last executing test programs: 6.671803745s ago: executing program 3 (id=4127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_xfrm(0x10, 0x3, 0x6) 6.442160428s ago: executing program 4 (id=4129): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$eJzs3c9qY1UYAPDvpkkaLZIsXIngXczCjWUyWxdmkApiV0oW/gEdnBkYmjDQQGBUDF35BC5c+B7uXLlR3PgGgg/gziKFIze5TWKbpk1rWun8fpsezvm+nO/k3PYuLvf0s1f7ew+fDh4ffPV7NBpZVDrRicMsWlGJY6kUAMCtcJhS/Hmp+3u1sq6aAID1mrv/184I2Tzd9da6ywIA1uiDDz967/7u7s77ed6I6H8z7GYx+TkZv/84nkQvHsXdaMbR7FlASpP2O+/u7kQ1L7TiTn807BaZ/U9/nX9sUOS3oxmtxfntfGIufzTs1uLFiCyLeNIpCrkXzXj5VH4xvnNvQX506/F6o1xkMf92NOO3z+Np9OLh+JnGbP6v23n+dvr2ry8/LoKL/Gw07G6O42bSxnXvDQAAAAAAAAAAAAAAAAAAAAAAt9d2PtWKO/2iqzx/Z+NoPL79r/Hx+TqV8fgkP4uojxsnzgcapfj++Hydu3mep2wSPzvfpxqvVKN6YwsHAAAAAAAAAAAAAAAAAACA/5HBsy/2HvR6j/b/k0b5kv/0tf7Lfk5nrue1WB68udJcsVGGF7WejGn//El/2lMsYvXiD18a1vKIZTXXTvW8UNRz/hR/p5RSlkVcbZtqF5nrnMbW8pjiC/7xu6039h5k532HjeON+2F+qB77g2cn9jSyovHTLxfb7rTS5VdfElMvr5gLfc7WFX+J3vxjMlnZk62wilrZiLMuv8ZK1/M1/QECAAAAAAAAAAAAAAAAAACmZi/9Lhg8WJpaWVtRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDNZv//f4XGqExeHJNSGk176rE/uOElAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bz4JwAA///l5m1V") socket$netlink(0x10, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x1ab) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000c, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 5.600114157s ago: executing program 3 (id=4132): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@abort}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4aa, &(0x7f0000000000)={[{}, {@grpjquota, 0x22}, {@errors_continue}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@errors_continue}, {@data_err_abort}, {@barrier}]}, 0x1, 0x455, &(0x7f0000000d80)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, &(0x7f0000000000)) 4.424233981s ago: executing program 4 (id=4135): r0 = semget$private(0x0, 0x4000, 0x555) semctl$IPC_RMID(r0, 0x0, 0x0) 3.960057386s ago: executing program 4 (id=4137): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000fddbdf250c00000008000300", @ANYRES32=r2, @ANYBLOB="0800370000000000050008000500000004002800"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) 3.958072546s ago: executing program 3 (id=4138): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21d62}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x1, 0x1}}]}]}]}, 0x50}}, 0x20084084) 3.944710616s ago: executing program 1 (id=4139): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x800092, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x46, 0x2d1, &(0x7f0000000740)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) 3.57187323s ago: executing program 1 (id=4141): socket$inet6(0xa, 0x3, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x4}) 3.470871511s ago: executing program 2 (id=4142): r0 = semget$private(0x0, 0x3, 0x10) semtimedop(r0, &(0x7f0000000040)=[{0x3, 0x100, 0x800}, {0x1, 0x5, 0x1000}, {0x3, 0xff, 0x1000}, {0x1, 0x1, 0x1000}, {0x2, 0x5}, {0x1, 0xdd, 0x800}, {0x2, 0x3, 0x800}], 0x7, &(0x7f0000000180)={0x77359400}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010080ffffff00000000010000000c000480040003000200000008000100020000000800020003"], 0x30}}, 0x20000000) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000003a00000425bd7000fcdbd7250d000000"], 0x14}}, 0x20006004) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000170a0103"], 0x20}, 0x1, 0x0, 0x0, 0x44004}, 0x8094) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x7d4165c9) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r12, 0x7d4165c9) listen(r11, 0x0) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r13, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r14, 0x0) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000002f80)=""/61) 3.403531902s ago: executing program 0 (id=4143): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, 0x0, 0x0) getgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x4, 0x23, &(0x7f0000000c00)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000018280000c804daa7f96c875b90c48ff8d0eaaa232218dd797d76dfa693a5a479898026f7f377cfac74811ec073e291578aa8e71ef982004b3aee", @ANYRES8=r0, @ANYRES8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000006d24fffff0ffffff185400000e00000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0x6d4, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0xb, 0xfffffffffffffffe, 0xfd41) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.340542723s ago: executing program 3 (id=4144): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0xffe7, 0x6, 0x1, {0xd, @pix={0x8, 0xf4, 0x34524742, 0x6, 0x2afc, 0x1, 0xb, 0x3, 0x1, 0x6, 0x2, 0x45a340398bdb3896}}}) 3.300220033s ago: executing program 1 (id=4145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.210004934s ago: executing program 3 (id=4146): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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") socket$netlink(0x10, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x1ab) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000c, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 3.152113145s ago: executing program 0 (id=4147): bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_open_procfs$pagemap(r0, &(0x7f0000000040)) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) shmctl$SHM_LOCK(0x0, 0xb) r3 = semget$private(0x0, 0x4000, 0x555) semctl$IPC_RMID(r3, 0x0, 0x0) setgroups(0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f00000003c0)={0x1f, &(0x7f0000000280)=[{0x11, '\x00', @data=0x3, 0xfffff801}]}) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, 0x0) 3.094584326s ago: executing program 1 (id=4148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000000)=ANY=[]) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000000080)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.023562876s ago: executing program 2 (id=4149): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) syz_mount_image$fuse(0x0, 0x0, 0x4028, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$binfmt_aout(r4, &(0x7f0000000500)=ANY=[], 0xff2e) readv(r4, &(0x7f0000000280)=[{0x0}], 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@volatile}]}) write$FUSE_LSEEK(r0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)={0x32}, 0x8) sendto$inet6(r5, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) 2.068410527s ago: executing program 1 (id=4150): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") openat(0xffffffffffffff9c, 0x0, 0x101842, 0x11) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x6, 0x5, 0x9, 0x4, 0x5}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x704, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x1, 0x9003) 1.680077921s ago: executing program 0 (id=4151): r0 = syz_ublk_setup_io_uring(0x13fd, &(0x7f0000000c00)={0x0, 0xe60, 0x800, 0x3, 0xed}, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000d40)=[0x23a1, 0x80000000], 0x2) 1.535542683s ago: executing program 4 (id=4152): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(&(0x7f000000cffc)=0x3, 0x1, 0xf2, 0x0, 0x0, 0x2000000) 1.458379224s ago: executing program 0 (id=4153): unshare(0x42000000) syz_open_dev$dri(0x0, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x4578, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x10, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800dd8d00000000ffdbdf3502200004ff000006"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="38000000200001002bbd7000fddbdf2502"], 0x38}}, 0x0) 1.129191627s ago: executing program 2 (id=4154): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040)={0x1ff, '*k?'}, 0x6) 959.9693ms ago: executing program 0 (id=4155): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2004851, &(0x7f0000000ec0)={[{@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@lazytime}]}, 0x64, 0x551, &(0x7f00000014c0)="$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") connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 940.26931ms ago: executing program 3 (id=4156): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x3fffffffffffd75, 0x0) keyctl$clear(0x7, r0) 919.78657ms ago: executing program 2 (id=4157): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, 0x0, 0x0) getgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x4, 0x23, &(0x7f0000000c00)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000018280000c804daa7f96c875b90c48ff8d0eaaa232218dd797d76dfa693a5a479898026f7f377cfac74811ec073e291578aa8e71ef982004b3aee", @ANYRES8=r0, @ANYRES8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000006d24fffff0ffffff185400000e00000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0x6d4, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0xb, 0xfffffffffffffffe, 0xfd41) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 561.098254ms ago: executing program 2 (id=4158): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x44}}, 0x0) 479.945445ms ago: executing program 4 (id=4159): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00\x00@\x00'}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 228.528878ms ago: executing program 1 (id=4160): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x101000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xc95a, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x1, 0x9, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x4, 0x0, 0x7, 0x23c5b, 0x1, 0x20, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x4, 0x8, 0x4c74, 0x80000003, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x6, 0x3e, 0x4000008c, 0x6, 0x7, 0x0, 0x4, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x6, 0x4, 0x11, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e8, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x78, 0xe, 0x0, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x953, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x8d2, 0x9, 0x5, 0x8002, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xffff, 0x2, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xa3ae, 0x1, 0x1c, 0x120000, 0x3, 0x2006, 0x5, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x5, 0x2, 0xfffffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff7, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000100)={"6739669f274d13b691eb645b00e4f5b53e0ca34dd02ac6cdc67c5e3126628168", r1}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = inotify_init1(0x80000) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) dup(r6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='c 75:*\tw'], 0xa) 228.191738ms ago: executing program 2 (id=4161): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x10000000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x10000000, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x20}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) syz_usb_connect(0x6, 0xfef0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 224.769818ms ago: executing program 4 (id=4162): bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_open_procfs$pagemap(r0, &(0x7f0000000040)) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) shmctl$SHM_LOCK(0x0, 0xb) r3 = semget$private(0x0, 0x4000, 0x555) semctl$IPC_RMID(r3, 0x0, 0x0) setgroups(0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f00000003c0)={0x1f, &(0x7f0000000280)=[{0x11, '\x00', @data=0x3, 0xfffff801}]}) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, 0x0) 0s ago: executing program 0 (id=4163): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000fddbdf250c00000008000300", @ANYRES32=r2, @ANYBLOB="0800370000000000050008000500000004002800"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) kernel console output (not intermixed with test programs): 1490.022781][T17402] loop0: detected capacity change from 0 to 16 [ 1490.038337][T17402] erofs: (device loop0): mounted with root inode @ nid 36. [ 1490.138335][T17182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1490.534342][T17410] loop4: detected capacity change from 0 to 16 [ 1490.549475][T17182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1490.620590][T17410] erofs: (device loop4): mounted with root inode @ nid 36. [ 1490.689384][T17182] 8021q: adding VLAN 0 to HW filter on device team0 [ 1490.740029][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1490.760306][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1490.828013][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1490.836947][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1490.845555][ T4614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1490.852695][ T4614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1490.861257][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1491.011889][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1491.083740][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1491.143118][ T4576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1491.150365][ T4576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1491.231190][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1491.329500][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1491.338753][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1491.354560][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1491.404531][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1491.433550][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1491.470993][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1491.513703][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1491.545030][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1491.584076][T17182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1491.624344][T17182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1491.670745][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1491.680179][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1494.239260][T11229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1494.260579][T11229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1494.284051][T17182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1494.337714][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1494.363494][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1495.179109][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1495.207234][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1495.228224][T17182] device veth0_vlan entered promiscuous mode [ 1495.249006][T17182] device veth1_vlan entered promiscuous mode [ 1495.282944][T17182] device veth0_macvtap entered promiscuous mode [ 1495.298500][T17182] device veth1_macvtap entered promiscuous mode [ 1495.371456][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1495.379310][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1495.407864][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1495.424544][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1495.591979][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1495.914485][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1496.425711][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1496.486221][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1496.611393][T17182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1496.623650][T17182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.642102][T17182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1496.714974][T17182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.754988][T17182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1496.796332][T17182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.857949][T17182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1496.874956][T17182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.021760][T17182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1497.365334][T17182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1497.568874][T17182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.591173][T17488] loop4: detected capacity change from 0 to 16 [ 1497.634361][T17182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1497.645543][T17488] erofs: (device loop4): mounted with root inode @ nid 36. [ 1497.652963][T17182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.663522][T17182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1497.674050][T17182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.683939][T17182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1497.694498][T17182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.705779][T17182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1497.721057][T17182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.729858][T17182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.738559][T17182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.751161][T17182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.910216][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1497.939527][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1497.961372][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1498.046919][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1500.061377][ T8646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1500.069518][ T8646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1500.486774][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1501.192261][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1501.216448][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1501.234692][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1502.117341][T17538] loop1: detected capacity change from 0 to 16 [ 1502.172594][T17538] erofs: (device loop1): mounted with root inode @ nid 36. [ 1503.241257][T16875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1503.277952][T16875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1503.286252][T16875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1503.307550][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1503.315213][T16875] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1503.323112][T16875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1503.507816][ T8935] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.795674][ T8935] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.842834][T17540] chnl_net:caif_netlink_parms(): no params data found [ 1504.198131][ T8935] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.648657][ T8935] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.620069][T16875] Bluetooth: hci1: command 0x0409 tx timeout [ 1506.283896][T17580] loop0: detected capacity change from 0 to 16 [ 1506.339142][T17540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.355509][T17540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1506.371353][T17580] erofs: (device loop0): mounted with root inode @ nid 36. [ 1506.496081][T17540] device bridge_slave_0 entered promiscuous mode [ 1506.527104][T17540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1506.596522][T17540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1508.720046][T16875] Bluetooth: hci1: command 0x041b tx timeout [ 1508.728480][T17540] device bridge_slave_1 entered promiscuous mode [ 1508.947453][T17540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1509.001342][T17597] loop1: detected capacity change from 0 to 16 [ 1509.009194][T17540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1509.048121][T17597] erofs: (device loop1): mounted with root inode @ nid 36. [ 1509.356258][T17540] team0: Port device team_slave_0 added [ 1509.440345][T17540] team0: Port device team_slave_1 added [ 1509.722130][T17540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1509.757872][T17540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1509.868904][T17540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1509.963482][T17540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1509.981822][T17540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1510.029964][T17540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1510.253665][T17540] device hsr_slave_0 entered promiscuous mode [ 1510.295544][T17540] device hsr_slave_1 entered promiscuous mode [ 1510.961581][T16875] Bluetooth: hci1: command 0x040f tx timeout [ 1513.189577][T16875] Bluetooth: hci1: command 0x0419 tx timeout [ 1514.966185][T17674] loop2: detected capacity change from 0 to 16 [ 1514.996637][T17674] erofs: (device loop2): mounted with root inode @ nid 36. [ 1515.365672][ T8935] device hsr_slave_0 left promiscuous mode [ 1515.389435][ T8935] device hsr_slave_1 left promiscuous mode [ 1515.399804][ T8935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1515.408722][ T8935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1515.417539][ T8935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1515.425333][ T8935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1515.441402][ T8935] device bridge_slave_1 left promiscuous mode [ 1515.447736][ T8935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.470887][ T8935] device bridge_slave_0 left promiscuous mode [ 1515.507325][ T8935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.570156][ T8935] device veth1_macvtap left promiscuous mode [ 1515.586936][ T8935] device veth0_macvtap left promiscuous mode [ 1515.596553][ T8935] device veth1_vlan left promiscuous mode [ 1515.613728][ T8935] device veth0_vlan left promiscuous mode [ 1516.060943][ T8935] bond3 (unregistering): Released all slaves [ 1516.199399][ T8935] bond2 (unregistering): Released all slaves [ 1516.245518][ T8935] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1516.423717][ T8935] bond1 (unregistering): Released all slaves [ 1517.937576][ T8935] team0 (unregistering): Port device team_slave_1 removed [ 1518.054863][T17726] loop0: detected capacity change from 0 to 16 [ 1518.068886][T17726] erofs: (device loop0): mounted with root inode @ nid 36. [ 1518.233750][ T8935] team0 (unregistering): Port device team_slave_0 removed [ 1518.285313][ T8935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1518.982799][ T8935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1519.425634][ T8935] bond0 (unregistering): Released all slaves [ 1519.738815][T17540] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1519.817151][T17540] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1519.844999][T17540] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1519.878599][T17540] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1520.150055][T17540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1520.191979][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1520.246099][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1520.323856][T17540] 8021q: adding VLAN 0 to HW filter on device team0 [ 1520.355695][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1520.376736][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1520.388140][ T8583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.395302][ T8583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1520.451042][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1520.490494][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1520.547092][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1520.575850][ T8583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.583052][ T8583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1520.624098][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1520.712636][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1520.767184][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1521.210112][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1521.289576][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1521.313002][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1521.337292][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1521.358995][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1521.390692][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1521.399277][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1521.410322][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1521.432047][T17540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1521.696391][T17779] loop1: detected capacity change from 0 to 16 [ 1521.733195][T17779] erofs: (device loop1): mounted with root inode @ nid 36. [ 1522.171169][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1522.178747][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1522.221913][T17540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1523.684341][T17808] loop2: detected capacity change from 0 to 16 [ 1523.721102][T17808] erofs: (device loop2): mounted with root inode @ nid 36. [ 1524.391527][T17826] Device name cannot be null; rc = [-22] [ 1524.987550][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1525.009527][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1525.060407][T17829] loop2: detected capacity change from 0 to 16 [ 1525.079507][T12172] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1525.096747][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1525.111933][T17829] erofs: (device loop2): mounted with root inode @ nid 36. [ 1525.160057][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1525.189226][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1525.255252][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1525.284384][T17540] device veth0_vlan entered promiscuous mode [ 1525.342285][T17540] device veth1_vlan entered promiscuous mode [ 1525.367431][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1525.387559][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1525.388610][T12172] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1525.396004][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1525.421198][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1525.425831][T12172] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1525.445235][T17540] device veth0_macvtap entered promiscuous mode [ 1525.466157][T17540] device veth1_macvtap entered promiscuous mode [ 1525.485651][T12172] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1525.525636][T12172] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1525.546281][T17540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.560102][T12172] usb 1-1: Product: syz [ 1525.568549][T12172] usb 1-1: SerialNumber: syz [ 1525.573462][T17540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.587200][T12172] usb 1-1: config 0 descriptor?? [ 1525.609797][T17540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.635045][T17540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.645669][T17540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.661353][T17540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.675150][T17540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.685759][T17540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.698528][T17540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1525.708253][ T8594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1525.725576][ T8594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1525.735646][ T8594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1525.748744][ T8594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1525.763683][T17540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.775673][T17540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.789989][T17540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.800811][T17540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.863289][T17824] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3073'. [ 1525.875555][T17540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.886107][T17540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.901638][T17540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.912201][T17540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.923999][T17540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1525.947297][T17540] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.956288][T17540] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.965335][T17540] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.978003][T17540] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.003436][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1526.028180][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1527.251862][ T22] usb 1-1: USB disconnect, device number 95 [ 1527.340987][T17866] loop2: detected capacity change from 0 to 16 [ 1527.341090][ T8583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1527.429592][ T8594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1527.450885][ T8594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1527.460655][T17866] erofs: (device loop2): mounted with root inode @ nid 36. [ 1527.539126][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1527.571960][ T8583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1529.758195][T17879] input: syz0 as /devices/virtual/input/input270 [ 1530.093473][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1531.864058][T17903] loop0: detected capacity change from 0 to 16 [ 1531.935829][T17903] erofs: (device loop0): mounted with root inode @ nid 36. [ 1533.410237][T16875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1533.606346][T16875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1533.617529][T16875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1533.626382][T16875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1533.634235][T16875] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1533.641575][T16875] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1534.555492][T17922] input: syz0 as /devices/virtual/input/input271 [ 1535.089941][ T4612] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.330822][ T4612] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1535.689854][T16875] Bluetooth: hci3: command 0x0409 tx timeout [ 1536.530822][T17929] input: syz0 as /devices/virtual/input/input272 [ 1537.022583][ T4612] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.038359][ T4612] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1537.822152][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 1537.931266][T17939] loop4: detected capacity change from 0 to 16 [ 1538.000421][T17939] erofs: (device loop4): mounted with root inode @ nid 36. [ 1538.014095][ T4612] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.061232][ T4612] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1538.213106][ T4612] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.239883][ T4612] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1538.305842][T17913] chnl_net:caif_netlink_parms(): no params data found [ 1538.669011][T17959] loop2: detected capacity change from 0 to 16 [ 1538.680814][T17959] erofs: (device loop2): mounted with root inode @ nid 36. [ 1539.397651][T17913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.419874][T17913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.459754][T17913] device bridge_slave_0 entered promiscuous mode [ 1539.561774][T17913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.768464][T17913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.107038][T16875] Bluetooth: hci3: command 0x040f tx timeout [ 1540.154897][T17913] device bridge_slave_1 entered promiscuous mode [ 1540.491039][T17913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1540.855019][T17913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1541.516655][T17913] team0: Port device team_slave_0 added [ 1541.537331][T17913] team0: Port device team_slave_1 added [ 1541.990321][T17913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1542.039375][T17913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1542.170219][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 1542.405806][T17913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1542.454781][T17913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1542.509027][T17913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1542.577258][T17913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1543.899006][T17913] device hsr_slave_0 entered promiscuous mode [ 1543.919849][T17913] device hsr_slave_1 entered promiscuous mode [ 1543.932893][T17913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1543.940893][T17913] Cannot create hsr debugfs directory [ 1545.899028][T18024] loop0: detected capacity change from 0 to 16 [ 1545.923885][T18024] erofs: (device loop0): mounted with root inode @ nid 36. [ 1546.951310][T18030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3112'. [ 1547.180382][ T4612] device hsr_slave_0 left promiscuous mode [ 1547.281678][ T4612] device hsr_slave_1 left promiscuous mode [ 1547.297914][ T4612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1547.747752][ T4612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1548.118184][ T4612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1548.164311][ T4612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1548.173058][T18050] loop2: detected capacity change from 0 to 16 [ 1548.199407][ T4612] batman_adv: batadv0: Interface deactivated: vlan1 [ 1548.231683][ T4612] batman_adv: batadv0: Removing interface: vlan1 [ 1548.249942][T18050] erofs: (device loop2): mounted with root inode @ nid 36. [ 1548.278195][ T4612] device bridge_slave_1 left promiscuous mode [ 1548.500041][ T4612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.508538][ T4612] device bridge_slave_0 left promiscuous mode [ 1548.829596][ T4612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.325369][ T4612] device veth1_macvtap left promiscuous mode [ 1549.340205][ T4612] device veth0_macvtap left promiscuous mode [ 1549.350168][ T4612] device veth1_vlan left promiscuous mode [ 1549.360048][ T4612] device veth0_vlan left promiscuous mode [ 1550.737719][ T4612] bond5 (unregistering): Released all slaves [ 1550.813286][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1550.819701][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.152331][ T4612] bond4 (unregistering): Released all slaves [ 1551.944598][ T4612] bond3 (unregistering): Released all slaves [ 1552.352373][ T4612] bond2 (unregistering): Released all slaves [ 1552.396691][ T4612] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 1552.806400][ T4612] bond1 (unregistering): Released all slaves [ 1553.560470][T18092] input: syz0 as /devices/virtual/input/input273 [ 1553.789534][ T4612] team0 (unregistering): Port device team_slave_1 removed [ 1553.944666][ T4612] team0 (unregistering): Port device team_slave_0 removed [ 1554.053782][ T4612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1554.107620][ T4612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1554.479265][ T4612] bond0 (unregistering): Released all slaves [ 1554.738947][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3120'. [ 1556.145188][T17913] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1556.220180][T17913] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1556.296828][T18124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3130'. [ 1556.329278][T17913] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1556.352565][T17913] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1556.527400][T17913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1556.558900][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1556.572265][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1556.591610][T17913] 8021q: adding VLAN 0 to HW filter on device team0 [ 1556.629944][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1556.641534][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1556.658635][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.665878][ T4367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1556.701192][T18132] loop1: detected capacity change from 0 to 16 [ 1556.712498][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1556.737748][T18132] erofs: (device loop1): mounted with root inode @ nid 36. [ 1556.762397][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1556.780786][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1556.960874][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.968076][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1556.991077][T18138] loop4: detected capacity change from 0 to 16 [ 1557.017834][T18138] erofs: (device loop4): mounted with root inode @ nid 36. [ 1557.094517][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1557.113682][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1557.170295][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1557.404377][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1557.414724][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1558.024458][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1558.054166][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1558.115371][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1558.124853][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1558.140531][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1558.159446][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1558.260035][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3135'. [ 1560.560158][T18160] input: syz0 as /devices/virtual/input/input274 [ 1561.187713][T18178] loop4: detected capacity change from 0 to 16 [ 1561.260887][T18179] Device name cannot be null; rc = [-22] [ 1561.354260][T18178] erofs: (device loop4): mounted with root inode @ nid 36. [ 1561.886142][T17578] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1562.124442][T17578] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1562.140787][T17578] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1562.164895][T17578] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1562.891283][T17578] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1562.899534][T17578] usb 3-1: Product: syz [ 1562.904157][T17578] usb 3-1: SerialNumber: syz [ 1562.944705][T17578] usb 3-1: config 0 descriptor?? [ 1563.129813][T16875] Bluetooth: hci2: command 0x0406 tx timeout [ 1563.397266][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1563.427027][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1563.458183][T17913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1563.532813][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1563.551766][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1563.621044][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1563.650901][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1563.680161][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1563.709079][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1563.737305][T17913] device veth0_vlan entered promiscuous mode [ 1563.796579][T17913] device veth1_vlan entered promiscuous mode [ 1563.875041][T18203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3144'. [ 1563.936115][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1563.999154][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1564.125264][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1564.256373][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1564.310862][ T8128] usb 3-1: USB disconnect, device number 90 [ 1564.400734][T17913] device veth0_macvtap entered promiscuous mode [ 1564.551628][ T8594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1564.674973][T17913] device veth1_macvtap entered promiscuous mode [ 1564.881790][T17913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1564.937337][T17913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1564.981593][T17913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1565.022763][T17913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.074312][T17913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1565.117449][T17913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.207402][T17913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1565.234125][T17913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.608938][T17913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1565.654022][T18213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3145'. [ 1565.748458][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1565.777152][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1565.860531][T17913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1565.894878][T17913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.920330][T17913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1566.033369][T17913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1566.053320][T17913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1566.770590][T17913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1566.798486][T17913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1566.839474][T17913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1566.918322][T17913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1566.979028][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1566.994466][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1567.009512][T17913] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.135069][T17913] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.283299][T17913] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.407991][T17913] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.848803][ T4624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1567.877023][ T4624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1567.895685][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1567.950012][ T4606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1567.957922][ T4606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1567.991246][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1568.416715][T18254] input: syz0 as /devices/virtual/input/input275 [ 1569.624974][T18263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3152'. [ 1570.069396][T18267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3154'. [ 1570.835647][ T4284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1570.845168][ T4284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1570.859411][ T4284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1570.868934][ T4284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1570.878187][ T4284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1570.887039][ T4284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1571.259189][T18279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3157'. [ 1571.509046][T18282] loop1: detected capacity change from 0 to 16 [ 1571.712202][T18282] erofs: (device loop1): mounted with root inode @ nid 36. [ 1572.712028][T18293] loop3: detected capacity change from 0 to 16 [ 1572.747779][T18293] erofs: (device loop3): mounted with root inode @ nid 36. [ 1572.969807][T16875] Bluetooth: hci5: command 0x0409 tx timeout [ 1573.489539][T18268] chnl_net:caif_netlink_parms(): no params data found [ 1573.673099][ T8867] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.457123][ T8867] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.533642][T18268] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.544689][T18268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.553479][T18268] device bridge_slave_0 entered promiscuous mode [ 1574.577170][ T8867] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.649464][T18268] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.659777][T18268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.735982][T18268] device bridge_slave_1 entered promiscuous mode [ 1574.803788][ T8867] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.867559][T18268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1574.905530][T18268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1574.996802][T18268] team0: Port device team_slave_0 added [ 1575.023782][T18268] team0: Port device team_slave_1 added [ 1575.050506][ T4284] Bluetooth: hci5: command 0x041b tx timeout [ 1575.208448][T18268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1575.225963][T18268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1575.289905][T18268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1575.372463][T18268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1575.415614][T18268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1575.468783][T18268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1575.489539][T18314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3165'. [ 1576.480636][T18268] device hsr_slave_0 entered promiscuous mode [ 1576.552343][T18268] device hsr_slave_1 entered promiscuous mode [ 1576.584491][T18268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1576.615818][T18268] Cannot create hsr debugfs directory [ 1577.398612][ T4284] Bluetooth: hci5: command 0x040f tx timeout [ 1577.791543][T18338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3169'. [ 1578.931348][T18349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3170'. [ 1579.449836][ T4284] Bluetooth: hci5: command 0x0419 tx timeout [ 1580.238758][T18371] loop3: detected capacity change from 0 to 16 [ 1580.247439][T18371] erofs: (device loop3): mounted with root inode @ nid 36. [ 1580.599222][T18268] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1580.610247][T18268] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1580.620103][T18268] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1580.647637][T18268] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1582.672651][T18268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1582.688965][T18268] 8021q: adding VLAN 0 to HW filter on device team0 [ 1582.785820][T18389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3176'. [ 1583.559828][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1583.578099][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1583.640429][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1583.803574][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1583.924165][ T4628] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.931357][ T4628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1584.134619][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1584.263281][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1584.363502][ T4628] bridge0: port 2(bridge_slave_1) entered blocking state [ 1584.370713][ T4628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1584.578826][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1584.619242][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1584.665415][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1584.689141][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1584.700274][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1584.709184][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1584.737400][T18268] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1584.808236][T18268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1584.833429][T18405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3179'. [ 1584.866399][T18414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3181'. [ 1584.919744][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1584.944051][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1584.957049][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1585.001554][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1585.040811][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1585.052162][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1585.064736][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1585.153722][ T8867] device hsr_slave_0 left promiscuous mode [ 1585.176506][ T8867] device hsr_slave_1 left promiscuous mode [ 1585.188659][ T8867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1585.206938][ T8867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1585.236072][ T8867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1585.245249][ T8867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1585.253934][ T8867] device bridge_slave_1 left promiscuous mode [ 1585.266007][ T8867] bridge0: port 2(bridge_slave_1) entered disabled state [ 1585.288296][ T8867] device bridge_slave_0 left promiscuous mode [ 1585.312422][ T8867] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.390590][ T8867] device veth1_macvtap left promiscuous mode [ 1585.400643][ T8867] device veth0_macvtap left promiscuous mode [ 1585.411230][ T8867] device veth1_vlan left promiscuous mode [ 1585.423003][ T8867] device veth0_vlan left promiscuous mode [ 1586.914476][ T8867] bond5 (unregistering): Released all slaves [ 1587.516713][T18450] loop3: detected capacity change from 0 to 16 [ 1587.528282][T18450] erofs: (device loop3): mounted with root inode @ nid 36. [ 1587.751183][ T8867] bond4 (unregistering): Released all slaves [ 1588.488658][ T8867] bond3 (unregistering): Released all slaves [ 1588.624240][ T8867] bond2 (unregistering): Released all slaves [ 1588.646971][ T8867] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1588.787935][ T8867] bond1 (unregistering): Released all slaves [ 1589.264700][ T8867] team0 (unregistering): Port device team_slave_1 removed [ 1589.306039][ T8867] team0 (unregistering): Port device team_slave_0 removed [ 1589.344533][ T8867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1589.382561][ T8867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1589.634214][ T8867] bond0 (unregistering): Released all slaves [ 1589.715538][T18426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3184'. [ 1589.729688][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3188'. [ 1590.210190][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1590.227946][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1591.941942][T18268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1593.163237][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1593.172695][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1593.267620][T18268] device veth0_vlan entered promiscuous mode [ 1593.464805][T18268] device veth1_vlan entered promiscuous mode [ 1593.487814][T18268] device veth0_macvtap entered promiscuous mode [ 1593.497751][T18268] device veth1_macvtap entered promiscuous mode [ 1593.661126][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1593.788509][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1594.020913][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1594.072306][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 1594.080435][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1594.088689][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1594.097706][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1594.112612][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1594.178501][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1594.230980][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1594.242737][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1594.305045][T18268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1594.327161][T18268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.338288][T18268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1594.349175][T18268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.359294][T18268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1594.370030][T18268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.464841][T18268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1594.476421][T18268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.490621][T18268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1594.498960][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1595.244900][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1595.270477][T18268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1595.283175][T18268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1595.297668][T18268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1595.309726][T18268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1595.319992][T18268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1595.330800][T18268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1595.341306][T18268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1595.352824][T18268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1595.433147][T18268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1595.463345][ T9222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1595.489346][ T9222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1595.509486][T18268] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.523370][T18268] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.532910][T18268] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.552326][T18268] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.694938][ T8583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1595.728480][ T8583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1595.784523][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1595.872676][ T8867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1595.891824][ T8867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1595.926896][T18524] loop2: detected capacity change from 0 to 16 [ 1595.933913][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1595.999317][T18524] erofs: (device loop2): mounted with root inode @ nid 36. [ 1597.692269][T18548] loop2: detected capacity change from 0 to 16 [ 1597.792353][T18548] erofs: (device loop2): mounted with root inode @ nid 36. [ 1597.808074][T18551] loop4: detected capacity change from 0 to 16 [ 1597.855610][T18551] erofs: (device loop4): mounted with root inode @ nid 36. [ 1599.275109][T18567] loop1: detected capacity change from 0 to 16 [ 1599.334521][T18567] erofs: (device loop1): mounted with root inode @ nid 36. [ 1600.536319][T18578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3222'. [ 1601.857568][T18599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3226'. [ 1601.905860][T18600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3227'. [ 1603.970006][T18619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3242'. [ 1605.343521][T18639] loop1: detected capacity change from 0 to 16 [ 1605.465502][T18639] erofs: (device loop1): mounted with root inode @ nid 36. [ 1605.550021][T18635] input: syz0 as /devices/virtual/input/input276 [ 1607.579548][T18663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3239'. [ 1607.664916][T18666] Device name cannot be null; rc = [-22] [ 1608.038034][T17578] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1609.161457][T17578] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1609.179752][T17578] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1609.919839][T17578] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1609.928943][T17578] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1609.939295][T17578] usb 1-1: Product: syz [ 1609.943576][T17578] usb 1-1: SerialNumber: syz [ 1609.966037][T17578] usb 1-1: config 0 descriptor?? [ 1610.215618][T18664] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3240'. [ 1612.365924][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.394014][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.492010][ T4317] usb 1-1: USB disconnect, device number 96 [ 1613.179839][T18700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3259'. [ 1614.660846][T18714] loop4: detected capacity change from 0 to 16 [ 1614.799412][T18714] erofs: (device loop4): mounted with root inode @ nid 36. [ 1615.248965][T18723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3253'. [ 1618.276884][T18744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3260'. [ 1619.241314][T18756] loop1: detected capacity change from 0 to 16 [ 1619.331414][T18756] erofs: (device loop1): mounted with root inode @ nid 36. [ 1620.632572][T18764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3275'. [ 1621.567900][T18774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3267'. [ 1622.229686][T18778] loop4: detected capacity change from 0 to 16 [ 1622.255025][T18778] erofs: (device loop4): mounted with root inode @ nid 36. [ 1624.759989][T18791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3271'. [ 1625.453924][T18802] loop3: detected capacity change from 0 to 16 [ 1625.678397][T18802] erofs: (device loop3): mounted with root inode @ nid 36. [ 1625.696091][T18792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3270'. [ 1626.148347][T18812] loop2: detected capacity change from 0 to 16 [ 1626.184408][T18812] erofs: (device loop2): mounted with root inode @ nid 36. [ 1627.598803][T18834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3282'. [ 1628.950045][T18838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3283'. [ 1629.689778][T16875] Bluetooth: hci1: command 0x0406 tx timeout [ 1630.956016][T18869] loop3: detected capacity change from 0 to 16 [ 1630.967247][T18869] erofs: (device loop3): mounted with root inode @ nid 36. [ 1630.973609][T18870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3290'. [ 1632.396414][T18890] loop1: detected capacity change from 0 to 16 [ 1632.466914][T18890] erofs: (device loop1): mounted with root inode @ nid 36. [ 1632.577255][T18891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3295'. [ 1634.026493][T18902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3297'. [ 1635.907589][T18923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3301'. [ 1636.815567][T18929] loop0: detected capacity change from 0 to 16 [ 1636.974966][T18929] erofs: (device loop0): mounted with root inode @ nid 36. [ 1637.199313][T18933] loop4: detected capacity change from 0 to 16 [ 1637.260066][T18933] erofs: (device loop4): mounted with root inode @ nid 36. [ 1638.151571][T18945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3307'. [ 1639.363749][T18961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3310'. [ 1640.024836][T18969] loop4: detected capacity change from 0 to 16 [ 1640.079589][T18969] erofs: (device loop4): mounted with root inode @ nid 36. [ 1641.252715][T18975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3313'. [ 1642.812520][T18997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3318'. [ 1644.644963][T19020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3325'. [ 1644.687900][T19022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3324'. [ 1646.274911][T19048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3330'. [ 1647.155302][T19052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3331'. [ 1648.714321][T19068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3334'. [ 1649.200135][T19080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3336'. [ 1650.224903][T19088] loop0: detected capacity change from 0 to 16 [ 1650.349254][T19088] erofs: (device loop0): mounted with root inode @ nid 36. [ 1650.930366][T19092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3339'. [ 1652.077712][T19104] loop3: detected capacity change from 0 to 16 [ 1652.126824][T19104] erofs: (device loop3): mounted with root inode @ nid 36. [ 1652.462374][T19114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3344'. [ 1652.495825][T19115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3346'. [ 1655.295908][T19139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3351'. [ 1658.596754][T19166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3358'. [ 1658.617681][T19165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3357'. [ 1660.497209][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 1660.520595][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3362'. [ 1661.811281][T19204] loop0: detected capacity change from 0 to 16 [ 1661.927787][T19202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3376'. [ 1661.937018][T19204] erofs: (device loop0): mounted with root inode @ nid 36. [ 1663.084281][T19217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3369'. [ 1663.141324][T19219] loop4: detected capacity change from 0 to 16 [ 1664.021503][T19219] erofs: (device loop4): mounted with root inode @ nid 36. [ 1665.074628][T19228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3372'. [ 1665.570990][T19231] loop2: detected capacity change from 0 to 16 [ 1665.621340][T19231] erofs: (device loop2): mounted with root inode @ nid 36. [ 1666.588449][T19254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3375'. [ 1667.794481][T19267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3390'. [ 1669.726670][T19277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3381'. [ 1671.633239][T19300] loop3: detected capacity change from 0 to 16 [ 1671.665460][T19300] erofs: (device loop3): mounted with root inode @ nid 36. [ 1674.181141][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.187556][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.263372][T19320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3394'. [ 1675.150249][T19326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3397'. [ 1675.176052][T19325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3396'. [ 1677.663700][T19338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3398'. [ 1680.391868][T19392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3413'. [ 1681.990887][T19396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3412'. [ 1683.977847][T19418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3426'. [ 1684.119353][T19421] loop1: detected capacity change from 0 to 16 [ 1684.174859][T19421] erofs: (device loop1): mounted with root inode @ nid 36. [ 1688.334775][T19443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3423'. [ 1689.953844][T19474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3429'. [ 1692.086730][T19487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3432'. [ 1692.944268][T19494] loop3: detected capacity change from 0 to 16 [ 1693.321070][T19494] erofs: (device loop3): mounted with root inode @ nid 36. [ 1693.382569][T19497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3434'. [ 1695.606348][T19515] loop1: detected capacity change from 0 to 16 [ 1695.616533][T19516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3438'. [ 1695.693808][T19515] erofs: (device loop1): mounted with root inode @ nid 36. [ 1696.249696][T16875] Bluetooth: hci5: command 0x0406 tx timeout [ 1697.426368][T19525] loop2: detected capacity change from 0 to 16 [ 1697.594034][T19525] erofs: (device loop2): mounted with root inode @ nid 36. [ 1699.507339][T19545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3445'. [ 1701.100492][T19557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3447'. [ 1702.603701][T19571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3452'. [ 1702.626601][T19574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3451'. [ 1704.955456][T19587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3455'. [ 1705.726958][T19593] loop3: detected capacity change from 0 to 16 [ 1705.855642][T19597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3457'. [ 1705.875925][T19593] erofs: (device loop3): mounted with root inode @ nid 36. [ 1707.449243][T19611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3461'. [ 1708.588638][T19630] input: syz0 as /devices/virtual/input/input278 [ 1708.867279][T19634] loop1: detected capacity change from 0 to 16 [ 1708.880718][T19634] erofs: (device loop1): mounted with root inode @ nid 36. [ 1710.321506][T19644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3467'. [ 1711.258246][T19646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3466'. [ 1711.722028][T19654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3468'. [ 1712.273166][T19653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3469'. [ 1712.457765][T19659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3470'. [ 1713.726179][T19675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3474'. [ 1713.774817][T19676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3475'. [ 1716.348096][T19687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3478'. [ 1717.214801][T19698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3481'. [ 1718.243661][T19711] loop3: detected capacity change from 0 to 16 [ 1718.286884][T19711] erofs: (device loop3): mounted with root inode @ nid 36. [ 1718.447826][T19718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3483'. [ 1719.695933][T19719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3485'. [ 1721.464130][T19739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3499'. [ 1722.671347][T19753] input: syz0 as /devices/virtual/input/input279 [ 1722.980829][T19759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3492'. [ 1724.178562][T19770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3495'. [ 1725.119206][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 1725.119221][ T26] audit: type=1800 audit(1778187307.231:75): pid=19771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3494" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1725.146866][T19771] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1725.346278][T19771] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1725.382954][T19771] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1725.443450][T19786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3498'. [ 1726.669107][T19799] loop0: detected capacity change from 0 to 16 [ 1726.809184][T19799] erofs: (device loop0): mounted with root inode @ nid 36. [ 1726.821369][T19801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3504'. [ 1729.594539][T19816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3507'. [ 1730.086085][T19827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3509'. [ 1730.758313][T19829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3510'. [ 1731.230515][T19838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3512'. [ 1732.377513][T19853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3523'. [ 1733.820612][T19875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3520'. [ 1734.957909][T19891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3522'. [ 1735.131721][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.138168][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1736.174964][T19906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3529'. [ 1737.105107][T19919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3530'. [ 1738.056906][T19921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3531'. [ 1739.048420][T19937] loop0: detected capacity change from 0 to 16 [ 1739.102264][T19937] erofs: (device loop0): mounted with root inode @ nid 36. [ 1741.941902][T19958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3538'. [ 1742.955397][T19967] loop2: detected capacity change from 0 to 16 [ 1742.970515][T19967] erofs: (device loop2): mounted with root inode @ nid 36. [ 1743.129033][T19974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3542'. [ 1743.156780][T19972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3543'. [ 1745.524796][T19982] syz.3.3544 (19982) used greatest stack depth: 18000 bytes left [ 1745.662188][T19997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3549'. [ 1748.071841][T20009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3551'. [ 1748.836950][T20017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3553'. [ 1749.974052][T20027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3556'. [ 1750.197852][T20029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3555'. [ 1752.000012][T20042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3558'. [ 1753.159377][T20047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3559'. [ 1755.534296][T20069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3564'. [ 1755.595726][T20068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3563'. [ 1757.114983][T20078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3566'. [ 1757.495315][T20090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3570'. [ 1759.412979][T20091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3569'. [ 1759.441510][T20092] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1759.469125][T20092] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1759.480614][T20092] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1759.574243][T20100] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1759.600730][T20100] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1759.679659][T20100] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1760.760087][T20117] loop4: detected capacity change from 0 to 16 [ 1760.767642][T20117] erofs: (device loop4): mounted with root inode @ nid 36. [ 1761.014312][T20126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3579'. [ 1763.074442][T20121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3580'. [ 1763.756119][T20155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3586'. [ 1764.392598][T20163] loop1: detected capacity change from 0 to 16 [ 1764.464016][T20163] erofs: (device loop1): mounted with root inode @ nid 36. [ 1764.880831][T20165] loop4: detected capacity change from 0 to 16 [ 1764.909382][T20165] erofs: (device loop4): mounted with root inode @ nid 36. [ 1764.956099][T20168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3589'. [ 1767.501265][T20183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3591'. [ 1768.164701][T20203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3596'. [ 1769.417756][T20209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3598'. [ 1769.421268][T20212] loop0: detected capacity change from 0 to 16 [ 1769.455749][T20212] erofs: (device loop0): mounted with root inode @ nid 36. [ 1771.313791][T20223] loop2: detected capacity change from 0 to 16 [ 1771.333091][T20223] erofs: (device loop2): mounted with root inode @ nid 36. [ 1771.592254][T20225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3601'. [ 1772.460535][T20230] loop4: detected capacity change from 0 to 16 [ 1772.468981][T20230] erofs: (device loop4): mounted with root inode @ nid 36. [ 1772.661413][T20234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3605'. [ 1775.532456][T20253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3607'. [ 1776.249037][T20261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3610'. [ 1777.186862][T20266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3609'. [ 1777.759129][T20276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3612'. [ 1777.897695][T20282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3613'. [ 1779.048891][T20290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3614'. [ 1779.073183][T20295] loop2: detected capacity change from 0 to 16 [ 1779.142140][T20295] erofs: (device loop2): mounted with root inode @ nid 36. [ 1780.471215][T20288] loop4: detected capacity change from 0 to 16 [ 1780.656560][T20288] erofs: (device loop4): mounted with root inode @ nid 36. [ 1782.531666][T20317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3621'. [ 1783.926512][T20329] loop2: detected capacity change from 0 to 16 [ 1783.942428][T20329] erofs: (device loop2): mounted with root inode @ nid 36. [ 1784.990434][T20334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3626'. [ 1787.606799][T20366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3634'. [ 1791.148781][T20395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3641'. [ 1792.297626][T20409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3646'. [ 1793.232216][T20417] loop1: detected capacity change from 0 to 16 [ 1793.477287][T20417] erofs: (device loop1): mounted with root inode @ nid 36. [ 1794.001727][T20425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3650'. [ 1795.087159][T20431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3651'. [ 1795.509881][T20439] loop0: detected capacity change from 0 to 16 [ 1795.628129][T20439] erofs: (device loop0): mounted with root inode @ nid 36. [ 1796.572896][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.579295][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1798.168080][T20463] loop2: detected capacity change from 0 to 16 [ 1798.184570][T20463] erofs: (device loop2): mounted with root inode @ nid 36. [ 1799.349383][T20484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3666'. [ 1800.714520][T20493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3667'. [ 1802.404135][T20502] loop1: detected capacity change from 0 to 16 [ 1802.418640][T20502] erofs: (device loop1): mounted with root inode @ nid 36. [ 1803.634492][T20512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3673'. [ 1805.540211][T20532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3677'. [ 1805.634527][T20537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3679'. [ 1807.217043][T20550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3693'. [ 1808.997850][T20555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3682'. [ 1811.150324][T20576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3689'. [ 1811.672935][T20585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3691'. [ 1811.769979][T20591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3694'. [ 1812.831015][T20597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3692'. [ 1813.543328][T20610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3697'. [ 1815.567589][T20631] loop2: detected capacity change from 0 to 16 [ 1815.620265][T20631] erofs: (device loop2): mounted with root inode @ nid 36. [ 1817.716786][T20639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3704'. [ 1818.640303][T20646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3705'. [ 1819.146351][T20652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3707'. [ 1820.611367][T20670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3711'. [ 1821.753143][T20675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3714'. [ 1821.769341][T20677] loop1: detected capacity change from 0 to 16 [ 1821.813307][T20677] erofs: (device loop1): mounted with root inode @ nid 36. [ 1823.443741][T20682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3713'. [ 1825.664443][T20700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3718'. [ 1827.519920][T20704] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1827.549888][T20704] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1827.588953][T20704] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1827.612040][T20721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3723'. [ 1828.915151][T20730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3725'. [ 1831.165466][T20751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3732'. [ 1832.048586][T20755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3733'. [ 1832.087184][T20757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3734'. [ 1833.465626][T20767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3735'. [ 1835.686464][T20789] loop4: detected capacity change from 0 to 16 [ 1835.726600][T20789] erofs: (device loop4): mounted with root inode @ nid 36. [ 1837.007797][T20808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3744'. [ 1838.329250][T20819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3747'. [ 1839.550963][T20825] loop4: detected capacity change from 0 to 16 [ 1839.588962][T20825] erofs: (device loop4): mounted with root inode @ nid 36. [ 1841.141335][T20834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3750'. [ 1841.683889][T20845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3752'. [ 1841.763805][T20850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3753'. [ 1843.957400][T20867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3757'. [ 1844.348897][T20875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3759'. [ 1845.186251][T20880] loop0: detected capacity change from 0 to 16 [ 1845.235849][T20880] erofs: (device loop0): mounted with root inode @ nid 36. [ 1846.501311][T20903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3763'. [ 1848.114858][T20913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3765'. [ 1849.862337][T20920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3769'. [ 1849.985017][T20926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3770'. [ 1851.347658][T20930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3772'. [ 1851.941096][T20948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3773'. [ 1853.057136][T20962] loop2: detected capacity change from 0 to 16 [ 1853.091889][T20962] erofs: (device loop2): mounted with root inode @ nid 36. [ 1853.125794][T20966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3778'. [ 1856.188349][T20997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3788'. [ 1857.719714][T21009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3791'. [ 1858.012230][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.018711][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.873156][T21018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3794'. [ 1862.708486][T21055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3801'. [ 1862.956120][T21066] input: syz0 as /devices/virtual/input/input280 [ 1864.069316][T21069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3803'. [ 1864.111285][T21076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3805'. [ 1865.602097][T21077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3806'. [ 1866.050725][T21082] loop4: detected capacity change from 0 to 16 [ 1866.096064][T21082] erofs: (device loop4): mounted with root inode @ nid 36. [ 1866.124583][T21086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3808'. [ 1868.763866][T21109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3813'. [ 1869.694252][T21115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3815'. [ 1869.755218][T21110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3812'. [ 1871.447920][T21133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3817'. [ 1874.060482][T21159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3825'. [ 1874.993919][T21164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3827'. [ 1875.693849][T21170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3828'. [ 1876.206135][T21177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3829'. [ 1876.807717][T21183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3830'. [ 1879.629856][T21223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3839'. [ 1880.506065][T21227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3840'. [ 1880.922387][T21238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3843'. [ 1880.953616][T21240] loop3: detected capacity change from 0 to 16 [ 1880.990014][T21240] erofs: (device loop3): mounted with root inode @ nid 36. [ 1883.148127][T21252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3848'. [ 1883.206699][T21254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3845'. [ 1884.295702][T21269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3852'. [ 1885.350233][T21274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3855'. [ 1887.055865][T21299] input: syz0 as /devices/virtual/input/input281 [ 1887.543316][T21305] loop2: detected capacity change from 0 to 16 [ 1887.624895][T21305] erofs: (device loop2): mounted with root inode @ nid 36. [ 1889.353087][T21310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3862'. [ 1889.858660][T21319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3863'. [ 1890.729933][T21328] loop0: detected capacity change from 0 to 16 [ 1890.778273][T21328] erofs: (device loop0): mounted with root inode @ nid 36. [ 1891.978649][T21339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3870'. [ 1895.155269][T21366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3878'. [ 1896.547692][T21385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3882'. [ 1897.910055][T21384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3883'. [ 1898.345356][T21402] loop0: detected capacity change from 0 to 16 [ 1898.878848][T21402] erofs: (device loop0): mounted with root inode @ nid 36. [ 1899.706390][T21419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3890'. [ 1902.052656][T21445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3894'. [ 1902.087387][T21446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3895'. [ 1903.799685][T21447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3896'. [ 1903.929159][T21459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3897'. [ 1905.544419][T21462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3898'. [ 1906.143143][T21467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3900'. [ 1907.198484][T21478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3901'. [ 1907.261152][T21488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3904'. [ 1908.588176][T21492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3903'. [ 1909.108794][T21503] loop1: detected capacity change from 0 to 16 [ 1909.128623][T21503] erofs: (device loop1): mounted with root inode @ nid 36. [ 1909.350821][T21511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3909'. [ 1910.601933][T21520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3911'. [ 1911.890520][T21534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3915'. [ 1912.625411][T21540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3916'. [ 1915.695496][T21579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3926'. [ 1917.695252][T21590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3927'. [ 1917.825227][T21598] loop1: detected capacity change from 0 to 16 [ 1917.855136][T21598] erofs: (device loop1): mounted with root inode @ nid 36. [ 1918.068136][T21602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3930'. [ 1919.451692][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.458041][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.419385][T21617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3933'. [ 1920.517397][T21620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3934'. [ 1922.994231][T21662] loop4: detected capacity change from 0 to 1024 [ 1923.003483][T21662] ======================================================= [ 1923.003483][T21662] WARNING: The mand mount option has been deprecated and [ 1923.003483][T21662] and is ignored by this kernel. Remove the mand [ 1923.003483][T21662] option from the mount to silence this warning. [ 1923.003483][T21662] ======================================================= [ 1923.831018][T21662] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1923.915474][T21662] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1924.302046][T21690] device team0 entered promiscuous mode [ 1924.307729][T21690] device team_slave_0 entered promiscuous mode [ 1924.322121][T21690] device team_slave_1 entered promiscuous mode [ 1924.397356][T21693] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3945: bg 0: block 112: padding at end of block bitmap is not set [ 1924.526202][T21693] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 1924.539025][T21693] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1924.539025][T21693] [ 1924.548882][T21693] EXT4-fs (loop4): Total free blocks count 0 [ 1924.554947][T21693] EXT4-fs (loop4): Free/Dirty block details [ 1924.560987][T21693] EXT4-fs (loop4): free_blocks=0 [ 1924.566595][T21693] EXT4-fs (loop4): dirty_blocks=64 [ 1924.572054][T21693] EXT4-fs (loop4): Block reservation details [ 1924.578107][T21693] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 1924.881073][T17540] EXT4-fs (loop4): unmounting filesystem. [ 1925.400869][T21706] loop4: detected capacity change from 0 to 512 [ 1925.621648][T21706] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1926.029522][T21706] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1926.208586][T21706] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1927.146407][T21738] loop2: detected capacity change from 0 to 512 [ 1927.166409][T17540] EXT4-fs (loop4): unmounting filesystem. [ 1927.174105][T21738] EXT4-fs: Ignoring removed bh option [ 1927.192584][T21738] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1927.329325][T21738] EXT4-fs (loop2): 1 truncate cleaned up [ 1927.396555][T21738] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1927.453353][T21751] fuse: root generation should be zero [ 1927.494054][T21738] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3966'. [ 1927.547308][T21738] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3966'. [ 1928.435098][T21759] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1928.547469][T21765] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3975'. [ 1928.574833][T17182] EXT4-fs (loop2): unmounting filesystem. [ 1929.075284][T21782] netlink: 'syz.4.3982': attribute type 1 has an invalid length. [ 1929.253661][T21782] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1929.270493][T21786] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3982'. [ 1929.303411][T21787] bond1: (slave ip6gretap1): making interface the new active one [ 1929.312996][T21787] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1929.915214][ T129] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1929.928569][ T129] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1930.863635][T21805] loop2: detected capacity change from 0 to 512 [ 1930.945265][T21805] EXT4-fs: Ignoring removed bh option [ 1930.981616][T21805] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1930.993910][T21795] fido_id[21795]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1931.031150][T21807] overlayfs: failed to clone upperpath [ 1931.123982][T21805] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.3989: corrupted in-inode xattr [ 1931.154575][T21805] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.3989: couldn't read orphan inode 15 (err -117) [ 1931.242008][T21805] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1932.055638][T17182] EXT4-fs (loop2): unmounting filesystem. [ 1932.343941][T21827] loop4: detected capacity change from 0 to 512 [ 1937.771609][T21827] EXT4-fs warning (device loop4): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop4. [ 1939.035567][T21821] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3994'. [ 1939.064138][T21836] device vlan2 entered promiscuous mode [ 1939.100516][T21836] device bridge0 entered promiscuous mode [ 1939.458977][T21846] loop0: detected capacity change from 0 to 1024 [ 1939.551281][T21846] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1939.615281][T21846] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1939.637784][T21855] vcan0: tx drop: invalid da for name 0x0000000080000000 [ 1939.809087][T21846] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 3: comm syz.0.4003: lblock 3 mapped to illegal pblock 3 (length 3) [ 1940.009964][T21846] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1940.386957][T21846] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1940.386957][T21846] [ 1940.611029][ T4624] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:23: lblock 8 mapped to illegal pblock 8 (length 8) [ 1940.690537][ T4624] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1940.727751][ T4624] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1940.727751][ T4624] [ 1940.783446][T18268] EXT4-fs (loop0): unmounting filesystem. [ 1942.332556][T21892] loop3: detected capacity change from 0 to 1024 [ 1942.520434][T21892] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1942.549673][T21892] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1942.694309][T17913] EXT4-fs (loop3): unmounting filesystem. [ 1942.828688][ T26] audit: type=1326 audit(1778187524.941:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21904 comm="syz.1.4026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec779cdd9 code=0x7ffc0000 [ 1942.852743][ C0] vkms_vblank_simulate: vblank timer overrun [ 1942.868703][ T26] audit: type=1326 audit(1778187524.941:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21904 comm="syz.1.4026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec779cdd9 code=0x7ffc0000 [ 1942.909723][ T26] audit: type=1326 audit(1778187524.941:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21904 comm="syz.1.4026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec779cdd9 code=0x7ffc0000 [ 1942.933737][ C0] vkms_vblank_simulate: vblank timer overrun [ 1943.066820][ T26] audit: type=1326 audit(1778187524.941:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21904 comm="syz.1.4026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efec779cdd9 code=0x7ffc0000 [ 1943.097325][T21915] loop0: detected capacity change from 0 to 256 [ 1943.105246][ T26] audit: type=1326 audit(1778187524.941:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21904 comm="syz.1.4026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec779cdd9 code=0x7ffc0000 [ 1943.249767][T21915] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1943.264886][ T26] audit: type=1326 audit(1778187524.941:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21904 comm="syz.1.4026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec779cdd9 code=0x7ffc0000 [ 1943.810881][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1943.818771][ T26] audit: type=1326 audit(1778187524.941:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21904 comm="syz.1.4026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec779cdd9 code=0x7ffc0000 [ 1943.854167][ T26] audit: type=1326 audit(1778187524.941:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21904 comm="syz.1.4026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec779cdd9 code=0x7ffc0000 [ 1943.879638][T21915] FAT-fs (loop0): Filesystem has been set read-only [ 1943.886420][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1943.948210][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1944.572762][ T26] audit: type=1326 audit(1778187524.941:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21904 comm="syz.1.4026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efec779cdd9 code=0x7ffc0000 [ 1944.596960][ C0] vkms_vblank_simulate: vblank timer overrun [ 1944.633887][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1944.643351][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1944.652020][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1944.660682][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1944.669317][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1944.677962][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1944.686619][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1944.695323][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1944.704134][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1944.712785][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1944.721509][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1944.730185][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1944.740987][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1944.786738][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1944.797180][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1944.806041][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1944.815936][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1944.824804][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1944.833918][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1944.845397][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1944.908574][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1944.920232][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1944.928927][ T26] audit: type=1326 audit(1778187525.081:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21904 comm="syz.1.4026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec779cdd9 code=0x7ffc0000 [ 1944.952951][ C0] vkms_vblank_simulate: vblank timer overrun [ 1945.020561][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1945.080453][T21938] loop8: detected capacity change from 0 to 8 [ 1945.095312][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1945.111343][T21938] Dev loop8: unable to read RDB block 8 [ 1945.117587][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1945.135418][T21938] loop8: unable to read partition table [ 1945.151186][T21938] loop8: partition table beyond EOD, truncated [ 1945.176208][T21940] syz.3.4031 uses obsolete (PF_INET,SOCK_PACKET) [ 1945.258440][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1945.271662][T21938] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1945.445617][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1945.554448][T21935] device syzkaller0 entered promiscuous mode [ 1945.634779][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1945.813505][ T4384] syzkaller0: tun_net_xmit 48 [ 1945.849397][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1945.925284][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1945.996233][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.045071][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.074262][T21943] loop2: detected capacity change from 0 to 256 [ 1946.084316][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.127839][T21943] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1946.147385][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.196833][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.218481][T21943] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.281783][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.303133][T21943] FAT-fs (loop2): Filesystem has been set read-only [ 1946.342439][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.371653][T21943] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.400174][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.424018][T21943] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.447202][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.467449][T21943] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.497755][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.516937][T21943] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.542542][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.562053][T21943] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.595569][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.624835][T21943] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.658126][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.671285][T21943] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.695595][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.706736][T21943] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.728512][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.741643][T21943] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.766304][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.778839][T21943] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.804196][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.812883][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.821680][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.830358][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.838905][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.847526][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.856176][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.865579][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.874244][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.885061][T21943] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.906102][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.920101][T21952] loop3: detected capacity change from 0 to 1024 [ 1946.923952][T21943] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.943383][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.952443][T21943] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.961288][T21943] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.985149][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1946.994699][T21943] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1947.013819][T21943] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1947.021202][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1947.037214][T21943] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1947.038695][T21952] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1947.046050][T21943] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1947.059345][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1947.074110][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1947.080721][T21943] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1947.088267][T21952] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1947.091536][T21943] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1947.104865][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1947.127825][T21943] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1947.144863][T21943] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1947.170374][T21943] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1947.186041][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1947.206202][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1947.216499][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1947.232599][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1947.244141][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1947.269969][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1947.278739][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1947.287534][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1947.296584][T21915] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1947.630081][T21961] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4037: bg 0: block 112: padding at end of block bitmap is not set [ 1948.458859][T21961] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 1948.471457][T21961] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1948.471457][T21961] [ 1948.481317][T21961] EXT4-fs (loop3): Total free blocks count 0 [ 1948.487364][T21961] EXT4-fs (loop3): Free/Dirty block details [ 1948.493352][T21961] EXT4-fs (loop3): free_blocks=0 [ 1948.498353][T21961] EXT4-fs (loop3): dirty_blocks=64 [ 1948.503548][T21961] EXT4-fs (loop3): Block reservation details [ 1948.509741][T21961] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 1948.984317][T17913] EXT4-fs (loop3): unmounting filesystem. [ 1949.318561][T21978] loop4: detected capacity change from 0 to 128 [ 1949.360508][T21978] EXT4-fs: Ignoring removed oldalloc option [ 1949.498586][T21978] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1949.531778][T21978] ext4 filesystem being mounted at /190/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1949.563647][ C0] vkms_vblank_simulate: vblank timer overrun [ 1949.873153][T17540] EXT4-fs (loop4): unmounting filesystem. [ 1951.176241][T22000] loop4: detected capacity change from 0 to 1024 [ 1951.204919][T22000] EXT4-fs: Ignoring removed bh option [ 1951.296058][T22000] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1951.625593][T22005] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1953.160256][T17540] EXT4-fs (loop4): unmounting filesystem. [ 1953.341743][T21970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4041'. [ 1956.064307][T22025] loop0: detected capacity change from 0 to 512 [ 1956.147494][T22025] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1956.235080][T22025] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1956.235101][T22025] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1956.256933][T22026] loop2: detected capacity change from 0 to 2048 [ 1956.322483][T22025] EXT4-fs (loop0): 1 truncate cleaned up [ 1956.322517][T22025] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1956.434362][T22026] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1956.486589][T22026] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1956.517679][T22026] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1956.517744][T22026] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1956.517744][T22026] [ 1956.517761][T22026] EXT4-fs (loop2): Total free blocks count 0 [ 1956.517776][T22026] EXT4-fs (loop2): Free/Dirty block details [ 1956.517790][T22026] EXT4-fs (loop2): free_blocks=2415919104 [ 1956.517806][T22026] EXT4-fs (loop2): dirty_blocks=64 [ 1956.517820][T22026] EXT4-fs (loop2): Block reservation details [ 1956.517831][T22026] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 1956.735046][ T8583] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1956.810406][T18268] EXT4-fs (loop0): unmounting filesystem. [ 1957.082293][T22045] loop0: detected capacity change from 0 to 128 [ 1957.279853][ T4284] Bluetooth: hci5: command 0x0405 tx timeout [ 1958.126944][T22045] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1958.228561][T22045] ext4 filesystem being mounted at /153/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1958.347331][T22062] binfmt_misc: register: failed to install interpreter file ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1959.415681][T18268] EXT4-fs (loop0): unmounting filesystem. [ 1960.895118][T22089] netlink: 'syz.0.4073': attribute type 3 has an invalid length. [ 1960.951601][T22084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4073'. [ 1962.920838][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 1962.920852][ T26] audit: type=1326 audit(1778187545.041:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22106 comm="syz.1.4084" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec779cdd9 code=0x7ffc0000 [ 1962.951035][ C1] vkms_vblank_simulate: vblank timer overrun [ 1963.028185][ T26] audit: type=1326 audit(1778187545.081:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22106 comm="syz.1.4084" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec779cdd9 code=0x7ffc0000 [ 1963.096773][T22115] loop3: detected capacity change from 0 to 256 [ 1963.104905][ T26] audit: type=1326 audit(1778187545.081:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22106 comm="syz.1.4084" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec779cdd9 code=0x7ffc0000 [ 1963.142879][T22115] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1963.207759][ T26] audit: type=1326 audit(1778187545.111:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22106 comm="syz.1.4084" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efec779cdd9 code=0x7ffc0000 [ 1963.608432][ T26] audit: type=1326 audit(1778187545.111:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22106 comm="syz.1.4084" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec779cdd9 code=0x7ffc0000 [ 1963.632717][ C1] vkms_vblank_simulate: vblank timer overrun [ 1964.382748][T22120] loop3: detected capacity change from 0 to 512 [ 1964.417871][ T26] audit: type=1326 audit(1778187545.111:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22106 comm="syz.1.4084" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec779cdd9 code=0x7ffc0000 [ 1964.641716][T22120] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1964.730161][ T26] audit: type=1326 audit(1778187545.111:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22106 comm="syz.1.4084" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec779cdd9 code=0x7ffc0000 [ 1964.812258][T22120] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #17: comm syz.3.4089: inode has both inline data and extents flags [ 1964.892717][T22120] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.4089: couldn't read orphan inode 17 (err -117) [ 1964.915981][ T26] audit: type=1326 audit(1778187545.111:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22106 comm="syz.1.4084" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec779cdd9 code=0x7ffc0000 [ 1965.007796][T22120] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1965.038670][ T26] audit: type=1326 audit(1778187545.111:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22106 comm="syz.1.4084" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efec779cdd9 code=0x7ffc0000 [ 1965.064806][ T26] audit: type=1326 audit(1778187545.141:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22106 comm="syz.1.4084" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efec775d60e code=0x7ffc0000 [ 1965.450137][T17913] EXT4-fs (loop3): unmounting filesystem. [ 1967.911085][T22165] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4100'. [ 1968.361541][T22173] loop3: detected capacity change from 0 to 512 [ 1968.771078][T22173] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.4102: inode has both inline data and extents flags [ 1968.785779][T22173] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.4102: couldn't read orphan inode 15 (err -117) [ 1968.800510][T22173] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1971.558322][T17913] EXT4-fs (loop3): unmounting filesystem. [ 1971.758104][T22187] device sit0 entered promiscuous mode [ 1971.826568][T22187] netlink: 'syz.2.4107': attribute type 1 has an invalid length. [ 1971.862362][T22187] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4107'. [ 1972.575620][T22199] loop3: detected capacity change from 0 to 256 [ 1972.612220][T22199] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1972.679765][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1972.712295][T22199] FAT-fs (loop3): Filesystem has been set read-only [ 1973.499911][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.601180][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.639580][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.648248][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.657879][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.671902][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.696536][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.696568][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.696594][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.696651][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.696672][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.696694][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.696737][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.696754][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.696777][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.696818][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.696837][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.696858][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.696899][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.696920][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.696940][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.696986][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.697007][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.697579][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.697652][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.697675][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.697697][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.697746][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.697766][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.697787][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.697836][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.697857][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.697880][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.697926][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.697947][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.697971][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.698017][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.698039][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.698063][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.698108][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.698128][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.698149][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.698196][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.698216][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.698238][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.698285][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.698306][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.698329][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.698377][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.698399][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.698422][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.698471][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.709605][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.709647][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.709724][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.709745][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.709768][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.709818][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.709840][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.709864][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.709913][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.709935][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.709957][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.710004][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.710025][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.710047][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.710091][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.710112][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.710135][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.710182][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.710204][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.710232][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.710254][T22199] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1973.711142][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 1973.711154][ T26] audit: type=1800 audit(1778187555.831:179): pid=22199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4106" name="file1" dev="loop3" ino=1048612 res=0 errno=0 [ 1973.774367][T22219] loop0: detected capacity change from 0 to 512 [ 1973.799844][T22219] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1973.799933][T22219] ext4 filesystem being mounted at /162/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1973.899252][T22223] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz.0.4116: invalid size [ 1974.057937][T22230] loop1: detected capacity change from 0 to 512 [ 1974.087992][T22230] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1974.668683][T18268] EXT4-fs (loop0): unmounting filesystem. [ 1974.710439][T22230] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #17: comm syz.1.4117: inode has both inline data and extents flags [ 1974.741979][T22230] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.4117: couldn't read orphan inode 17 (err -117) [ 1974.768017][T22230] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1974.876008][T16874] EXT4-fs (loop1): unmounting filesystem. [ 1975.047746][T22243] netlink: 'syz.1.4123': attribute type 3 has an invalid length. [ 1975.088447][T22243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4123'. [ 1976.669942][T22259] loop0: detected capacity change from 0 to 1024 [ 1976.700202][T22259] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1976.725368][T22268] loop3: detected capacity change from 0 to 512 [ 1976.813949][T22268] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1976.832778][T22259] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1976.874005][T22268] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1976.951833][T22268] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1977.031391][T22268] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.4132: attempt to clear invalid blocks 2 len 1 [ 1977.085544][T22268] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4132: invalid indirect mapped block 1819239214 (level 0) [ 1977.109103][T18268] EXT4-fs (loop0): unmounting filesystem. [ 1977.144346][T22275] loop2: detected capacity change from 0 to 128 [ 1977.155423][T22268] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4132: invalid indirect mapped block 1819239214 (level 1) [ 1977.201518][T22275] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1977.325447][T22268] EXT4-fs (loop3): 1 truncate cleaned up [ 1977.332637][T22275] ext4 filesystem being mounted at /255/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1977.350141][T22268] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1977.519385][T22275] EXT4-fs (loop2): shut down requested (1) [ 1977.520828][T22275] fscrypt (loop2, inode 12): Error -5 getting encryption context [ 1977.659837][T22268] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 1977.659859][T22268] EXT4-fs: user quota file already specified [ 1977.735174][T17182] EXT4-fs (loop2): unmounting filesystem. [ 1977.846788][T17913] EXT4-fs (loop3): unmounting filesystem. [ 1977.946509][T22284] loop1: detected capacity change from 0 to 256 [ 1977.955429][T22283] loop2: detected capacity change from 0 to 512 [ 1978.005900][T22283] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1978.068688][T22283] EXT4-fs (loop2): 1 truncate cleaned up [ 1978.101538][T22283] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1978.116283][T22288] device team0 entered promiscuous mode [ 1978.122740][T22288] device team_slave_0 entered promiscuous mode [ 1978.129166][T22288] device team_slave_1 entered promiscuous mode [ 1978.140348][T22288] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1978.367786][T17182] EXT4-fs (loop2): unmounting filesystem. [ 1978.486472][T22296] netlink: 'syz.2.4142': attribute type 3 has an invalid length. [ 1978.543529][T22296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4142'. [ 1978.670472][T22304] loop3: detected capacity change from 0 to 256 [ 1978.694720][T22304] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1978.761471][T22304] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1978.958177][T22304] FAT-fs (loop3): Filesystem has been set read-only [ 1978.995596][T22304] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1979.863834][T22311] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1979.904520][T22304] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1980.171198][T22304] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1980.206828][T22304] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1980.239638][T22304] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1980.319592][T22304] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1980.346403][T22304] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1980.383646][T22304] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1980.409665][T22304] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1980.428617][T22304] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1980.449030][T22304] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1980.459175][T22304] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1980.490860][T22304] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1980.509744][T22304] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1980.528658][T22304] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1980.548938][T22304] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1980.559000][T22304] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1980.674215][T22325] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4153'. [ 1980.688336][T22304] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1980.698115][T22304] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1980.707001][T22304] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1980.715741][T22304] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1980.743408][T22304] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1980.772709][T22304] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1980.802541][ T26] audit: type=1800 audit(1778187562.921:180): pid=22304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4146" name="file1" dev="loop3" ino=1048614 res=0 errno=0 [ 1980.891387][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1980.897736][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1980.959814][T22329] loop0: detected capacity change from 0 to 512 [ 1981.004649][T22329] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1981.026607][T22335] loop1: detected capacity change from 0 to 512 [ 1981.071000][T22329] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 1981.079114][T22329] System zones: 0-2, 18-18, 34-34 [ 1981.086061][T22329] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1981.114586][T22329] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.4155: bg 0: block 248: padding at end of block bitmap is not set [ 1981.133422][T22329] Quota error (device loop0): write_blk: dquota write failed [ 1981.143027][T22329] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1981.153779][T22329] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.4155: Failed to acquire dquot type 1 [ 1981.171910][T22335] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.4150: inode has both inline data and extents flags [ 1981.172316][T22329] EXT4-fs (loop0): 1 truncate cleaned up [ 1981.214116][T22329] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1981.216427][T22335] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.4150: couldn't read orphan inode 15 (err -117) [ 1981.315729][T22335] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1981.586604][T16874] EXT4-fs (loop1): unmounting filesystem. [ 1981.781240][T18268] EXT4-fs (loop0): unmounting filesystem. [ 1982.013716][T22358] ================================================================== [ 1982.021843][T22358] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370 [ 1982.029170][T22358] Read of size 8 at addr ffff888029aaac18 by task syz.4.4162/22358 [ 1982.037070][T22358] [ 1982.039410][T22358] CPU: 0 PID: 22358 Comm: syz.4.4162 Not tainted syzkaller #0 [ 1982.046876][T22358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1982.056953][T22358] Call Trace: [ 1982.060245][T22358] [ 1982.063185][T22358] dump_stack_lvl+0x188/0x24e [ 1982.067912][T22358] ? read_lock_is_recursive+0x10/0x10 [ 1982.073390][T22358] ? show_regs_print_info+0x12/0x12 [ 1982.078630][T22358] ? load_image+0x400/0x400 [ 1982.083184][T22358] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1982.088745][T22358] ? __virt_addr_valid+0x188/0x540 [ 1982.093929][T22358] ? __virt_addr_valid+0x465/0x540 [ 1982.099055][T22358] ? dvb_device_open+0xc6/0x370 [ 1982.103928][T22358] print_report+0xa8/0x210 [ 1982.108362][T22358] kasan_report+0x10b/0x140 [ 1982.112909][T22358] ? dvb_device_open+0xc6/0x370 [ 1982.117799][T22358] dvb_device_open+0xc6/0x370 [ 1982.122500][T22358] chrdev_open+0x5c5/0x6a0 [ 1982.127001][T22358] ? cd_forget+0x160/0x160 [ 1982.131426][T22358] ? fsnotify_perm+0x39b/0x550 [ 1982.136256][T22358] ? cd_forget+0x160/0x160 [ 1982.140685][T22358] do_dentry_open+0x7e9/0x10d0 [ 1982.145519][T22358] path_openat+0x2635/0x2ee0 [ 1982.150171][T22358] ? do_filp_open+0x430/0x430 [ 1982.154859][T22358] ? preempt_schedule_irq+0xe6/0x160 [ 1982.160168][T22358] do_filp_open+0x1f1/0x430 [ 1982.164681][T22358] ? vfs_tmpfile+0x480/0x480 [ 1982.169278][T22358] ? preempt_schedule_common+0xa5/0xd0 [ 1982.174762][T22358] ? _raw_spin_unlock+0x36/0x40 [ 1982.179633][T22358] ? alloc_fd+0x58f/0x630 [ 1982.184000][T22358] do_sys_openat2+0x150/0x4b0 [ 1982.188689][T22358] ? do_sys_open+0xe0/0xe0 [ 1982.193117][T22358] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1982.199126][T22358] ? lock_chain_count+0x20/0x20 [ 1982.204002][T22358] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1982.210013][T22358] __x64_sys_openat+0x135/0x160 [ 1982.214885][T22358] do_syscall_64+0x4c/0xa0 [ 1982.219326][T22358] ? clear_bhb_loop+0x60/0xb0 [ 1982.224048][T22358] ? clear_bhb_loop+0x60/0xb0 [ 1982.228742][T22358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1982.234655][T22358] RIP: 0033:0x7f870755d60e [ 1982.239090][T22358] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1982.258718][T22358] RSP: 002b:00007f87084ddb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1982.267164][T22358] RAX: ffffffffffffffda RBX: 00007f87084de6c0 RCX: 00007f870755d60e [ 1982.275160][T22358] RDX: 0000000000000002 RSI: 00007f87084ddc00 RDI: ffffffffffffff9c [ 1982.283147][T22358] RBP: 00007f87084ddc00 R08: 0000000000000000 R09: 0000000000000000 [ 1982.291138][T22358] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1982.299154][T22358] R13: 00007f8707816218 R14: 00007f8707816180 R15: 00007ffd3a6b7af8 [ 1982.307135][T22358] [ 1982.310148][T22358] [ 1982.312461][T22358] Allocated by task 1: [ 1982.316514][T22358] kasan_set_track+0x4b/0x70 [ 1982.321115][T22358] __kasan_kmalloc+0x8e/0xa0 [ 1982.325706][T22358] dvb_register_device+0x311/0x2150 [ 1982.330918][T22358] dvb_register_frontend+0x645/0x920 [ 1982.336199][T22358] vidtv_bridge_probe+0x9a1/0xf70 [ 1982.341295][T22358] platform_probe+0x137/0x1c0 [ 1982.346010][T22358] really_probe+0x2aa/0xc70 [ 1982.350546][T22358] __driver_probe_device+0x18c/0x330 [ 1982.355838][T22358] driver_probe_device+0x4f/0x420 [ 1982.360864][T22358] __driver_attach+0x44a/0x6e0 [ 1982.365633][T22358] bus_for_each_dev+0x182/0x1f0 [ 1982.370481][T22358] bus_add_driver+0x30a/0x5a0 [ 1982.375152][T22358] driver_register+0x32d/0x430 [ 1982.379915][T22358] vidtv_bridge_init+0x39/0x67 [ 1982.384798][T22358] do_one_initcall+0x26a/0x840 [ 1982.389567][T22358] do_initcall_level+0x137/0x1e4 [ 1982.394552][T22358] do_initcalls+0x4b/0x8a [ 1982.398881][T22358] kernel_init_freeable+0x415/0x5be [ 1982.404074][T22358] kernel_init+0x19/0x1b0 [ 1982.408399][T22358] ret_from_fork+0x1f/0x30 [ 1982.412811][T22358] [ 1982.415124][T22358] Freed by task 22311: [ 1982.419179][T22358] kasan_set_track+0x4b/0x70 [ 1982.423766][T22358] kasan_save_free_info+0x2d/0x50 [ 1982.428781][T22358] ____kasan_slab_free+0x126/0x1e0 [ 1982.433894][T22358] slab_free_freelist_hook+0x131/0x1a0 [ 1982.439346][T22358] __kmem_cache_free+0xb6/0x1f0 [ 1982.444191][T22358] dvb_device_open+0x2e7/0x370 [ 1982.448972][T22358] chrdev_open+0x5c5/0x6a0 [ 1982.453406][T22358] do_dentry_open+0x7e9/0x10d0 [ 1982.458175][T22358] path_openat+0x2635/0x2ee0 [ 1982.462761][T22358] do_filp_open+0x1f1/0x430 [ 1982.467255][T22358] do_sys_openat2+0x150/0x4b0 [ 1982.471931][T22358] __x64_sys_openat+0x135/0x160 [ 1982.476783][T22358] do_syscall_64+0x4c/0xa0 [ 1982.481201][T22358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1982.487092][T22358] [ 1982.489404][T22358] The buggy address belongs to the object at ffff888029aaac00 [ 1982.489404][T22358] which belongs to the cache kmalloc-256 of size 256 [ 1982.503462][T22358] The buggy address is located 24 bytes inside of [ 1982.503462][T22358] 256-byte region [ffff888029aaac00, ffff888029aaad00) [ 1982.516650][T22358] [ 1982.518965][T22358] The buggy address belongs to the physical page: [ 1982.525372][T22358] page:ffffea0000a6aa80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29aaa [ 1982.535515][T22358] head:ffffea0000a6aa80 order:1 compound_mapcount:0 compound_pincount:0 [ 1982.543830][T22358] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1982.551814][T22358] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017441b40 [ 1982.560388][T22358] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1982.568956][T22358] page dumped because: kasan: bad access detected [ 1982.575364][T22358] page_owner tracks the page as allocated [ 1982.581068][T22358] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 13300171863, free_ts 0 [ 1982.600778][T22358] post_alloc_hook+0x173/0x1a0 [ 1982.605617][T22358] get_page_from_freelist+0x1a1e/0x1ab0 [ 1982.611160][T22358] __alloc_pages+0x1ec/0x4f0 [ 1982.615748][T22358] alloc_page_interleave+0x24/0x1e0 [ 1982.620992][T22358] alloc_slab_page+0x5d/0x160 [ 1982.625670][T22358] new_slab+0x87/0x2c0 [ 1982.629732][T22358] ___slab_alloc+0xbc6/0x1240 [ 1982.634408][T22358] __kmem_cache_alloc_node+0x1a0/0x260 [ 1982.639859][T22358] kmalloc_trace+0x26/0xe0 [ 1982.644319][T22358] bus_add_driver+0xda/0x5a0 [ 1982.648904][T22358] driver_register+0x32d/0x430 [ 1982.653664][T22358] usb_register_driver+0x202/0x3d0 [ 1982.658820][T22358] do_one_initcall+0x26a/0x840 [ 1982.663580][T22358] do_initcall_level+0x137/0x1e4 [ 1982.668516][T22358] do_initcalls+0x4b/0x8a [ 1982.672838][T22358] kernel_init_freeable+0x415/0x5be [ 1982.678032][T22358] page_owner free stack trace missing [ 1982.683385][T22358] [ 1982.685700][T22358] Memory state around the buggy address: [ 1982.691314][T22358] ffff888029aaab00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1982.699383][T22358] ffff888029aaab80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1982.707454][T22358] >ffff888029aaac00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1982.715507][T22358] ^ [ 1982.720343][T22358] ffff888029aaac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1982.728394][T22358] ffff888029aaad00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1982.736440][T22358] ================================================================== [ 1982.744804][T22358] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1982.752011][T22358] CPU: 0 PID: 22358 Comm: syz.4.4162 Not tainted syzkaller #0 [ 1982.759479][T22358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1982.769540][T22358] Call Trace: [ 1982.772821][T22358] [ 1982.775781][T22358] dump_stack_lvl+0x188/0x24e [ 1982.780465][T22358] ? memcpy+0x3c/0x60 [ 1982.784507][T22358] ? show_regs_print_info+0x12/0x12 [ 1982.789702][T22358] ? load_image+0x400/0x400 [ 1982.794207][T22358] panic+0x2e5/0x730 [ 1982.798105][T22358] ? bpf_jit_dump+0xd0/0xd0 [ 1982.802604][T22358] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1982.808581][T22358] ? _raw_spin_unlock+0x40/0x40 [ 1982.813431][T22358] check_panic_on_warn+0x80/0xa0 [ 1982.818428][T22358] ? dvb_device_open+0xc6/0x370 [ 1982.823296][T22358] end_report+0x66/0x110 [ 1982.827568][T22358] kasan_report+0x118/0x140 [ 1982.832087][T22358] ? dvb_device_open+0xc6/0x370 [ 1982.836947][T22358] dvb_device_open+0xc6/0x370 [ 1982.841625][T22358] chrdev_open+0x5c5/0x6a0 [ 1982.846042][T22358] ? cd_forget+0x160/0x160 [ 1982.850451][T22358] ? fsnotify_perm+0x39b/0x550 [ 1982.855218][T22358] ? cd_forget+0x160/0x160 [ 1982.859628][T22358] do_dentry_open+0x7e9/0x10d0 [ 1982.864417][T22358] path_openat+0x2635/0x2ee0 [ 1982.869033][T22358] ? do_filp_open+0x430/0x430 [ 1982.873711][T22358] ? preempt_schedule_irq+0xe6/0x160 [ 1982.879003][T22358] do_filp_open+0x1f1/0x430 [ 1982.883501][T22358] ? vfs_tmpfile+0x480/0x480 [ 1982.888082][T22358] ? preempt_schedule_common+0xa5/0xd0 [ 1982.893547][T22358] ? _raw_spin_unlock+0x36/0x40 [ 1982.898395][T22358] ? alloc_fd+0x58f/0x630 [ 1982.902730][T22358] do_sys_openat2+0x150/0x4b0 [ 1982.907406][T22358] ? do_sys_open+0xe0/0xe0 [ 1982.911821][T22358] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1982.917804][T22358] ? lock_chain_count+0x20/0x20 [ 1982.922652][T22358] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1982.928632][T22358] __x64_sys_openat+0x135/0x160 [ 1982.933486][T22358] do_syscall_64+0x4c/0xa0 [ 1982.937905][T22358] ? clear_bhb_loop+0x60/0xb0 [ 1982.942581][T22358] ? clear_bhb_loop+0x60/0xb0 [ 1982.947257][T22358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1982.953146][T22358] RIP: 0033:0x7f870755d60e [ 1982.957556][T22358] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1982.977174][T22358] RSP: 002b:00007f87084ddb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1982.985596][T22358] RAX: ffffffffffffffda RBX: 00007f87084de6c0 RCX: 00007f870755d60e [ 1982.993565][T22358] RDX: 0000000000000002 RSI: 00007f87084ddc00 RDI: ffffffffffffff9c [ 1983.001532][T22358] RBP: 00007f87084ddc00 R08: 0000000000000000 R09: 0000000000000000 [ 1983.009505][T22358] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1983.017469][T22358] R13: 00007f8707816218 R14: 00007f8707816180 R15: 00007ffd3a6b7af8 [ 1983.025440][T22358] [ 1983.028791][T22358] Kernel Offset: disabled [ 1983.033109][T22358] Rebooting in 86400 seconds..