][ T2683] 9pnet: Could not find request transport: f [ 2310.101463][ T2749] netlink: 268 bytes leftover after parsing attributes in process `syz.3.27778'. [ 2310.209259][ T2751] netlink: 104 bytes leftover after parsing attributes in process `syz.4.27779'. [ 2312.910091][ T2833] lo speed is unknown, defaulting to 1000 [ 2314.519568][ T38] kauditd_printk_skb: 15 callbacks suppressed [ 2314.519587][ T38] audit: type=1326 audit(2201.925:12944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2858 comm="syz.2.27818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2314.519894][ T38] audit: type=1326 audit(2201.925:12945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2858 comm="syz.2.27818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2314.575236][ T38] audit: type=1326 audit(2201.925:12946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2858 comm="syz.2.27818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2314.575294][ T38] audit: type=1326 audit(2201.972:12947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2858 comm="syz.2.27818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2314.575341][ T38] audit: type=1326 audit(2201.972:12948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2858 comm="syz.2.27818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2314.589064][ T38] audit: type=1326 audit(2202.000:12949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2858 comm="syz.2.27818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2314.589946][ T38] audit: type=1326 audit(2202.000:12950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2858 comm="syz.2.27818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2314.598790][ T38] audit: type=1326 audit(2202.000:12951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2858 comm="syz.2.27818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2314.599333][ T38] audit: type=1326 audit(2202.000:12952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2858 comm="syz.2.27818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2314.599377][ T38] audit: type=1326 audit(2202.000:12953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2858 comm="syz.2.27818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2315.614305][ T2891] overlayfs: missing 'workdir' [ 2319.266753][ T3011] netlink: 9 bytes leftover after parsing attributes in process `syz.1.27877'. [ 2319.302452][ T3011] gretap0: entered promiscuous mode [ 2319.302482][ T3011] gretap0: left allmulticast mode [ 2319.805425][ T3038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.27890'. [ 2320.427507][ T3068] overlayfs: failed to clone upperpath [ 2320.782967][ T3083] lo speed is unknown, defaulting to 1000 [ 2321.200730][ T3097] overlayfs: failed to clone lowerpath [ 2321.259084][ T3098] overlayfs: failed to clone lowerpath [ 2321.441273][ T3101] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2321.683516][ T3109] netlink: 48 bytes leftover after parsing attributes in process `syz.1.27923'. [ 2321.736935][ T3109] netlink: 48 bytes leftover after parsing attributes in process `syz.1.27923'. [ 2322.605753][ T3129] lo speed is unknown, defaulting to 1000 [ 2324.190384][ T3176] 9pnet_fd: Insufficient options for proto=fd [ 2327.191182][ T3242] overlay: Unknown parameter 'hash' [ 2331.674295][ T3316] 9pnet_fd: Insufficient options for proto=fd [ 2333.024083][ T3356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28029'. [ 2337.905182][ T3480] RDS: rds_bind could not find a transport for ::ffff:172.20.20.27, load rds_tcp or rds_rdma? [ 2339.416590][ T3501] netlink: 'syz.4.28088': attribute type 4 has an invalid length. [ 2340.055185][ T3531] overlayfs: failed to resolve './file1': -2 [ 2343.498259][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 2343.498337][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.134933][ T3578] overlayfs: failed to resolve './file0': -2 [ 2345.056736][ T3612] netlink: 72 bytes leftover after parsing attributes in process `syz.5.28129'. [ 2345.197095][ T3616] 9p: Unknown Cache mode or invalid value m [ 2345.879039][ T3635] veth12: entered promiscuous mode [ 2345.879067][ T3635] veth12: entered allmulticast mode [ 2352.568140][ T3760] 9pnet: Could not find request transport: 00000000000000000004 [ 2354.025676][ T3782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28215'. [ 2354.025711][ T3782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28215'. [ 2354.090113][ T1271] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2354.091996][ T3782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28215'. [ 2354.092029][ T3782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28215'. [ 2354.093543][ T1271] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2354.095914][ T1271] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2354.095961][ T1271] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2354.420837][ T3792] lo speed is unknown, defaulting to 1000 [ 2354.703358][ T3800] overlayfs: failed to clone lowerpath [ 2356.332087][ T3850] netlink: 16 bytes leftover after parsing attributes in process `syz.4.28246'. [ 2359.537284][ T3946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28286'. [ 2360.613240][ T3983] 9pnet_fd: Insufficient options for proto=fd [ 2360.728840][ T3985] overlayfs: missing 'lowerdir' [ 2361.349290][ T4006] overlayfs: missing 'workdir' [ 2361.814435][ T4015] overlayfs: missing 'lowerdir' [ 2363.730890][ T4034] netlink: 'syz.4.28324': attribute type 12 has an invalid length. [ 2364.311940][ T4052] lo speed is unknown, defaulting to 1000 [ 2366.412954][ T4106] overlayfs: failed to clone upperpath [ 2367.196510][ T4116] netlink: 100 bytes leftover after parsing attributes in process `syz.1.28364'. [ 2367.834174][ T38] kauditd_printk_skb: 54 callbacks suppressed [ 2367.834193][ T38] audit: type=1326 audit(2251.943:13008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4123 comm="syz.1.28369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2367.835157][ T38] audit: type=1326 audit(2251.943:13009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4123 comm="syz.1.28369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2367.838173][ T38] audit: type=1326 audit(2251.943:13010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4123 comm="syz.1.28369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2367.838961][ T38] audit: type=1326 audit(2251.953:13011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4123 comm="syz.1.28369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2367.839666][ T38] audit: type=1326 audit(2251.953:13012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4123 comm="syz.1.28369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2367.841707][ T38] audit: type=1326 audit(2251.953:13013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4123 comm="syz.1.28369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2367.847028][ T38] audit: type=1326 audit(2251.962:13014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4123 comm="syz.1.28369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2369.828424][ T4141] overlayfs: failed to clone upperpath [ 2369.949980][ T4122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.28365'. [ 2370.890399][ T4188] overlayfs: missing 'lowerdir' [ 2371.078582][ T4194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28399'. [ 2371.078621][ T4194] netlink: 'syz.2.28399': attribute type 14 has an invalid length. [ 2371.078636][ T4194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28399'. [ 2371.079736][ T4194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28399'. [ 2371.079788][ T4194] netlink: 'syz.2.28399': attribute type 14 has an invalid length. [ 2371.079804][ T4194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28399'. [ 2372.052300][ T4222] netlink: 52 bytes leftover after parsing attributes in process `syz.5.28410'. [ 2372.459560][ T4231] overlayfs: missing 'lowerdir' [ 2377.271988][ T4334] netlink: 'syz.2.28461': attribute type 11 has an invalid length. [ 2377.272016][ T4334] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.28461'. [ 2377.494659][ T4338] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 2377.494679][ T4338] overlayfs: missing 'lowerdir' [ 2379.694665][ T4383] netlink: 104 bytes leftover after parsing attributes in process `syz.1.28484'. [ 2380.696998][ T4419] netlink: 'syz.2.28502': attribute type 4 has an invalid length. [ 2384.174906][ T4465] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 2384.174927][ T4465] overlayfs: missing 'lowerdir' [ 2384.718349][ T4475] lo speed is unknown, defaulting to 1000 [ 2384.719654][ T4481] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2384.719719][ T4481] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2386.781419][ T4518] overlayfs: missing 'lowerdir' [ 2389.723840][ T4542] netlink: 192 bytes leftover after parsing attributes in process `syz.4.28552'. [ 2389.915400][ T4549] netlink: 68 bytes leftover after parsing attributes in process `syz.1.28555'. [ 2390.028896][ T4552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28557'. [ 2390.328278][ T4561] netlink: 60 bytes leftover after parsing attributes in process `syz.2.28561'. [ 2391.719103][ T4588] netlink: 60 bytes leftover after parsing attributes in process `syz.1.28573'. [ 2392.251020][ T4606] netlink: 'syz.2.28580': attribute type 1 has an invalid length. [ 2392.287636][ T4606] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2392.598310][ T4617] netlink: 60 bytes leftover after parsing attributes in process `syz.1.28585'. [ 2393.479552][ T4643] netlink: 60 bytes leftover after parsing attributes in process `syz.4.28600'. [ 2395.507952][ T4717] netlink: 'syz.1.28632': attribute type 4 has an invalid length. [ 2397.134764][ T4750] lo speed is unknown, defaulting to 1000 [ 2401.155004][ T4808] overlayfs: missing 'lowerdir' [ 2401.406258][ T4816] netlink: 192 bytes leftover after parsing attributes in process `syz.3.28676'. [ 2402.831083][ T5822] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 2405.613051][ T4893] netlink: 'syz.2.28694': attribute type 4 has an invalid length. [ 2412.353574][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 2412.353653][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 2412.389926][ T5040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28780'. [ 2412.404728][ T5040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28780'. [ 2412.911610][ T5050] netlink: 'syz.3.28784': attribute type 4 has an invalid length. [ 2416.278372][ T5095] 9p: Unknown Cache mode or invalid value m [ 2421.255518][ T5192] lo speed is unknown, defaulting to 1000 [ 2423.184750][ T5221] netlink: 'syz.4.28857': attribute type 1 has an invalid length. [ 2424.659590][ T5221] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2427.939038][ T5282] netlink: 156 bytes leftover after parsing attributes in process `syz.4.28881'. [ 2427.939072][ T5282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28881'. [ 2429.150955][ T5332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.28906'. [ 2430.550306][ T5350] 9pnet_fd: Insufficient options for proto=fd [ 2431.241575][ T5373] 9pnet_fd: Insufficient options for proto=fd [ 2431.446651][ T5375] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2432.433853][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28935'. [ 2432.433881][ T5407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28935'. [ 2432.433910][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28935'. [ 2432.465041][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28935'. [ 2432.465061][ T5407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28935'. [ 2432.465079][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28935'. [ 2434.389165][ T5474] netlink: 120 bytes leftover after parsing attributes in process `syz.4.28966'. [ 2435.166441][ T5489] netlink: 100 bytes leftover after parsing attributes in process `syz.4.28973'. [ 2436.121957][ T5504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28981'. [ 2437.185705][ T5517] netlink: 28 bytes leftover after parsing attributes in process `syz.4.28987'. [ 2437.690375][ T5528] netlink: 'syz.3.28992': attribute type 4 has an invalid length. [ 2437.690400][ T5528] netlink: 'syz.3.28992': attribute type 5 has an invalid length. [ 2437.690415][ T5528] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.28992'. [ 2438.394511][ T5542] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 2438.394539][ T5542] overlayfs: missing 'lowerdir' [ 2439.808893][ T5604] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2439.908614][ T5602] lo speed is unknown, defaulting to 1000 [ 2440.877557][ T38] audit: type=1326 audit(2320.474:13015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5644 comm="syz.3.29039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2440.883744][ T38] audit: type=1326 audit(2320.483:13016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5644 comm="syz.3.29039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2440.948865][ T38] audit: type=1326 audit(2320.549:13017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5644 comm="syz.3.29039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2440.948923][ T38] audit: type=1326 audit(2320.549:13018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5651 comm="syz.3.29039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9470511f85 code=0x7ffc0000 [ 2440.949292][ T38] audit: type=1326 audit(2320.549:13019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5644 comm="syz.3.29039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2441.109676][ T38] audit: type=1326 audit(2320.699:13020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5651 comm="syz.3.29039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2441.555618][ T5663] lo speed is unknown, defaulting to 1000 [ 2442.226610][ T38] audit: type=1326 audit(2321.750:13021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5696 comm="syz.4.29064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2442.234392][ T38] audit: type=1326 audit(2321.750:13022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5696 comm="syz.4.29064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2442.248133][ T38] audit: type=1326 audit(2321.768:13023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5696 comm="syz.4.29064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2442.256146][ T38] audit: type=1326 audit(2321.768:13024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5696 comm="syz.4.29064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2442.607019][ T5705] lo speed is unknown, defaulting to 1000 [ 2443.157092][ T5733] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 2443.157112][ T5733] overlayfs: missing 'lowerdir' [ 2444.543577][ T5779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.29101'. [ 2444.746336][ T5786] netlink: 32 bytes leftover after parsing attributes in process `syz.4.29104'. [ 2448.697048][ T5929] lo speed is unknown, defaulting to 1000 [ 2451.226976][ T5978] netlink: 'syz.1.29171': attribute type 4 has an invalid length. [ 2451.745791][ T6001] netlink: 112 bytes leftover after parsing attributes in process `syz.3.29181'. [ 2452.004817][ T6010] netlink: 268 bytes leftover after parsing attributes in process `syz.3.29186'. [ 2452.411471][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29193'. [ 2452.411496][ T6023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.29193'. [ 2452.449329][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29193'. [ 2452.449356][ T6023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.29193'. [ 2452.788130][ T6028] overlayfs: failed to clone lowerpath [ 2453.960328][ T6072] 9pnet: Unknown protocol version 9 [ 2454.584959][ T6101] netlink: 108 bytes leftover after parsing attributes in process `syz.3.29227'. [ 2454.791255][ T6113] netlink: 68 bytes leftover after parsing attributes in process `syz.4.29233'. [ 2456.885851][ T6143] overlayfs: failed to resolve './file0': -2 [ 2457.174034][ T6149] batadv_slave_1: entered promiscuous mode [ 2457.175060][ T6148] batadv_slave_1: left promiscuous mode [ 2458.886076][ T6165] 9pnet_fd: Insufficient options for proto=fd [ 2459.864731][ T38] kauditd_printk_skb: 40 callbacks suppressed [ 2459.864752][ T38] audit: type=1326 audit(2338.301:13065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6172 comm="syz.4.29257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2459.865729][ T38] audit: type=1326 audit(2338.301:13066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6172 comm="syz.4.29257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2459.867161][ T38] audit: type=1326 audit(2338.301:13067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6172 comm="syz.4.29257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2459.868031][ T38] audit: type=1326 audit(2338.301:13068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6172 comm="syz.4.29257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2459.961307][ T38] audit: type=1326 audit(2338.301:13069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6172 comm="syz.4.29257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2459.962305][ T38] audit: type=1326 audit(2338.385:13070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6172 comm="syz.4.29257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2459.963483][ T38] audit: type=1326 audit(2338.385:13071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6172 comm="syz.4.29257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2459.975708][ T38] audit: type=1326 audit(2338.385:13072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6172 comm="syz.4.29257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2459.975769][ T38] audit: type=1326 audit(2338.404:13073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6172 comm="syz.4.29257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2459.975816][ T38] audit: type=1326 audit(2338.404:13074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6172 comm="syz.4.29257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2462.125978][ T6190] fuse: Unknown parameter 'f' [ 2463.965860][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29301'. [ 2464.442058][ T6288] netlink: 108 bytes leftover after parsing attributes in process `syz.4.29309'. [ 2467.862985][ T6330] batadv_slave_1: entered promiscuous mode [ 2467.863544][ T6329] batadv_slave_1: left promiscuous mode [ 2469.412275][ T6345] lo speed is unknown, defaulting to 1000 [ 2470.658807][ T6382] netlink: 72 bytes leftover after parsing attributes in process `syz.4.29346'. [ 2471.297767][ T38] kauditd_printk_skb: 12 callbacks suppressed [ 2471.297787][ T38] audit: type=1326 audit(2349.025:13087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6403 comm="syz.2.29355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2471.298558][ T38] audit: type=1326 audit(2349.025:13088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6403 comm="syz.2.29355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2471.298928][ T38] audit: type=1326 audit(2349.025:13089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6403 comm="syz.2.29355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2471.301466][ T38] audit: type=1326 audit(2349.025:13090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6403 comm="syz.2.29355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2471.301606][ T38] audit: type=1326 audit(2349.025:13091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6403 comm="syz.2.29355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2471.301764][ T38] audit: type=1326 audit(2349.025:13092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6403 comm="syz.2.29355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2471.302275][ T38] audit: type=1326 audit(2349.025:13093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6403 comm="syz.2.29355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2471.302602][ T38] audit: type=1326 audit(2349.025:13094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6403 comm="syz.2.29355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2471.302793][ T38] audit: type=1326 audit(2349.025:13095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6403 comm="syz.2.29355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2471.303834][ T38] audit: type=1326 audit(2349.025:13096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6403 comm="syz.2.29355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd15cfcf6c9 code=0x7ffc0000 [ 2471.580049][ T6410] overlayfs: missing 'lowerdir' [ 2472.057963][ T6427] batadv_slave_1: entered promiscuous mode [ 2472.058537][ T6426] batadv_slave_1: left promiscuous mode [ 2472.344144][ T6441] netlink: 'syz.3.29370': attribute type 4 has an invalid length. [ 2472.674277][ T6456] netlink: 268 bytes leftover after parsing attributes in process `syz.5.29377'. [ 2472.840560][ T6461] batadv_slave_1: entered promiscuous mode [ 2472.841193][ T6457] batadv_slave_1: left promiscuous mode [ 2475.344785][ T6531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29411'. [ 2475.596218][ T6542] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2475.770944][ T6549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.29420'. [ 2476.323075][ T6573] lo speed is unknown, defaulting to 1000 [ 2476.537327][ T6582] netlink: 104 bytes leftover after parsing attributes in process `syz.4.29434'. [ 2477.573602][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 2477.574644][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 2477.918124][ T6602] batadv_slave_1: entered promiscuous mode [ 2477.918989][ T6601] batadv_slave_1: left promiscuous mode [ 2479.152859][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29460'. [ 2479.360203][ T6653] netlink: 24 bytes leftover after parsing attributes in process `syz.3.29461'. [ 2480.406662][ T6679] batadv_slave_1: entered promiscuous mode [ 2480.408869][ T6678] batadv_slave_1: left promiscuous mode [ 2481.659878][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29483'. [ 2481.818869][ T6701] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2484.878379][ T6784] overlayfs: failed to resolve './file0': -2 [ 2484.891088][ T6755] batadv_slave_1: entered promiscuous mode [ 2484.891523][ T6734] batadv_slave_1: left promiscuous mode [ 2485.108687][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29524'. [ 2486.761388][ T6818] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2486.761424][ T6818] overlayfs: missing 'lowerdir' [ 2487.022942][ T6829] netlink: 'syz.3.29537': attribute type 8 has an invalid length. [ 2487.022970][ T6829] netlink: 60 bytes leftover after parsing attributes in process `syz.3.29537'. [ 2487.274794][ T6834] batadv_slave_1: entered promiscuous mode [ 2487.275242][ T6833] batadv_slave_1: left promiscuous mode [ 2488.701808][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29554'. [ 2488.701851][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29554'. [ 2489.148839][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29554'. [ 2489.148878][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29554'. [ 2490.084550][ T6915] netlink: 48 bytes leftover after parsing attributes in process `syz.4.29577'. [ 2490.117032][ T6915] netlink: 48 bytes leftover after parsing attributes in process `syz.4.29577'. [ 2490.531982][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29584'. [ 2490.552437][ T6930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.29585'. [ 2490.995745][ T6937] overlayfs: failed to clone upperpath [ 2491.024173][ T6946] netlink: 104 bytes leftover after parsing attributes in process `syz.4.29589'. [ 2492.104796][ T6976] lo speed is unknown, defaulting to 1000 [ 2492.965699][ T6979] netlink: 'syz.2.29602': attribute type 21 has an invalid length. [ 2492.965794][ T6979] netlink: 156 bytes leftover after parsing attributes in process `syz.2.29602'. [ 2492.966564][ T6979] netlink: 'syz.2.29602': attribute type 21 has an invalid length. [ 2492.966609][ T6979] netlink: 156 bytes leftover after parsing attributes in process `syz.2.29602'. [ 2493.424689][ T7008] overlayfs: failed to clone upperpath [ 2494.076962][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29622'. [ 2494.076990][ T7022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.29622'. [ 2494.237956][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29622'. [ 2494.237984][ T7022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.29622'. [ 2494.943592][ T7030] 9pnet_fd: Insufficient options for proto=fd [ 2495.292563][ T7035] netlink: 68 bytes leftover after parsing attributes in process `syz.4.29628'. [ 2496.936796][ T7062] overlayfs: failed to clone upperpath [ 2498.112940][ T7046] netlink: 'syz.5.29608': attribute type 4 has an invalid length. [ 2498.112967][ T7046] netlink: 'syz.5.29608': attribute type 5 has an invalid length. [ 2498.112983][ T7046] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.29608'. [ 2498.800841][ T7116] 9pnet_fd: Insufficient options for proto=fd [ 2498.812812][ T7114] netlink: 'syz.2.29660': attribute type 4 has an invalid length. [ 2498.813341][ T7114] netlink: 'syz.2.29660': attribute type 5 has an invalid length. [ 2498.813363][ T7114] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.29660'. [ 2500.015477][ T7138] overlayfs: failed to clone upperpath [ 2500.317246][ T7152] 9pnet_fd: Insufficient options for proto=fd [ 2501.305843][ T7170] batadv_slave_1: entered promiscuous mode [ 2501.306322][ T7169] batadv_slave_1: left promiscuous mode [ 2504.524459][ T7222] overlayfs: failed to resolve './file1': -2 [ 2505.320440][ T7237] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2505.646556][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29713'. [ 2505.646583][ T7247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.29713'. [ 2505.684258][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29713'. [ 2505.684284][ T7247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.29713'. [ 2505.860233][ T7251] netlink: 'syz.4.29716': attribute type 4 has an invalid length. [ 2506.808195][ T7256] veth0_to_batadv (unregistering): left allmulticast mode [ 2508.179100][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29738'. [ 2508.217165][ T7304] batadv_slave_1: entered promiscuous mode [ 2508.224625][ T7303] batadv_slave_1: left promiscuous mode [ 2510.030315][ T7324] batadv_slave_1: entered promiscuous mode [ 2510.031209][ T7323] batadv_slave_1: left promiscuous mode [ 2510.281814][ T7330] overlayfs: missing 'lowerdir' [ 2510.819959][ T7353] batadv_slave_1: entered promiscuous mode [ 2510.820573][ T7352] batadv_slave_1: left promiscuous mode [ 2511.534762][ T7356] overlayfs: failed to clone upperpath [ 2511.869891][ T7365] batadv_slave_1: entered promiscuous mode [ 2511.870770][ T7361] batadv_slave_1: left promiscuous mode [ 2513.435126][ T7419] overlayfs: failed to clone upperpath [ 2514.100091][ T7431] netlink: 104 bytes leftover after parsing attributes in process `syz.4.29796'. [ 2516.733441][ T38] kauditd_printk_skb: 8 callbacks suppressed [ 2516.733476][ T38] audit: type=1326 audit(2391.659:13105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7479 comm="syz.1.29819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2516.733642][ T38] audit: type=1326 audit(2391.659:13106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7479 comm="syz.1.29819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2516.734325][ T38] audit: type=1326 audit(2391.659:13107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7479 comm="syz.1.29819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2516.734850][ T38] audit: type=1326 audit(2391.659:13108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7479 comm="syz.1.29819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2516.735033][ T38] audit: type=1326 audit(2391.659:13109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7479 comm="syz.1.29819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2516.735478][ T38] audit: type=1326 audit(2391.659:13110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7479 comm="syz.1.29819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2516.735627][ T38] audit: type=1326 audit(2391.659:13111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7479 comm="syz.1.29819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2516.735816][ T38] audit: type=1326 audit(2391.659:13112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7479 comm="syz.1.29819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2516.736267][ T38] audit: type=1326 audit(2391.659:13113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7479 comm="syz.1.29819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2516.736575][ T38] audit: type=1326 audit(2391.659:13114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7479 comm="syz.1.29819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2517.043088][ T7487] netlink: 40 bytes leftover after parsing attributes in process `syz.1.29822'. [ 2517.419566][ T7495] netlink: 104 bytes leftover after parsing attributes in process `syz.3.29825'. [ 2518.960462][ T7537] batadv_slave_1: entered promiscuous mode [ 2518.974046][ T7535] batadv_slave_1: left promiscuous mode [ 2520.304144][ T7540] syz.4.29845 (7540) used greatest stack depth: 17368 bytes left [ 2522.193977][ T7573] batadv_slave_1: entered promiscuous mode [ 2522.194781][ T7566] batadv_slave_1: left promiscuous mode [ 2522.625279][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29868'. [ 2522.780642][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.5.29871'. [ 2522.780681][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.29871'. [ 2522.781785][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.5.29871'. [ 2522.781815][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.29871'. [ 2526.640798][ T7662] lo speed is unknown, defaulting to 1000 [ 2526.933170][ T7675] netlink: 68 bytes leftover after parsing attributes in process `syz.1.29905'. [ 2527.461192][ T7693] 9p: Unknown access argument an: -22 [ 2529.414082][ T7766] batadv_slave_1: entered promiscuous mode [ 2529.415079][ T7765] batadv_slave_1: left promiscuous mode [ 2530.247184][ T7797] netlink: 'syz.1.29956': attribute type 4 has an invalid length. [ 2530.263163][ T7797] netlink: 'syz.1.29956': attribute type 4 has an invalid length. [ 2534.161525][ T7836] batadv_slave_1: entered promiscuous mode [ 2534.162558][ T7835] batadv_slave_1: left promiscuous mode [ 2535.599587][ T38] kauditd_printk_skb: 10 callbacks suppressed [ 2535.599607][ T38] audit: type=1326 audit(2409.355:13125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7848 comm="syz.4.29975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2535.599877][ T38] audit: type=1326 audit(2409.355:13126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7848 comm="syz.4.29975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2535.637685][ T38] audit: type=1326 audit(2409.355:13127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7848 comm="syz.4.29975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faea78edf10 code=0x7ffc0000 [ 2535.637762][ T38] audit: type=1326 audit(2409.392:13128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7848 comm="syz.4.29975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faea78edf10 code=0x7ffc0000 [ 2535.657847][ T38] audit: type=1326 audit(2409.411:13129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7848 comm="syz.4.29975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2535.657910][ T38] audit: type=1326 audit(2409.411:13130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7848 comm="syz.4.29975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2535.750761][ T38] audit: type=1326 audit(2409.439:13131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7848 comm="syz.4.29975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2535.750848][ T38] audit: type=1326 audit(2409.439:13132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7848 comm="syz.4.29975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2535.750909][ T38] audit: type=1326 audit(2409.439:13133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7848 comm="syz.4.29975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2535.750969][ T38] audit: type=1326 audit(2409.439:13134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7848 comm="syz.4.29975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2535.957988][ T7855] overlayfs: failed to clone upperpath [ 2535.978431][ T7859] netlink: 68 bytes leftover after parsing attributes in process `syz.3.29978'. [ 2536.390370][ T7875] lo speed is unknown, defaulting to 1000 [ 2536.724719][ T7886] netlink: 'syz.1.29990': attribute type 13 has an invalid length. [ 2536.991492][ T7893] netlink: 68 bytes leftover after parsing attributes in process `syz.4.29993'. [ 2537.399671][ T7904] 9pnet: Could not find request transport: f [ 2541.071373][ T7967] overlayfs: failed to clone upperpath [ 2541.442307][ T7981] lo speed is unknown, defaulting to 1000 [ 2542.160842][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30039'. [ 2542.492096][ T8009] 9pnet_fd: Insufficient options for proto=fd [ 2543.013036][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 2543.013112][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 2543.346748][ T8032] overlayfs: missing 'lowerdir' [ 2543.822424][ T8048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.30061'. [ 2543.865871][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30063'. [ 2543.866147][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30063'. [ 2546.442359][ T8088] netlink: 156 bytes leftover after parsing attributes in process `syz.4.30079'. [ 2546.442393][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30079'. [ 2546.789145][ T8097] netlink: 'syz.1.30083': attribute type 4 has an invalid length. [ 2547.177193][ T8110] lo speed is unknown, defaulting to 1000 [ 2547.830107][ T8133] netlink: 120 bytes leftover after parsing attributes in process `syz.3.30099'. [ 2547.830156][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30099'. [ 2549.979974][ T8160] netlink: 68 bytes leftover after parsing attributes in process `syz.2.30107'. [ 2552.734969][ T8217] overlayfs: failed to resolve './file0': -2 [ 2552.750635][ T8216] netlink: 'syz.3.30137': attribute type 4 has an invalid length. [ 2553.415493][ T8247] netlink: 156 bytes leftover after parsing attributes in process `syz.3.30151'. [ 2553.415524][ T8247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30151'. [ 2554.374014][ T38] kauditd_printk_skb: 19 callbacks suppressed [ 2554.374036][ T38] audit: type=1326 audit(2426.262:13154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8250 comm="syz.3.30153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2554.374093][ T38] audit: type=1326 audit(2426.262:13155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8250 comm="syz.3.30153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2554.374148][ T38] audit: type=1326 audit(2426.262:13156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8250 comm="syz.3.30153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2554.374315][ T38] audit: type=1326 audit(2426.262:13157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8250 comm="syz.3.30153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2554.374365][ T38] audit: type=1326 audit(2426.262:13158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8250 comm="syz.3.30153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2554.374416][ T38] audit: type=1326 audit(2426.262:13159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8250 comm="syz.3.30153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2554.374466][ T38] audit: type=1326 audit(2426.262:13160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8250 comm="syz.3.30153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2554.374529][ T38] audit: type=1326 audit(2426.262:13161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8250 comm="syz.3.30153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2554.374578][ T38] audit: type=1326 audit(2426.262:13162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8250 comm="syz.3.30153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2554.374628][ T38] audit: type=1326 audit(2426.262:13163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8250 comm="syz.3.30153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2554.578005][T19987] IPVS: starting estimator thread 0... [ 2554.685697][ T8254] IPVS: using max 7 ests per chain, 16800 per kthread [ 2558.113003][ T8306] netlink: 104 bytes leftover after parsing attributes in process `syz.4.30176'. [ 2558.353607][ T8311] netlink: 104 bytes leftover after parsing attributes in process `syz.4.30178'. [ 2562.629293][ T8394] bridge_slave_1: entered allmulticast mode [ 2562.859897][ T8398] overlayfs: failed to clone upperpath [ 2564.814609][ T8428] netlink: 104 bytes leftover after parsing attributes in process `syz.5.30223'. [ 2565.895022][ T8456] netlink: 60 bytes leftover after parsing attributes in process `syz.2.30237'. [ 2566.720486][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 2566.720509][ T38] audit: type=1804 audit(2438.544:13168): pid=8484 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.30250" name="file0" dev="tmpfs" ino=38750 res=1 errno=0 [ 2568.269460][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30254'. [ 2574.994967][ T8616] lo speed is unknown, defaulting to 1000 [ 2581.754884][ T8702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30337'. [ 2581.755208][ T8702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30337'. [ 2583.854726][ T8731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30346'. [ 2585.078524][ T5822] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2585.178276][ T8772] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2585.182746][ T8768] lo speed is unknown, defaulting to 1000 [ 2588.406964][ T8816] lo speed is unknown, defaulting to 1000 [ 2589.135225][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30384'. [ 2589.135251][ T8821] netlink: 24 bytes leftover after parsing attributes in process `syz.2.30384'. [ 2589.538480][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30384'. [ 2589.539673][ T8821] netlink: 24 bytes leftover after parsing attributes in process `syz.2.30384'. [ 2593.935416][ T8904] netlink: 104 bytes leftover after parsing attributes in process `syz.1.30422'. [ 2596.410807][ T8938] batadv_slave_1: entered promiscuous mode [ 2596.411281][ T8937] batadv_slave_1: left promiscuous mode [ 2597.071427][ T8957] netlink: 104 bytes leftover after parsing attributes in process `syz.3.30442'. [ 2597.565503][ T8975] batadv_slave_1: entered promiscuous mode [ 2597.566028][ T8974] batadv_slave_1: left promiscuous mode [ 2599.245509][ T8997] lo speed is unknown, defaulting to 1000 [ 2599.546149][ T9003] netlink: 104 bytes leftover after parsing attributes in process `syz.3.30461'. [ 2599.833165][ T9008] netlink: 104 bytes leftover after parsing attributes in process `syz.4.30465'. [ 2600.464610][ T9030] overlayfs: failed to clone upperpath [ 2600.700492][ T9038] fuse: Bad value for 'group_id' [ 2600.700512][ T9038] fuse: Bad value for 'group_id' [ 2601.063463][ T9050] netlink: 24 bytes leftover after parsing attributes in process `syz.1.30484'. [ 2606.288435][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30517'. [ 2606.288472][ T9133] netlink: 20 bytes leftover after parsing attributes in process `syz.1.30517'. [ 2606.289865][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30517'. [ 2606.289899][ T9133] netlink: 20 bytes leftover after parsing attributes in process `syz.1.30517'. [ 2608.503920][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 2608.504000][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 2610.925472][ T9210] lo speed is unknown, defaulting to 1000 [ 2611.538999][ T9222] netlink: 104 bytes leftover after parsing attributes in process `syz.5.30554'. [ 2613.269734][ T9246] netlink: 104 bytes leftover after parsing attributes in process `syz.2.30565'. [ 2613.633501][ T9261] overlayfs: failed to resolve './file0': -2 [ 2615.937592][ T9288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.30584'. [ 2615.937816][ T9288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.30584'. [ 2616.549097][ T9303] netlink: 'syz.3.30590': attribute type 4 has an invalid length. [ 2623.651405][ T38] audit: type=1326 audit(2491.396:13169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9409 comm="syz.4.30638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2623.651467][ T38] audit: type=1326 audit(2491.396:13170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9409 comm="syz.4.30638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2623.651516][ T38] audit: type=1326 audit(2491.405:13171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9409 comm="syz.4.30638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2623.651562][ T38] audit: type=1326 audit(2491.415:13172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9409 comm="syz.4.30638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2623.651609][ T38] audit: type=1326 audit(2491.415:13173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9409 comm="syz.4.30638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2623.651655][ T38] audit: type=1326 audit(2491.424:13174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9409 comm="syz.4.30638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2623.651702][ T38] audit: type=1326 audit(2491.424:13175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9409 comm="syz.4.30638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2623.651758][ T38] audit: type=1326 audit(2491.424:13176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9409 comm="syz.4.30638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2623.651801][ T38] audit: type=1326 audit(2491.433:13177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9409 comm="syz.4.30638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2623.696764][ T38] audit: type=1326 audit(2492.015:13178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9409 comm="syz.4.30638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2624.248174][ T9433] overlayfs: failed to clone upperpath [ 2624.433259][ T9441] netlink: 104 bytes leftover after parsing attributes in process `syz.2.30649'. [ 2624.641162][ T9450] overlayfs: unescaped trailing colons in lowerdir mount option. [ 2624.976848][ T9467] netlink: 104 bytes leftover after parsing attributes in process `syz.3.30660'. [ 2631.004466][ T9514] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.30676'. [ 2631.004494][ T9514] netlink: 24 bytes leftover after parsing attributes in process `syz.1.30676'. [ 2631.285023][ T9520] netlink: 104 bytes leftover after parsing attributes in process `syz.4.30678'. [ 2631.461377][ T9524] lo speed is unknown, defaulting to 1000 [ 2632.004318][ T9532] lo speed is unknown, defaulting to 1000 [ 2635.241443][ T9567] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2635.241508][ T9567] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2636.241591][ T9580] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2636.241873][ T9580] overlayfs: failed to set xattr on upper [ 2636.241915][ T9580] overlayfs: ...falling back to redirect_dir=nofollow. [ 2636.241958][ T9580] overlayfs: ...falling back to index=off. [ 2636.242001][ T9580] overlayfs: ...falling back to uuid=null. [ 2636.382209][ T9574] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 2641.911069][ T9651] 9pnet: Could not find request transport: f [ 2642.126029][ T9656] netlink: 'syz.2.30734': attribute type 4 has an invalid length. [ 2642.976262][ T9673] netlink: 104 bytes leftover after parsing attributes in process `syz.1.30732'. [ 2643.137243][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30744'. [ 2643.177464][ T9680] netlink: 'syz.2.30743': attribute type 4 has an invalid length. [ 2647.036440][ T9738] overlayfs: failed to clone upperpath [ 2647.059538][ T9737] 9pnet_fd: Insufficient options for proto=fd [ 2650.826385][ T9809] SQUASHFS error: Failed to read block 0x0: -5 [ 2652.025479][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30801'. [ 2652.536184][ T9839] netlink: 'syz.3.30809': attribute type 4 has an invalid length. [ 2652.536707][ T9839] netlink: 'syz.3.30809': attribute type 4 has an invalid length. [ 2652.542676][ T8888] lo speed is unknown, defaulting to 1000 [ 2652.542707][ T8888] syz0: Port: 1 Link ACTIVE [ 2657.656676][ T9887] netlink: 60 bytes leftover after parsing attributes in process `syz.4.30825'. [ 2659.997272][ T38] kauditd_printk_skb: 21 callbacks suppressed [ 2659.997330][ T38] audit: type=1326 audit(2526.036:13200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.3.30841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2659.997494][ T38] audit: type=1326 audit(2526.036:13201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.3.30841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2659.997876][ T38] audit: type=1326 audit(2526.046:13202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.3.30841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2659.998343][ T38] audit: type=1326 audit(2526.046:13203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.3.30841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2659.998642][ T38] audit: type=1326 audit(2526.046:13204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.3.30841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2659.998761][ T38] audit: type=1326 audit(2526.055:13205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.3.30841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2659.999320][ T38] audit: type=1326 audit(2526.055:13206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.3.30841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2659.999651][ T38] audit: type=1326 audit(2526.064:13207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9923 comm="syz.3.30841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2661.080447][ T9935] xt_l2tp: missing protocol rule (udp|l2tpip) [ 2661.215935][ T9944] netlink: 'syz.4.30847': attribute type 4 has an invalid length. [ 2661.635541][ T9953] overlayfs: failed to clone upperpath [ 2662.807574][ T9981] overlayfs: failed to clone upperpath [ 2668.301236][T10050] netlink: 'syz.5.30886': attribute type 4 has an invalid length. [ 2671.322665][T10083] netlink: 'syz.1.30897': attribute type 1 has an invalid length. [ 2671.438258][T10083] bond5: entered promiscuous mode [ 2671.438741][T10083] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2673.842714][T10100] tipc: Started in network mode [ 2673.843046][T10100] tipc: Node identity ac14140f, cluster identity 4711 [ 2673.889411][T10100] tipc: New replicast peer: 255.255.255.255 [ 2673.944317][T10100] tipc: Enabled bearer , priority 10 [ 2674.443175][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 2674.443254][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 2677.020074][ T38] audit: type=1326 audit(2541.818:13208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.3.30904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2677.020136][ T38] audit: type=1326 audit(2541.818:13209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.3.30904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2677.020186][ T38] audit: type=1326 audit(2541.818:13210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.3.30904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2677.020242][ T38] audit: type=1326 audit(2541.818:13211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.3.30904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2677.020289][ T38] audit: type=1326 audit(2541.818:13212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.3.30904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2677.020336][ T38] audit: type=1326 audit(2541.818:13213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.3.30904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2677.020385][ T38] audit: type=1326 audit(2541.827:13214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.3.30904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2677.020432][ T38] audit: type=1326 audit(2541.827:13215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.3.30904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2677.020481][ T38] audit: type=1326 audit(2541.827:13216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.3.30904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2677.020529][ T38] audit: type=1326 audit(2541.827:13217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.3.30904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x7ffc0000 [ 2677.021518][T19925] tipc: Node number set to 2886997007 [ 2682.963137][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 2682.963157][ T38] audit: type=1800 audit(2547.616:13219): pid=10162 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.30927" name="nullb0" dev="tmpfs" ino=10875 res=0 errno=0 [ 2687.004416][T19925] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2688.361822][T19925] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2688.681078][ T38] audit: type=1326 audit(2552.983:13220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10180 comm="syz.5.30936" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0272af6c9 code=0x0 [ 2701.285951][ T38] audit: type=1326 audit(2564.814:13221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10294 comm="syz.2.30968" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd15cfcf6c9 code=0x0 [ 2701.642529][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30974'. [ 2701.642812][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30974'. [ 2702.015531][T10313] netlink: 148 bytes leftover after parsing attributes in process `syz.2.30971'. [ 2702.016295][T10313] netlink: 116 bytes leftover after parsing attributes in process `syz.2.30971'. [ 2702.016349][T10313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.30971'. [ 2702.040482][T10313] netlink: 16 bytes leftover after parsing attributes in process `syz.2.30971'. [ 2702.040541][T10313] tc_dump_action: action bad kind [ 2705.636824][T10350] netlink: 36 bytes leftover after parsing attributes in process `syz.2.30986'. [ 2708.273130][T10376] kAFS: unable to lookup cell 'syz1' [ 2710.452528][ T5822] Bluetooth: hci2: unexpected event for opcode 0x080c [ 2710.502359][T10393] netlink: 'syz.1.31003': attribute type 46 has an invalid length. [ 2710.719103][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31006'. [ 2710.806134][T10402] netlink: 56 bytes leftover after parsing attributes in process `syz.5.31005'. [ 2712.330369][T10434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.31021'. [ 2712.585920][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.5.31023'. [ 2712.585960][T10442] netlink: 'syz.5.31023': attribute type 5 has an invalid length. [ 2712.585976][T10442] netlink: 28 bytes leftover after parsing attributes in process `syz.5.31023'. [ 2712.625763][T10442] geneve2: entered promiscuous mode [ 2712.625791][T10442] geneve2: entered allmulticast mode [ 2712.627744][T21164] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 2712.628044][T21164] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 2712.628087][T21164] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 2712.628127][T21164] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 2713.909408][T10455] netlink: 'syz.5.31030': attribute type 3 has an invalid length. [ 2713.909433][T10455] netlink: 3 bytes leftover after parsing attributes in process `syz.5.31030'. [ 2714.618263][ T5822] Bluetooth: hci1: unexpected event for opcode 0x0008 [ 2715.566748][T10481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.31039'. [ 2716.449637][T10495] bond6: option min_links: invalid value (18446744071562067968) [ 2716.449667][T10495] bond6: option min_links: allowed values 0 - 2147483647 [ 2716.492589][T10495] bond6 (unregistering): Released all slaves [ 2717.472953][T10535] Non-string source [ 2717.531850][T10531] bond10: option xmit_hash_policy: invalid value (34) [ 2717.570510][T10540] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 2717.577533][T10531] bond10 (unregistering): Released all slaves [ 2717.656450][ T38] audit: type=1326 audit(2580.174:13222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10543 comm="syz.1.31067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2717.657656][ T38] audit: type=1326 audit(2580.174:13223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10543 comm="syz.1.31067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2717.669660][ T38] audit: type=1326 audit(2580.183:13224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10543 comm="syz.1.31067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2717.670221][ T38] audit: type=1326 audit(2580.183:13225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10543 comm="syz.1.31067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2717.670561][ T38] audit: type=1326 audit(2580.183:13226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10543 comm="syz.1.31067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2717.981718][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31072'. [ 2717.981744][T10558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.31072'. [ 2717.981949][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31072'. [ 2717.981966][T10558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.31072'. [ 2719.195158][T19925] IPVS: starting estimator thread 0... [ 2719.541815][T10581] IPVS: using max 8 ests per chain, 19200 per kthread [ 2722.210705][T10607] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2722.725658][T10634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31106'. [ 2722.844694][T10641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2723.049293][T10644] netlink: 188 bytes leftover after parsing attributes in process `syz.5.31100'. [ 2723.275840][T10659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.31116'. [ 2723.275870][T10659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.31116'. [ 2723.745678][T10683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31129'. [ 2723.856567][T10690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.31132'. [ 2724.257303][T10713] overlayfs: unescaped trailing colons in lowerdir mount option. [ 2724.537956][T10723] netlink: 20 bytes leftover after parsing attributes in process `syz.4.31147'. [ 2724.777273][T10737] bond12: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 2724.833355][T10737] bond12 (unregistering): Released all slaves [ 2725.694925][T10785] overlay: Bad value for 'workdir' [ 2726.986397][T10829] sctp: [Deprecated]: syz.3.31197 (pid 10829) Use of int in max_burst socket option. [ 2726.986397][T10829] Use struct sctp_assoc_value instead [ 2727.442754][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.31209'. [ 2727.630293][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31213'. [ 2727.840018][T10866] netlink: 'syz.4.31216': attribute type 8 has an invalid length. [ 2727.887973][T10870] netlink: 2384 bytes leftover after parsing attributes in process `syz.5.31203'. [ 2728.720879][T10911] netlink: 56 bytes leftover after parsing attributes in process `syz.2.31238'. [ 2728.851279][T10916] netlink: 72 bytes leftover after parsing attributes in process `syz.2.31240'. [ 2730.760104][T10933] netlink: 'syz.2.31247': attribute type 8 has an invalid length. [ 2732.195216][T10983] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 2732.430452][T10996] netlink: 196 bytes leftover after parsing attributes in process `syz.1.31275'. [ 2732.576688][T11000] netlink: 200 bytes leftover after parsing attributes in process `syz.1.31278'. [ 2732.576716][T11000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.31278'. [ 2732.576744][T11000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.31278'. [ 2732.576762][T11000] netlink: 'syz.1.31278': attribute type 6 has an invalid length. [ 2732.874980][T11019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.31288'. [ 2732.975542][ T5822] Bluetooth: hci2: unexpected event 0x3e length: 808 > 260 [ 2732.975582][ T5822] Bluetooth: hci2: unexpected subevent 0x0d length: 807 > 260 [ 2732.975894][ T5822] Bluetooth: hci2: adv larger than maximum supported [ 2732.975922][ T5822] Bluetooth: hci2: adv larger than maximum supported [ 2732.975941][ T5822] Bluetooth: hci2: adv larger than maximum supported [ 2732.975955][ T5822] Bluetooth: hci2: adv larger than maximum supported [ 2732.975967][ T5822] Bluetooth: hci2: adv larger than maximum supported [ 2734.368023][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2734.916055][T11083] lo: entered promiscuous mode [ 2734.931242][T11083] tunl0: entered promiscuous mode [ 2734.947329][T11083] gre0: entered promiscuous mode [ 2734.951884][T11083] gretap0: entered promiscuous mode [ 2734.967263][T11086] tmpfs: Unknown parameter 'no' [ 2734.971145][T11083] erspan0: entered promiscuous mode [ 2734.992351][T11083] ip_vti0: entered promiscuous mode [ 2734.994704][T11083] ip6_vti0: entered promiscuous mode [ 2735.009828][T11083] sit0: entered promiscuous mode [ 2735.020031][T11083] ip6tnl0: entered promiscuous mode [ 2735.023719][T11083] ip6gre0: entered promiscuous mode [ 2735.031053][T11083] vcan0: entered promiscuous mode [ 2735.033914][T11083] bond0: entered promiscuous mode [ 2735.033937][T11083] bond_slave_0: entered promiscuous mode [ 2735.034237][T11083] bond_slave_1: entered promiscuous mode [ 2735.053307][T11083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2735.102724][T11083] caif0: entered promiscuous mode [ 2735.102742][T11083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2736.810512][ T38] audit: type=1326 audit(2598.151:13227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11132 comm="syz.3.31341" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94704df6c9 code=0x0 [ 2736.945001][T11141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.31346'. [ 2736.945029][T11141] netlink: 108 bytes leftover after parsing attributes in process `syz.4.31346'. [ 2736.945434][T11141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.31346'. [ 2736.945605][T11141] netlink: 108 bytes leftover after parsing attributes in process `syz.4.31346'. [ 2736.945624][T11141] netlink: 84 bytes leftover after parsing attributes in process `syz.4.31346'. [ 2737.840159][T11181] __nla_validate_parse: 1 callbacks suppressed [ 2737.840184][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31365'. [ 2737.840213][T11181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.31365'. [ 2737.930215][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31365'. [ 2737.930250][T11181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.31365'. [ 2738.058555][T11192] netlink: 56 bytes leftover after parsing attributes in process `syz.3.31372'. [ 2738.714362][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31390'. [ 2738.714396][T11231] netlink: 32 bytes leftover after parsing attributes in process `syz.4.31390'. [ 2739.200996][T11258] netlink: 'syz.2.31402': attribute type 1 has an invalid length. [ 2739.463850][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 2739.463927][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 2739.481092][T11272] openvswitch: netlink: Duplicate or invalid key (type 0). [ 2739.481140][T11272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2739.945184][T11298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.31422'. [ 2740.161567][T11310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.31428'. [ 2740.711075][ T38] audit: type=1326 audit(2601.810:13228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11339 comm="syz.1.31443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2740.714481][T11338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.31442'. [ 2740.714505][ T38] audit: type=1326 audit(2601.810:13229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11339 comm="syz.1.31443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2740.714560][ T38] audit: type=1326 audit(2601.810:13230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11339 comm="syz.1.31443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2740.714626][ T38] audit: type=1326 audit(2601.810:13231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11339 comm="syz.1.31443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2740.714957][ T38] audit: type=1326 audit(2601.810:13232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11339 comm="syz.1.31443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2740.715015][ T38] audit: type=1326 audit(2601.810:13233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11339 comm="syz.1.31443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2740.715744][ T38] audit: type=1326 audit(2601.810:13234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11339 comm="syz.1.31443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2740.716217][ T38] audit: type=1326 audit(2601.810:13235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11339 comm="syz.1.31443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2740.716522][ T38] audit: type=1326 audit(2601.810:13236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11339 comm="syz.1.31443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2741.762604][T11388] openvswitch: netlink: Missing key (keys=40, expected=80) [ 2741.954091][T11396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2742.030607][T11398] openvswitch: netlink: Message has 1 unknown bytes. [ 2742.030645][T11398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2742.505030][T11423] ptrace attach of "./syz-executor exec"[5823] was attempted by ""[11423] [ 2742.804856][T11435] bond10: entered allmulticast mode [ 2743.891953][T11498] __nla_validate_parse: 9 callbacks suppressed [ 2743.891975][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31517'. [ 2743.894364][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31516'. [ 2743.927603][T11503] netlink: 'syz.4.31518': attribute type 13 has an invalid length. [ 2744.010130][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31517'. [ 2744.218505][T11514] IPv6: NLM_F_CREATE should be specified when creating new route [ 2744.720306][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31537'. [ 2744.885143][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31537'. [ 2746.051568][T11596] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2746.267143][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31564'. [ 2746.523603][T11614] batadv1: entered promiscuous mode [ 2746.526628][T11614] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2746.866655][T11634] netlink: 16 bytes leftover after parsing attributes in process `syz.4.31578'. [ 2747.638267][T11673] netlink: 'syz.4.31597': attribute type 5 has an invalid length. [ 2748.810001][T11723] netlink: 44 bytes leftover after parsing attributes in process `syz.1.31618'. [ 2748.810107][T11723] tunl0: Caught tx_queue_len zero misconfig [ 2749.170797][T11738] netlink: 20 bytes leftover after parsing attributes in process `syz.2.31625'. [ 2749.522873][T11754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31632'. [ 2749.612161][T11756] netlink: 'syz.2.31634': attribute type 1 has an invalid length. [ 2750.413830][T11783] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 2750.499889][T11788] netlink: 'syz.2.31649': attribute type 6 has an invalid length. [ 2750.499916][T11788] netlink: 104 bytes leftover after parsing attributes in process `syz.2.31649'. [ 2750.778348][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31655'. [ 2751.358578][ T38] audit: type=1326 audit(2611.793:13237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11824 comm="syz.1.31665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2751.359382][ T38] audit: type=1326 audit(2611.793:13238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11824 comm="syz.1.31665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2751.362736][ T38] audit: type=1326 audit(2611.793:13239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11824 comm="syz.1.31665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2751.363450][ T38] audit: type=1326 audit(2611.793:13240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11824 comm="syz.1.31665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2751.364214][ T38] audit: type=1326 audit(2611.793:13241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11824 comm="syz.1.31665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2751.364868][ T38] audit: type=1326 audit(2611.793:13242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11824 comm="syz.1.31665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2751.365208][ T38] audit: type=1326 audit(2611.793:13243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11824 comm="syz.1.31665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2752.167746][T11869] tipc: Enabling of bearer rejected, failed to enable media [ 2753.092453][T11910] ip6tnl0: Caught tx_queue_len zero misconfig [ 2753.092480][T11910] netlink: 'syz.1.31707': attribute type 5 has an invalid length. [ 2753.416730][T11934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31719'. [ 2753.416768][T11934] netlink: 'syz.1.31719': attribute type 1 has an invalid length. [ 2753.741768][T11949] bond5: invalid ARP target 0.0.0.0 specified for addition [ 2753.741804][T11949] bond5: option arp_ip_target: invalid value (0) [ 2753.779932][T11949] bond5 (unregistering): Released all slaves [ 2755.383687][T12018] netlink: 24 bytes leftover after parsing attributes in process `syz.5.31755'. [ 2755.666004][T12024] vlan0: entered promiscuous mode [ 2755.666033][T12024] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 2757.179146][T12081] xt_l2tp: v2 sid > 0xffff: 2162688 [ 2758.056900][T12126] netlink: 20 bytes leftover after parsing attributes in process `syz.1.31805'. [ 2758.077096][T12127] netlink: 'syz.2.31806': attribute type 2 has an invalid length. [ 2758.236902][T12134] pim6reg: entered allmulticast mode [ 2760.062310][T12221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31850'. [ 2760.328231][T12233] netlink: 71 bytes leftover after parsing attributes in process `syz.2.31856'. [ 2760.541838][T12245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31862'. [ 2760.637032][T12251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.31865'. [ 2761.676233][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31890'. [ 2762.747952][T12371] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 2762.918317][T12382] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 2762.918364][T12382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2762.986460][T12384] 9pnet_fd: Insufficient options for proto=fd [ 2763.168680][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31931'. [ 2763.673600][T12422] x_tables: ip_tables: udp match: only valid for protocol 17 [ 2764.611630][T12478] IPVS: Unknown mcast interface: batadv0 [ 2765.249940][T12512] netlink: 'syz.4.31985': attribute type 18 has an invalid length. [ 2765.455812][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31991'. [ 2766.522742][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32016'. [ 2766.656763][T12584] macvlan0: entered promiscuous mode [ 2766.656787][T12584] bridge0: entered promiscuous mode [ 2767.136743][T12608] netlink: 'syz.1.32032': attribute type 3 has an invalid length. [ 2767.336607][T12621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.32038'. [ 2767.336794][T12621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.32038'. [ 2767.950891][T12648] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 2767.972527][T12647] tipc: Enabling of bearer rejected, already enabled [ 2768.123111][T12656] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 2768.123157][T12656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2770.134702][T12763] GUP no longer grows the stack in syz.2.32103 (12763): 200000005000-200000008000 (200000004000) [ 2770.134762][T12763] CPU: 1 UID: 0 PID: 12763 Comm: syz.2.32103 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2770.134789][T12763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2770.134812][T12763] Call Trace: [ 2770.134829][T12763] [ 2770.134841][T12763] dump_stack_lvl+0x189/0x250 [ 2770.134934][T12763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2770.134969][T12763] ? __pfx__printk+0x10/0x10 [ 2770.135001][T12763] ? find_vma+0xe7/0x160 [ 2770.135077][T12763] fixup_user_fault+0x661/0x720 [ 2770.135115][T12763] fault_in_user_writeable+0x72/0xe0 [ 2770.135144][T12763] futex_lock_pi+0x765/0xa70 [ 2770.135188][T12763] ? __pfx_futex_lock_pi+0x10/0x10 [ 2770.135215][T12763] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2770.135359][T12763] ? __pfx_futex_wake_mark+0x10/0x10 [ 2770.135412][T12763] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 2770.135471][T12763] do_futex+0x292/0x420 [ 2770.135506][T12763] ? __pfx_do_futex+0x10/0x10 [ 2770.135536][T12763] ? __vm_munmap+0x2c1/0x380 [ 2770.135580][T12763] __se_sys_futex+0x36f/0x400 [ 2770.135618][T12763] ? __pfx___se_sys_futex+0x10/0x10 [ 2770.135662][T12763] ? __x64_sys_futex+0x21/0xf0 [ 2770.135718][T12763] do_syscall_64+0xfa/0xfa0 [ 2770.135751][T12763] ? lockdep_hardirqs_on+0x9c/0x150 [ 2770.135785][T12763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2770.135809][T12763] ? clear_bhb_loop+0x60/0xb0 [ 2770.135836][T12763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2770.135859][T12763] RIP: 0033:0x7fd15cfcf6c9 [ 2770.135886][T12763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2770.135912][T12763] RSP: 002b:00007fd15b22e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2770.135945][T12763] RAX: ffffffffffffffda RBX: 00007fd15d225fa0 RCX: 00007fd15cfcf6c9 [ 2770.135963][T12763] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 2770.135979][T12763] RBP: 00007fd15d051f91 R08: 0000000000000000 R09: 0000000000000000 [ 2770.135994][T12763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2770.136008][T12763] R13: 00007fd15d226038 R14: 00007fd15d225fa0 R15: 00007fffa47c4d78 [ 2770.136046][T12763] [ 2770.225498][T12768] netlink: 'syz.2.32106': attribute type 27 has an invalid length. [ 2770.398112][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.32097'. [ 2772.443983][T12856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32147'. [ 2772.893479][T12881] tipc: Enabled bearer , priority 8 [ 2773.016919][T12886] "syz.5.32154" (12886) uses obsolete ecb(arc4) skcipher [ 2773.326827][T12902] pimreg: entered allmulticast mode [ 2773.515906][T12910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.32172'. [ 2774.446603][T12954] bridge12: entered promiscuous mode [ 2774.446635][T12954] bridge12: entered allmulticast mode [ 2774.990263][T12973] netlink: 'syz.2.32203': attribute type 1 has an invalid length. [ 2774.990315][T12973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2775.212785][T12988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.32210'. [ 2775.244417][T32296] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2775.244763][T32296] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2775.264142][T19925] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2775.370955][T19925] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2776.007060][T13031] 9pnet_fd: Insufficient options for proto=fd [ 2776.114985][T19925] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2777.350139][T13101] netlink: 40 bytes leftover after parsing attributes in process `syz.1.32261'. [ 2778.389709][T13131] netlink: 'syz.3.32275': attribute type 14 has an invalid length. [ 2778.398157][T13131] netem: change failed [ 2779.363227][T13155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.32286'. [ 2779.866356][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2781.620770][T13219] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 2781.688306][T13222] netlink: 'syz.4.32317': attribute type 3 has an invalid length. [ 2782.203479][T13244] kAFS: unable to lookup cell '(,c¾ûL' [ 2782.204972][T13244] kAFS: unable to lookup cell '*,' [ 2782.309222][T13247] netlink: 16 bytes leftover after parsing attributes in process `syz.5.32326'. [ 2782.314494][T13247] netlink: 16 bytes leftover after parsing attributes in process `syz.5.32326'. [ 2783.570689][T13298] netlink: 32 bytes leftover after parsing attributes in process `syz.3.32355'. [ 2784.798514][T13334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32369'. [ 2786.514607][T13379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32391'. [ 2786.514648][T13379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32391'. [ 2786.820897][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2786.820923][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2787.372025][T13408] 9pnet_fd: Insufficient options for proto=fd [ 2787.562862][T13417] netlink: 20 bytes leftover after parsing attributes in process `syz.1.32410'. [ 2789.245445][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2789.767134][T13467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32432'. [ 2789.767191][T13467] netlink: 'syz.1.32432': attribute type 30 has an invalid length. [ 2790.414038][T13495] netlink: 'syz.1.32446': attribute type 21 has an invalid length. [ 2790.414066][T13495] netlink: 168 bytes leftover after parsing attributes in process `syz.1.32446'. [ 2791.122711][T21164] tipc: Subscription rejected, illegal request [ 2793.206940][T13607] netlink: 'syz.1.32496': attribute type 11 has an invalid length. [ 2795.610816][T13663] netlink: 'syz.2.32522': attribute type 1 has an invalid length. [ 2795.678347][T13663] bond5: entered promiscuous mode [ 2795.680221][T13663] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2795.735827][T13668] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2795.748553][T13668] bond5: (slave bond6): making interface the new active one [ 2795.748578][T13668] bond6: entered promiscuous mode [ 2795.754618][T13668] bond5: (slave bond6): Enslaving as an active interface with an up link [ 2796.227738][T13682] tipc: Enabling of bearer rejected, already enabled [ 2796.229926][T13684] tipc: New replicast peer: 255.255.255.255 [ 2796.918934][T13711] overlayfs: failed to clone lowerpath [ 2797.680319][T13720] ref_ctr_offset mismatch. inode: 0xa11c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1140200000010 [ 2799.321020][T13762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32566'. [ 2800.492652][T13796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.32580'. [ 2803.710335][T13893] netlink: 'syz.1.32621': attribute type 3 has an invalid length. [ 2803.710357][T13893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32621'. [ 2804.291718][ T38] audit: type=1326 audit(2661.455:13244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13902 comm="syz.4.32626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2804.291893][ T38] audit: type=1326 audit(2661.455:13245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13902 comm="syz.4.32626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2804.293726][ T38] audit: type=1326 audit(2661.455:13246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13902 comm="syz.4.32626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2804.293884][ T38] audit: type=1326 audit(2661.455:13247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13902 comm="syz.4.32626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2804.296255][ T38] audit: type=1326 audit(2661.455:13248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13902 comm="syz.4.32626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2804.443136][ T38] audit: type=1326 audit(2661.586:13249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13902 comm="syz.4.32626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2804.443201][ T38] audit: type=1326 audit(2661.586:13250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13902 comm="syz.4.32626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2804.443251][ T38] audit: type=1326 audit(2661.586:13251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13902 comm="syz.4.32626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x7ffc0000 [ 2804.940117][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 2804.940191][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 2804.950297][ T38] audit: type=1326 audit(2662.074:13252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13919 comm="syz.4.32633" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faea78ef6c9 code=0x0 [ 2806.073041][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32639'. [ 2806.073068][T13943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.32639'. [ 2806.073097][T13943] netlink: 'syz.1.32639': attribute type 6 has an invalid length. [ 2806.101207][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32639'. [ 2806.101232][T13943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.32639'. [ 2806.101259][T13943] netlink: 'syz.1.32639': attribute type 6 has an invalid length. [ 2807.604901][T13981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32655'. [ 2808.344751][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2808.638913][T14015] netlink: 'syz.5.32667': attribute type 5 has an invalid length. [ 2808.958648][T14021] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 2808.958698][T14021] netem: incorrect ge model size [ 2808.958713][T14021] netem: change failed [ 2809.195384][T14023] lo speed is unknown, defaulting to 1000 [ 2812.686235][T14150] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 2813.198767][T14170] netlink: 220 bytes leftover after parsing attributes in process `syz.3.32734'. [ 2813.201734][T14170] netlink: 220 bytes leftover after parsing attributes in process `syz.3.32734'. [ 2813.201763][T14170] netlink: 32 bytes leftover after parsing attributes in process `syz.3.32734'. [ 2813.661915][T14180] lo speed is unknown, defaulting to 1000 [ 2815.058858][ T38] audit: type=1326 audit(2671.560:13253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14204 comm="syz.1.32751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2815.058934][ T38] audit: type=1326 audit(2671.560:13254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14204 comm="syz.1.32751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2815.114079][ T38] audit: type=1326 audit(2671.616:13255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14204 comm="syz.1.32751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2815.114137][ T38] audit: type=1326 audit(2671.616:13256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14204 comm="syz.1.32751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2815.114190][ T38] audit: type=1326 audit(2671.616:13257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14204 comm="syz.1.32751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2815.114740][ T38] audit: type=1326 audit(2671.616:13258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14204 comm="syz.1.32751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2815.117584][ T38] audit: type=1326 audit(2671.616:13259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14204 comm="syz.1.32751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2815.117644][ T38] audit: type=1326 audit(2671.616:13260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14204 comm="syz.1.32751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2815.117694][ T38] audit: type=1326 audit(2671.616:13261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14204 comm="syz.1.32751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2815.117758][ T38] audit: type=1326 audit(2671.616:13262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14204 comm="syz.1.32751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baf0bf6c9 code=0x7ffc0000 [ 2816.542368][T14254] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.32770'. [ 2816.883703][T14274] netlink: 24 bytes leftover after parsing attributes in process `syz.4.32780'. [ 2817.137216][T14280] bond12: entered promiscuous mode [ 2819.208479][T14333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32803'. [ 2819.220911][T14333] netlink: 32 bytes leftover after parsing attributes in process `syz.1.32803'. [ 2819.740304][T14325] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 2819.784644][T14342] overlayfs: failed to clone upperpath [ 2820.062033][T14352] netlink: 'syz.1.32814': attribute type 1 has an invalid length. [ 2820.212814][T14352] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2820.255249][T14358] bond6: (slave gretap2): making interface the new active one [ 2820.276543][T14358] [ 2820.276554][T14358] ============================================ [ 2820.276564][T14358] WARNING: possible recursive locking detected [ 2820.276579][T14358] syzkaller #0 Not tainted [ 2820.276591][T14358] -------------------------------------------- [ 2820.276599][T14358] syz.1.32814/14358 is trying to acquire lock: [ 2820.276612][T14358] ffff888063996318 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0xd58/0x3b70 [ 2820.276791][T14358] [ 2820.276791][T14358] but task is already holding lock: [ 2820.276800][T14358] ffff88807a124398 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x1370/0x3b70 [ 2820.276859][T14358] [ 2820.276859][T14358] other info that might help us debug this: [ 2820.276866][T14358] Possible unsafe locking scenario: [ 2820.276866][T14358] [ 2820.276873][T14358] CPU0 [ 2820.276879][T14358] ---- [ 2820.276885][T14358] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 2820.276905][T14358] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 2820.276927][T14358] [ 2820.276927][T14358] *** DEADLOCK *** [ 2820.276927][T14358] [ 2820.276934][T14358] May be due to missing lock nesting notation [ 2820.276934][T14358] [ 2820.276942][T14358] 13 locks held by syz.1.32814/14358: [ 2820.276955][T14358] #0: ffffffff8ed7b730 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 2820.277075][T14358] #1: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 2820.277135][T14358] #2: ffffffff8d44aca0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x540 [ 2820.277205][T14358] #3: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0xa1/0x540 [ 2820.277261][T14358] #4: ffffffff8d5aa8e0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x26f/0x3b70 [ 2820.277321][T14358] #5: ffff88807a124398 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x1370/0x3b70 [ 2820.277385][T14358] #6: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10d/0x2b0 [ 2820.277443][T14358] #7: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 2820.277541][T14358] #8: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x11d0 [ 2820.277624][T14358] #9: ffffffff8d44aca0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x540 [ 2820.277681][T14358] #10: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 2820.277769][T14358] #11: ffffffff8d44aca0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x540 [ 2820.277825][T14358] #12: ffffffff8d5aa8e0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x26f/0x3b70 [ 2820.277884][T14358] [ 2820.277884][T14358] stack backtrace: [ 2820.277899][T14358] CPU: 0 UID: 0 PID: 14358 Comm: syz.1.32814 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2820.277924][T14358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2820.277937][T14358] Call Trace: [ 2820.277946][T14358] [ 2820.277956][T14358] dump_stack_lvl+0x189/0x250 [ 2820.277992][T14358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2820.278026][T14358] ? __pfx__printk+0x10/0x10 [ 2820.278053][T14358] ? print_lock_name+0xde/0x100 [ 2820.278081][T14358] print_deadlock_bug+0x28b/0x2a0 [ 2820.278105][T14358] validate_chain+0x1a3f/0x2140 [ 2820.278143][T14358] ? __lock_acquire+0xab9/0xd20 [ 2820.278188][T14358] __lock_acquire+0xab9/0xd20 [ 2820.278221][T14358] ? __dev_queue_xmit+0xd58/0x3b70 [ 2820.278249][T14358] lock_acquire+0x120/0x360 [ 2820.278278][T14358] ? __dev_queue_xmit+0xd58/0x3b70 [ 2820.278309][T14358] ? __lock_acquire+0xab9/0xd20 [ 2820.278341][T14358] rt_spin_lock+0x88/0x3e0 [ 2820.278365][T14358] ? __dev_queue_xmit+0xd58/0x3b70 [ 2820.278395][T14358] ? __pfx_rt_spin_lock+0x10/0x10 [ 2820.278419][T14358] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2820.278476][T14358] __dev_queue_xmit+0xd58/0x3b70 [ 2820.278503][T14358] ? __neigh_event_send+0xf68/0x1580 [ 2820.278574][T14358] ? __dev_queue_xmit+0x26f/0x3b70 [ 2820.278604][T14358] ? do_set_master+0x533/0x6d0 [ 2820.278641][T14358] ? rtnetlink_rcv_msg+0x7cf/0xb70 [ 2820.278660][T14358] ? netlink_unicast+0x846/0xa10 [ 2820.278715][T14358] ? netlink_sendmsg+0x805/0xb30 [ 2820.278757][T14358] ? ____sys_sendmsg+0x508/0x820 [ 2820.278784][T14358] ? ___sys_sendmsg+0x21f/0x2a0 [ 2820.278810][T14358] ? __x64_sys_sendmsg+0x1a1/0x260 [ 2820.278836][T14358] ? do_syscall_64+0xfa/0xfa0 [ 2820.278869][T14358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2820.278894][T14358] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2820.278932][T14358] ? __lock_acquire+0xab9/0xd20 [ 2820.278971][T14358] ? NF_HOOK+0x9e/0x3a0 [ 2820.279027][T14358] NF_HOOK+0x310/0x3a0 [ 2820.279060][T14358] ? __pfx_arp_xmit_finish+0x10/0x10 [ 2820.279092][T14358] ? NF_HOOK+0x9e/0x3a0 [ 2820.279124][T14358] ? __pfx_NF_HOOK+0x10/0x10 [ 2820.279164][T14358] ? arp_xmit+0x23/0x270 [ 2820.279204][T14358] arp_xmit+0x16c/0x270 [ 2820.279233][T14358] ? arp_xmit+0x23/0x270 [ 2820.279266][T14358] arp_solicit+0xc6a/0xeb0 [ 2820.279300][T14358] ? arp_solicit+0x115/0xeb0 [ 2820.279335][T14358] ? rt_mutex_slowunlock+0x493/0x8a0 [ 2820.279362][T14358] ? __pfx_arp_solicit+0x10/0x10 [ 2820.279397][T14358] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2820.279430][T14358] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2820.279462][T14358] ? rt_write_unlock+0x191/0x230 [ 2820.279490][T14358] ? __pfx_arp_solicit+0x10/0x10 [ 2820.279522][T14358] __neigh_event_send+0xf68/0x1580 [ 2820.279559][T14358] ? __neigh_event_send+0x38/0x1580 [ 2820.279597][T14358] neigh_resolve_output+0x19f/0x780 [ 2820.279633][T14358] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 2820.279671][T14358] ip_finish_output2+0xd97/0x11d0 [ 2820.279703][T14358] ? ip_finish_output2+0x452/0x11d0 [ 2820.279739][T14358] ? __pfx_ip_finish_output2+0x10/0x10 [ 2820.279771][T14358] ? ip_skb_dst_mtu+0x18d/0xb70 [ 2820.279800][T14358] ? ip_skb_dst_mtu+0x917/0xb70 [ 2820.279841][T14358] ? ip_finish_output+0x33a/0x3f0 [ 2820.279869][T14358] ip_output+0x29f/0x450 [ 2820.279895][T14358] ? ip_output+0x5b/0x450 [ 2820.279923][T14358] iptunnel_xmit+0x5f8/0xa90 [ 2820.279984][T14358] ip_tunnel_xmit+0x1c44/0x2390 [ 2820.280050][T14358] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 2820.280080][T14358] ? gre_build_header+0x31c/0xa40 [ 2820.280143][T14358] ? __pfx_gre_build_header+0x10/0x10 [ 2820.280177][T14358] gre_tap_xmit+0x590/0x7a0 [ 2820.280208][T14358] ? __pfx_gre_tap_xmit+0x10/0x10 [ 2820.280243][T14358] dev_hard_start_xmit+0x2f0/0x870 [ 2820.280298][T14358] sch_direct_xmit+0x241/0x4b0 [ 2820.280361][T14358] ? __pfx_sch_direct_xmit+0x10/0x10 [ 2820.280392][T14358] ? rcu_needs_cpu+0xa0/0xb0 [ 2820.280421][T14358] ? rt_spin_trylock+0x13b/0x2b0 [ 2820.280451][T14358] __dev_queue_xmit+0x1826/0x3b70 [ 2820.280485][T14358] ? __dev_queue_xmit+0x26f/0x3b70 [ 2820.280524][T14358] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2820.280553][T14358] ? rcu_is_watching+0x15/0xb0 [ 2820.280573][T14358] ? kmalloc_reserve+0xbd/0x290 [ 2820.280627][T14358] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 2820.280656][T14358] ? kmem_cache_alloc_node_noprof+0x291/0x6e0 [ 2820.280684][T14358] ? kmalloc_reserve+0xbd/0x290 [ 2820.280706][T14358] ? __alloc_skb+0x112/0x2d0 [ 2820.280732][T14358] ? __build_skb_around+0x262/0x3f0 [ 2820.280765][T14358] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 2820.280791][T14358] ? alb_send_lp_vid+0x139/0x510 [ 2820.280876][T14358] alb_send_lp_vid+0x324/0x510 [ 2820.280902][T14358] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 2820.280934][T14358] alb_send_learning_packets+0x10d/0x2c0 [ 2820.280959][T14358] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 2820.280982][T14358] ? alb_swap_mac_addr+0x221/0x320 [ 2820.281005][T14358] ? __pfx_alb_swap_mac_addr+0x10/0x10 [ 2820.281031][T14358] alb_fasten_mac_swap+0x484/0x8e0 [ 2820.281056][T14358] bond_alb_handle_active_change+0xc15/0xed0 [ 2820.281084][T14358] ? __pfx_bond_alb_handle_active_change+0x10/0x10 [ 2820.281107][T14358] ? __local_bh_enable_ip+0x1c0/0x2e0 [ 2820.281150][T14358] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2820.281182][T14358] ? rt_spin_unlock+0x161/0x200 [ 2820.281210][T14358] bond_change_active_slave+0x1084/0x37f0 [ 2820.281295][T14358] ? __pfx_bond_change_active_slave+0x10/0x10 [ 2820.281329][T14358] ? __queue_work+0x146/0x1010 [ 2820.281361][T14358] ? __queue_work+0xce6/0x1010 [ 2820.281392][T14358] ? mod_delayed_work_on+0x128/0x200 [ 2820.281421][T14358] ? lockdep_hardirqs_on+0x9c/0x150 [ 2820.281453][T14358] ? mod_delayed_work_on+0x1ac/0x200 [ 2820.281484][T14358] ? netdev_change_features+0x8d/0xd0 [ 2820.281517][T14358] bond_select_active_slave+0x8e2/0xd00 [ 2820.281553][T14358] ? __pfx_bond_select_active_slave+0x10/0x10 [ 2820.281588][T14358] ? __pfx_bond_set_carrier+0x10/0x10 [ 2820.281621][T14358] ? netdev_is_rx_handler_busy+0x6e/0x140 [ 2820.281650][T14358] ? __pfx_bond_handle_frame+0x10/0x10 [ 2820.281671][T14358] bond_enslave+0x21a8/0x38a0 [ 2820.281701][T14358] ? sock_def_readable+0x315/0x560 [ 2820.281733][T14358] ? sock_def_readable+0xbe/0x560 [ 2820.281779][T14358] ? __pfx_bond_enslave+0x10/0x10 [ 2820.281821][T14358] ? __pfx___dev_notify_flags+0x10/0x10 [ 2820.281844][T14358] ? __dev_change_flags+0x4cc/0x6d0 [ 2820.281873][T14358] do_set_master+0x533/0x6d0 [ 2820.281900][T14358] rtnl_newlink_create+0x677/0xb00 [ 2820.281925][T14358] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 2820.281956][T14358] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 2820.281985][T14358] ? safesetid_security_capable+0xa9/0x1a0 [ 2820.282062][T14358] ? bpf_lsm_capable+0x9/0x20 [ 2820.282095][T14358] ? security_capable+0x7e/0x2e0 [ 2820.282142][T14358] ? rtnl_newlink+0x8e9/0x1c80 [ 2820.282165][T14358] rtnl_newlink+0x16e4/0x1c80 [ 2820.282195][T14358] ? __pfx_rtnl_newlink+0x10/0x10 [ 2820.282219][T14358] ? bpf_bprintf_prepare+0x146/0x13a0 [ 2820.282254][T14358] ? bpf_bprintf_prepare+0x11f0/0x13a0 [ 2820.282288][T14358] ? __lock_acquire+0xab9/0xd20 [ 2820.282324][T14358] ? __lock_acquire+0xab9/0xd20 [ 2820.282364][T14358] ? is_bpf_text_address+0x26/0x2b0 [ 2820.282402][T14358] ? is_bpf_text_address+0x292/0x2b0 [ 2820.282434][T14358] ? is_bpf_text_address+0x26/0x2b0 [ 2820.282472][T14358] ? __lock_acquire+0xab9/0xd20 [ 2820.282513][T14358] ? __pfx_rtnl_newlink+0x10/0x10 [ 2820.282534][T14358] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2820.282555][T14358] ? __lock_acquire+0xab9/0xd20 [ 2820.282584][T14358] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2820.282604][T14358] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2820.282635][T14358] netlink_rcv_skb+0x208/0x470 [ 2820.282657][T14358] ? __lock_acquire+0xab9/0xd20 [ 2820.282687][T14358] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2820.282709][T14358] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2820.282738][T14358] ? netlink_deliver_tap+0x2e/0x1b0 [ 2820.282768][T14358] netlink_unicast+0x846/0xa10 [ 2820.282793][T14358] ? __pfx_netlink_unicast+0x10/0x10 [ 2820.282815][T14358] ? netlink_sendmsg+0x642/0xb30 [ 2820.282838][T14358] ? skb_put+0x11b/0x210 [ 2820.282862][T14358] netlink_sendmsg+0x805/0xb30 [ 2820.282892][T14358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2820.282922][T14358] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2820.282953][T14358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2820.282979][T14358] __sock_sendmsg+0x21c/0x270 [ 2820.283013][T14358] ____sys_sendmsg+0x508/0x820 [ 2820.283042][T14358] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2820.283073][T14358] ? import_iovec+0x74/0xa0 [ 2820.283116][T14358] ___sys_sendmsg+0x21f/0x2a0 [ 2820.283151][T14358] ? __pfx____sys_sendmsg+0x10/0x10 [ 2820.283199][T14358] ? __fget_files+0x2a/0x420 [ 2820.283239][T14358] ? __fget_files+0x3a6/0x420 [ 2820.283273][T14358] __x64_sys_sendmsg+0x1a1/0x260 [ 2820.283301][T14358] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2820.283335][T14358] ? do_user_addr_fault+0xc85/0x1380 [ 2820.283365][T14358] ? do_syscall_64+0xbe/0xfa0 [ 2820.283399][T14358] do_syscall_64+0xfa/0xfa0 [ 2820.283431][T14358] ? lockdep_hardirqs_on+0x9c/0x150 [ 2820.283461][T14358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2820.283484][T14358] ? clear_bhb_loop+0x60/0xb0 [ 2820.283508][T14358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2820.283530][T14358] RIP: 0033:0x7f9baf0bf6c9 [ 2820.283550][T14358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2820.283569][T14358] RSP: 002b:00007f9bad305038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2820.283592][T14358] RAX: ffffffffffffffda RBX: 00007f9baf316090 RCX: 00007f9baf0bf6c9 [ 2820.283610][T14358] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2820.283624][T14358] RBP: 00007f9baf141f91 R08: 0000000000000000 R09: 0000000000000000 [ 2820.283637][T14358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2820.283651][T14358] R13: 00007f9baf316128 R14: 00007f9baf316090 R15: 00007ffe982cd298 [ 2820.283676][T14358] [ 2820.299618][T14358] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 2821.838218][T14358] syz.1.32814 (14358) used greatest stack depth: 15848 bytes left [ 2821.851376][T14325] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 2822.126963][T14325] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 2822.310353][T14325] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 2822.465255][ T1218] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 2822.475575][ T70] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 2822.485621][ T70] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 2822.492458][ T1218] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 256 - 0