[ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.1' (ECDSA) to the list of known hosts. 2020/05/15 12:32:11 fuzzer started 2020/05/15 12:32:11 dialing manager at 10.128.0.105:37863 2020/05/15 12:32:12 syscalls: 3055 2020/05/15 12:32:12 code coverage: enabled 2020/05/15 12:32:12 comparison tracing: enabled 2020/05/15 12:32:12 extra coverage: enabled 2020/05/15 12:32:12 setuid sandbox: enabled 2020/05/15 12:32:12 namespace sandbox: enabled 2020/05/15 12:32:12 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/15 12:32:12 fault injection: enabled 2020/05/15 12:32:12 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/15 12:32:12 net packet injection: enabled 2020/05/15 12:32:12 net device setup: enabled 2020/05/15 12:32:12 concurrency sanitizer: enabled 2020/05/15 12:32:12 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/15 12:32:12 USB emulation: enabled syzkaller login: [ 54.701747][ T8947] KCSAN: could not find function: '_find_next_bit' 2020/05/15 12:32:14 adding functions to KCSAN blacklist: 'copy_process' 'do_nanosleep' 'ep_poll' 'pcpu_alloc' 'find_get_pages_range_tag' 'wbt_done' '__ext4_new_inode' 'do_signal_stop' '_find_next_bit' 'page_counter_charge' 12:32:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x800448d4, 0x0) [ 69.136951][ T8949] IPVS: ftp: loaded support on port[0] = 21 [ 69.211754][ T8949] chnl_net:caif_netlink_parms(): no params data found [ 69.255834][ T8949] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.263570][ T8949] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.271232][ T8949] device bridge_slave_0 entered promiscuous mode [ 69.279719][ T8949] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.286967][ T8949] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.294757][ T8949] device bridge_slave_1 entered promiscuous mode 12:32:29 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @private=0x4000000, @random="ff85a8fbae0c", @local}}}}, 0x0) [ 69.313712][ T8949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.326813][ T8949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.347986][ T8949] team0: Port device team_slave_0 added [ 69.355144][ T8949] team0: Port device team_slave_1 added [ 69.371175][ T8949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.378381][ T8949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.404524][ T8949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.416718][ T8949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.423676][ T8949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.449695][ T8949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.518363][ T8949] device hsr_slave_0 entered promiscuous mode 12:32:29 executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r1, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) [ 69.586643][ T8949] device hsr_slave_1 entered promiscuous mode [ 69.669361][ T9111] IPVS: ftp: loaded support on port[0] = 21 12:32:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x3a3dd4008420af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00') [ 69.833593][ T8949] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.859346][ T8949] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.862553][ T9169] IPVS: ftp: loaded support on port[0] = 21 [ 69.935243][ T9111] chnl_net:caif_netlink_parms(): no params data found [ 69.944953][ T8949] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.999638][ T8949] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.129172][ T9111] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.146306][ T9111] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.153785][ T9111] device bridge_slave_0 entered promiscuous mode [ 70.181450][ T8949] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.186564][ T9273] IPVS: ftp: loaded support on port[0] = 21 [ 70.189000][ T8949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.202548][ T8949] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.209636][ T8949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.222605][ T9111] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.229969][ T9111] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.238839][ T9111] device bridge_slave_1 entered promiscuous mode 12:32:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') mmap(&(0x7f000006b000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) [ 70.304612][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.313139][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.325407][ T9111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.341363][ T9169] chnl_net:caif_netlink_parms(): no params data found [ 70.370358][ T9111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.454401][ T9273] chnl_net:caif_netlink_parms(): no params data found [ 70.490289][ T9111] team0: Port device team_slave_0 added [ 70.502945][ T8949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.524146][ T9111] team0: Port device team_slave_1 added [ 70.546910][ T8949] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.574422][ T9169] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.581722][ T9169] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.590306][ T9169] device bridge_slave_0 entered promiscuous mode [ 70.607471][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.610296][ T9520] IPVS: ftp: loaded support on port[0] = 21 [ 70.615203][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.637114][ T9169] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.644475][ T9169] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.653332][ T9169] device bridge_slave_1 entered promiscuous mode [ 70.668463][ T9111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.675421][ T9111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.704235][ T9111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.717786][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.737150][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.745697][ T9536] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.752840][ T9536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.761292][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.770877][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.779940][ T9536] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.787012][ T9536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.806540][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.815798][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.825283][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.834646][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 12:32:30 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r2, 0x4000, 0x0, 0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) fchmodat(r2, &(0x7f0000000000)='./bus\x00', 0x21) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getroute={0x1a, 0x1a, 0x1}, 0x24}}, 0x0) sendfile(r3, r0, &(0x7f0000000040)=0x8, 0x7fffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r4 = dup(0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x0, 0x0) accept4$netrom(r4, &(0x7f0000000180)={{0x3, @rose}, [@remote, @rose, @remote, @rose, @null, @default, @rose, @default]}, &(0x7f0000000100)=0x48, 0x0) [ 70.858086][ T9111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.870498][ T9111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.896957][ T9111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.917793][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.925987][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.936063][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.945066][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.954590][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.963072][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.971855][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.985132][ T9169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.011154][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.022903][ T9169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.042559][ T9578] IPVS: ftp: loaded support on port[0] = 21 [ 71.043403][ T9273] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.056222][ T9273] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.064205][ T9273] device bridge_slave_0 entered promiscuous mode [ 71.118288][ T9111] device hsr_slave_0 entered promiscuous mode [ 71.176639][ T9111] device hsr_slave_1 entered promiscuous mode [ 71.256221][ T9111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.263811][ T9111] Cannot create hsr debugfs directory [ 71.288104][ T9273] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.295152][ T9273] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.302942][ T9273] device bridge_slave_1 entered promiscuous mode [ 71.323089][ T9273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.343185][ T9169] team0: Port device team_slave_0 added [ 71.351466][ T9169] team0: Port device team_slave_1 added [ 71.367887][ T9273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.393373][ T9273] team0: Port device team_slave_0 added [ 71.410701][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.417860][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.444776][ T9169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.460490][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.467683][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.493665][ T9169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.505502][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.513454][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.521825][ T9273] team0: Port device team_slave_1 added [ 71.544819][ T9273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.552893][ T9273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.579176][ T9273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.602789][ T9273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.610655][ T9273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.637037][ T9273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.688176][ T9169] device hsr_slave_0 entered promiscuous mode [ 71.736575][ T9169] device hsr_slave_1 entered promiscuous mode [ 71.786175][ T9169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.793747][ T9169] Cannot create hsr debugfs directory [ 71.814809][ T8949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.887886][ T9273] device hsr_slave_0 entered promiscuous mode [ 71.936522][ T9273] device hsr_slave_1 entered promiscuous mode [ 71.976144][ T9273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.983725][ T9273] Cannot create hsr debugfs directory [ 72.003705][ T9111] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.058695][ T9111] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.119940][ T9111] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.179569][ T9111] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.308455][ T9520] chnl_net:caif_netlink_parms(): no params data found [ 72.335146][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.344167][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.375426][ T9578] chnl_net:caif_netlink_parms(): no params data found [ 72.420334][ T8949] device veth0_vlan entered promiscuous mode [ 72.438875][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.449728][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.469412][ T9273] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.534005][ T8949] device veth1_vlan entered promiscuous mode [ 72.550582][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.559034][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.567737][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.579645][ T9273] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.638598][ T9273] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.694056][ T9169] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.756994][ T9273] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.803284][ T9169] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.849438][ T9520] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.856575][ T9520] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.864277][ T9520] device bridge_slave_0 entered promiscuous mode [ 72.877282][ T9520] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.884332][ T9520] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.892635][ T9520] device bridge_slave_1 entered promiscuous mode [ 72.902047][ T9169] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.959294][ T9169] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.056063][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.064329][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.073496][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.087453][ T9520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.099077][ T9520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.119446][ T9578] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.126624][ T9578] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.134180][ T9578] device bridge_slave_0 entered promiscuous mode [ 73.145673][ T9578] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.153180][ T9578] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.161585][ T9578] device bridge_slave_1 entered promiscuous mode [ 73.170152][ T9111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.179707][ T8949] device veth0_macvtap entered promiscuous mode [ 73.206752][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.218460][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.226411][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.249552][ T9520] team0: Port device team_slave_0 added [ 73.257460][ T9578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.267712][ T8949] device veth1_macvtap entered promiscuous mode [ 73.275493][ T9578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.286588][ T9111] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.310857][ T9520] team0: Port device team_slave_1 added [ 73.325862][ T9578] team0: Port device team_slave_0 added [ 73.334797][ T9578] team0: Port device team_slave_1 added [ 73.341236][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.351223][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.360200][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.368795][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.375895][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.401125][ T9273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.411339][ T9520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.419291][ T9520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.446060][ T9520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.462130][ T9520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.469945][ T9520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.496610][ T9520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.513768][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.535777][ T9273] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.556347][ T9578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.563329][ T9578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.590762][ T9578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.601777][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.611263][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.619736][ T3353] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.626834][ T3353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.634623][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.643749][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.651440][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.660109][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.676032][ T8949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.717842][ T9520] device hsr_slave_0 entered promiscuous mode [ 73.756282][ T9520] device hsr_slave_1 entered promiscuous mode [ 73.806032][ T9520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.813607][ T9520] Cannot create hsr debugfs directory [ 73.841602][ T9578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.849199][ T9578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.879369][ T9578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.898126][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.906913][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.915394][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.924443][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.933422][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.942466][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.951354][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.960180][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.968869][ T3353] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.976086][ T3353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.983892][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.993543][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.003429][ T3353] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.010628][ T3353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.018716][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.027139][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.035238][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.043799][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.059704][ T9169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.078360][ T8949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.095663][ T9111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.108059][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.127454][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.137905][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.150166][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.159235][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.171186][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.180397][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.191776][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.201068][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.210284][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.218880][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.228650][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.236599][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.245713][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.328370][ T9578] device hsr_slave_0 entered promiscuous mode [ 74.376367][ T9578] device hsr_slave_1 entered promiscuous mode [ 74.415986][ T9578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.423711][ T9578] Cannot create hsr debugfs directory [ 74.436995][ T9169] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.502495][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.511447][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.525398][ T9273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.536341][ T9273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.640544][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.659521][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.672988][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.682896][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 12:32:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x800448d4, 0x0) [ 74.693110][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.702825][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.711914][ T5263] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.719062][ T5263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.746430][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.759075][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.770976][ T5263] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.778145][ T5263] bridge0: port 2(bridge_slave_1) entered forwarding state 12:32:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x800448d4, 0x0) [ 74.794724][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.819435][ T9111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.849453][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.861370][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.879340][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 12:32:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x800448d4, 0x0) 12:32:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 74.898755][ T9520] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.938287][ T9520] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.985926][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.994807][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.004639][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.016079][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.048739][ C0] hrtimer: interrupt took 26059 ns [ 75.067586][ T9520] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.108921][ T9520] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.185934][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.193993][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.205496][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.213635][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.224607][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.234165][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.245076][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.254218][ T9578] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.309064][ T9578] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.413875][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.430206][ T9273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.438326][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.452807][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.462270][ T9578] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 75.524304][ T9111] device veth0_vlan entered promiscuous mode [ 75.557463][ T9578] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 75.609196][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.619649][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.643604][ T9111] device veth1_vlan entered promiscuous mode [ 75.676272][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.684136][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.697012][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.705131][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.718671][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.756588][ T9169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.763892][ T9317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.776445][ T9317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.841177][ T9317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.850788][ T9317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.863164][ T9317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.873072][ T9317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.902855][ T9273] device veth0_vlan entered promiscuous mode [ 75.913588][ T9111] device veth0_macvtap entered promiscuous mode [ 75.946720][ T9317] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.959709][ T9317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.968391][ T9317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.984459][ T9520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.003672][ T9111] device veth1_macvtap entered promiscuous mode [ 76.021088][ T9317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.030505][ T9317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.042249][ T9317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.053356][ T9273] device veth1_vlan entered promiscuous mode [ 76.074758][ T9520] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.091624][ T9169] device veth0_vlan entered promiscuous mode [ 76.106712][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.120115][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.128893][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.140729][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.150054][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.161820][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.171006][ T5263] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.178061][ T5263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.190047][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.198455][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 12:32:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 76.222770][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 76.233305][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.244874][ T9111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.255263][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.264514][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.275438][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.284004][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.296167][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.314134][ T9169] device veth1_vlan entered promiscuous mode [ 76.325986][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.333924][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.344091][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.353026][ T9536] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.360154][ T9536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.388466][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 76.420167][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.459006][ T9111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.470493][ T9578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.498632][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.511553][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.521467][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.560830][ T9273] device veth0_macvtap entered promiscuous mode [ 76.571976][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.582792][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.597322][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.609280][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.618066][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.629875][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.645428][ T9578] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.781384][ T9273] device veth1_macvtap entered promiscuous mode [ 76.796085][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.808997][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.818182][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.831104][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.839311][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.850652][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.860470][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.872758][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.882326][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.894375][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.903966][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.915924][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.924512][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.952274][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.964631][ T9169] device veth0_macvtap entered promiscuous mode [ 77.047320][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.069939][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.101350][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.131025][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.138119][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state 12:32:37 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @private=0x4000000, @random="ff85a8fbae0c", @local}}}}, 0x0) [ 77.177270][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.209270][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.249275][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.256385][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.296604][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.351437][ T9169] device veth1_macvtap entered promiscuous mode [ 77.381706][ T9317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 12:32:37 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @private=0x4000000, @random="ff85a8fbae0c", @local}}}}, 0x0) [ 77.399941][ T9317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.439374][ T9317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 12:32:37 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @private=0x4000000, @random="ff85a8fbae0c", @local}}}}, 0x0) [ 77.464843][ T9317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.490113][ T9273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 77.532858][ T9273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.567453][ T9273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 77.591776][ T9273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.603684][ T9273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.656146][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.669362][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.689572][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.709761][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.725023][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.753247][ T9273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 77.771399][ T9273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.782796][ T9273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 77.793541][ T9273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.805628][ T9273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.817946][ T9520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.828679][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.839765][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.868169][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.883971][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.896077][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 77.909737][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.920383][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 77.933777][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.944085][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 77.965936][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.977649][ T9169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.006208][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.014883][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.024908][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.034724][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.043361][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.052209][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.061630][ T9578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.159169][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 78.170781][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.181390][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 78.192155][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.202414][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 78.213045][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.224129][ T9169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.293560][ T9317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.302522][ T9317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.312379][ T9317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.320753][ T9317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.351256][T10191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.360835][T10191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.395604][T10256] No such timeout policy "syz1" [ 78.435114][ T9578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.559325][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.574865][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.591824][ T9520] device veth0_vlan entered promiscuous mode [ 78.600387][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.612790][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.632315][ T9520] device veth1_vlan entered promiscuous mode [ 78.655790][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 12:32:38 executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r1, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) 12:32:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 78.663884][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.686573][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.740126][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.752369][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.776084][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.798154][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.809160][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.840744][ T9578] device veth0_vlan entered promiscuous mode [ 78.863578][ T9520] device veth0_macvtap entered promiscuous mode [ 78.892359][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.901988][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.932538][ T9578] device veth1_vlan entered promiscuous mode [ 78.962321][ T9520] device veth1_macvtap entered promiscuous mode [ 78.971122][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.984267][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.048452][ T9520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 79.075668][ T9520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.085518][ T9520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 79.112394][ T9520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.126067][ T9520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 79.139370][ T9520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.150645][ T9520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 79.163354][ T9520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.178928][ T9520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.195924][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.204647][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.219193][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.230521][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.244745][ T9520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 79.257371][ T9520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.270077][ T9520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 79.283411][ T9520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.296430][ T9520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 79.310312][ T9520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.321419][ T9520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 79.334001][ T9520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.348721][ T9520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.360428][ T9578] device veth0_macvtap entered promiscuous mode [ 79.373813][ T9556] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.384374][ T9556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.397938][ T9556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.420204][ T9578] device veth1_macvtap entered promiscuous mode [ 79.545995][ T0] NOHZ: local_softirq_pending 08 [ 79.615869][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 79.648856][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.674446][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 79.700781][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.731282][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 79.745788][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.755807][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 79.767932][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.778075][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 79.788680][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.799972][ T9578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.829279][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 12:32:39 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') mmap(&(0x7f000006b000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) [ 79.878529][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.898671][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.919339][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 79.946252][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.956711][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 79.967535][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.977976][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 79.989758][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.000571][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 80.011682][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.021946][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 80.033373][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.045785][ T9578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.059033][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.068533][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.793238][T10294] attempt to access beyond end of device [ 80.799191][T10294] loop5: rw=1, want=21257, limit=63 [ 80.998728][T10291] attempt to access beyond end of device [ 81.004477][T10291] loop5: rw=2049, want=78, limit=63 [ 81.010734][T10291] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 81.019820][T10291] attempt to access beyond end of device [ 81.025501][T10291] loop5: rw=2049, want=79, limit=63 [ 81.032225][T10291] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 81.041189][T10291] attempt to access beyond end of device [ 81.047391][T10291] loop5: rw=2049, want=80, limit=63 [ 81.052735][T10291] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 81.062441][T10291] attempt to access beyond end of device [ 81.069141][T10291] loop5: rw=2049, want=81, limit=63 [ 81.074443][T10291] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 81.093229][T10291] attempt to access beyond end of device [ 81.107773][T10291] loop5: rw=2049, want=130, limit=63 [ 81.140727][T10291] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 81.159440][T10291] attempt to access beyond end of device [ 81.163599][T10299] attempt to access beyond end of device [ 81.170884][T10299] loop5: rw=1, want=32881, limit=63 [ 81.171795][T10291] loop5: rw=2049, want=131, limit=63 [ 81.185642][T10291] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 81.203077][T10291] attempt to access beyond end of device [ 81.214302][T10291] loop5: rw=2049, want=132, limit=63 [ 81.226754][T10291] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 81.236839][T10291] attempt to access beyond end of device [ 81.242546][T10291] loop5: rw=2049, want=133, limit=63 [ 81.248627][T10291] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 81.257646][T10291] attempt to access beyond end of device [ 81.263401][T10291] loop5: rw=2049, want=142, limit=63 [ 81.269408][T10291] Buffer I/O error on dev loop5, logical block 141, lost async page write [ 81.278287][T10291] attempt to access beyond end of device [ 81.284097][T10291] loop5: rw=2049, want=143, limit=63 [ 81.289806][T10291] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 81.298573][T10291] attempt to access beyond end of device [ 81.304326][T10291] loop5: rw=2049, want=144, limit=63 [ 81.310558][T10291] attempt to access beyond end of device [ 81.316281][T10291] loop5: rw=2049, want=145, limit=63 [ 81.321636][T10291] attempt to access beyond end of device [ 81.327318][T10291] loop5: rw=2049, want=161, limit=63 [ 81.332898][T10295] attempt to access beyond end of device [ 81.339601][T10295] loop5: rw=2049, want=78, limit=63 [ 81.344824][T10295] attempt to access beyond end of device [ 81.350521][T10295] loop5: rw=2049, want=79, limit=63 [ 81.355817][T10295] attempt to access beyond end of device [ 81.361491][T10295] loop5: rw=2049, want=80, limit=63 [ 81.366777][T10295] attempt to access beyond end of device [ 81.372403][T10295] loop5: rw=2049, want=81, limit=63 [ 81.377824][T10295] attempt to access beyond end of device [ 81.383666][T10295] loop5: rw=2049, want=130, limit=63 [ 81.389781][T10295] attempt to access beyond end of device [ 81.396292][T10295] loop5: rw=2049, want=131, limit=63 [ 81.401749][T10295] attempt to access beyond end of device [ 81.407637][T10295] loop5: rw=2049, want=132, limit=63 [ 81.412978][T10295] attempt to access beyond end of device [ 81.418675][T10295] loop5: rw=2049, want=133, limit=63 [ 81.423966][T10295] attempt to access beyond end of device [ 81.429644][T10295] loop5: rw=2049, want=142, limit=63 [ 81.434944][T10295] attempt to access beyond end of device 12:32:41 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r2, 0x4000, 0x0, 0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) fchmodat(r2, &(0x7f0000000000)='./bus\x00', 0x21) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getroute={0x1a, 0x1a, 0x1}, 0x24}}, 0x0) sendfile(r3, r0, &(0x7f0000000040)=0x8, 0x7fffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r4 = dup(0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x0, 0x0) accept4$netrom(r4, &(0x7f0000000180)={{0x3, @rose}, [@remote, @rose, @remote, @rose, @null, @default, @rose, @default]}, &(0x7f0000000100)=0x48, 0x0) 12:32:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') mmap(&(0x7f000006b000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) 12:32:41 executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r1, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) 12:32:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 12:32:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 12:32:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x3a3dd4008420af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00') [ 81.440609][T10295] loop5: rw=2049, want=143, limit=63 [ 81.446593][T10295] attempt to access beyond end of device [ 81.452220][T10295] loop5: rw=2049, want=144, limit=63 [ 81.457687][T10295] attempt to access beyond end of device [ 81.463413][T10295] loop5: rw=2049, want=145, limit=63 [ 81.570789][T10312] No such timeout policy "syz1" 12:32:41 executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r1, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) 12:32:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') mmap(&(0x7f000006b000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) 12:32:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x3a3dd4008420af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00') [ 81.976194][T10326] No such timeout policy "syz1" 12:32:41 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r2, 0x4000, 0x0, 0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) fchmodat(r2, &(0x7f0000000000)='./bus\x00', 0x21) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getroute={0x1a, 0x1a, 0x1}, 0x24}}, 0x0) sendfile(r3, r0, &(0x7f0000000040)=0x8, 0x7fffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r4 = dup(0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x0, 0x0) accept4$netrom(r4, &(0x7f0000000180)={{0x3, @rose}, [@remote, @rose, @remote, @rose, @null, @default, @rose, @default]}, &(0x7f0000000100)=0x48, 0x0) [ 82.080573][T10327] attempt to access beyond end of device [ 82.132080][T10327] loop5: rw=1, want=1521, limit=63 12:32:41 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r2, 0x4000, 0x0, 0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) fchmodat(r2, &(0x7f0000000000)='./bus\x00', 0x21) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getroute={0x1a, 0x1a, 0x1}, 0x24}}, 0x0) sendfile(r3, r0, &(0x7f0000000040)=0x8, 0x7fffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r4 = dup(0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x0, 0x0) accept4$netrom(r4, &(0x7f0000000180)={{0x3, @rose}, [@remote, @rose, @remote, @rose, @null, @default, @rose, @default]}, &(0x7f0000000100)=0x48, 0x0) 12:32:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x3a3dd4008420af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = memfd_create(&(0x7f0000000340)='systemem0md5sum$\x00\x10^\fC\x1fJ\x11\x0e\xb8\xb0H\x8c(\x9bD\xc5k\x8f\xfa\xd5\xb1V\x95N\x19\xa8\x94t^\x7f\n\xdb\x14j-\xda\x8e\x1a\x9am\xc0\xf6HSL}\xb0\x03D(^\x1e,\xe0\xfc3\xdcX\x10dV\xe1iZ\x14Y@\xa0\x84\x00\xc5\xed6\xc0\x1ds\xf8\xaa\xe5\xcc\xd0\xfd\xe4\xdc\x96}\x02\xb4)h\xbe]\x16\xa1\xada\x86\xc4\xa0i\xed\x9f3\x99|IO\x00Cv\xc1}\xe7f\x82\x83\xda\x80\xc3\x03\xd5\xc8*\xcde\x8en\xbcE\x0ehb\xe0N\x9c}\x0f\xfd\xbe!\xbe\xe3\"w\xc5K\xaf\x89d\x14I1\xeaJ\x1e\x03\x00\x00\x00\x00\xda\xc6\xd7\x82nYK]r\x16\x8f\xe1G_#i\xf0?y6\xf8\xe2sF\x8c\x88;#\xc9\xb98\xfe\xday<\xa0nd:r\x81|\xb1\x9a\r\xdc\xed0\x05\f\xf1t\xd7\x05`\v\xb8`\xd9\x8882<\xb6\xb1\xe88&\xf7L\x94\xf8\xc3\x99\xe0\xc4J.\xa9uGv\xd1\x18\xc5\x98\x17\xe9nJ\b^\a\x16\xe8\x03z\xd7\xf6\xb4\x9dOr\x13', 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00') [ 82.523208][T10339] No such timeout policy "syz1" [ 82.585964][T10338] attempt to access beyond end of device [ 82.680630][T10338] loop2: rw=1, want=985, limit=63 [ 82.981532][T10345] attempt to access beyond end of device [ 83.000804][T10318] attempt to access beyond end of device [ 83.045444][T10345] loop4: rw=1, want=1065, limit=63 [ 83.050772][T10318] loop5: rw=2049, want=78, limit=63 [ 83.065017][T10318] attempt to access beyond end of device [ 83.092189][T10318] loop5: rw=2049, want=79, limit=63 [ 83.121079][T10318] attempt to access beyond end of device [ 83.144182][T10318] loop5: rw=2049, want=80, limit=63 [ 83.185395][T10318] attempt to access beyond end of device [ 83.206523][T10318] loop5: rw=2049, want=81, limit=63 [ 83.225885][T10318] attempt to access beyond end of device [ 83.248999][T10332] attempt to access beyond end of device [ 83.256918][T10318] loop5: rw=2049, want=130, limit=63 [ 83.273290][T10318] attempt to access beyond end of device [ 83.280210][T10332] loop2: rw=2049, want=78, limit=63 [ 83.303015][T10332] attempt to access beyond end of device [ 83.310148][T10318] loop5: rw=2049, want=131, limit=63 [ 83.327666][T10340] attempt to access beyond end of device [ 83.335677][T10318] attempt to access beyond end of device [ 83.341382][T10332] loop2: rw=2049, want=79, limit=63 [ 83.352014][T10340] loop4: rw=2049, want=78, limit=63 [ 83.363151][T10332] attempt to access beyond end of device [ 83.369814][T10318] loop5: rw=2049, want=132, limit=63 [ 83.381150][T10340] attempt to access beyond end of device [ 83.394336][T10318] attempt to access beyond end of device [ 83.400493][T10332] loop2: rw=2049, want=80, limit=63 [ 83.410099][T10340] loop4: rw=2049, want=79, limit=63 [ 83.423352][T10332] attempt to access beyond end of device [ 83.430200][T10340] attempt to access beyond end of device [ 83.431288][T10318] loop5: rw=2049, want=133, limit=63 [ 83.454929][T10318] attempt to access beyond end of device [ 83.461035][T10340] loop4: rw=2049, want=80, limit=63 [ 83.463125][T10332] loop2: rw=2049, want=81, limit=63 [ 83.478475][T10332] attempt to access beyond end of device [ 83.487534][T10318] loop5: rw=2049, want=142, limit=63 [ 83.489307][T10340] attempt to access beyond end of device [ 83.501623][T10332] loop2: rw=2049, want=130, limit=63 [ 83.510292][T10318] attempt to access beyond end of device [ 83.524811][T10332] attempt to access beyond end of device [ 83.528807][T10340] loop4: rw=2049, want=81, limit=63 [ 83.533984][T10318] loop5: rw=2049, want=143, limit=63 [ 83.546696][T10318] attempt to access beyond end of device [ 83.556020][T10332] loop2: rw=2049, want=131, limit=63 [ 83.564946][T10340] attempt to access beyond end of device [ 83.574285][T10318] loop5: rw=2049, want=144, limit=63 [ 83.585364][T10332] attempt to access beyond end of device [ 83.594390][T10340] loop4: rw=2049, want=130, limit=63 [ 83.603133][T10318] attempt to access beyond end of device [ 83.614265][T10332] loop2: rw=2049, want=132, limit=63 [ 83.623053][T10340] attempt to access beyond end of device [ 83.632387][T10318] loop5: rw=2049, want=145, limit=63 [ 83.644869][T10332] attempt to access beyond end of device [ 83.652928][T10340] loop4: rw=2049, want=131, limit=63 [ 83.661642][T10318] attempt to access beyond end of device [ 83.671675][T10332] loop2: rw=2049, want=133, limit=63 [ 83.679253][T10340] attempt to access beyond end of device [ 83.687107][T10318] loop5: rw=2049, want=161, limit=63 [ 83.697968][T10332] attempt to access beyond end of device [ 83.708023][T10340] loop4: rw=2049, want=132, limit=63 [ 83.724378][T10332] loop2: rw=2049, want=142, limit=63 [ 83.735267][T10340] attempt to access beyond end of device [ 83.747367][T10318] attempt to access beyond end of device [ 83.757534][T10332] attempt to access beyond end of device [ 83.766820][T10340] loop4: rw=2049, want=133, limit=63 [ 83.780099][T10318] loop5: rw=2049, want=5049, limit=63 [ 83.788999][T10332] loop2: rw=2049, want=143, limit=63 [ 83.795432][T10340] attempt to access beyond end of device [ 83.810954][T10332] attempt to access beyond end of device [ 83.823434][T10340] loop4: rw=2049, want=142, limit=63 [ 83.841139][T10332] loop2: rw=2049, want=144, limit=63 [ 83.849863][T10340] attempt to access beyond end of device [ 83.864371][T10332] attempt to access beyond end of device [ 83.875076][T10340] loop4: rw=2049, want=143, limit=63 [ 83.890268][T10332] loop2: rw=2049, want=145, limit=63 [ 83.897893][T10340] attempt to access beyond end of device 12:32:43 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r2, 0x4000, 0x0, 0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) fchmodat(r2, &(0x7f0000000000)='./bus\x00', 0x21) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getroute={0x1a, 0x1a, 0x1}, 0x24}}, 0x0) sendfile(r3, r0, &(0x7f0000000040)=0x8, 0x7fffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r4 = dup(0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x0, 0x0) accept4$netrom(r4, &(0x7f0000000180)={{0x3, @rose}, [@remote, @rose, @remote, @rose, @null, @default, @rose, @default]}, &(0x7f0000000100)=0x48, 0x0) 12:32:43 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r2, 0x4000, 0x0, 0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) fchmodat(r2, &(0x7f0000000000)='./bus\x00', 0x21) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getroute={0x1a, 0x1a, 0x1}, 0x24}}, 0x0) sendfile(r3, r0, &(0x7f0000000040)=0x8, 0x7fffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r4 = dup(0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x0, 0x0) accept4$netrom(r4, &(0x7f0000000180)={{0x3, @rose}, [@remote, @rose, @remote, @rose, @null, @default, @rose, @default]}, &(0x7f0000000100)=0x48, 0x0) 12:32:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 83.914653][T10332] attempt to access beyond end of device [ 83.922718][T10340] loop4: rw=2049, want=144, limit=63 [ 83.934887][T10332] loop2: rw=2049, want=161, limit=63 [ 83.941459][T10340] attempt to access beyond end of device [ 83.956171][T10340] loop4: rw=2049, want=145, limit=63 [ 83.977045][T10340] attempt to access beyond end of device [ 83.984838][T10332] attempt to access beyond end of device [ 84.014757][T10340] loop4: rw=2049, want=161, limit=63 [ 84.028237][T10332] loop2: rw=2049, want=5137, limit=63 [ 84.089648][T10340] attempt to access beyond end of device [ 84.148499][T10340] loop4: rw=2049, want=3657, limit=63 [ 84.233986][T10364] attempt to access beyond end of device 12:32:44 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r2, 0x4000, 0x0, 0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) fchmodat(r2, &(0x7f0000000000)='./bus\x00', 0x21) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getroute={0x1a, 0x1a, 0x1}, 0x24}}, 0x0) sendfile(r3, r0, &(0x7f0000000040)=0x8, 0x7fffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r4 = dup(0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x0, 0x0) accept4$netrom(r4, &(0x7f0000000180)={{0x3, @rose}, [@remote, @rose, @remote, @rose, @null, @default, @rose, @default]}, &(0x7f0000000100)=0x48, 0x0) [ 84.360553][T10364] loop3: rw=1, want=729, limit=63 12:32:44 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r2, 0x4000, 0x0, 0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) fchmodat(r2, &(0x7f0000000000)='./bus\x00', 0x21) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getroute={0x1a, 0x1a, 0x1}, 0x24}}, 0x0) sendfile(r3, r0, &(0x7f0000000040)=0x8, 0x7fffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r4 = dup(0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x0, 0x0) accept4$netrom(r4, &(0x7f0000000180)={{0x3, @rose}, [@remote, @rose, @remote, @rose, @null, @default, @rose, @default]}, &(0x7f0000000100)=0x48, 0x0) [ 85.039584][T10358] attempt to access beyond end of device [ 85.079278][T10384] attempt to access beyond end of device [ 85.110618][T10384] loop4: rw=1, want=3041, limit=63 [ 85.149348][T10358] loop3: rw=2049, want=78, limit=63 [ 85.197041][T10358] attempt to access beyond end of device [ 85.266263][T10358] loop3: rw=2049, want=79, limit=63 [ 85.381761][T10358] attempt to access beyond end of device [ 85.433619][T10358] loop3: rw=2049, want=80, limit=63 [ 85.490813][T10358] attempt to access beyond end of device [ 85.561741][T10358] loop3: rw=2049, want=81, limit=63 [ 85.612759][T10358] attempt to access beyond end of device [ 85.666592][T10358] loop3: rw=2049, want=130, limit=63 [ 85.717275][T10358] attempt to access beyond end of device [ 85.723956][T10372] attempt to access beyond end of device [ 85.750508][T10358] loop3: rw=2049, want=131, limit=63 [ 85.763611][T10372] loop2: rw=2049, want=78, limit=63 [ 85.768375][T10378] attempt to access beyond end of device [ 85.801582][T10358] attempt to access beyond end of device [ 85.820002][T10372] attempt to access beyond end of device [ 85.827804][T10378] loop2: rw=1, want=12017, limit=63 [ 85.842344][T10380] attempt to access beyond end of device [ 85.852554][T10358] loop3: rw=2049, want=132, limit=63 [ 85.862616][T10372] loop2: rw=2049, want=79, limit=63 [ 85.890747][T10380] loop4: rw=2049, want=78, limit=63 [ 85.900508][T10358] attempt to access beyond end of device [ 85.910691][T10372] attempt to access beyond end of device [ 85.924135][T10380] attempt to access beyond end of device [ 85.933452][T10358] loop3: rw=2049, want=133, limit=63 [ 85.944345][T10372] loop2: rw=2049, want=80, limit=63 [ 85.961083][T10380] loop4: rw=2049, want=79, limit=63 [ 85.969695][T10358] attempt to access beyond end of device [ 85.982059][T10372] attempt to access beyond end of device [ 85.993466][T10380] attempt to access beyond end of device [ 86.005473][T10358] loop3: rw=2049, want=142, limit=63 [ 86.014121][T10372] loop2: rw=2049, want=81, limit=63 [ 86.028098][T10380] loop4: rw=2049, want=80, limit=63 [ 86.037918][T10358] buffer_io_error: 63 callbacks suppressed [ 86.037932][T10358] Buffer I/O error on dev loop3, logical block 141, lost async page write [ 86.060929][T10372] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 86.079403][T10380] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 86.112762][T10372] attempt to access beyond end of device [ 86.128733][T10380] attempt to access beyond end of device [ 86.142040][T10358] attempt to access beyond end of device [ 86.152391][T10372] loop2: rw=2049, want=130, limit=63 [ 86.167465][T10380] loop4: rw=2049, want=81, limit=63 [ 86.228963][T10358] loop3: rw=2049, want=143, limit=63 [ 86.241673][T10372] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 86.272308][T10380] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 86.290932][T10358] Buffer I/O error on dev loop3, logical block 142, lost async page write [ 86.348067][T10372] attempt to access beyond end of device [ 86.360366][T10380] attempt to access beyond end of device [ 86.381634][T10358] attempt to access beyond end of device [ 86.387128][T10372] loop2: rw=2049, want=131, limit=63 [ 86.405379][T10380] loop4: rw=2049, want=130, limit=63 [ 86.423208][T10372] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 86.443925][T10358] loop3: rw=2049, want=144, limit=63 [ 86.458104][T10380] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 86.495305][T10358] Buffer I/O error on dev loop3, logical block 143, lost async page write [ 86.513216][T10372] attempt to access beyond end of device [ 86.541124][T10380] attempt to access beyond end of device [ 86.560538][T10358] attempt to access beyond end of device [ 86.561719][T10372] loop2: rw=2049, want=132, limit=63 [ 86.593254][T10358] loop3: rw=2049, want=145, limit=63 [ 86.596935][T10380] loop4: rw=2049, want=131, limit=63 [ 86.610591][T10372] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 86.624667][T10380] attempt to access beyond end of device [ 86.642478][T10358] attempt to access beyond end of device 12:32:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 12:32:46 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r2, 0x4000, 0x0, 0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) fchmodat(r2, &(0x7f0000000000)='./bus\x00', 0x21) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getroute={0x1a, 0x1a, 0x1}, 0x24}}, 0x0) sendfile(r3, r0, &(0x7f0000000040)=0x8, 0x7fffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r4 = dup(0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x0, 0x0) accept4$netrom(r4, &(0x7f0000000180)={{0x3, @rose}, [@remote, @rose, @remote, @rose, @null, @default, @rose, @default]}, &(0x7f0000000100)=0x48, 0x0) [ 86.659348][T10380] loop4: rw=2049, want=132, limit=63 [ 86.681512][T10372] attempt to access beyond end of device [ 86.698104][T10358] loop3: rw=2049, want=161, limit=63 [ 86.706840][T10380] attempt to access beyond end of device [ 86.732250][T10372] loop2: rw=2049, want=133, limit=63 [ 86.760499][T10380] loop4: rw=2049, want=133, limit=63 [ 86.762935][T10358] attempt to access beyond end of device [ 86.780505][T10372] attempt to access beyond end of device [ 86.803454][T10380] attempt to access beyond end of device [ 86.809042][T10358] loop3: rw=2049, want=4313, limit=63 12:32:46 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r2, 0x4000, 0x0, 0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) fchmodat(r2, &(0x7f0000000000)='./bus\x00', 0x21) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getroute={0x1a, 0x1a, 0x1}, 0x24}}, 0x0) sendfile(r3, r0, &(0x7f0000000040)=0x8, 0x7fffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r4 = dup(0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x0, 0x0) accept4$netrom(r4, &(0x7f0000000180)={{0x3, @rose}, [@remote, @rose, @remote, @rose, @null, @default, @rose, @default]}, &(0x7f0000000100)=0x48, 0x0) [ 86.849487][T10372] loop2: rw=2049, want=142, limit=63 [ 86.874001][T10380] loop4: rw=2049, want=142, limit=63 [ 86.880101][T10380] attempt to access beyond end of device [ 86.886098][T10380] loop4: rw=2049, want=143, limit=63 [ 86.891451][T10380] attempt to access beyond end of device [ 86.897406][T10380] loop4: rw=2049, want=144, limit=63 [ 86.902775][T10372] attempt to access beyond end of device [ 86.908790][T10380] attempt to access beyond end of device [ 86.914881][T10372] loop2: rw=2049, want=143, limit=63 [ 86.920272][T10380] loop4: rw=2049, want=145, limit=63 [ 86.925992][T10372] attempt to access beyond end of device [ 86.931824][T10380] attempt to access beyond end of device [ 86.937987][T10372] loop2: rw=2049, want=144, limit=63 [ 86.943364][T10380] loop4: rw=2049, want=161, limit=63 [ 86.949004][T10372] attempt to access beyond end of device [ 86.960232][T10372] loop2: rw=2049, want=145, limit=63 [ 86.997104][T10380] attempt to access beyond end of device [ 87.010859][T10372] attempt to access beyond end of device [ 87.048487][T10380] loop4: rw=2049, want=7785, limit=63 [ 87.055678][T10396] attempt to access beyond end of device [ 87.062243][T10372] loop2: rw=2049, want=161, limit=63 [ 87.081054][T10396] loop5: rw=1, want=1345, limit=63 12:32:47 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r2, 0x4000, 0x0, 0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) fchmodat(r2, &(0x7f0000000000)='./bus\x00', 0x21) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getroute={0x1a, 0x1a, 0x1}, 0x24}}, 0x0) sendfile(r3, r0, &(0x7f0000000040)=0x8, 0x7fffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r4 = dup(0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x0, 0x0) accept4$netrom(r4, &(0x7f0000000180)={{0x3, @rose}, [@remote, @rose, @remote, @rose, @null, @default, @rose, @default]}, &(0x7f0000000100)=0x48, 0x0) 12:32:47 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r2, 0x4000, 0x0, 0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) fchmodat(r2, &(0x7f0000000000)='./bus\x00', 0x21) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getroute={0x1a, 0x1a, 0x1}, 0x24}}, 0x0) sendfile(r3, r0, &(0x7f0000000040)=0x8, 0x7fffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r4 = dup(0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x0, 0x0) accept4$netrom(r4, &(0x7f0000000180)={{0x3, @rose}, [@remote, @rose, @remote, @rose, @null, @default, @rose, @default]}, &(0x7f0000000100)=0x48, 0x0) [ 87.409560][T10404] attempt to access beyond end of device [ 87.445301][T10404] loop3: rw=1, want=1945, limit=63 [ 87.743294][T10417] attempt to access beyond end of device [ 87.769735][T10391] attempt to access beyond end of device [ 87.775588][T10391] loop5: rw=2049, want=78, limit=63 [ 87.780839][T10391] attempt to access beyond end of device [ 87.788056][T10391] loop5: rw=2049, want=79, limit=63 [ 87.793344][T10391] attempt to access beyond end of device [ 87.799956][T10391] loop5: rw=2049, want=80, limit=63 [ 87.806102][T10391] attempt to access beyond end of device [ 87.811854][T10391] loop5: rw=2049, want=81, limit=63 [ 87.817920][T10391] attempt to access beyond end of device [ 87.823606][T10391] loop5: rw=2049, want=130, limit=63 [ 87.829502][T10391] attempt to access beyond end of device [ 87.839851][T10391] loop5: rw=2049, want=131, limit=63 [ 87.860670][T10419] attempt to access beyond end of device [ 87.870426][T10417] loop2: rw=1, want=497, limit=63 [ 87.882179][T10391] attempt to access beyond end of device [ 87.901064][T10391] loop5: rw=2049, want=132, limit=63 [ 87.918620][T10419] loop4: rw=1, want=1361, limit=63 [ 87.924655][T10391] attempt to access beyond end of device [ 87.946870][T10391] loop5: rw=2049, want=133, limit=63 [ 87.989237][T10391] attempt to access beyond end of device [ 88.083924][T10391] loop5: rw=2049, want=142, limit=63 [ 88.103964][T10401] attempt to access beyond end of device [ 88.119556][T10391] attempt to access beyond end of device [ 88.142976][T10401] loop3: rw=2049, want=78, limit=63 [ 88.171001][T10391] loop5: rw=2049, want=143, limit=63 [ 88.193269][T10401] attempt to access beyond end of device [ 88.208743][T10391] attempt to access beyond end of device [ 88.240756][T10401] loop3: rw=2049, want=79, limit=63 [ 88.262497][T10391] loop5: rw=2049, want=144, limit=63 [ 88.283216][T10401] attempt to access beyond end of device [ 88.304506][T10391] attempt to access beyond end of device [ 88.336672][T10391] loop5: rw=2049, want=145, limit=63 [ 88.342156][T10401] loop3: rw=2049, want=80, limit=63 [ 88.368274][T10401] attempt to access beyond end of device [ 88.377427][T10391] attempt to access beyond end of device [ 88.400591][T10409] attempt to access beyond end of device [ 88.408542][T10401] loop3: rw=2049, want=81, limit=63 [ 88.414015][T10391] loop5: rw=2049, want=161, limit=63 [ 88.433954][T10409] loop2: rw=2049, want=78, limit=63 [ 88.442225][T10401] attempt to access beyond end of device [ 88.468002][T10409] attempt to access beyond end of device [ 88.479407][T10401] loop3: rw=2049, want=130, limit=63 [ 88.490891][T10391] attempt to access beyond end of device [ 88.517498][T10409] loop2: rw=2049, want=79, limit=63 [ 88.527403][T10401] attempt to access beyond end of device [ 88.541022][T10391] loop5: rw=2049, want=5513, limit=63 [ 88.557725][T10409] attempt to access beyond end of device [ 88.563430][T10401] loop3: rw=2049, want=131, limit=63 [ 88.594624][T10409] loop2: rw=2049, want=80, limit=63 [ 88.616072][T10414] attempt to access beyond end of device [ 88.622885][T10401] attempt to access beyond end of device [ 88.668813][T10409] attempt to access beyond end of device [ 88.675215][T10401] loop3: rw=2049, want=132, limit=63 [ 88.682890][T10414] loop4: rw=2049, want=78, limit=63 [ 88.708100][T10409] loop2: rw=2049, want=81, limit=63 12:32:48 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r2, 0x4000, 0x0, 0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) fchmodat(r2, &(0x7f0000000000)='./bus\x00', 0x21) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getroute={0x1a, 0x1a, 0x1}, 0x24}}, 0x0) sendfile(r3, r0, &(0x7f0000000040)=0x8, 0x7fffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r4 = dup(0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x0, 0x0) accept4$netrom(r4, &(0x7f0000000180)={{0x3, @rose}, [@remote, @rose, @remote, @rose, @null, @default, @rose, @default]}, &(0x7f0000000100)=0x48, 0x0) [ 88.714569][T10401] attempt to access beyond end of device [ 88.723648][T10414] attempt to access beyond end of device [ 88.747562][T10409] attempt to access beyond end of device [ 88.755837][T10401] loop3: rw=2049, want=133, limit=63 [ 88.763477][T10414] loop4: rw=2049, want=79, limit=63 [ 88.821245][T10409] loop2: rw=2049, want=130, limit=63 [ 88.822290][T10401] attempt to access beyond end of device [ 88.844183][T10414] attempt to access beyond end of device [ 88.859879][T10401] loop3: rw=2049, want=142, limit=63 12:32:48 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r2, 0x4000, 0x0, 0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) fchmodat(r2, &(0x7f0000000000)='./bus\x00', 0x21) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getroute={0x1a, 0x1a, 0x1}, 0x24}}, 0x0) sendfile(r3, r0, &(0x7f0000000040)=0x8, 0x7fffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r4 = dup(0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x0, 0x0) accept4$netrom(r4, &(0x7f0000000180)={{0x3, @rose}, [@remote, @rose, @remote, @rose, @null, @default, @rose, @default]}, &(0x7f0000000100)=0x48, 0x0) [ 88.870736][T10414] loop4: rw=2049, want=80, limit=63 [ 88.877022][T10409] attempt to access beyond end of device [ 88.889167][T10401] attempt to access beyond end of device [ 88.902179][T10414] attempt to access beyond end of device [ 88.919595][T10401] loop3: rw=2049, want=143, limit=63 [ 88.926791][T10409] loop2: rw=2049, want=131, limit=63 [ 88.941347][T10414] loop4: rw=2049, want=81, limit=63 [ 88.956969][T10401] attempt to access beyond end of device [ 88.967528][T10414] attempt to access beyond end of device [ 88.972481][T10409] attempt to access beyond end of device [ 88.993311][T10401] loop3: rw=2049, want=144, limit=63 [ 89.020823][T10414] loop4: rw=2049, want=130, limit=63 [ 89.046758][T10401] attempt to access beyond end of device [ 89.052434][T10401] loop3: rw=2049, want=145, limit=63 [ 89.055685][T10414] attempt to access beyond end of device [ 89.059063][T10409] loop2: rw=2049, want=132, limit=63 [ 89.083558][T10414] loop4: rw=2049, want=131, limit=63 [ 89.086544][T10409] attempt to access beyond end of device [ 89.095628][T10401] attempt to access beyond end of device [ 89.101275][T10401] loop3: rw=2049, want=161, limit=63 [ 89.113355][T10414] attempt to access beyond end of device [ 89.119770][T10409] loop2: rw=2049, want=133, limit=63 [ 89.136455][T10414] loop4: rw=2049, want=132, limit=63 [ 89.141806][T10409] attempt to access beyond end of device [ 89.163567][T10401] attempt to access beyond end of device [ 89.171660][T10414] attempt to access beyond end of device [ 89.181801][T10409] loop2: rw=2049, want=142, limit=63 [ 89.201647][T10414] loop4: rw=2049, want=133, limit=63 [ 89.211175][T10401] loop3: rw=2049, want=5849, limit=63 [ 89.220063][T10409] attempt to access beyond end of device [ 89.240316][T10414] attempt to access beyond end of device [ 89.252920][T10409] loop2: rw=2049, want=143, limit=63 [ 89.317092][T10414] loop4: rw=2049, want=142, limit=63 [ 89.331556][T10409] attempt to access beyond end of device [ 89.386130][T10414] attempt to access beyond end of device [ 89.411865][T10409] loop2: rw=2049, want=144, limit=63 [ 89.460666][T10414] loop4: rw=2049, want=143, limit=63 [ 89.488497][T10409] attempt to access beyond end of device 12:32:49 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r2, 0x4000, 0x0, 0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) fchmodat(r2, &(0x7f0000000000)='./bus\x00', 0x21) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getroute={0x1a, 0x1a, 0x1}, 0x24}}, 0x0) sendfile(r3, r0, &(0x7f0000000040)=0x8, 0x7fffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r4 = dup(0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x0, 0x0) accept4$netrom(r4, &(0x7f0000000180)={{0x3, @rose}, [@remote, @rose, @remote, @rose, @null, @default, @rose, @default]}, &(0x7f0000000100)=0x48, 0x0) [ 89.532870][T10414] attempt to access beyond end of device [ 89.554360][T10409] loop2: rw=2049, want=145, limit=63 [ 89.560510][T10435] attempt to access beyond end of device [ 89.580976][T10414] loop4: rw=2049, want=144, limit=63 [ 89.589758][T10409] attempt to access beyond end of device [ 89.603243][T10435] loop5: rw=1, want=1201, limit=63 [ 89.615261][T10414] attempt to access beyond end of device [ 89.625459][T10409] loop2: rw=2049, want=161, limit=63 [ 89.652670][T10414] loop4: rw=2049, want=145, limit=63 [ 89.697744][T10428] ================================================================== [ 89.705922][T10428] BUG: KCSAN: data-race in __mpage_writepage / generic_write_end [ 89.711662][T10409] attempt to access beyond end of device [ 89.713633][T10428] [ 89.721586][T10428] write to 0xffff88811e0d99d0 of 8 bytes by task 10424 on cpu 0: [ 89.729315][T10428] generic_write_end+0xd4/0x290 [ 89.734181][T10428] fat_write_end+0x57/0x120 [ 89.738692][T10428] generic_perform_write+0x1d7/0x320 [ 89.743980][T10428] __generic_file_write_iter+0x240/0x370 [ 89.744138][T10414] attempt to access beyond end of device [ 89.749614][T10428] generic_file_write_iter+0x294/0x38e [ 89.749635][T10428] new_sync_write+0x303/0x400 [ 89.749661][T10428] __vfs_write+0x9e/0xb0 [ 89.769701][T10428] vfs_write+0x189/0x380 [ 89.773950][T10428] ksys_write+0xc5/0x1a0 [ 89.778201][T10428] __x64_sys_write+0x49/0x60 [ 89.782807][T10428] do_syscall_64+0xc7/0x3b0 [ 89.787332][T10428] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 89.793424][T10428] [ 89.795757][T10428] read to 0xffff88811e0d99d0 of 8 bytes by task 10428 on cpu 1: [ 89.803404][T10428] __mpage_writepage+0xb5/0xdc0 [ 89.808267][T10428] write_cache_pages+0x400/0xa10 [ 89.813219][T10428] mpage_writepages+0xab/0x180 [ 89.816281][T10414] loop4: rw=2049, want=161, limit=63 [ 89.817982][T10428] fat_writepages+0x2a/0x40 [ 89.818069][T10428] do_writepages+0x6b/0x170 [ 89.827893][T10409] loop2: rw=2049, want=5473, limit=63 [ 89.832326][T10428] __filemap_fdatawrite_range+0x1bb/0x220 [ 89.843417][T10428] generic_fadvise+0x47b/0x490 [ 89.848192][T10428] vfs_fadvise+0x8a/0x90 [ 89.852433][T10428] ksys_fadvise64_64+0x5b/0xa0 [ 89.857217][T10428] __x64_sys_fadvise64+0x5a/0x70 [ 89.862276][T10428] do_syscall_64+0xc7/0x3b0 [ 89.866800][T10428] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 89.872868][T10428] [ 89.875209][T10428] Reported by Kernel Concurrency Sanitizer on: [ 89.881372][T10428] CPU: 1 PID: 10428 Comm: syz-executor.1 Not tainted 5.7.0-rc1-syzkaller #0 [ 89.890126][T10428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.900186][T10428] ================================================================== [ 89.908763][T10428] Kernel panic - not syncing: panic_on_warn set ... [ 89.915348][T10428] CPU: 1 PID: 10428 Comm: syz-executor.1 Not tainted 5.7.0-rc1-syzkaller #0 [ 89.924001][T10428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.934060][T10428] Call Trace: [ 89.937363][T10428] dump_stack+0x11d/0x187 [ 89.941687][T10428] panic+0x210/0x640 [ 89.945579][T10428] ? vprintk_func+0x89/0x13a [ 89.950160][T10428] kcsan_report.cold+0xc/0x1a [ 89.954851][T10428] kcsan_setup_watchpoint+0x3fb/0x440 [ 89.960235][T10428] __mpage_writepage+0xb5/0xdc0 [ 89.965101][T10428] ? page_mapped+0xdc/0x250 [ 89.969613][T10428] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 89.975511][T10428] ? __read_once_size+0x45/0xd0 [ 89.980378][T10428] ? __this_cpu_preempt_check+0x3c/0x130 [ 89.986016][T10428] ? __rcu_read_unlock+0x77/0x390 [ 89.991043][T10428] ? percpu_counter_add_batch+0x10f/0x140 [ 89.996765][T10428] ? clear_page_dirty_for_io+0x12e/0x520 [ 90.002401][T10428] write_cache_pages+0x400/0xa10 [ 90.007333][T10428] ? clean_buffers+0x1a0/0x1a0 [ 90.012134][T10428] ? fat_add_cluster+0xd0/0xd0 [ 90.016902][T10428] ? fat_readpages+0x50/0x50 [ 90.021492][T10428] mpage_writepages+0xab/0x180 [ 90.026257][T10428] ? fat_add_cluster+0xd0/0xd0 [ 90.031024][T10428] fat_writepages+0x2a/0x40 [ 90.035522][T10428] do_writepages+0x6b/0x170 [ 90.040031][T10428] ? _raw_spin_unlock+0x38/0x60 [ 90.044880][T10428] ? wbc_attach_and_unlock_inode+0xdd/0x3b0 [ 90.050766][T10428] __filemap_fdatawrite_range+0x1bb/0x220 [ 90.056502][T10428] generic_fadvise+0x47b/0x490 [ 90.061267][T10428] vfs_fadvise+0x8a/0x90 [ 90.065511][T10428] ksys_fadvise64_64+0x5b/0xa0 [ 90.070295][T10428] __x64_sys_fadvise64+0x5a/0x70 [ 90.075252][T10428] do_syscall_64+0xc7/0x3b0 [ 90.079773][T10428] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 90.085668][T10428] RIP: 0033:0x45c829 [ 90.089563][T10428] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 90.109508][T10428] RSP: 002b:00007f7db23a1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 90.117950][T10428] RAX: ffffffffffffffda RBX: 00000000004db720 RCX: 000000000045c829 [ 90.125932][T10428] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000000000005 [ 90.133920][T10428] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 90.141904][T10428] R10: 0000000000000004 R11: 0000000000000246 R12: 00000000ffffffff [ 90.149886][T10428] R13: 00000000000000ad R14: 00000000004c33d6 R15: 00007f7db23a26d4 [ 90.159368][T10428] Kernel Offset: disabled [ 90.163757][T10428] Rebooting in 86400 seconds..