last executing test programs: 53.133574891s ago: executing program 0 (id=4584): syz_mount_image$fuse(0x0, &(0x7f0000002400)='./file0\x00', 0x800, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1214c2, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x144) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x1ff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 52.824671907s ago: executing program 0 (id=4587): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x1, 0x1009, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf0000000000", @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 52.612305181s ago: executing program 0 (id=4589): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 52.284910727s ago: executing program 0 (id=4591): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 52.024761932s ago: executing program 0 (id=4593): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x109) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)=[0x6], 0x0, 0x0, 0x1}}, 0x40) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x51) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 50.440158493s ago: executing program 0 (id=4606): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000140)=ANY=[], 0xfd, 0x1cf, &(0x7f0000000440)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000001100)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file5\x00', 0x40, 0x0) 49.895084693s ago: executing program 32 (id=4606): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000140)=ANY=[], 0xfd, 0x1cf, &(0x7f0000000440)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000001100)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file5\x00', 0x40, 0x0) 3.705301669s ago: executing program 2 (id=5036): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0xe, 0x0, &(0x7f0000000740)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x3ad9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.523022873s ago: executing program 2 (id=5040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) 3.307299527s ago: executing program 2 (id=5044): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x3c}}, 0x0) 3.16875751s ago: executing program 4 (id=5047): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x18) 2.946530274s ago: executing program 2 (id=5050): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 2.835499086s ago: executing program 1 (id=5052): bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 2.740091198s ago: executing program 4 (id=5053): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x709000, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 2.577615771s ago: executing program 1 (id=5055): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040091}, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00800010003b15fd070000fbdbdf250000", @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c00028005000d"], 0x3c}}, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 2.495451442s ago: executing program 1 (id=5056): syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.448860343s ago: executing program 4 (id=5057): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x8000000000000, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 2.401296624s ago: executing program 3 (id=5058): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r2}, &(0x7f00000008c0), &(0x7f0000000900)=r1}, 0x20) 2.348535875s ago: executing program 1 (id=5059): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x3c}}, 0x0) 2.232838317s ago: executing program 3 (id=5060): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) 2.214215298s ago: executing program 4 (id=5061): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 2.09714683s ago: executing program 4 (id=5062): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0xfffffdef) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) 2.026345301s ago: executing program 1 (id=5063): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x4c8d4) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 1.868380875s ago: executing program 2 (id=5064): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040091}, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00800010003b15fd070000fbdbdf250000", @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c00028005000d"], 0x3c}}, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 1.620869489s ago: executing program 1 (id=5065): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff85000000"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 1.413332143s ago: executing program 33 (id=5065): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff85000000"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 1.400105653s ago: executing program 4 (id=5067): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000009000000070000000100008407000000030000000000000003000000005f5f5f7f615f5f"], &(0x7f0000000f80)=""/247, 0x39, 0xf7, 0x1}, 0x28) 1.177628228s ago: executing program 34 (id=5067): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000009000000070000000100008407000000030000000000000003000000005f5f5f7f615f5f"], &(0x7f0000000f80)=""/247, 0x39, 0xf7, 0x1}, 0x28) 1.171607518s ago: executing program 2 (id=5068): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 1.093175759s ago: executing program 35 (id=5068): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 1.03542212s ago: executing program 3 (id=5070): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 552.80589ms ago: executing program 3 (id=5071): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 254.823875ms ago: executing program 3 (id=5072): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x3c}}, 0x0) 0s ago: executing program 3 (id=5073): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='timer_start\x00', r3}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) kernel console output (not intermixed with test programs): [ 282.871064][T10491] Use struct sctp_assoc_value instead [ 285.005021][T10571] sctp: [Deprecated]: syz.1.1585 (pid 10571) Use of int in max_burst socket option. [ 285.005021][T10571] Use struct sctp_assoc_value instead [ 286.773036][T10623] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 286.786057][T10623] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 287.813062][T10653] kvm: pic: non byte write [ 288.285681][T10680] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 288.297757][T10680] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 291.408501][T10781] netlink: 'syz.1.1660': attribute type 3 has an invalid length. [ 291.428675][T10781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1660'. [ 293.635990][ T28] audit: type=1326 audit(1757300203.703:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10836 comm="syz.3.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6f98ebe9 code=0x7ffc0000 [ 293.684882][ T28] audit: type=1326 audit(1757300203.733:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10836 comm="syz.3.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6f98ebe9 code=0x7ffc0000 [ 293.721109][ T28] audit: type=1326 audit(1757300203.733:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10836 comm="syz.3.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6f98ebe9 code=0x7ffc0000 [ 293.773027][ T28] audit: type=1326 audit(1757300203.733:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10836 comm="syz.3.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6f98ebe9 code=0x7ffc0000 [ 293.799685][ T28] audit: type=1326 audit(1757300203.733:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10836 comm="syz.3.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6f98ebe9 code=0x7ffc0000 [ 293.822611][ T28] audit: type=1326 audit(1757300203.733:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10836 comm="syz.3.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f8c6f98ebe9 code=0x7ffc0000 [ 293.845617][ T28] audit: type=1326 audit(1757300203.733:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10836 comm="syz.3.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6f98ebe9 code=0x7ffc0000 [ 293.890190][ T28] audit: type=1326 audit(1757300203.733:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10836 comm="syz.3.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6f98ebe9 code=0x7ffc0000 [ 293.942208][ T28] audit: type=1326 audit(1757300203.733:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10836 comm="syz.3.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8c6f98ebe9 code=0x7ffc0000 [ 293.991293][ T28] audit: type=1326 audit(1757300203.733:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10836 comm="syz.3.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8c6f98ebe9 code=0x7ffc0000 [ 295.589703][T10896] trusted_key: syz.0.1698 sent an empty control message without MSG_MORE. [ 299.782258][ T28] kauditd_printk_skb: 400 callbacks suppressed [ 299.782271][ T28] audit: type=1326 audit(1757300209.853:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.2.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 299.829137][ T28] audit: type=1326 audit(1757300209.883:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.2.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 299.852869][ T28] audit: type=1326 audit(1757300209.883:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.2.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 299.908724][ T28] audit: type=1326 audit(1757300209.883:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.2.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 299.979927][ T28] audit: type=1326 audit(1757300209.883:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.2.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 300.004708][ T28] audit: type=1326 audit(1757300209.883:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.2.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 300.035071][ T28] audit: type=1326 audit(1757300209.883:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.2.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 300.083837][ T28] audit: type=1326 audit(1757300209.883:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.2.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 300.142382][ T28] audit: type=1326 audit(1757300209.883:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.2.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 303.301053][T11130] syz.1.1783(11130): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 304.288083][ T28] audit: type=1326 audit(1757300214.353:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11166 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d63f8ebe9 code=0x7ffc0000 [ 316.752330][T11472] ucma_write: process 1122 (syz.3.1906) changed security contexts after opening file descriptor, this is not allowed. [ 316.884819][T11478] sctp: [Deprecated]: syz.3.1910 (pid 11478) Use of int in max_burst socket option. [ 316.884819][T11478] Use struct sctp_assoc_value instead [ 317.445902][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.452661][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.324084][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 319.324097][ T28] audit: type=1326 audit(1757300229.393:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.1.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc38ebe9 code=0x7ffc0000 [ 319.415109][ T28] audit: type=1326 audit(1757300229.393:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.1.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc38ebe9 code=0x7ffc0000 [ 319.469632][ T28] audit: type=1326 audit(1757300229.393:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.1.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc38ebe9 code=0x7ffc0000 [ 319.533958][ T28] audit: type=1326 audit(1757300229.393:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.1.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc38ebe9 code=0x7ffc0000 [ 319.608914][ T28] audit: type=1326 audit(1757300229.393:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.1.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc38ebe9 code=0x7ffc0000 [ 319.659937][ T28] audit: type=1326 audit(1757300229.423:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.1.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fcfdc38ebe9 code=0x7ffc0000 [ 319.735613][ T28] audit: type=1326 audit(1757300229.423:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.1.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc38ebe9 code=0x7ffc0000 [ 319.820965][ T28] audit: type=1326 audit(1757300229.423:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.1.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc38ebe9 code=0x7ffc0000 [ 319.889439][ T28] audit: type=1326 audit(1757300229.423:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.1.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc38ebe9 code=0x7ffc0000 [ 319.962858][ T28] audit: type=1326 audit(1757300229.423:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.1.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcfdc38ebe9 code=0x7ffc0000 [ 324.603274][T11712] loop2: detected capacity change from 0 to 128 [ 325.606981][T11752] loop0: detected capacity change from 0 to 256 [ 326.176223][T11767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2027'. [ 326.416189][T11775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2032'. [ 326.445749][T11775] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.489052][T11775] vlan2: entered allmulticast mode [ 326.494530][T11775] bond1: entered allmulticast mode [ 326.529228][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2034'. [ 326.543341][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2034'. [ 328.012645][T11831] kvm: pic: non byte write [ 328.017241][T11831] kvm: pic: non byte write [ 328.623914][T11852] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4174239577 (267151332928 ns) > initial count (251236570432 ns). Using initial count to start timer. [ 328.884847][T11858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2066'. [ 328.920837][T11858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 328.944543][T11858] vlan2: entered allmulticast mode [ 328.950051][T11858] bond1: entered allmulticast mode [ 330.049186][T11893] fuse: Bad value for 'fd' [ 330.059467][T11893] bridge0: entered allmulticast mode [ 331.735737][T11939] loop3: detected capacity change from 0 to 256 [ 335.130855][T12042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2139'. [ 336.135483][T12076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2152'. [ 336.317460][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 336.317473][ T28] audit: type=1326 audit(1757300246.383:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12087 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc38ebe9 code=0x7ffc0000 [ 336.347953][ T28] audit: type=1326 audit(1757300246.383:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12087 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc38ebe9 code=0x7ffc0000 [ 336.373029][ T28] audit: type=1326 audit(1757300246.423:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12087 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfdc38ebe9 code=0x7ffc0000 [ 336.399468][ T28] audit: type=1326 audit(1757300246.423:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12087 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc38ebe9 code=0x7ffc0000 [ 336.429091][ T28] audit: type=1326 audit(1757300246.423:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12087 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc38ebe9 code=0x7ffc0000 [ 336.459117][ T28] audit: type=1326 audit(1757300246.443:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12087 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfdc38ebe9 code=0x7ffc0000 [ 336.488193][ T28] audit: type=1326 audit(1757300246.443:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12087 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc38ebe9 code=0x7ffc0000 [ 336.517138][ T28] audit: type=1326 audit(1757300246.443:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12087 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc38ebe9 code=0x7ffc0000 [ 336.562387][ T28] audit: type=1326 audit(1757300246.463:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12087 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fcfdc38ebe9 code=0x7ffc0000 [ 336.585412][ T28] audit: type=1326 audit(1757300246.463:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12087 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfdc38ebe9 code=0x7ffc0000 [ 337.349772][T12127] loop0: detected capacity change from 0 to 136 [ 337.400590][T12127] overlayfs: overlapping lowerdir path [ 341.804244][T12277] loop3: detected capacity change from 0 to 7 [ 341.829425][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.838922][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 341.852391][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.861672][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 341.873086][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.882410][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 341.893295][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.902547][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 341.912408][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.921721][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 341.933173][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.942425][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 341.960176][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.969444][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 341.978911][T12277] ldm_validate_partition_table(): Disk read failed. [ 341.990721][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.999962][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 342.008547][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 342.017784][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 342.026188][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 342.035519][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 342.044829][T12277] Dev loop3: unable to read RDB block 0 [ 342.052366][T12277] loop3: unable to read partition table [ 342.058393][T12277] loop3: partition table beyond EOD, truncated [ 342.068905][T12277] loop_reread_partitions: partition scan of loop3 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 342.221123][T12285] IPv6: addrconf: prefix option has invalid lifetime [ 342.525611][T12293] loop3: detected capacity change from 0 to 1764 [ 342.853174][T12308] loop2: detected capacity change from 0 to 256 [ 343.165484][T12319] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 344.255009][T12352] lo speed is unknown, defaulting to 1000 [ 344.346982][T12351] sctp: [Deprecated]: syz.3.2255 (pid 12351) Use of int in max_burst socket option. [ 344.346982][T12351] Use struct sctp_assoc_value instead [ 344.758829][T12371] loop1: detected capacity change from 0 to 256 [ 345.102314][T12376] sctp: [Deprecated]: syz.2.2266 (pid 12376) Use of int in max_burst socket option. [ 345.102314][T12376] Use struct sctp_assoc_value instead [ 346.766561][T12420] ip6tnl1: entered allmulticast mode [ 347.418769][T12433] loop3: detected capacity change from 0 to 128 [ 347.434056][T12433] FAT-fs (loop3): Directory bread(block 414) failed [ 347.444406][T12433] FAT-fs (loop3): Directory bread(block 415) failed [ 347.453943][T12433] FAT-fs (loop3): Directory bread(block 416) failed [ 347.470596][T12433] FAT-fs (loop3): Directory bread(block 417) failed [ 347.492721][T12433] FAT-fs (loop3): Directory bread(block 418) failed [ 347.510874][T12433] FAT-fs (loop3): Directory bread(block 419) failed [ 347.517552][T12433] FAT-fs (loop3): Directory bread(block 420) failed [ 347.545046][T12433] FAT-fs (loop3): Directory bread(block 421) failed [ 347.566991][T12433] FAT-fs (loop3): Directory bread(block 414) failed [ 347.579705][T12433] FAT-fs (loop3): Directory bread(block 415) failed [ 349.076109][T12467] sctp: [Deprecated]: syz.3.2304 (pid 12467) Use of int in max_burst socket option. [ 349.076109][T12467] Use struct sctp_assoc_value instead [ 349.619346][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 349.619359][ T28] audit: type=1326 audit(1757300259.683:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12493 comm="syz.2.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 349.652145][ T28] audit: type=1326 audit(1757300259.683:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12493 comm="syz.2.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 349.677858][ T28] audit: type=1326 audit(1757300259.693:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12493 comm="syz.2.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 349.736263][ T28] audit: type=1326 audit(1757300259.693:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12493 comm="syz.2.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 349.751967][T12498] sctp: [Deprecated]: syz.2.2315 (pid 12498) Use of int in max_burst socket option. [ 349.751967][T12498] Use struct sctp_assoc_value instead [ 349.761358][ T28] audit: type=1326 audit(1757300259.693:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12493 comm="syz.2.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 349.799726][ T28] audit: type=1326 audit(1757300259.693:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12493 comm="syz.2.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 349.823305][ T28] audit: type=1326 audit(1757300259.693:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12493 comm="syz.2.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 349.852145][ T28] audit: type=1326 audit(1757300259.693:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12493 comm="syz.2.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 349.875647][ T28] audit: type=1326 audit(1757300259.693:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12493 comm="syz.2.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 349.912621][ T28] audit: type=1326 audit(1757300259.693:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12493 comm="syz.2.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 350.502406][T12512] program syz.1.2321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.539230][T12516] batadv_slave_1: entered promiscuous mode [ 350.561211][T12515] batadv_slave_1: left promiscuous mode [ 350.716722][T12524] pim6reg1: entered allmulticast mode [ 351.721807][ T5791] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 351.733121][ T5791] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 351.742786][ T5791] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 351.753074][ T5791] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 351.776733][ T5791] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 351.784992][ T5791] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 351.971124][T12551] lo speed is unknown, defaulting to 1000 [ 352.536335][ T6308] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.622934][T12551] chnl_net:caif_netlink_parms(): no params data found [ 352.702970][ T6308] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.808870][ T6308] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.858344][T12551] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.873415][T12551] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.897031][T12551] bridge_slave_0: entered allmulticast mode [ 352.912205][T12551] bridge_slave_0: entered promiscuous mode [ 352.935720][ T6308] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.949188][T12551] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.957884][T12551] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.967175][T12551] bridge_slave_1: entered allmulticast mode [ 352.975352][T12551] bridge_slave_1: entered promiscuous mode [ 353.012898][T12551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.027217][T12551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.109085][T12551] team0: Port device team_slave_0 added [ 353.124718][T12551] team0: Port device team_slave_1 added [ 353.226758][T12551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.236933][T12551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.265362][T12551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.278414][T12551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.292593][T12551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.319181][T12551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.433453][T12551] hsr_slave_0: entered promiscuous mode [ 353.440205][T12551] hsr_slave_1: entered promiscuous mode [ 353.447609][T12551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.469608][T12551] Cannot create hsr debugfs directory [ 353.849710][ T50] Bluetooth: hci4: command tx timeout [ 353.868880][T12605] sctp: [Deprecated]: syz.3.2348 (pid 12605) Use of int in max_burst socket option. [ 353.868880][T12605] Use struct sctp_assoc_value instead [ 354.735196][T12636] loop2: detected capacity change from 0 to 8192 [ 355.138042][T12645] sctp: [Deprecated]: syz.0.2358 (pid 12645) Use of int in max_burst socket option. [ 355.138042][T12645] Use struct sctp_assoc_value instead [ 355.540010][T12551] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 355.713082][T12551] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 355.746884][T12551] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 355.761749][T12551] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 355.889217][ T6308] hsr_slave_0: left promiscuous mode [ 355.921582][ T6308] hsr_slave_1: left promiscuous mode [ 355.939614][ T50] Bluetooth: hci4: command tx timeout [ 356.030612][ T6308] veth1_macvtap: left promiscuous mode [ 356.068286][ T6308] veth0_macvtap: left promiscuous mode [ 356.090279][ T6308] veth1_vlan: left promiscuous mode [ 356.096011][ T6308] veth0_vlan: left promiscuous mode [ 356.730190][ T6308] bond1 (unregistering): Released all slaves [ 358.009771][ T50] Bluetooth: hci4: command tx timeout [ 358.494530][ T6308] bond0 (unregistering): Released all slaves [ 358.669016][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 358.669030][ T28] audit: type=1326 audit(1757300268.733:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12738 comm="syz.3.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6f98ebe9 code=0x7ffc0000 [ 358.708952][ T28] audit: type=1326 audit(1757300268.733:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12738 comm="syz.3.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6f98ebe9 code=0x7ffc0000 [ 358.791621][T12551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.798977][ T28] audit: type=1326 audit(1757300268.743:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12738 comm="syz.3.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f8c6f98ebe9 code=0x7ffc0000 [ 358.866648][T12551] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.877496][ T28] audit: type=1326 audit(1757300268.743:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12738 comm="syz.3.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6f98ebe9 code=0x7ffc0000 [ 358.922156][ T6310] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.930384][ T6310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.963616][ T28] audit: type=1326 audit(1757300268.743:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12738 comm="syz.3.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6f98ebe9 code=0x7ffc0000 [ 358.991819][ T6310] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.998999][ T6310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.623135][T12551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.706165][T12551] veth0_vlan: entered promiscuous mode [ 359.743622][T12551] veth1_vlan: entered promiscuous mode [ 359.826071][T12551] veth0_macvtap: entered promiscuous mode [ 359.855018][T12551] veth1_macvtap: entered promiscuous mode [ 359.880245][T12551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.891166][T12551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.909119][T12551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.941427][T12551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.953232][T12551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.964523][T12551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.976677][T12551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.000814][T12551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.014242][T12551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.024532][T12551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.067121][T12551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.080621][ T50] Bluetooth: hci4: command tx timeout [ 360.119743][T12551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.140611][T12551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.178985][T12551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.203506][T12782] sctp: [Deprecated]: syz.3.2398 (pid 12782) Use of int in max_burst socket option. [ 360.203506][T12782] Use struct sctp_assoc_value instead [ 360.229623][T12551] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.238401][T12551] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.250826][T12551] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.260653][T12551] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.443131][ T6305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.465847][ T6305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.558614][ T6321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.592046][ T6321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.393509][T12811] sctp: [Deprecated]: syz.1.2406 (pid 12811) Use of int in max_burst socket option. [ 361.393509][T12811] Use struct sctp_assoc_value instead [ 362.201892][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.212642][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.221833][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.231367][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.239266][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 362.248096][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.341010][T12826] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 362.494715][T12823] lo speed is unknown, defaulting to 1000 [ 362.903119][T12823] chnl_net:caif_netlink_parms(): no params data found [ 362.984030][T12844] sctp: [Deprecated]: syz.0.2418 (pid 12844) Use of int in max_burst socket option. [ 362.984030][T12844] Use struct sctp_assoc_value instead [ 363.159365][T12823] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.178972][T12823] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.196848][T12823] bridge_slave_0: entered allmulticast mode [ 363.213034][T12823] bridge_slave_0: entered promiscuous mode [ 363.230613][T12823] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.248055][T12823] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.257817][T12823] bridge_slave_1: entered allmulticast mode [ 363.267582][T12823] bridge_slave_1: entered promiscuous mode [ 363.306346][T12823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.321170][T12823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.384266][T12823] team0: Port device team_slave_0 added [ 363.398315][T12823] team0: Port device team_slave_1 added [ 363.506031][T12823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.515370][T12823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.562387][T12823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.648628][ T1320] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.674757][T12823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.686587][T12823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.729606][T12823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.847073][ T1320] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.938228][T12823] hsr_slave_0: entered promiscuous mode [ 363.969250][T12823] hsr_slave_1: entered promiscuous mode [ 363.977789][T12823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.991698][T12823] Cannot create hsr debugfs directory [ 364.081646][ T1320] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.165236][ T1320] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.319877][ T5791] Bluetooth: hci2: command tx timeout [ 364.526554][ T1320] tipc: Left network mode [ 365.564554][T12823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 365.597079][T12823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 365.626822][T12923] tmpfs: Bad value for 'mpol' [ 365.659756][T12823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 365.680635][T12823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 366.312292][ T1320] hsr_slave_0: left promiscuous mode [ 366.332123][ T1320] hsr_slave_1: left promiscuous mode [ 366.347590][ T1320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.368720][ T1320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.384458][ T1320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.399742][ T5791] Bluetooth: hci2: command tx timeout [ 366.419698][ T1320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.429327][ T1320] bridge_slave_1: left allmulticast mode [ 366.438741][ T1320] bridge_slave_1: left promiscuous mode [ 366.456881][ T1320] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.475773][ T1320] bridge_slave_0: left allmulticast mode [ 366.492881][ T1320] bridge_slave_0: left promiscuous mode [ 366.505075][ T1320] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.576761][ T1320] veth1_macvtap: left promiscuous mode [ 366.590992][ T1320] veth0_macvtap: left promiscuous mode [ 366.604255][ T1320] veth1_vlan: left promiscuous mode [ 366.613418][ T1320] veth0_vlan: left promiscuous mode [ 367.226099][ T1320] team0 (unregistering): Port device team_slave_1 removed [ 367.279240][ T1320] team0 (unregistering): Port device team_slave_0 removed [ 367.327929][ T1320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.390324][ T1320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.707713][ T1320] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 368.026203][ T1320] bond0 (unregistering): Released all slaves [ 368.116351][ T5886] lo speed is unknown, defaulting to 1000 [ 368.120235][T12823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.198510][T12823] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.263643][ T6310] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.270891][ T6310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.296520][ T28] audit: type=1326 audit(1757300278.363:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 368.363033][ T6310] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.370248][ T6310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.373270][ T28] audit: type=1326 audit(1757300278.413:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 368.449703][ T28] audit: type=1326 audit(1757300278.413:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 368.479743][ T5791] Bluetooth: hci2: command tx timeout [ 368.529729][ T28] audit: type=1326 audit(1757300278.413:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 368.576127][ T28] audit: type=1326 audit(1757300278.413:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 368.617270][T12989] program syz.0.2459 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.665546][ T28] audit: type=1326 audit(1757300278.413:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 368.748804][ T28] audit: type=1326 audit(1757300278.413:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 368.809840][ T28] audit: type=1326 audit(1757300278.413:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489218ebe9 code=0x7ffc0000 [ 369.005112][T12823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.065338][T12823] veth0_vlan: entered promiscuous mode [ 369.076934][T12823] veth1_vlan: entered promiscuous mode [ 369.137167][T12823] veth0_macvtap: entered promiscuous mode [ 369.154229][T12823] veth1_macvtap: entered promiscuous mode [ 369.176886][T12823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.191455][T12823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.204038][T12823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.218280][T12823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.233092][T12823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.244804][T12823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.259354][T12823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.277919][T12823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.288679][T12823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.299418][T12823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.310722][T12823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.321144][T12823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.331909][T12823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.343873][T12823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.373410][T12823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.399643][T12823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.408399][T12823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.454673][T12823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.639361][ T6310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.677204][ T6310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.680375][ T6308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.705729][ T6308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.484622][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 370.499298][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 370.508616][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 370.518228][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 370.527174][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 370.535024][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 370.560299][ T5791] Bluetooth: hci2: command tx timeout [ 370.702660][ T28] audit: type=1326 audit(1757300280.763:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13021 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489218ebe9 code=0x7fc00000 [ 371.027321][T13037] chnl_net:caif_netlink_parms(): no params data found [ 371.360286][T13037] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.368307][T13037] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.417561][T13037] bridge_slave_0: entered allmulticast mode [ 371.441651][T13037] bridge_slave_0: entered promiscuous mode [ 371.473626][T13037] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.491290][T13037] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.498563][T13037] bridge_slave_1: entered allmulticast mode [ 371.526730][T13037] bridge_slave_1: entered promiscuous mode [ 371.589864][T13068] loop3: detected capacity change from 0 to 8192 [ 371.683327][T13037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.722797][T13037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.979275][T13037] team0: Port device team_slave_0 added [ 371.995873][T13037] team0: Port device team_slave_1 added [ 372.236505][ T6310] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.280259][T13037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.288061][T13037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.325807][T13037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.355536][T13037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.376772][T13037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.414287][T13037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.518918][ T6310] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.560455][ T5791] Bluetooth: hci3: command tx timeout [ 372.694967][ T6310] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.724824][T13037] hsr_slave_0: entered promiscuous mode [ 372.752266][T13037] hsr_slave_1: entered promiscuous mode [ 372.858129][ T6310] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.301506][T13037] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 374.334355][T13037] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 374.395644][T13037] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 374.414901][T13037] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 374.641459][ T5791] Bluetooth: hci3: command tx timeout [ 375.126372][ T6310] hsr_slave_0: left promiscuous mode [ 375.177985][ T6310] 0: left promiscuous mode [ 375.239861][ T6310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.247718][ T6310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.300245][ T6310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.307713][ T6310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.368896][ T6310] bridge_slave_1: left allmulticast mode [ 375.374718][ T6310] bridge_slave_1: left promiscuous mode [ 375.384815][ T6310] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.406620][ T6310] bridge_slave_0: left allmulticast mode [ 375.418241][ T6310] bridge_slave_0: left promiscuous mode [ 375.438841][ T6310] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.543953][ T6310] veth1_macvtap: left promiscuous mode [ 375.566058][ T6310] veth0_macvtap: left promiscuous mode [ 375.584132][ T6310] veth1_vlan: left promiscuous mode [ 375.601444][ T6310] veth0_vlan: left promiscuous mode [ 376.029402][ T6310] bond2 (unregistering): Released all slaves [ 376.656868][ T6310] bond1 (unregistering): Released all slaves [ 376.720725][ T5791] Bluetooth: hci3: command tx timeout [ 377.128513][T13197] program syz.2.2515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.556436][ T6310] team0 (unregistering): Port device team_slave_1 removed [ 378.725267][ T6310] team0 (unregistering): Port device team_slave_0 removed [ 378.800670][ T5791] Bluetooth: hci3: command tx timeout [ 378.887362][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.896809][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.901350][T13233] program syz.3.2526 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.920427][ T6310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.031152][ T6310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.140924][T13236] kvm: pic: non byte write [ 379.145951][T13236] kvm: pic: non byte write [ 379.151623][T13236] kvm: pic: non byte write [ 379.156180][T13236] kvm: pic: non byte write [ 379.169299][T13236] kvm: pic: non byte write [ 379.174341][T13236] kvm: pic: non byte write [ 379.179195][T13236] kvm: pic: non byte write [ 379.189594][T13236] kvm: pic: non byte write [ 379.194656][T13236] kvm: pic: non byte write [ 379.205834][T13236] kvm: pic: non byte write [ 379.219878][T13236] kvm: pic: single mode not supported [ 380.078263][ T6310] bond0 (unregistering): Released all slaves [ 380.191969][T13037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.197490][T13262] program syz.3.2537 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 380.333623][T13037] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.379547][ T6305] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.386763][ T6305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.452930][ T6305] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.460155][ T6305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.995315][T13037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.120944][T13037] veth0_vlan: entered promiscuous mode [ 381.148961][T13037] veth1_vlan: entered promiscuous mode [ 381.214026][T13037] veth0_macvtap: entered promiscuous mode [ 381.244631][T13037] veth1_macvtap: entered promiscuous mode [ 381.308995][T13037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.339666][T13037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.357024][T13037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.375784][T13037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.409683][T13037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.433614][T13037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.454247][T13037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.491015][T13037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.507434][T13037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.518910][T13037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.539655][T13037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.551086][T13037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.561667][T13037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.586168][T13037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.652122][T13037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.662830][T13037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.674685][T13305] trusted_key: encrypted_key: keyword 'nuw' not recognized [ 381.675595][T13037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.695719][T13037] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.877582][ T6316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.910620][ T6316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.003337][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.029636][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.840975][T13297] syz.3.2549 (13297) used greatest stack depth: 19752 bytes left [ 383.073504][T13329] sctp: [Deprecated]: syz.1.2561 (pid 13329) Use of int in max_burst socket option. [ 383.073504][T13329] Use struct sctp_assoc_value instead [ 383.107082][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 383.129822][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 383.142428][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 383.164911][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 383.176648][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 383.187024][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 383.501092][T13341] loop0: detected capacity change from 0 to 128 [ 383.817787][T13351] sctp: [Deprecated]: syz.3.2570 (pid 13351) Use of int in max_burst socket option. [ 383.817787][T13351] Use struct sctp_assoc_value instead [ 383.889913][T13330] chnl_net:caif_netlink_parms(): no params data found [ 384.086616][T13360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2572'. [ 384.848081][T13360] team0 (unregistering): Port device team_slave_0 removed [ 384.885064][T13360] team0 (unregistering): Port device team_slave_1 removed [ 385.081174][T13382] sctp: [Deprecated]: syz.1.2579 (pid 13382) Use of int in max_burst socket option. [ 385.081174][T13382] Use struct sctp_assoc_value instead [ 385.120519][T13330] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.127676][T13330] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.144234][T13330] bridge_slave_0: entered allmulticast mode [ 385.155338][T13330] bridge_slave_0: entered promiscuous mode [ 385.168138][T13330] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.178390][T13330] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.201976][T13330] bridge_slave_1: entered allmulticast mode [ 385.228953][T13330] bridge_slave_1: entered promiscuous mode [ 385.280169][ T5791] Bluetooth: hci0: command tx timeout [ 385.384733][T13330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.413293][T13330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.507365][T13330] team0: Port device team_slave_0 added [ 385.581938][T13330] team0: Port device team_slave_1 added [ 385.734827][T13330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.760352][T13330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.840612][T13330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.840855][T13406] sctp: [Deprecated]: syz.0.2589 (pid 13406) Use of int in max_burst socket option. [ 385.840855][T13406] Use struct sctp_assoc_value instead [ 385.861698][T13330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.878825][T13330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.917930][T13330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.013886][T13330] hsr_slave_0: entered promiscuous mode [ 386.033751][T13330] hsr_slave_1: entered promiscuous mode [ 386.048077][T13330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.063496][T13330] Cannot create hsr debugfs directory [ 386.327652][T13423] loop1: detected capacity change from 0 to 256 [ 386.462218][T13330] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.555574][T13330] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.697326][T13330] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.792974][T13330] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.844642][T13432] sctp: [Deprecated]: syz.3.2599 (pid 13432) Use of int in max_burst socket option. [ 386.844642][T13432] Use struct sctp_assoc_value instead [ 387.068832][T13330] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 387.114321][T13330] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 387.149123][T13330] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 387.186928][T13330] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 387.359654][ T5791] Bluetooth: hci0: command tx timeout [ 387.428071][T13330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.459156][T13330] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.482769][ T6310] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.489964][ T6310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.530402][ T6310] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.537642][ T6310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.099081][T13330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.246653][T13330] veth0_vlan: entered promiscuous mode [ 388.292590][T13330] veth1_vlan: entered promiscuous mode [ 388.391754][T13330] veth0_macvtap: entered promiscuous mode [ 388.510912][T13330] veth1_macvtap: entered promiscuous mode [ 388.559363][T13330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.581909][T13330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.598063][T13330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.610878][T13330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.637314][T13330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.683333][T13330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.693562][T13330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.704449][T13330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.716472][T13330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.741401][T13330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.769590][T13330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.794758][T13330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.814143][T13330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.824190][T13330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.839613][T13330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.854573][T13330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.865399][T13330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.897688][T13330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.920527][T13330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.929401][T13330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.938447][T13330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.959553][T13330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.014343][T13481] loop0: detected capacity change from 0 to 256 [ 389.197781][ T6316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.221395][ T6316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.350493][ T6303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.366403][ T6303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.442127][ T5791] Bluetooth: hci0: command tx timeout [ 389.996631][T13505] loop3: detected capacity change from 0 to 764 [ 390.476165][T13517] Cannot find set identified by id 65534 to match [ 390.846808][T13531] sctp: [Deprecated]: syz.0.2634 (pid 13531) Use of int in max_burst socket option. [ 390.846808][T13531] Use struct sctp_assoc_value instead [ 391.368462][T13545] overlayfs: disabling nfs_export due to verity=require [ 391.389745][T13545] overlayfs: conflicting options: userxattr,verity=require [ 391.520809][ T5791] Bluetooth: hci0: command tx timeout [ 391.788576][T13554] sctp: [Deprecated]: syz.0.2644 (pid 13554) Use of int in max_burst socket option. [ 391.788576][T13554] Use struct sctp_assoc_value instead [ 392.539993][T13583] sctp: [Deprecated]: syz.1.2657 (pid 13583) Use of int in max_burst socket option. [ 392.539993][T13583] Use struct sctp_assoc_value instead [ 392.711192][T13587] loop2: detected capacity change from 0 to 256 [ 392.787263][T13587] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 392.834866][T13587] FAT-fs (loop2): Filesystem has been set read-only [ 392.855080][T13587] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 392.889681][T13587] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 392.919141][ T28] audit: type=1800 audit(1757300302.983:2809): pid=13587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2660" name="file1" dev="loop2" ino=1048616 res=0 errno=0 [ 392.956484][T13592] program syz.1.2661 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 393.455804][T13605] sctp: [Deprecated]: syz.0.2667 (pid 13605) Use of int in max_burst socket option. [ 393.455804][T13605] Use struct sctp_assoc_value instead [ 394.183912][T13633] sctp: [Deprecated]: syz.3.2678 (pid 13633) Use of int in max_burst socket option. [ 394.183912][T13633] Use struct sctp_assoc_value instead [ 397.146290][T13730] veth0_to_bridge: entered promiscuous mode [ 397.189248][T13729] veth0_to_bridge: left promiscuous mode [ 397.376584][T13732] kvm: pic: non byte write [ 397.395975][T13732] kvm: pic: non byte write [ 397.406355][T13732] kvm: pic: level sensitive irq not supported [ 398.073522][T13753] program syz.3.2723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 398.507827][T13766] kvm: pic: non byte write [ 398.525425][T13766] kvm: pic: non byte write [ 398.541720][T13766] kvm: pic: level sensitive irq not supported [ 399.920112][T13801] syz.0.2740 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 400.002111][T13805] program syz.0.2742 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.397459][T13818] xt_hashlimit: max too large, truncated to 1048576 [ 401.268060][T13831] loop0: detected capacity change from 0 to 256 [ 401.310694][T13831] FAT-fs (loop0): bogus number of FAT sectors [ 401.316833][T13831] FAT-fs (loop0): Can't find a valid FAT filesystem [ 404.470916][T13884] sctp: [Deprecated]: syz.2.2773 (pid 13884) Use of int in max_burst socket option. [ 404.470916][T13884] Use struct sctp_assoc_value instead [ 405.266220][T13909] sctp: [Deprecated]: syz.2.2784 (pid 13909) Use of int in max_burst socket option. [ 405.266220][T13909] Use struct sctp_assoc_value instead [ 405.662638][T13925] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 405.674712][ T5822] kernel write not supported for file /150/clear_refs (pid: 5822 comm: kworker/1:4) [ 406.009236][T13935] sctp: [Deprecated]: syz.2.2795 (pid 13935) Use of int in max_burst socket option. [ 406.009236][T13935] Use struct sctp_assoc_value instead [ 406.294632][ T28] audit: type=1326 audit(1757300316.363:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13943 comm="syz.0.2799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff066b8ebe9 code=0x7ffc0000 [ 406.390175][ T28] audit: type=1326 audit(1757300316.383:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13943 comm="syz.0.2799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff066b8ebe9 code=0x7ffc0000 [ 406.485700][ T28] audit: type=1326 audit(1757300316.403:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13943 comm="syz.0.2799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7ff066b8ebe9 code=0x7ffc0000 [ 406.546450][ T28] audit: type=1326 audit(1757300316.414:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13943 comm="syz.0.2799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff066b8ebe9 code=0x7ffc0000 [ 406.607291][ T28] audit: type=1326 audit(1757300316.414:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13943 comm="syz.0.2799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff066b8ebe9 code=0x7ffc0000 [ 406.930822][T13963] sctp: [Deprecated]: syz.2.2806 (pid 13963) Use of int in max_burst socket option. [ 406.930822][T13963] Use struct sctp_assoc_value instead [ 408.347275][T13989] sctp: [Deprecated]: syz.2.2816 (pid 13989) Use of int in max_burst socket option. [ 408.347275][T13989] Use struct sctp_assoc_value instead [ 409.094829][T14008] loop1: detected capacity change from 0 to 128 [ 411.378858][T14062] sctp: [Deprecated]: syz.1.2845 (pid 14062) Use of int in max_burst socket option. [ 411.378858][T14062] Use struct sctp_assoc_value instead [ 412.041510][T14088] sctp: [Deprecated]: syz.3.2855 (pid 14088) Use of int in max_burst socket option. [ 412.041510][T14088] Use struct sctp_assoc_value instead [ 412.135958][T14087] loop0: detected capacity change from 0 to 8192 [ 412.335884][T14094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2858'. [ 412.848044][T14110] sctp: [Deprecated]: syz.1.2864 (pid 14110) Use of int in max_burst socket option. [ 412.848044][T14110] Use struct sctp_assoc_value instead [ 413.720217][T14141] sctp: [Deprecated]: syz.3.2877 (pid 14141) Use of int in max_burst socket option. [ 413.720217][T14141] Use struct sctp_assoc_value instead [ 413.741074][T14143] program syz.0.2878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 414.862976][T14168] program syz.1.2887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.033157][T14174] sctp: [Deprecated]: syz.1.2888 (pid 14174) Use of int in max_burst socket option. [ 415.033157][T14174] Use struct sctp_assoc_value instead [ 415.745941][T14195] program syz.1.2896 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 416.038170][T14201] kvm: kvm [14200]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5407 [ 416.058417][T14201] kvm: kvm [14200]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5b07 [ 418.119275][T14243] vlan2: entered promiscuous mode [ 418.124666][T14243] gretap0: entered promiscuous mode [ 418.130622][T14242] vlan2: left promiscuous mode [ 418.136206][T14242] gretap0: left promiscuous mode [ 418.546552][T14251] loop0: detected capacity change from 0 to 128 [ 419.033038][T14265] tc_dump_action: action bad kind [ 419.423419][T14277] netlink: 'syz.3.2927': attribute type 17 has an invalid length. [ 423.377707][T14351] loop0: detected capacity change from 0 to 8192 [ 423.417928][T14351] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 425.763251][T14406] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 425.782035][T14406] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 425.821098][T14406] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 429.154958][T14518] loop1: detected capacity change from 0 to 8192 [ 429.235291][T14518] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 429.411484][T14518] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 430.804284][ T5886] kernel write not supported for file bpf-prog (pid: 5886 comm: kworker/0:4) [ 431.600083][T14609] sctp: [Deprecated]: syz.2.3048 (pid 14609) Use of int in max_burst socket option. [ 431.600083][T14609] Use struct sctp_assoc_value instead [ 432.010968][T14624] fuse: Bad value for 'fd' [ 433.815518][T14695] tmpfs: Bad value for 'mpol' [ 434.883112][T14741] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 434.896478][T14741] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 436.000135][T14771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3115'. [ 436.023276][T14771] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3115'. [ 436.041540][T14771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3115'. [ 436.052964][T14771] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3115'. [ 436.396658][ T28] audit: type=1326 audit(1757300346.479:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14788 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ddc38ebe9 code=0x7ffc0000 [ 436.491464][ T28] audit: type=1326 audit(1757300346.479:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14788 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ddc38ebe9 code=0x7ffc0000 [ 436.562849][ T28] audit: type=1326 audit(1757300346.529:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14788 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ddc38ebe9 code=0x7ffc0000 [ 436.643800][ T28] audit: type=1326 audit(1757300346.529:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14788 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ddc38ebe9 code=0x7ffc0000 [ 436.667094][ T28] audit: type=1326 audit(1757300346.529:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14788 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7ddc38ebe9 code=0x7ffc0000 [ 436.697649][ T28] audit: type=1326 audit(1757300346.529:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14788 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ddc38ebe9 code=0x7ffc0000 [ 436.782688][ T28] audit: type=1326 audit(1757300346.529:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14788 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ddc38ebe9 code=0x7ffc0000 [ 436.845245][ T28] audit: type=1326 audit(1757300346.529:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14788 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f7ddc38ebe9 code=0x7ffc0000 [ 436.887066][ T28] audit: type=1326 audit(1757300346.529:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14788 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ddc38ebe9 code=0x7ffc0000 [ 436.948028][ T28] audit: type=1326 audit(1757300346.529:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14788 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ddc38ebe9 code=0x7ffc0000 [ 440.309333][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.321417][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.290868][T14986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3195'. [ 443.421732][T14992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.432185][T14992] batadv_slave_0: entered promiscuous mode [ 443.546343][T14997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3200'. [ 444.284669][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 444.284684][ T28] audit: type=1326 audit(1757300354.383:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15029 comm="syz.3.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29d38ebe9 code=0x7ffc0000 [ 444.344803][ T28] audit: type=1326 audit(1757300354.383:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15029 comm="syz.3.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe29d38ebe9 code=0x7ffc0000 [ 444.374504][ T28] audit: type=1326 audit(1757300354.383:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15029 comm="syz.3.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29d38ebe9 code=0x7ffc0000 [ 444.403371][ T28] audit: type=1326 audit(1757300354.383:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15029 comm="syz.3.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29d38ebe9 code=0x7ffc0000 [ 444.432898][ T28] audit: type=1326 audit(1757300354.383:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15029 comm="syz.3.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fe29d38ebe9 code=0x7ffc0000 [ 444.458259][ T28] audit: type=1326 audit(1757300354.473:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15029 comm="syz.3.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29d38ebe9 code=0x7ffc0000 [ 444.490816][ T28] audit: type=1326 audit(1757300354.473:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15029 comm="syz.3.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29d38ebe9 code=0x7ffc0000 [ 445.240750][ T28] audit: type=1326 audit(1757300355.323:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15067 comm="syz.3.3231" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe29d38ebe9 code=0x0 [ 447.044333][T15136] loop2: detected capacity change from 0 to 128 [ 448.878722][T15212] loop0: detected capacity change from 0 to 128 [ 449.490107][T15235] IPv6: addrconf: prefix option has invalid lifetime [ 452.689128][T15331] loop0: detected capacity change from 0 to 128 [ 452.915002][T15340] sctp: [Deprecated]: syz.0.3338 (pid 15340) Use of int in max_burst socket option. [ 452.915002][T15340] Use struct sctp_assoc_value instead [ 453.608068][T15361] 9pnet_fd: p9_fd_create_unix (15361): problem connecting socket: ./file0: -111 [ 453.965578][T15381] loop2: detected capacity change from 0 to 128 [ 454.703597][T15405] loop1: detected capacity change from 0 to 128 [ 455.328480][T15429] fuse: Bad value for 'user_id' [ 456.005596][T15453] fuse: Bad value for 'user_id' [ 456.703312][T15477] fuse: Bad value for 'user_id' [ 456.906523][T15481] sctp: [Deprecated]: syz.1.3397 (pid 15481) Use of int in max_burst socket option. [ 456.906523][T15481] Use struct sctp_assoc_value instead [ 457.343967][T15500] fuse: Bad value for 'fd' [ 458.129623][T15508] sctp: [Deprecated]: syz.0.3407 (pid 15508) Use of int in max_burst socket option. [ 458.129623][T15508] Use struct sctp_assoc_value instead [ 458.911543][T15533] sctp: [Deprecated]: syz.2.3417 (pid 15533) Use of int in max_burst socket option. [ 458.911543][T15533] Use struct sctp_assoc_value instead [ 459.790955][T15553] sctp: [Deprecated]: syz.1.3426 (pid 15553) Use of int in max_burst socket option. [ 459.790955][T15553] Use struct sctp_assoc_value instead [ 459.904576][T15557] sctp: [Deprecated]: syz.3.3428 (pid 15557) Use of int in max_burst socket option. [ 459.904576][T15557] Use struct sctp_assoc_value instead [ 460.556311][T15578] sctp: [Deprecated]: syz.1.3437 (pid 15578) Use of int in max_burst socket option. [ 460.556311][T15578] Use struct sctp_assoc_value instead [ 461.061784][T15597] fuse: Bad value for 'fd' [ 461.162795][T15599] netlink: 'syz.3.3444': attribute type 1 has an invalid length. [ 461.239041][T15604] sctp: [Deprecated]: syz.1.3446 (pid 15604) Use of int in max_burst socket option. [ 461.239041][T15604] Use struct sctp_assoc_value instead [ 461.308658][T15609] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 461.396967][T15599] 8021q: adding VLAN 0 to HW filter on device bond1 [ 461.408705][ T6321] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 461.554969][ T6303] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 461.602618][T15617] 9pnet_fd: Insufficient options for proto=fd [ 462.044753][T15631] sctp: [Deprecated]: syz.1.3457 (pid 15631) Use of int in max_burst socket option. [ 462.044753][T15631] Use struct sctp_assoc_value instead [ 462.224940][T15639] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3460'. [ 462.877537][T15657] sctp: [Deprecated]: syz.3.3467 (pid 15657) Use of int in max_burst socket option. [ 462.877537][T15657] Use struct sctp_assoc_value instead [ 463.376435][T15669] loop1: detected capacity change from 0 to 128 [ 463.442217][T15669] FAT-fs (loop1): Directory bread(block 162) failed [ 463.453142][T15669] FAT-fs (loop1): Directory bread(block 163) failed [ 463.459812][T15669] FAT-fs (loop1): Directory bread(block 164) failed [ 463.489743][T15669] FAT-fs (loop1): Directory bread(block 165) failed [ 463.529121][T15669] FAT-fs (loop1): Directory bread(block 166) failed [ 463.542647][T15669] FAT-fs (loop1): Directory bread(block 167) failed [ 463.549426][T15669] FAT-fs (loop1): Directory bread(block 168) failed [ 463.568538][T15669] FAT-fs (loop1): Directory bread(block 169) failed [ 463.609352][T15669] FAT-fs (loop1): Directory bread(block 162) failed [ 463.622124][T15669] FAT-fs (loop1): Directory bread(block 163) failed [ 463.636565][T15669] syz.1.3472: attempt to access beyond end of device [ 463.636565][T15669] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 463.673913][T15669] syz.1.3472: attempt to access beyond end of device [ 463.673913][T15669] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 463.771402][T15682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 464.366199][T15706] loop1: detected capacity change from 0 to 128 [ 464.926094][T15717] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 464.986614][T15717] overlayfs: failed to set xattr on upper [ 465.021874][T15717] overlayfs: ...falling back to redirect_dir=nofollow. [ 465.049291][T15717] overlayfs: ...falling back to index=off. [ 465.060574][T15717] overlayfs: ...falling back to uuid=null. [ 465.249841][T15729] loop0: detected capacity change from 0 to 128 [ 466.356370][T15761] loop1: detected capacity change from 0 to 128 [ 469.509807][T15844] kvm: pic: level sensitive irq not supported [ 471.367479][T15910] netlink: 'syz.0.3561': attribute type 3 has an invalid length. [ 471.401795][T15910] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3561'. [ 471.818776][T15929] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3568'. [ 473.731815][T15959] fuse: Bad value for 'group_id' [ 474.507356][T15972] loop0: detected capacity change from 0 to 128 [ 475.334735][T15988] fuse: Bad value for 'group_id' [ 475.627012][T15994] loop0: detected capacity change from 0 to 128 [ 476.044028][T16001] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 476.464989][T16012] fuse: Bad value for 'group_id' [ 477.958662][T16057] loop1: detected capacity change from 0 to 128 [ 478.204539][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 478.470606][T16068] af_packet: tpacket_rcv: packet too big, clamped from 65055 to 3952. macoff=96 [ 478.513242][T16073] loop2: detected capacity change from 0 to 736 [ 478.956876][T16084] loop1: detected capacity change from 0 to 128 [ 478.974124][T16081] rock: directory entry would overflow storage [ 478.984665][T16081] rock: sig=0x4f50, size=4, remaining=3 [ 479.013997][T16081] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 479.782766][T16102] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3633'. [ 479.798977][T16102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3633'. [ 481.569183][T16156] fuse: Unknown parameter 'grou00000000000000000000' [ 482.191998][T16177] fuse: Unknown parameter 'grou00000000000000000000' [ 483.077032][T16206] fuse: Unknown parameter 'grou00000000000000000000' [ 484.157878][T16242] fuse: Unknown parameter 'group_i00000000000000000000' [ 485.603594][T16278] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3702'. [ 485.642034][T16278] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3702'. [ 485.941271][T16291] 9pnet_fd: Insufficient options for proto=fd [ 486.154468][T16296] raw_sendmsg: syz.2.3708 forgot to set AF_INET. Fix it! [ 486.489644][T16306] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3713'. [ 486.511615][T16306] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3713'. [ 487.988075][T16329] fuse: Unknown parameter 'group_id00000000000000000000' [ 488.324310][T16338] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3726'. [ 488.373514][T16338] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3726'. [ 488.444131][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 489.316997][T16356] fuse: Unknown parameter 'group_id00000000000000000000' [ 490.141753][T16378] fuse: Bad value for 'user_id' [ 490.302763][T16385] overlayfs: failed to clone upperpath [ 490.454317][T16390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3747'. [ 490.497989][T16390] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3747'. [ 490.517444][T16393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3747'. [ 490.554175][T16393] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3747'. [ 490.767037][T16401] fuse: Bad value for 'user_id' [ 492.415138][T16446] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 492.446996][T16449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3772'. [ 492.484431][T16449] vlan2: entered promiscuous mode [ 492.508744][T16449] bond0: entered promiscuous mode [ 492.514517][T16449] bond_slave_0: entered promiscuous mode [ 492.529872][T16449] bond_slave_1: entered promiscuous mode [ 492.556426][T16451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3773'. [ 492.586225][T16451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3773'. [ 492.624103][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3773'. [ 492.637211][T16453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3773'. [ 492.720308][T16460] fuse: Bad value for 'fd' [ 493.009848][T16468] loop0: detected capacity change from 0 to 8192 [ 493.041931][T16468] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 493.568878][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 493.575927][T16492] fuse: Bad value for 'fd' [ 494.447771][T16521] fuse: Bad value for 'fd' [ 495.188158][T16547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3811'. [ 495.201725][T16547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3811'. [ 495.242841][T16547] syz_tun: entered promiscuous mode [ 495.254395][T16547] batadv_slave_1: entered promiscuous mode [ 495.369698][T16549] fuse: Bad value for 'fd' [ 495.999183][T16572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3822'. [ 496.012862][T16572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3822'. [ 496.131309][T16574] fuse: Bad value for 'fd' [ 496.173393][T16562] loop0: detected capacity change from 0 to 32768 [ 496.216611][T16562] loop0: p1 p3 < > [ 496.654188][T16590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3831'. [ 496.699438][ T6104] udevd[6104]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 496.707887][T16592] loop2: detected capacity change from 0 to 136 [ 496.724071][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 496.770639][ T5774] blk_print_req_error: 10 callbacks suppressed [ 496.770655][ T5774] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 496.793444][T16592] overlayfs: overlapping lowerdir path [ 496.975511][T16599] fuse: Invalid rootmode [ 497.509320][T16618] __nla_validate_parse: 1 callbacks suppressed [ 497.509335][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3841'. [ 497.552514][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3841'. [ 497.663076][T16624] fuse: Invalid rootmode [ 497.827699][T16629] loop2: detected capacity change from 0 to 128 [ 497.886989][ T6104] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 499.022723][T16675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3866'. [ 499.044396][T16675] bond0: option lp_interval: invalid value (0) [ 499.054139][T16675] bond0: option lp_interval: allowed values 1 - 2147483647 [ 499.072289][T16678] program syz.1.3867 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 499.351450][T16689] veth0_vlan: left promiscuous mode [ 499.698334][T16699] fuse: Bad value for 'rootmode' [ 499.810444][T16702] netlink: 8916 bytes leftover after parsing attributes in process `syz.1.3877'. [ 500.370855][T16719] fuse: Bad value for 'rootmode' [ 500.550343][T16727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3888'. [ 500.908024][T16742] fuse: Unknown parameter 'use00000000000000000000' [ 501.780600][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.787472][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.923961][T16767] fuse: Unknown parameter 'use00000000000000000000' [ 502.988595][T16796] fuse: Unknown parameter 'use00000000000000000000' [ 504.027820][T16821] fuse: Unknown parameter 'user_i00000000000000000000' [ 504.972477][T16843] fuse: Unknown parameter 'user_i00000000000000000000' [ 505.640953][T16862] fuse: Unknown parameter 'user_i00000000000000000000' [ 506.183635][T16884] fuse: Unknown parameter 'user_id00000000000000000000' [ 506.612199][T16906] loop1: detected capacity change from 0 to 512 [ 506.671123][T16906] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 506.775423][ T28] audit: type=1326 audit(1757300416.894:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16908 comm="syz.0.3963" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff066b8ebe9 code=0x0 [ 507.415300][T16938] fuse: Unknown parameter 'user_id00000000000000000000' [ 508.423049][T16961] fuse: Bad value for 'fd' [ 508.908771][T16915] Bluetooth: hci0: command 0x0406 tx timeout [ 508.992280][T16990] fuse: Bad value for 'fd' [ 509.138765][ T28] audit: type=1326 audit(1757300419.245:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16994 comm="syz.2.3999" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7732f8ebe9 code=0x0 [ 509.581943][T17015] fuse: Bad value for 'fd' [ 509.671207][T17021] loop0: detected capacity change from 0 to 256 [ 510.118438][T17038] fuse: Unknown parameter '0x0000000000000003' [ 510.668254][T17061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 510.801149][T17070] fuse: Unknown parameter '0x0000000000000003' [ 511.036006][T17078] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4035'. [ 511.057137][T17078] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4035'. [ 511.785046][T17103] fuse: Unknown parameter '0x0000000000000003' [ 512.116600][T17107] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4046'. [ 512.167995][T17109] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4047'. [ 512.226121][T17114] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4047'. [ 512.578355][T17126] fuse: Unknown parameter '0x0000000000000003' [ 513.253825][T17153] fuse: Unknown parameter '0x0000000000000003' [ 513.370668][T17157] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4064'. [ 513.391187][T17157] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4064'. [ 513.724983][T17178] fuse: Unknown parameter '0x0000000000000003' [ 514.135251][T17195] fuse: Unknown parameter 'fd0x0000000000000003' [ 514.243599][T17201] netlink: 'syz.1.4085': attribute type 1 has an invalid length. [ 514.284018][T17201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 514.304846][T17201] vlan0: entered allmulticast mode [ 514.310278][T17201] bond1: entered allmulticast mode [ 514.638369][T17221] fuse: Unknown parameter 'fd0x0000000000000003' [ 514.661118][T17223] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4094'. [ 514.674269][T17223] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4094'. [ 515.119739][T17242] fuse: Unknown parameter 'fd0x0000000000000003' [ 515.873014][T17273] IPv6: NLM_F_CREATE should be specified when creating new route [ 515.881510][T17273] IPv6: Can't replace route, no match found [ 516.130824][T17283] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4118'. [ 516.152488][T17283] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4118'. [ 516.558462][T17291] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 517.484785][T17326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4138'. [ 517.502406][T17326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4138'. [ 517.680607][T17332] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4142'. [ 517.706206][T17332] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4142'. [ 518.538605][T17358] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4153'. [ 518.564891][T17358] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4153'. [ 520.936266][T17437] loop1: detected capacity change from 0 to 136 [ 520.977554][T17437] Attempt to read inode for relocated directory [ 521.300329][T17446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4191'. [ 521.339373][T17446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4191'. [ 521.698706][T17454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 522.291302][T17478] loop1: detected capacity change from 0 to 16 [ 522.313025][T17478] erofs: Unknown parameter 'aclxB' [ 522.361031][ T6104] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 524.071082][ T6316] hsr_slave_0: left promiscuous mode [ 524.138912][ T6316] hsr_slave_1: left promiscuous mode [ 524.163154][ T6316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.179632][ T6316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.211794][ T6316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.229569][ T6316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.256986][ T6316] bridge_slave_1: left allmulticast mode [ 524.268120][ T6316] bridge_slave_1: left promiscuous mode [ 524.285587][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.315770][ T6316] bridge_slave_0: left allmulticast mode [ 524.331834][ T6316] bridge_slave_0: left promiscuous mode [ 524.351223][ T6316] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.488797][ T6316] veth1_macvtap: left promiscuous mode [ 524.504031][ T6316] veth0_macvtap: left promiscuous mode [ 524.512661][ T6316] veth1_vlan: left promiscuous mode [ 524.518077][ T6316] veth0_vlan: left promiscuous mode [ 525.234955][T17540] sctp: [Deprecated]: syz.1.4227 (pid 17540) Use of int in max_burst socket option deprecated. [ 525.234955][T17540] Use struct sctp_assoc_value instead [ 525.902347][ T6316] team0 (unregistering): Port device team_slave_1 removed [ 526.014119][ T6316] team0 (unregistering): Port device team_slave_0 removed [ 526.094758][ T6316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.205494][ T6316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.828752][ T6316] bond0 (unregistering): Released all slaves [ 528.275066][T17610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4257'. [ 528.291919][T17610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4257'. [ 528.760043][T17625] loop2: detected capacity change from 0 to 8192 [ 528.777335][T17625] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 531.360372][T17697] loop0: detected capacity change from 0 to 128 [ 531.432208][T17699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4296'. [ 531.477355][T17699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.637871][T17699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.676057][T17699] batadv_slave_1 (unregistering): left promiscuous mode [ 531.783980][T17705] overlayfs: failed to resolve './bus': -2 [ 532.024103][T17714] loop1: detected capacity change from 0 to 128 [ 532.551847][T17731] loop1: detected capacity change from 0 to 256 [ 532.913679][T17737] kvm: pic: non byte write [ 533.379916][T17750] dvmrp1: tun_chr_ioctl cmd 1074025681 [ 534.471307][ T28] audit: type=1326 audit(1757300444.608:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17788 comm="syz.3.4332" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe29d38ebe9 code=0x0 [ 535.524017][T17818] syz.3.4346[17818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 535.524240][T17818] syz.3.4346[17818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 538.109826][T17873] loop2: detected capacity change from 0 to 736 [ 538.555020][T17883] rock: directory entry would overflow storage [ 538.566505][T17883] rock: sig=0x4f50, size=4, remaining=3 [ 538.577757][T17883] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 539.251698][T17907] overlayfs: failed to clone upperpath [ 539.904454][T17933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4392'. [ 540.119934][T17941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4396'. [ 540.137098][T17941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4396'. [ 540.171084][T17941] ip6gretap1: entered allmulticast mode [ 540.866114][T17957] xt_hashlimit: size too large, truncated to 1048576 [ 542.779533][T17999] 9pnet: Could not find request transport: xen [ 542.954338][T18008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4420'. [ 542.963549][T18008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4420'. [ 542.991364][T18008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4420'. [ 543.008516][T18008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4420'. [ 543.916324][T18036] loop2: detected capacity change from 0 to 512 [ 543.942664][T18036] FAT-fs (loop2): Unrecognized mount option "time_offset=0x00000p00000004f7" or missing value [ 544.041996][T18036] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 547.517416][T18129] loop1: detected capacity change from 0 to 512 [ 547.537649][T18129] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 547.964800][T18136] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4476'. [ 548.296953][T18150] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 548.910786][T18165] block device autoloading is deprecated and will be removed. [ 549.096354][T16915] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 549.113461][T16915] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 549.129578][T16915] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 549.153598][T16915] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 549.163838][T16915] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 549.174235][T16915] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 549.195719][ T1314] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.334309][ T1314] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.377027][ T28] audit: type=1326 audit(1757300459.515:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18172 comm="syz.0.4493" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff066b8ebe9 code=0x0 [ 549.416428][T18182] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 549.519802][ T1314] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.609962][ T1314] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.840685][T18197] sd 0:0:1:0: PR command failed: 1026 [ 549.870989][T18197] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 549.891296][T18197] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 549.898939][T18170] chnl_net:caif_netlink_parms(): no params data found [ 550.056515][T18170] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.064409][T18170] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.072004][T18170] bridge_slave_0: entered allmulticast mode [ 550.079631][T18170] bridge_slave_0: entered promiscuous mode [ 550.092241][T18170] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.100701][T18170] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.108383][T18170] bridge_slave_1: entered allmulticast mode [ 550.115912][T18170] bridge_slave_1: entered promiscuous mode [ 550.236157][ T1314] bond1: (slave ip6gretap1): Removing an active aggregator [ 550.246522][ T1314] bond1: (slave ip6gretap1): Releasing backup interface [ 550.298778][T18170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.334875][T18170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.662027][T18170] team0: Port device team_slave_0 added [ 550.692745][T18170] team0: Port device team_slave_1 added [ 550.770929][T18224] loop1: detected capacity change from 0 to 1764 [ 550.810310][T18224] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 550.843886][T18170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.870593][T18170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.918261][T18224] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 550.928322][T18170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.072935][T18170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.103757][T18170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.155354][T18170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.215091][ T50] Bluetooth: hci1: command tx timeout [ 551.245130][T18233] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 551.671726][T18170] hsr_slave_0: entered promiscuous mode [ 551.686264][T18170] hsr_slave_1: entered promiscuous mode [ 551.695661][T18170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 551.707453][T18170] Cannot create hsr debugfs directory [ 552.035642][ T1314] hsr_slave_0: left promiscuous mode [ 552.046645][ T1314] hsr_slave_1: left promiscuous mode [ 552.067793][ T1314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.087893][ T1314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.114532][ T1314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.133060][ T1314] bridge_slave_1: left allmulticast mode [ 552.145512][ T1314] bridge_slave_1: left promiscuous mode [ 552.157435][ T1314] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.178433][ T1314] bridge_slave_0: left allmulticast mode [ 552.184127][ T1314] bridge_slave_0: left promiscuous mode [ 552.196220][ T1314] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.304906][ T1314] veth1_macvtap: left promiscuous mode [ 552.311345][ T1314] veth0_macvtap: left promiscuous mode [ 552.341875][ T1314] veth1_vlan: left promiscuous mode [ 553.131597][ T1314] bond1 (unregistering): Released all slaves [ 553.287954][ T50] Bluetooth: hci1: command tx timeout [ 553.584913][T18307] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 554.191931][ T1314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.244148][ T1314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.544648][T18328] loop0: detected capacity change from 0 to 256 [ 554.885787][T18336] loop1: detected capacity change from 0 to 8192 [ 554.907681][T18336] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 554.963461][ T28] audit: type=1800 audit(1757300465.108:2841): pid=18336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4537" name="file2" dev="loop1" ino=1048643 res=0 errno=0 [ 555.004906][T18336] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 555.016420][T18336] FAT-fs (loop1): Filesystem has been set read-only [ 555.127795][ T1314] bond0 (unregistering): Released all slaves [ 555.365783][ T50] Bluetooth: hci1: command tx timeout [ 556.491450][T18170] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 556.496850][T18379] loop1: detected capacity change from 0 to 256 [ 556.519703][T18170] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 556.568975][T18170] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 556.612852][T18170] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 556.932147][T18389] bridge_slave_0: left allmulticast mode [ 556.957330][T18389] bridge_slave_0: left promiscuous mode [ 556.982183][T18389] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.011067][T18389] bridge_slave_1: left allmulticast mode [ 557.025223][T18389] bridge_slave_1: left promiscuous mode [ 557.045595][T18389] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.059603][T18389] bond0: (slave bond_slave_0): Releasing backup interface [ 557.105467][T18389] bond0: (slave bond_slave_1): Releasing backup interface [ 557.192790][T18389] team0: Port device team_slave_0 removed [ 557.222043][T18389] team0: Port device team_slave_1 removed [ 557.233810][T18389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.242006][T18389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.320459][T18170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.401937][T18170] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.441648][ T6310] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.448853][ T6310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.458778][ T50] Bluetooth: hci1: command tx timeout [ 557.517780][ T6310] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.525061][ T6310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.806459][T18406] loop2: detected capacity change from 0 to 8192 [ 557.828221][T18406] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 557.889940][ T28] audit: type=1800 audit(1757300468.039:2842): pid=18406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4556" name="file2" dev="loop2" ino=1048646 res=0 errno=0 [ 557.932193][T18406] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 557.956152][T18406] FAT-fs (loop2): Filesystem has been set read-only [ 558.256940][T18170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.409263][T18170] veth0_vlan: entered promiscuous mode [ 558.470233][T18170] veth1_vlan: entered promiscuous mode [ 558.566475][T18170] veth0_macvtap: entered promiscuous mode [ 558.611805][T18170] veth1_macvtap: entered promiscuous mode [ 558.689585][T18170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.752236][T18170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.777008][T18170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.798848][T18170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.811222][T18170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.877768][T18170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.913459][T18170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.974757][T18170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.993470][T18170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.024070][T18170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.061676][T18170] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.076246][T18170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.102625][T18170] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.122014][T18170] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.377730][ T1314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.413331][ T1314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.518996][ T1314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.529081][ T1314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.907567][T18505] loop0: detected capacity change from 0 to 256 [ 561.582886][ T28] audit: type=1326 audit(1757300471.741:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18528 comm="syz.1.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ddc38ebe9 code=0x7ffc0000 [ 561.672150][ T28] audit: type=1326 audit(1757300471.761:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18528 comm="syz.1.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ddc38ebe9 code=0x7ffc0000 [ 561.762442][ T28] audit: type=1326 audit(1757300471.771:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18528 comm="syz.1.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7ddc38d457 code=0x7ffc0000 [ 561.813831][ T28] audit: type=1326 audit(1757300471.771:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18528 comm="syz.1.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ddc38ebe9 code=0x7ffc0000 [ 561.878943][ T28] audit: type=1326 audit(1757300471.771:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18528 comm="syz.1.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ddc38ebe9 code=0x7ffc0000 [ 561.906100][ T28] audit: type=1326 audit(1757300471.771:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18528 comm="syz.1.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f7ddc38ebe9 code=0x7ffc0000 [ 561.960535][ T28] audit: type=1326 audit(1757300471.771:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18528 comm="syz.1.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ddc38ebe9 code=0x7ffc0000 [ 563.145803][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.152976][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.926861][ T6312] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.143511][ T6312] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.315161][ T6312] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.487374][ T6312] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.745622][T18587] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4609'. [ 565.076933][T16915] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 565.087544][T16915] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 565.097980][T16915] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 565.130907][T16915] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 565.150821][T16915] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 565.159472][T16915] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 565.491299][T18611] loop3: detected capacity change from 0 to 128 [ 566.510951][T18593] chnl_net:caif_netlink_parms(): no params data found [ 567.199704][T18598] Bluetooth: hci2: command tx timeout [ 567.307827][T18593] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.330362][T18593] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.358075][T18593] bridge_slave_0: entered allmulticast mode [ 567.377505][T18593] bridge_slave_0: entered promiscuous mode [ 567.396448][T18593] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.404799][T18593] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.424156][T18593] bridge_slave_1: entered allmulticast mode [ 567.450804][T18593] bridge_slave_1: entered promiscuous mode [ 567.637006][T18674] overlay: ./file0 is not a directory [ 567.796512][T18593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.827368][T18593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.087939][ T6312] hsr_slave_0: left promiscuous mode [ 568.097569][ T6312] hsr_slave_1: left promiscuous mode [ 568.104283][ T6312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.119366][ T6312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.129282][ T6312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.139169][ T6312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.167969][ T6312] bridge_slave_1: left allmulticast mode [ 568.174183][ T6312] bridge_slave_1: left promiscuous mode [ 568.189091][ T6312] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.200381][ T6312] bridge_slave_0: left allmulticast mode [ 568.233192][ T6312] bridge_slave_0: left promiscuous mode [ 568.239779][ T6312] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.298132][ T6312] veth1_macvtap: left promiscuous mode [ 568.304419][ T6312] veth0_macvtap: left promiscuous mode [ 568.319113][ T6312] veth1_vlan: left promiscuous mode [ 568.329328][ T6312] veth0_vlan: left promiscuous mode [ 568.958474][T18703] overlay: ./file0 is not a directory [ 569.279414][T18598] Bluetooth: hci2: command tx timeout [ 569.906814][T18732] overlay: ./file0 is not a directory [ 570.374156][ T6312] team0 (unregistering): Port device team_slave_1 removed [ 570.533159][ T6312] team0 (unregistering): Port device team_slave_0 removed [ 570.651033][ T6312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.688287][ T6312] bond_slave_1 (unregistering): left promiscuous mode [ 570.869955][ T6312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.889607][ T6312] bond_slave_0 (unregistering): left promiscuous mode [ 570.927650][T18761] overlay: ./file0 is not a directory [ 571.358487][T18598] Bluetooth: hci2: command tx timeout [ 571.514404][T18783] overlay: ./file0 is not a directory [ 572.177504][T18800] overlay: ./file0 is not a directory [ 572.510235][T18808] overlayfs: failed to resolve './bus': -2 [ 572.962138][ T6312] bond0 (unregistering): Released all slaves [ 573.108380][T18593] team0: Port device team_slave_0 added [ 573.128749][T18593] team0: Port device team_slave_1 added [ 573.227687][T18593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.257947][T18593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.336313][T18593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.382376][T18593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.410448][T18593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.447282][T18598] Bluetooth: hci2: command tx timeout [ 573.471948][T18593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.633890][T18593] hsr_slave_0: entered promiscuous mode [ 573.644793][T18593] hsr_slave_1: entered promiscuous mode [ 573.866975][T18848] overlayfs: failed to resolve './bus': -2 [ 573.957614][T18851] loop3: detected capacity change from 0 to 256 [ 574.294742][T18854] loop2: detected capacity change from 0 to 8192 [ 574.350861][T18593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 574.391252][T18593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 574.462107][T18593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 574.488054][T18593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 574.713709][T18593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.799259][T18593] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.822827][ T6310] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.830040][ T6310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.912239][ T6312] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.919458][ T6312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.497973][T18593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.537060][T18900] overlayfs: failed to resolve './bus': -2 [ 576.128295][T18593] veth0_vlan: entered promiscuous mode [ 576.187697][T18593] veth1_vlan: entered promiscuous mode [ 576.302341][T18593] veth0_macvtap: entered promiscuous mode [ 576.332743][T18593] veth1_macvtap: entered promiscuous mode [ 576.400800][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.430145][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.460606][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.484298][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.526474][T18593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.572108][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.603229][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.625052][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.654680][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.681768][T18593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.722779][T18593] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.745336][T18593] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.764886][T18593] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.774454][T18593] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.002895][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.024852][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.120950][ T1314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.143344][ T1314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.488601][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 578.500045][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 578.509366][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 578.519428][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 578.539041][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 578.547602][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 578.751056][T18076] syz_tun (unregistering): left promiscuous mode [ 579.189831][ T6312] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.472619][ T6312] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.629938][ T6312] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.911674][ T6312] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.211290][T18978] chnl_net:caif_netlink_parms(): no params data found [ 580.633181][T18598] Bluetooth: hci3: command tx timeout [ 580.825252][T18978] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.832640][T18978] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.839874][T18978] bridge_slave_0: entered allmulticast mode [ 580.864033][T18978] bridge_slave_0: entered promiscuous mode [ 580.958393][T18978] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.966244][T18978] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.975587][T18978] bridge_slave_1: entered allmulticast mode [ 580.996897][T18978] bridge_slave_1: entered promiscuous mode [ 581.079578][T18978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.098184][T18978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.238126][T18978] team0: Port device team_slave_0 added [ 581.285590][T18978] team0: Port device team_slave_1 added [ 581.407081][T18978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.420316][T18978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.468180][T18978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.539111][T18978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.559380][T18978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.596300][T18978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.768908][T18978] hsr_slave_0: entered promiscuous mode [ 581.778641][T18978] hsr_slave_1: entered promiscuous mode [ 581.787990][T18978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 581.802048][T18978] Cannot create hsr debugfs directory [ 582.103458][ T6312] hsr_slave_0: left promiscuous mode [ 582.114251][ T6312] hsr_slave_1: left promiscuous mode [ 582.151442][ T6312] veth1_macvtap: left promiscuous mode [ 582.171516][ T6312] veth0_macvtap: left promiscuous mode [ 582.182321][ T6312] veth1_vlan: left promiscuous mode [ 582.187621][ T6312] veth0_vlan: left promiscuous mode [ 582.712295][T18598] Bluetooth: hci3: command tx timeout [ 582.719938][ T6312] bond1 (unregistering): Released all slaves [ 584.790730][T18598] Bluetooth: hci3: command tx timeout [ 585.355622][ T6312] bond0 (unregistering): Released all slaves [ 585.583921][T19083] ip6tnl2: entered allmulticast mode [ 585.926503][T19114] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 586.428910][T18978] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 586.465895][T18978] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 586.524056][T18978] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 586.562862][T18978] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 586.751347][T19146] xt_hashlimit: max too large, truncated to 1048576 [ 586.869646][T18598] Bluetooth: hci3: command tx timeout [ 586.905404][T18978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.998505][T18978] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.028835][ T6312] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.036147][ T6312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.088252][ T6308] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.095492][ T6308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.216331][T18978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 587.634788][T19176] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 587.645268][T19176] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 587.805258][T18978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.939311][T18978] veth0_vlan: entered promiscuous mode [ 587.961998][T18978] veth1_vlan: entered promiscuous mode [ 588.071428][T18978] veth0_macvtap: entered promiscuous mode [ 588.112226][T18978] veth1_macvtap: entered promiscuous mode [ 588.175189][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.221517][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.258964][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.278803][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.288673][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.300006][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.320185][T18978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.355963][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.369334][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.390071][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.418725][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.438775][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.459830][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.490162][T18978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.516220][T18978] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.548291][T18978] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.588004][T18978] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.622669][T18978] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.933531][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.934315][T19214] overlayfs: missing 'lowerdir' [ 588.978464][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.034846][ T6312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.061185][ T6312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.726715][T19251] overlayfs: missing 'lowerdir' [ 590.948447][T19333] loop1: detected capacity change from 0 to 1764 [ 591.344042][ T28] audit: type=1326 audit(1757300501.506:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19342 comm="syz.1.4820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82eb8ebe9 code=0x7ffc0000 [ 591.384659][ T28] audit: type=1326 audit(1757300501.506:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19342 comm="syz.1.4820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82eb8ebe9 code=0x7ffc0000 [ 591.407803][ T28] audit: type=1326 audit(1757300501.506:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19342 comm="syz.1.4820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7ff82eb8ebe9 code=0x7ffc0000 [ 591.431085][ T28] audit: type=1326 audit(1757300501.516:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19342 comm="syz.1.4820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82eb8ebe9 code=0x7ffc0000 [ 592.504198][T19386] overlayfs: missing 'lowerdir' [ 593.286150][T19414] overlayfs: missing 'lowerdir' [ 594.193526][T19447] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4862'. [ 594.294999][T19454] block device autoloading is deprecated and will be removed. [ 594.447539][T19462] overlayfs: missing 'workdir' [ 594.957515][T19482] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4877'. [ 595.084728][T19488] overlayfs: missing 'workdir' [ 595.398912][T19499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4884'. [ 597.880839][T19573] loop3: detected capacity change from 0 to 164 [ 597.891349][T19573] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 597.893712][T19573] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 597.894817][T19573] Symlink component flag not implemented [ 597.894826][T19573] Symlink component flag not implemented [ 597.895191][T19573] Symlink component flag not implemented (7) [ 597.895202][T19573] Symlink component flag not implemented (116) [ 598.474100][T19594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.517694][T19594] batadv_slave_0: entered promiscuous mode [ 599.490688][T19630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4938'. [ 602.104823][T19698] loop2: detected capacity change from 0 to 136 [ 602.226265][T19698] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 603.015064][T19720] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 603.462607][T19730] loop4: detected capacity change from 0 to 8192 [ 605.258149][T19748] syzkaller0: entered promiscuous mode [ 605.278163][T19748] syzkaller0: entered allmulticast mode [ 606.246452][T19784] fuse: Bad value for 'fd' [ 608.904357][T19846] syz.3.5024[19846] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 608.904487][T19846] syz.3.5024[19846] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 609.991666][T19818] wg2: entered promiscuous mode [ 610.014002][T19818] wg2: entered allmulticast mode [ 610.020479][T19846] wg2: entered promiscuous mode [ 610.025519][T19846] wg2: entered allmulticast mode [ 610.486529][T19870] Illegal XDP return value 4292456448 on prog (id 366) dev N/A, expect packet loss! [ 612.603519][T19267] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.740244][T19267] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.876357][T19267] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.022824][T19267] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.780896][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 613.795412][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 613.805115][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 613.815522][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 613.832206][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 613.842581][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 613.852547][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 613.854529][T19951] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 613.867632][T19951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 613.875229][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 613.891161][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 613.900325][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 613.948238][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 613.960553][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 613.969679][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 613.977940][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 613.985680][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 614.004670][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 614.278909][T19272] [ 614.281279][T19272] ====================================================== [ 614.288304][T19272] WARNING: possible circular locking dependency detected [ 614.295340][T19272] syzkaller #0 Not tainted [ 614.299751][T19272] ------------------------------------------------------ [ 614.306768][T19272] kworker/u4:9/19272 is trying to acquire lock: [ 614.312997][T19272] ffff8880b8e295a8 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x15a/0x780 [ 614.321609][T19272] [ 614.321609][T19272] but task is already holding lock: [ 614.328956][T19272] ffff8880b8e297d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x73b/0xdb0 [ 614.337482][T19272] [ 614.337482][T19272] which lock already depends on the new lock. [ 614.337482][T19272] [ 614.348047][T19272] [ 614.348047][T19272] the existing dependency chain (in reverse order) is: [ 614.357108][T19272] [ 614.357108][T19272] -> #1 (&base->lock){-.-.}-{2:2}: [ 614.364415][T19272] _raw_spin_lock_irqsave+0xa8/0xf0 [ 614.370140][T19272] lock_timer_base+0x123/0x270 [ 614.375419][T19272] __mod_timer+0xf9/0xdb0 [ 614.380263][T19272] queue_delayed_work_on+0x12a/0x1e0 [ 614.386075][T19272] kvfree_call_rcu+0x541/0x780 [ 614.391459][T19272] rtnl_register_internal+0x486/0x590 [ 614.397350][T19272] rtnl_register+0x32/0x70 [ 614.402275][T19272] ip_rt_init+0x2ec/0x390 [ 614.407112][T19272] ip_init+0xe/0x20 [ 614.411427][T19272] inet_init+0x2c1/0x3e0 [ 614.416175][T19272] do_one_initcall+0x1fd/0x750 [ 614.421468][T19272] do_initcall_level+0x137/0x1f0 [ 614.426925][T19272] do_initcalls+0x69/0xd0 [ 614.431779][T19272] kernel_init_freeable+0x3d2/0x570 [ 614.437488][T19272] kernel_init+0x1d/0x1c0 [ 614.442351][T19272] ret_from_fork+0x48/0x80 [ 614.447294][T19272] ret_from_fork_asm+0x11/0x20 [ 614.452728][T19272] [ 614.452728][T19272] -> #0 (krc.lock){..-.}-{2:2}: [ 614.460201][T19272] __lock_acquire+0x2ddb/0x7c80 [ 614.465582][T19272] lock_acquire+0x197/0x410 [ 614.470600][T19272] _raw_spin_lock+0x2e/0x40 [ 614.475629][T19272] kvfree_call_rcu+0x15a/0x780 [ 614.480925][T19272] trie_delete_elem+0x535/0x6a0 [ 614.486300][T19272] bpf_prog_18a85c48b7f32964+0x45/0x49 [ 614.492281][T19272] bpf_trace_run3+0x1e7/0x400 [ 614.497481][T19272] __bpf_trace_timer_start+0x14a/0x1b0 [ 614.503554][T19272] enqueue_timer+0x398/0x530 [ 614.508654][T19272] __mod_timer+0x977/0xdb0 [ 614.513624][T19272] queue_delayed_work_on+0x12a/0x1e0 [ 614.519515][T19272] process_scheduled_works+0xa45/0x15b0 [ 614.525570][T19272] worker_thread+0xa55/0xfc0 [ 614.530761][T19272] kthread+0x2fa/0x390 [ 614.535345][T19272] ret_from_fork+0x48/0x80 [ 614.540362][T19272] ret_from_fork_asm+0x11/0x20 [ 614.545636][T19272] [ 614.545636][T19272] other info that might help us debug this: [ 614.545636][T19272] [ 614.555858][T19272] Possible unsafe locking scenario: [ 614.555858][T19272] [ 614.563307][T19272] CPU0 CPU1 [ 614.568666][T19272] ---- ---- [ 614.574013][T19272] lock(&base->lock); [ 614.578069][T19272] lock(krc.lock); [ 614.584378][T19272] lock(&base->lock); [ 614.590970][T19272] lock(krc.lock); [ 614.594766][T19272] [ 614.594766][T19272] *** DEADLOCK *** [ 614.594766][T19272] [ 614.602893][T19272] 4 locks held by kworker/u4:9/19272: [ 614.608246][T19272] #0: ffff88814cfefd38 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 614.619823][T19272] #1: ffffc900047afd00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 614.633038][T19272] #2: ffff8880b8e297d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x73b/0xdb0 [ 614.642140][T19272] #3: ffffffff8cd2fc20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf4/0x400 [ 614.651442][T19272] [ 614.651442][T19272] stack backtrace: [ 614.657325][T19272] CPU: 0 PID: 19272 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 614.664939][T19272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 614.674984][T19272] Workqueue: bat_events batadv_nc_worker [ 614.680624][T19272] Call Trace: [ 614.683940][T19272] [ 614.686865][T19272] dump_stack_lvl+0x16c/0x230 [ 614.691551][T19272] ? load_image+0x3b0/0x3b0 [ 614.696063][T19272] ? show_regs_print_info+0x20/0x20 [ 614.701275][T19272] ? print_circular_bug+0x12b/0x1a0 [ 614.706462][T19272] check_noncircular+0x2bd/0x3c0 [ 614.711411][T19272] ? print_deadlock_bug+0x5d0/0x5d0 [ 614.716598][T19272] ? lockdep_lock+0xe0/0x220 [ 614.721185][T19272] ? _find_first_zero_bit+0xd3/0x100 [ 614.726467][T19272] __lock_acquire+0x2ddb/0x7c80 [ 614.731314][T19272] ? verify_lock_unused+0x140/0x140 [ 614.736497][T19272] ? verify_lock_unused+0x140/0x140 [ 614.741690][T19272] lock_acquire+0x197/0x410 [ 614.746180][T19272] ? kvfree_call_rcu+0x15a/0x780 [ 614.751110][T19272] ? __virt_addr_valid+0x18c/0x540 [ 614.756212][T19272] ? read_lock_is_recursive+0x20/0x20 [ 614.761590][T19272] ? __virt_addr_valid+0x18c/0x540 [ 614.766777][T19272] ? __virt_addr_valid+0x18c/0x540 [ 614.771906][T19272] ? __virt_addr_valid+0x469/0x540 [ 614.777112][T19272] ? __phys_addr+0xba/0x170 [ 614.781605][T19272] _raw_spin_lock+0x2e/0x40 [ 614.786153][T19272] ? kvfree_call_rcu+0x15a/0x780 [ 614.791146][T19272] kvfree_call_rcu+0x15a/0x780 [ 614.795902][T19272] ? call_rcu+0x930/0x930 [ 614.800230][T19272] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 614.806131][T19272] ? _raw_spin_unlock+0x40/0x40 [ 614.810974][T19272] trie_delete_elem+0x535/0x6a0 [ 614.815839][T19272] bpf_prog_18a85c48b7f32964+0x45/0x49 [ 614.821298][T19272] bpf_trace_run3+0x1e7/0x400 [ 614.826048][T19272] ? bpf_trace_run3+0xf4/0x400 [ 614.830829][T19272] ? bpf_trace_run2+0x3c0/0x3c0 [ 614.835689][T19272] ? __bpf_trace_timer_start+0x133/0x1b0 [ 614.841340][T19272] __bpf_trace_timer_start+0x14a/0x1b0 [ 614.846791][T19272] ? __bpf_trace_timer_class+0x100/0x100 [ 614.852417][T19272] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 614.858318][T19272] ? _raw_spin_unlock+0x40/0x40 [ 614.863175][T19272] ? do_raw_spin_lock+0x121/0x2c0 [ 614.868283][T19272] enqueue_timer+0x398/0x530 [ 614.872874][T19272] __mod_timer+0x977/0xdb0 [ 614.877286][T19272] queue_delayed_work_on+0x12a/0x1e0 [ 614.882612][T19272] ? delayed_work_timer_fn+0x80/0x80 [ 614.887881][T19272] ? batadv_nc_process_nc_paths+0xba/0x390 [ 614.893676][T19272] ? __msecs_to_jiffies+0x1e/0x50 [ 614.898691][T19272] ? batadv_nc_worker+0x4f8/0x610 [ 614.903724][T19272] ? process_scheduled_works+0x957/0x15b0 [ 614.909433][T19272] process_scheduled_works+0xa45/0x15b0 [ 614.914976][T19272] ? assign_work+0x400/0x400 [ 614.919820][T19272] ? assign_work+0x39e/0x400 [ 614.924859][T19272] worker_thread+0xa55/0xfc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 614.929446][T19272] kthread+0x2fa/0x390 [ 614.933497][T19272] ? pr_cont_work+0x560/0x560 [ 614.938162][T19272] ? kthread_blkcg+0xd0/0xd0 [ 614.942736][T19272] ret_from_fork+0x48/0x80 [ 614.947140][T19272] ? kthread_blkcg+0xd0/0xd0 [ 614.951714][T19272] ret_from_fork_asm+0x11/0x20 [ 614.956491][T19272] [ 615.512949][T19267] hsr_slave_0: left promiscuous mode [ 615.519424][T19267] hsr_slave_1: left promiscuous mode [ 615.525387][T19267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.533014][T19267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.543025][T19267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.551159][T19267] bridge_slave_1: left allmulticast mode [ 615.557815][T19267] bridge_slave_1: left promiscuous mode [ 615.563598][T19267] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.572892][T19267] bridge_slave_0: left allmulticast mode [ 615.580832][T19267] bridge_slave_0: left promiscuous mode [ 615.587466][T19267] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.598282][T19267] veth1_macvtap: left promiscuous mode [ 615.603817][T19267] veth0_macvtap: left promiscuous mode [ 615.609822][T19267] veth1_vlan: left promiscuous mode [ 615.615735][T19267] veth0_vlan: left promiscuous mode [ 615.674053][T19267] bond1 (unregistering): Released all slaves [ 615.860160][T19267] team0 (unregistering): Port device team_slave_1 removed [ 615.887644][T19267] team0 (unregistering): Port device team_slave_0 removed [ 615.914722][T19267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.947165][T19267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.987548][ T50] Bluetooth: hci0: command tx timeout [ 616.052344][T19267] bond0 (unregistering): Released all slaves [ 616.596541][T19267] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.640144][T19267] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.730788][T19267] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.800992][T19267] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.873052][T19267] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.959006][T19267] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.021330][T19267] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.079701][T19267] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.161400][T19267] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.179603][T19267] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.238279][T19267] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.288517][T19267] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.258247][T19267] hsr_slave_0: left promiscuous mode [ 618.264426][T19267] hsr_slave_1: left promiscuous mode [ 618.270188][T19267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.278015][T19267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.285894][T19267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.293392][T19267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.301285][T19267] bridge_slave_1: left allmulticast mode [ 618.306995][T19267] bridge_slave_1: left promiscuous mode [ 618.312665][T19267] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.321376][T19267] bridge_slave_0: left allmulticast mode [ 618.327529][T19267] bridge_slave_0: left promiscuous mode [ 618.333251][T19267] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.344235][T19267] hsr_slave_0: left promiscuous mode [ 618.349949][T19267] hsr_slave_1: left promiscuous mode [ 618.355856][T19267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.363343][T19267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.371889][T19267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.379436][T19267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.387424][T19267] bridge_slave_1: left allmulticast mode [ 618.393064][T19267] bridge_slave_1: left promiscuous mode [ 618.398791][T19267] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.407241][T19267] bridge_slave_0: left allmulticast mode [ 618.412878][T19267] bridge_slave_0: left promiscuous mode [ 618.418836][T19267] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.429591][T19267] hsr_slave_0: left promiscuous mode [ 618.435575][T19267] hsr_slave_1: left promiscuous mode [ 618.441292][T19267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.448763][T19267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.456837][T19267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.464301][T19267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.471831][T19267] bridge_slave_1: left allmulticast mode [ 618.477603][T19267] bridge_slave_1: left promiscuous mode [ 618.483264][T19267] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.491597][T19267] bridge_slave_0: left allmulticast mode [ 618.497716][T19267] bridge_slave_0: left promiscuous mode [ 618.503402][T19267] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.515766][T19267] veth1_macvtap: left promiscuous mode [ 618.521345][T19267] veth0_macvtap: left promiscuous mode [ 618.527511][T19267] veth1_vlan: left promiscuous mode [ 618.532779][T19267] veth0_vlan: left promiscuous mode [ 618.538944][T19267] veth1_macvtap: left promiscuous mode [ 618.544515][T19267] veth0_macvtap: left promiscuous mode [ 618.550213][T19267] veth1_vlan: left promiscuous mode [ 618.556482][T19267] veth0_vlan: left promiscuous mode [ 618.562519][T19267] veth1_macvtap: left promiscuous mode [ 618.568381][T19267] veth0_macvtap: left promiscuous mode [ 618.574159][T19267] veth1_vlan: left promiscuous mode [ 618.579414][T19267] veth0_vlan: left promiscuous mode [ 618.850576][T19267] team0 (unregistering): Port device team_slave_1 removed [ 618.880215][T19267] team0 (unregistering): Port device team_slave_0 removed [ 618.909160][T19267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.922057][T19267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.980963][T19267] bond0 (unregistering): Released all slaves [ 619.093222][T19267] team0 (unregistering): Port device team_slave_1 removed [ 619.126671][T19267] team0 (unregistering): Port device team_slave_0 removed [ 619.154330][T19267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.187206][T19267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.275764][T19267] bond0 (unregistering): Released all slaves [ 619.419506][T19267] team0 (unregistering): Port device team_slave_1 removed [ 619.449612][T19267] team0 (unregistering): Port device team_slave_0 removed [ 619.477865][T19267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.511970][T19267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.583375][T19267] bond0 (unregistering): Released all slaves