last executing test programs: 13.387262827s ago: executing program 1 (id=8773): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x10000, &(0x7f0000000180)={[{@quota}, {@discard}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000001980)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000a00)={0x0, r5, r6, 0x3, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20003, 0x200003}) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x4, 0x93d5, 0x58565559, 0x7, 0x10001, 0x9, 0x9, 0x900, 0x0, 0x4, 0x0, 0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x11, 0x0, &(0x7f0000000000)="df", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x1}, 0x50) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={0x0, 0x0}) 12.407765079s ago: executing program 1 (id=8777): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x488c9) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x80000000000028) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = memfd_create(0x0, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 11.597292949s ago: executing program 1 (id=8781): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, 0x0) 11.146913279s ago: executing program 0 (id=8783): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) socket$inet(0x2, 0x2, 0x4) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) writev(r0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x20}}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 9.81436344s ago: executing program 0 (id=8786): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='dummy_hcd.0', 0xb) io_uring_setup(0x3ced, &(0x7f0000000540)={0x0, 0xf822, 0x1, 0x1, 0x38e}) close(0x3) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={0x0}}, 0x8840) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004080}, 0x40) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 9.664341904s ago: executing program 0 (id=8788): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2004, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmmsg(r4, 0x0, 0x0, 0x24008094) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x3, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x3, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x6, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 8.616899408s ago: executing program 0 (id=8790): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x488c9) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(0x0, 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000080)=0x1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) socket$tipc(0x1e, 0x5, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 7.664140641s ago: executing program 0 (id=8792): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x10000, &(0x7f0000000180)={[{@quota}, {@discard}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000001980)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000a00)={0x0, r6, r7, 0x3, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20003, 0x200003}) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x4, 0x93d5, 0x58565559, 0x7, 0x10001, 0x9, 0x9, 0x900, 0x0, 0x4, 0x0, 0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x11, 0x0, &(0x7f0000000000)="df", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x1}, 0x50) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={0x0, 0x0}) 6.616648026s ago: executing program 0 (id=8795): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000500)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000f80)="$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") rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ftruncate(r1, 0x10001) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpid() symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6.273838724s ago: executing program 2 (id=8796): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='dummy_hcd.0', 0xb) io_uring_setup(0x3ced, &(0x7f0000000540)={0x0, 0xf822, 0x1, 0x1, 0x38e}) close(0x3) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={0x0}}, 0x8840) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004080}, 0x40) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 6.043531529s ago: executing program 2 (id=8797): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4.912975175s ago: executing program 2 (id=8798): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2004, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmmsg(r4, 0x0, 0x0, 0x24008094) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x3, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x3, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x6, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.614854222s ago: executing program 3 (id=8799): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x28, 0x13, 0x0, 0x0) r1 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000140)=0x8, 0x4) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) bpf$BPF_LINK_CREATE_XDP(0x9, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x37, 0x0, @val=@netfilter={0x5, 0x1, 0x23ad88ef}}, 0x20) ioctl$MEMREADOOB64(r1, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0xfffffcec, &(0x7f0000000000)="d7360000000000000000"}) 4.29672s ago: executing program 1 (id=8800): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x488c9) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(0x0, 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000080)=0x1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) socket$tipc(0x1e, 0x5, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 3.660791524s ago: executing program 2 (id=8801): syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00006f6000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f0000721000/0x4000)=nil) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000040), 0x2) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r6, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r7, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x61) syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./file7\x00', 0x2020, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 3.410577511s ago: executing program 3 (id=8802): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) socket(0x28, 0x5, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f35471", 0x15}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(r0) 2.620772169s ago: executing program 1 (id=8803): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x10000, &(0x7f0000000180)={[{@quota}, {@discard}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000001980)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000a00)={0x0, r4, r5, 0x3, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20003, 0x200003}) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x4, 0x93d5, 0x58565559, 0x7, 0x10001, 0x9, 0x9, 0x900, 0x0, 0x4, 0x0, 0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x11, 0x0, &(0x7f0000000000)="df", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x1}, 0x50) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={0x0, 0x0}) 2.59318403s ago: executing program 2 (id=8804): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) socket$inet(0x2, 0x2, 0x4) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) writev(r0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x20}}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 2.373536215s ago: executing program 3 (id=8805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='dummy_hcd.0', 0xb) io_uring_setup(0x3ced, &(0x7f0000000540)={0x0, 0xf822, 0x1, 0x1, 0x38e}) close(0x3) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={0x0}}, 0x8840) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004080}, 0x40) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 2.068432352s ago: executing program 3 (id=8806): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r6, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.049505433s ago: executing program 1 (id=8807): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x9f4, &(0x7f0000000080)={0x0, 0xfffffffd, 0x400, 0x3, 0x81fa}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0), 0x0) 1.046186476s ago: executing program 2 (id=8808): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, 0x0) 932.980729ms ago: executing program 3 (id=8809): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2004, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmmsg(r4, 0x0, 0x0, 0x24008094) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x3, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x3, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x6, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=8810): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x28, 0x13, 0x0, 0x0) r1 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000140)=0x8, 0x4) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) bpf$BPF_LINK_CREATE_XDP(0x9, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x37, 0x0, @val=@netfilter={0x5, 0x1, 0x23ad88ef}}, 0x20) ioctl$MEMREADOOB64(r1, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0xfffffcec, &(0x7f0000000000)="d7360000000000000000"}) kernel console output (not intermixed with test programs): b004: 0x0001 instead [ 1497.586429][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xaf47 instead [ 1497.597427][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xf023 instead [ 1497.608208][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1497.618982][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1497.629565][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xaf47 instead [ 1497.640065][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xf023 instead [ 1497.650902][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1497.661470][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1497.672035][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xaf47 instead [ 1497.743754][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xf023 instead [ 1497.760262][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1497.781772][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1497.828151][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xaf47 instead [ 1497.859248][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xf023 instead [ 1497.893336][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1497.915599][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1497.927055][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xaf47 instead [ 1497.946880][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xf023 instead [ 1497.980476][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1498.012409][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1498.038075][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xaf47 instead [ 1498.048805][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xf023 instead [ 1498.059609][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1498.090289][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1498.110727][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xaf47 instead [ 1498.132069][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xf023 instead [ 1498.149769][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1498.168713][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1498.197584][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xaf47 instead [ 1498.214551][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xf023 instead [ 1498.231009][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1498.256462][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1498.267379][T27371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6921'. [ 1498.283773][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xaf47 instead [ 1498.295966][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xf023 instead [ 1498.334724][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1498.377111][T27373] syzkaller0: entered promiscuous mode [ 1498.382911][T27373] syzkaller0: entered allmulticast mode [ 1498.388620][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1498.416031][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xaf47 instead [ 1498.453100][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xf023 instead [ 1498.473479][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1498.498287][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1498.509489][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xaf47 instead [ 1498.522819][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xf023 instead [ 1498.533603][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1498.555624][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1498.567625][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xaf47 instead [ 1498.579345][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xf023 instead [ 1498.593528][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1498.605350][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1498.616868][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xaf47 instead [ 1498.629605][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xf023 instead [ 1498.644108][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1498.659326][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1498.680160][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xaf47 instead [ 1498.700104][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xf023 instead [ 1498.727303][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1498.753400][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1498.775529][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xaf47 instead [ 1498.799597][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xf023 instead [ 1498.825733][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1498.849849][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1498.881180][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xaf47 instead [ 1498.917856][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xf023 instead [ 1498.938125][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1498.965505][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1498.996948][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xaf47 instead [ 1499.015957][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xf023 instead [ 1499.039158][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1499.054229][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1499.065687][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xaf47 instead [ 1499.077613][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xf023 instead [ 1499.105131][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1499.116032][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1499.131882][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xaf47 instead [ 1499.145527][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xf023 instead [ 1499.157726][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1499.171805][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1499.183293][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xaf47 instead [ 1499.195765][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xf023 instead [ 1499.222992][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1499.234062][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1499.245177][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xaf47 instead [ 1499.256272][T27361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xf023 instead [ 1499.267228][T27361] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1499.277136][T27361] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1501.789412][T27392] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1501.925821][T27399] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6931'. [ 1502.271950][T27411] NILFS (loop3): device size too small [ 1502.310766][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1502.353852][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1502.389254][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xaf47 instead [ 1502.434524][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xf023 instead [ 1502.476501][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1502.504969][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1502.540274][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1502.576321][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1502.603860][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1502.632465][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1502.658793][T27411] jffs2: Further such events for this erase block will not be printed [ 1502.677934][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1502.696968][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1502.709367][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xaf47 instead [ 1502.727088][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xf023 instead [ 1502.738406][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1502.763229][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1502.779465][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1502.798805][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1502.825795][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1502.856903][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1502.885310][T27411] jffs2: Further such events for this erase block will not be printed [ 1502.910506][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 1502.940109][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 1503.002965][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xaf47 instead [ 1503.043790][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xf023 instead [ 1503.083238][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 1503.110103][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 1503.146452][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xaf47 instead [ 1503.175558][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xf023 instead [ 1503.200076][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 1503.224730][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 1503.244411][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xaf47 instead [ 1503.262636][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xf023 instead [ 1503.278276][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 1503.310104][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 1503.330135][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xaf47 instead [ 1503.356249][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xf023 instead [ 1503.390134][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 1503.410216][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 1503.430052][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xaf47 instead [ 1503.461146][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xf023 instead [ 1503.480208][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 1503.500015][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 1503.520020][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xaf47 instead [ 1503.540034][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xf023 instead [ 1503.560029][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 1503.581008][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 1503.610011][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xaf47 instead [ 1503.630119][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xf023 instead [ 1503.650054][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 1503.668569][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 1503.685789][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xaf47 instead [ 1503.696712][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xf023 instead [ 1503.707323][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 1503.724385][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 1503.735985][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xaf47 instead [ 1503.752975][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xf023 instead [ 1503.766475][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 1503.777083][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 1503.792095][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xaf47 instead [ 1503.802630][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xf023 instead [ 1503.815133][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1503.827833][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1503.839273][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xaf47 instead [ 1503.849797][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xf023 instead [ 1503.867970][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1503.878581][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1503.889046][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xaf47 instead [ 1503.901339][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xf023 instead [ 1503.912755][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1503.923428][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1503.934683][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xaf47 instead [ 1503.945228][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xf023 instead [ 1503.955776][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1503.966358][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1503.976848][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xaf47 instead [ 1503.987342][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xf023 instead [ 1503.997951][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1504.008474][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1504.019684][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xaf47 instead [ 1504.038974][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xf023 instead [ 1504.055781][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1504.066348][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1504.080013][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xaf47 instead [ 1504.097816][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xf023 instead [ 1504.108332][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1504.125202][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1504.138502][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xaf47 instead [ 1504.155563][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xf023 instead [ 1504.166833][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1504.185414][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1504.195946][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xaf47 instead [ 1504.249200][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xf023 instead [ 1504.297751][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1504.315589][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1504.326387][T27421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6936'. [ 1504.338941][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xaf47 instead [ 1504.349661][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xf023 instead [ 1504.360636][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1504.399729][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1504.414719][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xaf47 instead [ 1504.428486][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xf023 instead [ 1504.443543][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1504.470247][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1504.485884][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xaf47 instead [ 1504.507273][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xf023 instead [ 1504.525209][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1504.550081][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1504.575742][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xaf47 instead [ 1504.591261][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xf023 instead [ 1504.611225][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1504.626429][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1504.641604][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xaf47 instead [ 1504.659785][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xf023 instead [ 1504.671893][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1504.685493][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1504.690466][T27428] syzkaller0: entered promiscuous mode [ 1504.705992][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xaf47 instead [ 1504.713615][T27428] syzkaller0: entered allmulticast mode [ 1504.728343][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xf023 instead [ 1504.750005][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1504.767444][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1504.778510][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xaf47 instead [ 1504.784872][T27432] bond1: entered promiscuous mode [ 1504.794755][T27432] bond1: entered allmulticast mode [ 1504.795636][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xf023 instead [ 1504.835059][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1504.858492][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1504.894468][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xaf47 instead [ 1504.911852][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xf023 instead [ 1504.922641][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1504.960231][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1504.982026][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xaf47 instead [ 1505.012126][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xf023 instead [ 1505.025815][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1505.040164][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1505.064501][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xaf47 instead [ 1505.083859][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xf023 instead [ 1505.094608][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1505.113387][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1505.130235][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xaf47 instead [ 1505.143603][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xf023 instead [ 1505.154712][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1505.166471][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1505.179253][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xaf47 instead [ 1505.190226][T27411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xf023 instead [ 1505.201171][T27411] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1505.211222][T27411] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1505.668744][T27444] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6945'. [ 1510.882219][T27442] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1510.892925][T27455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6946'. [ 1510.901954][T27442] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1510.930030][T27442] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1511.092608][T27461] netlink: 'syz.2.6947': attribute type 2 has an invalid length. [ 1511.369126][T27476] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6954'. [ 1511.686001][T27482] syzkaller0: entered promiscuous mode [ 1511.709105][T27482] syzkaller0: entered allmulticast mode [ 1516.963966][T27523] tipc: Enabled bearer , priority 0 [ 1516.976816][T27528] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6969'. [ 1516.991339][T27526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6967'. [ 1517.022857][T27523] syzkaller0: entered promiscuous mode [ 1517.028392][T27523] syzkaller0: entered allmulticast mode [ 1517.172908][T27526] bond2: entered promiscuous mode [ 1517.209775][T27526] bond2: entered allmulticast mode [ 1520.061530][T27540] tipc: Resetting bearer [ 1520.068353][T27545] batman_adv: batadv0: Adding interface: veth0 [ 1520.075551][T27545] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1520.101588][T27545] batman_adv: batadv0: Interface activated: veth0 [ 1520.108903][T27548] batman_adv: batadv0: Interface deactivated: veth0 [ 1520.116092][T27548] batman_adv: batadv0: Removing interface: veth0 [ 1520.126729][T27548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1520.136642][T27548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1520.145808][T27548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1520.153746][T27548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1520.210991][T27522] tipc: Resetting bearer [ 1520.265130][T27522] tipc: Disabling bearer [ 1520.274391][T27552] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1520.284782][T27552] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1520.297625][T27552] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1520.358580][T27570] syzkaller0: entered promiscuous mode [ 1520.391620][T27570] syzkaller0: entered allmulticast mode [ 1522.872579][T27589] syzkaller0: entered promiscuous mode [ 1522.878133][T27589] syzkaller0: entered allmulticast mode [ 1522.892100][T27591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6980'. [ 1523.026423][T27597] bond3: entered promiscuous mode [ 1523.033730][T27597] bond3: entered allmulticast mode [ 1523.458714][T27613] syzkaller0: entered promiscuous mode [ 1523.465052][T27613] syzkaller0: entered allmulticast mode [ 1524.192728][T27621] syzkaller0: entered promiscuous mode [ 1524.198407][T27621] syzkaller0: entered allmulticast mode [ 1526.300676][T27623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6994'. [ 1526.563446][T27632] netlink: 'syz.0.6998': attribute type 30 has an invalid length. [ 1526.614624][T27632] bond1: option arp_missed_max: invalid value (0) [ 1526.623540][T27632] bond1: option arp_missed_max: allowed values 1 - 255 [ 1526.728300][T27632] bond1 (unregistering): Released all slaves [ 1527.329216][T27658] syzkaller0: entered promiscuous mode [ 1527.336120][T27658] syzkaller0: entered allmulticast mode [ 1527.727675][T27665] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1530.313449][T27662] syzkaller0: entered promiscuous mode [ 1530.327103][T27662] syzkaller0: entered allmulticast mode [ 1530.469219][T27669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7009'. [ 1530.937554][T27690] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1531.527518][T27700] syzkaller0: entered promiscuous mode [ 1531.547001][T27700] syzkaller0: entered allmulticast mode [ 1531.706360][T27705] syzkaller0: entered promiscuous mode [ 1531.720411][T27705] syzkaller0: entered allmulticast mode [ 1531.886920][T27717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7025'. [ 1532.135171][T27724] syzkaller0: entered promiscuous mode [ 1532.150062][T27724] syzkaller0: entered allmulticast mode [ 1532.281171][T27730] syzkaller0: entered promiscuous mode [ 1532.287197][T27730] syzkaller0: entered allmulticast mode [ 1532.652041][T27742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7035'. [ 1533.000421][T27759] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7041'. [ 1533.189572][T27765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7044'. [ 1533.749016][T27775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1533.766236][T27775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1533.788971][T27775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1533.806648][T27775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1533.820656][T27775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1533.828231][T27775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1533.848554][T21442] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1533.856328][T21442] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1533.880134][T21442] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1533.895576][T27771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7047'. [ 1533.910859][T21442] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1533.930912][T21442] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1533.938273][T21442] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1534.432819][T27772] chnl_net:caif_netlink_parms(): no params data found [ 1534.624565][T27772] bridge0: port 1(bridge_slave_0) entered blocking state [ 1534.640986][T27772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1534.650761][T27772] bridge_slave_0: entered allmulticast mode [ 1534.671725][T27772] bridge_slave_0: entered promiscuous mode [ 1534.701533][T27772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1534.708668][T27772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1534.717410][T27772] bridge_slave_1: entered allmulticast mode [ 1534.725301][T27772] bridge_slave_1: entered promiscuous mode [ 1534.800233][T27772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1534.841666][T27772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1534.966622][T27772] team0: Port device team_slave_0 added [ 1535.003487][T27772] team0: Port device team_slave_1 added [ 1535.115880][T27772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1535.126362][T27772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1535.156905][T27772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1535.169548][T27772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1535.179410][T27772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1535.205757][T27772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1535.217491][T27840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7063'. [ 1535.278721][T27772] hsr_slave_0: entered promiscuous mode [ 1535.287381][T27772] hsr_slave_1: entered promiscuous mode [ 1535.297194][T27772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1535.310339][T27772] Cannot create hsr debugfs directory [ 1535.504761][T27772] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.606013][T27772] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.692219][T27772] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.805240][T27772] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.826149][T27859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7072'. [ 1536.020489][T27775] Bluetooth: hci1: command tx timeout [ 1536.526071][T27878] syzkaller0: entered promiscuous mode [ 1536.531739][T27878] syzkaller0: entered allmulticast mode [ 1537.835629][T27825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1537.848138][T27772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1537.901524][T27772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1537.937974][T27772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1537.985612][T27772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1538.014440][T27881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7080'. [ 1538.031716][T27885] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7081'. [ 1538.093259][T27775] Bluetooth: hci1: command tx timeout [ 1538.336447][T27772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1538.386938][T27772] 8021q: adding VLAN 0 to HW filter on device team0 [ 1538.428760][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1538.435982][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1538.497649][T10001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.504894][T10001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1538.926361][T27772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1538.997163][T27772] veth0_vlan: entered promiscuous mode [ 1539.021723][T27772] veth1_vlan: entered promiscuous mode [ 1539.075220][T27772] veth0_macvtap: entered promiscuous mode [ 1539.087344][T27772] veth1_macvtap: entered promiscuous mode [ 1539.113812][T27772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1539.125092][T27772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1539.135327][T27772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1539.147006][T27772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1539.158676][T27772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1539.169845][T27772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1539.182818][T27772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1539.208094][T27772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1539.230123][T27772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1539.240768][T27772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1539.251798][T27772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1539.263568][T27772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1539.274692][T27772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1539.285027][T27772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1539.296152][T27772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1539.306644][T27772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1539.318090][T27772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1539.330353][T27772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1539.346641][T27772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.360158][T27772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.380431][T27772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.396082][T27772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.170330][T27775] Bluetooth: hci1: command tx timeout [ 1542.005549][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1542.030426][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1542.102010][T22385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1542.124664][T22385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1542.261343][T27775] Bluetooth: hci1: command tx timeout [ 1542.855576][T27938] syzkaller0: entered promiscuous mode [ 1542.861325][T27938] syzkaller0: entered allmulticast mode [ 1542.980588][T21442] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1542.991638][T21442] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1543.004971][T21442] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1543.016089][T21442] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1543.024303][T21442] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1543.032527][T21442] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1545.058368][T21442] Bluetooth: hci3: command tx timeout [ 1545.843461][ T1139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.256613][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.265431][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.418164][ T1139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.479127][T27973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7107'. [ 1546.515489][T27973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7107'. [ 1546.616046][ T1139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.759386][T27985] syzkaller0: entered promiscuous mode [ 1546.782193][T27985] syzkaller0: entered allmulticast mode [ 1547.133632][T21442] Bluetooth: hci3: command tx timeout [ 1549.223428][T21442] Bluetooth: hci3: command tx timeout [ 1549.650383][T27987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1549.677637][T27940] chnl_net:caif_netlink_parms(): no params data found [ 1550.441564][T28042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7118'. [ 1550.705837][T28047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7119'. [ 1550.726898][T28047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7119'. [ 1550.740269][T28047] wg0: entered promiscuous mode [ 1550.745230][T28047] wg0: entered allmulticast mode [ 1550.834380][T27940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.857411][T27940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.873041][T27940] bridge_slave_0: entered allmulticast mode [ 1550.884990][T27940] bridge_slave_0: entered promiscuous mode [ 1550.911593][T27940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.932424][T27940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.949530][T27940] bridge_slave_1: entered allmulticast mode [ 1550.967163][T27940] bridge_slave_1: entered promiscuous mode [ 1551.044130][T28052] syzkaller0: entered promiscuous mode [ 1551.060104][T28052] syzkaller0: entered allmulticast mode [ 1551.281763][T27940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1551.300053][T21442] Bluetooth: hci3: command tx timeout [ 1554.314821][T27940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1554.565644][T27940] team0: Port device team_slave_0 added [ 1554.676033][T27940] team0: Port device team_slave_1 added [ 1554.984801][T27940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1554.992303][T27940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1555.029341][T27940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1555.095664][T28094] syzkaller0: entered promiscuous mode [ 1555.101642][T28094] syzkaller0: entered allmulticast mode [ 1555.163896][T27940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1555.179386][T27940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1555.209193][T27940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1558.335634][T27940] hsr_slave_0: entered promiscuous mode [ 1558.355960][T27940] hsr_slave_1: entered promiscuous mode [ 1558.375775][T27940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1558.385643][T27940] Cannot create hsr debugfs directory [ 1558.567288][T28145] syzkaller0: entered promiscuous mode [ 1558.590208][T28145] syzkaller0: entered allmulticast mode [ 1558.644078][ T1139] hsr_slave_0: left promiscuous mode [ 1558.657557][ T1139] hsr_slave_1: left promiscuous mode [ 1558.664871][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1558.679525][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1558.687814][ T1139] bridge_slave_1: left allmulticast mode [ 1558.697134][ T1139] bridge_slave_1: left promiscuous mode [ 1558.707459][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1558.722976][ T1139] bridge_slave_0: left allmulticast mode [ 1558.732998][ T1139] bridge_slave_0: left promiscuous mode [ 1558.738931][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.784766][ T1139] veth1_macvtap: left promiscuous mode [ 1558.791945][ T1139] veth0_macvtap: left promiscuous mode [ 1558.797718][ T1139] veth1_vlan: left promiscuous mode [ 1558.803489][ T1139] veth0_vlan: left promiscuous mode [ 1558.959841][ T1139] bond2 (unregistering): Released all slaves [ 1558.989240][ T1139] bond1 (unregistering): Released all slaves [ 1559.666608][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 1559.719789][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 1559.779121][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1559.841474][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1560.239199][ T1139] bond0 (unregistering): Released all slaves [ 1563.019116][T28152] syzkaller0: entered promiscuous mode [ 1563.024945][T28152] syzkaller0: entered allmulticast mode [ 1563.644945][T28177] loop0: detected capacity change from 0 to 8192 [ 1563.691664][T28177] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1566.432910][T28186] loop0: detected capacity change from 0 to 512 [ 1566.462797][T28186] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1566.548090][T28188] syzkaller0: entered promiscuous mode [ 1566.580186][T28188] syzkaller0: entered allmulticast mode [ 1566.657501][T28186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1566.677236][T28186] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1566.729395][T28186] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.7142: path /20/bus: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=4, size=2048 fake=0 [ 1566.875118][ T1139] IPVS: stop unused estimator thread 0... [ 1566.884933][T27772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1568.336768][T28215] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1568.353300][T27940] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1568.361553][T28215] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1568.373098][T28215] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1568.373879][T27940] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1568.402688][T27940] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1568.418379][T27940] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1568.440351][T28225] syzkaller0: entered promiscuous mode [ 1568.453154][T28225] syzkaller0: entered allmulticast mode [ 1568.637153][T28227] syzkaller0: entered promiscuous mode [ 1568.650793][T28227] syzkaller0: entered allmulticast mode [ 1571.289363][T27940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1571.323318][T27940] 8021q: adding VLAN 0 to HW filter on device team0 [ 1571.378963][T22385] bridge0: port 1(bridge_slave_0) entered blocking state [ 1571.386216][T22385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1571.439216][T22385] bridge0: port 2(bridge_slave_1) entered blocking state [ 1571.446448][T22385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1571.462427][T28244] loop1: detected capacity change from 0 to 128 [ 1571.571536][T28244] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1571.664370][T28244] ext4 filesystem being mounted at /510/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1572.606537][T28244] fscrypt (loop1, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 1572.650760][T28244] fscrypt (loop1, inode 12): Error allocating 'adiantum(xchacha12,aes)' transform: -4 [ 1572.684577][T27940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1572.693345][T28257] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 1572.816729][T21441] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1572.825013][T27940] veth0_vlan: entered promiscuous mode [ 1572.902903][T27940] veth1_vlan: entered promiscuous mode [ 1573.018657][T27940] veth0_macvtap: entered promiscuous mode [ 1573.087572][T27940] veth1_macvtap: entered promiscuous mode [ 1573.193803][T27940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1573.553723][T27940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1573.685898][T27940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1573.838806][T27940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1573.849015][T27940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1573.877327][T27940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1573.911024][T27940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1573.966131][T27940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1573.996783][T27940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1574.067492][T27940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1574.100474][T27940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1574.140199][T27940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1574.159081][T27940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1574.177338][T27940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1574.206495][T27940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1574.217506][T27940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1574.225377][T28296] loop1: detected capacity change from 0 to 256 [ 1574.228814][T27940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1574.245182][T27940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1574.257555][T27940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1574.269350][T27940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1574.283386][T27940] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1574.292398][T27940] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1574.313098][T27940] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1574.340000][T27940] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1574.547471][T28300] syzkaller0: entered promiscuous mode [ 1574.557931][T28300] syzkaller0: entered allmulticast mode [ 1574.647259][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1574.658528][T22389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1574.669587][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1574.704441][T22389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1576.663598][T28327] syzkaller0: entered promiscuous mode [ 1576.779590][T28327] syzkaller0: entered allmulticast mode [ 1577.495475][T28331] syzkaller0: entered promiscuous mode [ 1577.520143][T28331] syzkaller0: entered allmulticast mode [ 1579.145120][T27775] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1579.156653][T27775] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1579.165992][T27775] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1579.174376][T27775] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1579.182356][T27775] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1579.189685][T27775] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1579.393415][T28346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7186'. [ 1579.550533][T20752] tipc: Resetting bearer [ 1579.762882][T20752] tipc: Disabling bearer [ 1579.903039][T28352] syzkaller0: entered promiscuous mode [ 1579.908680][T28352] syzkaller0: entered allmulticast mode [ 1580.029489][T22389] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.746682][T22389] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.038136][T22389] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.078623][T28376] syzkaller0: entered promiscuous mode [ 1581.088726][T28376] syzkaller0: entered allmulticast mode [ 1581.154792][T22389] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.209727][T28342] chnl_net:caif_netlink_parms(): no params data found [ 1581.292800][T27775] Bluetooth: hci4: command tx timeout [ 1581.343569][T28342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.350922][T28342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.358240][T28342] bridge_slave_0: entered allmulticast mode [ 1581.365847][T28342] bridge_slave_0: entered promiscuous mode [ 1581.375395][T28342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.383300][T28342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.390876][T28342] bridge_slave_1: entered allmulticast mode [ 1581.398722][T28342] bridge_slave_1: entered promiscuous mode [ 1581.474228][T28342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1581.489700][T28342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1581.612599][T28389] syzkaller0: entered promiscuous mode [ 1581.621227][T28389] syzkaller0: entered allmulticast mode [ 1581.644043][T28342] team0: Port device team_slave_0 added [ 1581.653541][T28342] team0: Port device team_slave_1 added [ 1581.761276][T22389] tipc: Disabling bearer [ 1581.790703][T22389] tipc: Left network mode [ 1581.796355][T28342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1581.826251][T28342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1581.884605][T28342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1581.909340][T28342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1581.927341][T28342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1581.957913][T28342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1582.028914][T28400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7205'. [ 1582.540793][T28342] hsr_slave_0: entered promiscuous mode [ 1582.557218][T28342] hsr_slave_1: entered promiscuous mode [ 1582.940319][T28431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7215'. [ 1583.156149][T28442] loop0: detected capacity change from 0 to 1024 [ 1583.227214][T28442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1583.250399][T28442] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1583.371301][T27775] Bluetooth: hci4: command tx timeout [ 1583.410134][T28442] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.7219: lblock 0 mapped to illegal pblock 0 (length 6) [ 1583.507793][T28442] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 1583.537146][T28442] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1583.537146][T28442] [ 1583.611409][T28258] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm kworker/u4:0: bg 0: block 112: padding at end of block bitmap is not set [ 1583.631245][T28258] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 1583.647378][T28258] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1583.647378][T28258] [ 1583.658212][T28258] EXT4-fs (loop0): Total free blocks count 0 [ 1583.695019][T28258] EXT4-fs (loop0): Free/Dirty block details [ 1583.707500][T28258] EXT4-fs (loop0): free_blocks=0 [ 1583.720841][T28258] EXT4-fs (loop0): dirty_blocks=48 [ 1583.730059][T28258] EXT4-fs (loop0): Block reservation details [ 1584.070496][T28466] syzkaller0: entered promiscuous mode [ 1584.076050][T28466] syzkaller0: entered allmulticast mode [ 1584.348760][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1584.585521][T22389] hsr_slave_0: left promiscuous mode [ 1584.595384][T22389] hsr_slave_1: left promiscuous mode [ 1584.602180][T22389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1584.632454][T22389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1584.659351][T22389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1584.674507][T22389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1584.686268][T22389] bridge_slave_1: left allmulticast mode [ 1584.692264][T22389] bridge_slave_1: left promiscuous mode [ 1584.698506][T22389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1584.707977][T22389] bridge_slave_0: left allmulticast mode [ 1584.713934][T22389] bridge_slave_0: left promiscuous mode [ 1584.719677][T22389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1584.746409][T22389] veth1_macvtap: left promiscuous mode [ 1584.752879][T22389] veth0_macvtap: left promiscuous mode [ 1584.772152][T22389] veth1_vlan: left promiscuous mode [ 1584.777549][T22389] veth0_vlan: left promiscuous mode [ 1584.978026][T22389] bond4 (unregistering): Released all slaves [ 1584.995300][T22389] bond3 (unregistering): Released all slaves [ 1585.009407][T22389] bond2 (unregistering): Released all slaves [ 1585.025856][T22389] bond1 (unregistering): Released all slaves [ 1585.450306][T27775] Bluetooth: hci4: command tx timeout [ 1585.738589][T22389] team0 (unregistering): Port device team_slave_1 removed [ 1585.804408][T22389] team0 (unregistering): Port device team_slave_0 removed [ 1585.867736][T22389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1585.931487][T22389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1586.338257][T22389] bond0 (unregistering): Released all slaves [ 1586.449060][T28493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7230'. [ 1586.746855][T28509] syzkaller0: entered promiscuous mode [ 1586.794198][T28509] syzkaller0: entered allmulticast mode [ 1586.945742][T28517] loop3: detected capacity change from 0 to 2048 [ 1587.151404][T28517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1587.180566][T28342] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1587.420181][T28525] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1587.498603][T28342] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1587.600503][T27775] Bluetooth: hci4: command tx timeout [ 1587.958540][T28342] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1588.459264][T28536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7240'. [ 1588.583252][T28342] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1589.246433][T28342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1589.368295][T28342] 8021q: adding VLAN 0 to HW filter on device team0 [ 1589.469971][T22380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1589.477232][T22380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1589.596002][T27940] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1589.624284][T28258] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.631471][T28258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1589.815158][T28342] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1589.858626][T28567] loop0: detected capacity change from 0 to 128 [ 1589.870812][T28342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1589.875126][T28567] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1590.101102][T28567] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1590.124000][T28567] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1591.659227][T27772] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1591.905592][T28342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1592.079344][T28342] veth0_vlan: entered promiscuous mode [ 1592.108162][T28342] veth1_vlan: entered promiscuous mode [ 1592.202142][T28342] veth0_macvtap: entered promiscuous mode [ 1592.236480][T28342] veth1_macvtap: entered promiscuous mode [ 1592.329152][T28342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1592.342964][T28342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1592.353042][T28342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1592.363726][T28342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1592.603198][T28342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1592.718957][T28342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1592.995737][T28342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1593.025456][T28342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.051263][T28342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1593.133022][T28342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1593.188428][T28342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.220130][T28342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1593.240392][T28342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.262320][T28342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1593.279662][T28342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.308761][T28342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1593.327558][T28342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.337690][T28342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1593.354821][T28342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.402511][T28342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1593.448957][T28342] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1593.476312][T28342] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1593.499997][T28342] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1593.508764][T28342] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1593.540299][T28635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7263'. [ 1593.829901][T28647] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1593.961042][T28258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1593.968928][T28258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1593.994284][T28646] syzkaller0: entered promiscuous mode [ 1593.999822][T28646] syzkaller0: entered allmulticast mode [ 1594.185516][T22380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1594.199842][T22380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1594.528599][T28672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7271'. [ 1595.495309][T28687] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7276'. [ 1596.479004][T28694] syzkaller0: entered promiscuous mode [ 1596.501560][T28694] syzkaller0: entered allmulticast mode [ 1598.425678][T28731] loop3: detected capacity change from 0 to 4096 [ 1598.573004][T28198] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1602.415019][T28739] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1603.506732][T28787] loop1: detected capacity change from 0 to 512 [ 1603.526037][T28786] loop0: detected capacity change from 0 to 512 [ 1603.534460][T28787] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1603.552244][T28786] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1603.623913][T28787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1603.659010][T28786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1603.671765][T28786] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1603.672570][T28787] ext4 filesystem being mounted at /550/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1603.796697][T27772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1603.831507][T21441] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1604.137775][T28806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7312'. [ 1604.206755][T28808] loop3: detected capacity change from 0 to 2048 [ 1604.278795][T28806] bond1: entered promiscuous mode [ 1604.296250][T28806] bond1: entered allmulticast mode [ 1604.306711][T28808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1604.326098][T28811] syzkaller0: entered promiscuous mode [ 1604.350417][T28811] syzkaller0: entered allmulticast mode [ 1605.327682][T28816] tmpfs: Bad value for 'mpol' [ 1605.676606][T28824] loop1: detected capacity change from 0 to 512 [ 1605.731802][T28824] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1605.912012][T28824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1605.955537][T28827] loop2: detected capacity change from 0 to 1024 [ 1606.001498][T28827] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1606.021901][T28824] ext4 filesystem being mounted at /554/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1606.087824][T28827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1606.354630][T27940] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1606.448466][T21441] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1607.092446][T28342] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1607.169557][T28841] loop0: detected capacity change from 0 to 512 [ 1607.192979][T28841] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1607.634332][T28856] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1607.652707][T28856] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1607.731519][T28857] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1607.965691][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.972117][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.213440][T28864] loop3: detected capacity change from 0 to 512 [ 1608.246480][T28864] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1608.288886][T28860] loop2: detected capacity change from 0 to 2048 [ 1608.309260][T28864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1608.353810][T28864] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1608.390521][T28860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1608.653123][T27940] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1609.607745][T28887] process 'syz.1.7339' launched './file0' with NULL argv: empty string added [ 1609.723901][T28887] loop1: detected capacity change from 0 to 512 [ 1609.732164][T28887] EXT4-fs: Ignoring removed oldalloc option [ 1609.738184][T28887] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 1610.213453][T28198] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1610.216755][T28342] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1610.705830][T28901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7344'. [ 1611.979449][T28925] bond2: entered promiscuous mode [ 1611.996218][T28925] bond2: entered allmulticast mode [ 1612.020930][T28924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7354'. [ 1612.833053][T28958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7366'. [ 1612.863762][T28958] bond1: entered promiscuous mode [ 1612.868876][T28958] bond1: entered allmulticast mode [ 1612.967892][T28961] loop2: detected capacity change from 0 to 512 [ 1613.026280][T28198] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1615.040872][T28930] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1615.643713][T28986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7376'. [ 1615.736744][T28993] loop2: detected capacity change from 0 to 7 [ 1615.738565][T28986] bond2: entered promiscuous mode [ 1615.752809][T28993] Dev loop2: unable to read RDB block 7 [ 1615.758826][T28986] bond2: entered allmulticast mode [ 1615.777372][T28993] loop2: unable to read partition table [ 1615.783603][T28993] loop2: partition table beyond EOD, truncated [ 1615.790477][T28993] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1618.030383][T29036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7391'. [ 1618.185808][T29042] bond1: entered promiscuous mode [ 1618.215913][T29042] bond1: entered allmulticast mode [ 1619.906239][T29056] syzkaller0: entered promiscuous mode [ 1619.931834][T29056] syzkaller0: entered allmulticast mode [ 1620.978749][T29061] netlink: 'syz.3.7401': attribute type 1 has an invalid length. [ 1621.156748][T29075] syzkaller0: entered promiscuous mode [ 1621.173548][T29075] syzkaller0: entered allmulticast mode [ 1621.261263][T29080] loop2: detected capacity change from 0 to 2048 [ 1621.272303][T29075] tipc: Started in network mode [ 1621.277489][T29075] tipc: Node identity 5271ef9d1363, cluster identity 4711 [ 1621.286134][T29075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.311753][T29075] tipc: Enabled bearer , priority 0 [ 1621.326265][ T1139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.338581][T29074] tipc: Resetting bearer [ 1621.384568][T29074] tipc: Disabling bearer [ 1621.405559][T29080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1622.464076][T29091] syzkaller0: entered promiscuous mode [ 1622.489523][T29091] syzkaller0: entered allmulticast mode [ 1624.175611][T29084] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1624.200727][T28342] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1624.210615][T29110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7413'. [ 1624.235200][T29110] macvtap5: entered promiscuous mode [ 1624.251570][T29110] bridge0: entered promiscuous mode [ 1624.263493][T29110] macvtap5: entered allmulticast mode [ 1624.299428][T29111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7413'. [ 1624.317435][T29111] bridge0: left promiscuous mode [ 1624.343478][T29111] macvtap5: left promiscuous mode [ 1624.358883][T29111] macvtap5: left allmulticast mode [ 1624.574884][T29122] syzkaller0: entered promiscuous mode [ 1624.583773][T29122] syzkaller0: entered allmulticast mode [ 1626.215593][T29141] syzkaller0: entered promiscuous mode [ 1626.221471][T29141] syzkaller0: entered allmulticast mode [ 1627.286406][T29160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7427'. [ 1627.310983][T29160] bridge0: entered promiscuous mode [ 1627.316387][T29160] macvtap1: entered promiscuous mode [ 1627.326581][T29160] macvtap1: entered allmulticast mode [ 1627.333688][T29160] bridge0: entered allmulticast mode [ 1627.397145][T29158] syzkaller0: entered promiscuous mode [ 1627.434133][T29158] syzkaller0: entered allmulticast mode [ 1627.601032][T29163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7430'. [ 1627.980200][T29160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7427'. [ 1627.994557][T29160] bridge0: left allmulticast mode [ 1628.002112][T29160] bridge0: left promiscuous mode [ 1628.008912][T29160] macvtap1: left promiscuous mode [ 1628.018824][T29160] macvtap1: left allmulticast mode [ 1628.037604][T29167] bond3: entered promiscuous mode [ 1628.042869][T29167] bond3: entered allmulticast mode [ 1630.216845][T29195] fuse: Bad value for 'fd' [ 1630.405855][T29196] fuse: Bad value for 'fd' [ 1632.264129][T29212] syzkaller0: entered promiscuous mode [ 1632.302217][T29212] syzkaller0: entered allmulticast mode [ 1632.412844][T29212] tipc: Started in network mode [ 1632.417790][T29212] tipc: Node identity fa5be2ec2daf, cluster identity 4711 [ 1632.591336][T29212] tipc: Enabled bearer , priority 0 [ 1632.831827][T29209] tipc: Resetting bearer [ 1633.107820][T29209] tipc: Disabling bearer [ 1633.200785][T29229] syzkaller0: entered promiscuous mode [ 1633.206333][T29229] syzkaller0: entered allmulticast mode [ 1633.295928][T29233] loop3: detected capacity change from 0 to 512 [ 1633.314855][T29233] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1633.923129][T29242] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1633.934580][T29242] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1635.200443][T29258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7453'. [ 1635.284794][T29258] bond3: entered promiscuous mode [ 1635.438810][T29258] bond3: entered allmulticast mode [ 1638.844311][T29343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7478'. [ 1639.526075][T29348] bond3: entered promiscuous mode [ 1639.561774][T29348] bond3: entered allmulticast mode [ 1642.669186][T21442] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1642.681340][T21442] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1642.691361][T21442] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1642.694414][T29383] syzkaller0: entered promiscuous mode [ 1642.728391][T21442] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1642.729272][T29383] syzkaller0: entered allmulticast mode [ 1642.762624][T21442] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1642.781891][T21442] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1643.324009][T29404] loop3: detected capacity change from 0 to 2048 [ 1643.451252][T29404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1643.530589][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1643.646772][T29382] chnl_net:caif_netlink_parms(): no params data found [ 1645.078512][T27775] Bluetooth: hci0: command tx timeout [ 1646.510465][T27940] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1646.841159][T29382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.868782][T29382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.894741][T29382] bridge_slave_0: entered allmulticast mode [ 1646.920273][T29382] bridge_slave_0: entered promiscuous mode [ 1646.941979][T29382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1646.969682][T29382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.986049][T29382] bridge_slave_1: entered allmulticast mode [ 1647.011663][T29382] bridge_slave_1: entered promiscuous mode [ 1647.104065][T29382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1647.130233][T27775] Bluetooth: hci0: command tx timeout [ 1647.153951][T29382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1647.277047][T29382] team0: Port device team_slave_0 added [ 1647.303109][T29382] team0: Port device team_slave_1 added [ 1647.401189][T29382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1647.427539][T29382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1647.580261][T29382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1647.672141][T29382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1647.679144][T29382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1647.786941][T29382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1647.981825][T29442] syzkaller0: entered promiscuous mode [ 1647.987364][T29442] syzkaller0: entered allmulticast mode [ 1648.108362][T29382] hsr_slave_0: entered promiscuous mode [ 1648.124098][T29382] hsr_slave_1: entered promiscuous mode [ 1648.135359][T29382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1648.164444][T29382] Cannot create hsr debugfs directory [ 1648.310504][T29451] loop3: detected capacity change from 0 to 2048 [ 1648.409863][T29451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1649.380089][T27775] Bluetooth: hci0: command tx timeout [ 1650.502174][T27940] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1651.588696][T27775] Bluetooth: hci0: command tx timeout [ 1653.696424][T29382] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.801208][T29473] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1654.891036][T29382] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.220083][T29382] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.520933][T29382] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.441860][T29509] syzkaller0: entered promiscuous mode [ 1658.473946][T29509] syzkaller0: entered allmulticast mode [ 1659.245631][T29382] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1659.279059][T29382] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1659.293372][T29382] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1659.317446][T29382] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1659.558195][T29382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1659.589274][T29382] 8021q: adding VLAN 0 to HW filter on device team0 [ 1659.786678][T22380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1659.793961][T22380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1659.898284][T29531] syzkaller0: entered promiscuous mode [ 1659.919402][T29531] syzkaller0: entered allmulticast mode [ 1660.282840][T22378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1660.290076][T22378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1660.981508][T21442] Bluetooth: hci1: command 0x0406 tx timeout [ 1662.500016][T29520] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1663.179253][T29382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1663.409133][T29558] syzkaller0: entered promiscuous mode [ 1663.440837][T29558] syzkaller0: entered allmulticast mode [ 1663.458115][T29382] veth0_vlan: entered promiscuous mode [ 1663.633006][T29382] veth1_vlan: entered promiscuous mode [ 1663.787052][T29382] veth0_macvtap: entered promiscuous mode [ 1663.844539][T29382] veth1_macvtap: entered promiscuous mode [ 1663.945413][T29382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1663.990660][T29382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.040002][T29382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1664.060166][T29382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.075046][T29382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1664.087554][T29382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.097730][T29382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1664.108319][T29382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.118220][T29382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1664.130380][T29382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.142231][T29382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1665.042911][T29382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1665.201609][T29382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.280043][T29382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1665.304176][T29382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.323288][T29382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1665.592546][T29382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.850959][T29382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1666.035344][T29382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1666.078288][T29382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1666.106361][T27775] Bluetooth: hci3: command 0x0406 tx timeout [ 1666.160390][T29382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1666.220190][T29382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1666.263016][T29382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1666.344685][T29382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1666.530087][T29382] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.539083][T29382] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.570666][T29382] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.610340][T29382] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.905162][T29604] syzkaller0: entered promiscuous mode [ 1666.925884][T29604] syzkaller0: entered allmulticast mode [ 1667.100478][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1667.108356][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1667.189740][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1667.198688][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1667.490758][T29612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7543'. [ 1667.585334][T29612] bond3: entered promiscuous mode [ 1667.597181][T29612] bond3: entered allmulticast mode [ 1668.440824][T29626] syzkaller0: entered promiscuous mode [ 1668.446365][T29626] syzkaller0: entered allmulticast mode [ 1669.223035][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.229516][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1672.622612][T29676] syzkaller0: entered promiscuous mode [ 1672.638413][T29676] syzkaller0: entered allmulticast mode [ 1682.003681][T29774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7595'. [ 1683.315030][T29774] bond5: entered promiscuous mode [ 1683.341425][T29774] bond5: entered allmulticast mode [ 1687.617972][T29813] bond6: entered promiscuous mode [ 1687.668637][T29813] bond6: entered allmulticast mode [ 1690.403351][T29848] syzkaller0: entered promiscuous mode [ 1690.408906][T29848] syzkaller0: entered allmulticast mode [ 1693.693401][T29868] bond1: entered promiscuous mode [ 1693.698507][T29868] bond1: entered allmulticast mode [ 1695.698983][T29878] syzkaller0: entered promiscuous mode [ 1695.704637][T29878] syzkaller0: entered allmulticast mode [ 1702.220557][T27775] Bluetooth: hci4: command 0x0406 tx timeout [ 1707.847162][T29966] fuse: Bad value for 'fd' [ 1708.835037][T29968] bond7: entered promiscuous mode [ 1708.866990][T29968] bond7: entered allmulticast mode [ 1711.933750][T29991] syzkaller0: entered promiscuous mode [ 1711.978843][T29991] syzkaller0: entered allmulticast mode [ 1712.647293][T30003] fuse: Bad value for 'fd' [ 1714.548068][T30017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1714.557688][T30017] batadv_slave_1: entered promiscuous mode [ 1716.009791][T30036] syzkaller0: entered promiscuous mode [ 1716.018840][T30036] syzkaller0: entered allmulticast mode [ 1716.930123][T30048] fuse: Bad value for 'fd' [ 1719.019142][T30063] bond8: entered promiscuous mode [ 1719.024523][T30063] bond8: entered allmulticast mode [ 1720.013134][T30074] syzkaller0: entered promiscuous mode [ 1720.232675][T30074] syzkaller0: entered allmulticast mode [ 1720.828534][T30078] syz.1.7677: vmalloc error: size 2764800, failed to allocated page array size 5400, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1720.847449][T30078] CPU: 0 PID: 30078 Comm: syz.1.7677 Not tainted syzkaller #0 [ 1720.854990][T30078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1720.865088][T30078] Call Trace: [ 1720.868468][T30078] [ 1720.871493][T30078] dump_stack_lvl+0x18c/0x250 [ 1720.876370][T30078] ? show_regs_print_info+0x20/0x20 [ 1720.881643][T30078] ? load_image+0x420/0x420 [ 1720.886219][T30078] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1720.892718][T30078] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1720.899242][T30078] warn_alloc+0x246/0x340 [ 1720.903633][T30078] ? zone_watermark_ok_safe+0x230/0x230 [ 1720.909212][T30078] ? _raw_spin_unlock+0x28/0x40 [ 1720.914220][T30078] ? __vb2_queue_alloc+0x78f/0x1410 [ 1720.919545][T30078] __vmalloc_node_range+0x661/0x1320 [ 1720.924887][T30078] ? free_vm_area+0x50/0x50 [ 1720.929423][T30078] vmalloc_user+0x74/0x80 [ 1720.933774][T30078] ? vb2_vmalloc_alloc+0xef/0x330 [ 1720.938898][T30078] vb2_vmalloc_alloc+0xef/0x330 [ 1720.943781][T30078] ? __copy_timestamp+0x1f0/0x1f0 [ 1720.948822][T30078] __vb2_queue_alloc+0x78f/0x1410 [ 1720.953896][T30078] vb2_core_reqbufs+0x9e8/0x10d0 [ 1720.958871][T30078] ? vb2_verify_memory_type+0x570/0x570 [ 1720.964472][T30078] v4l2_m2m_ioctl_reqbufs+0x16c/0x230 [ 1720.969974][T30078] __video_do_ioctl+0xa34/0xde0 [ 1720.974852][T30078] ? video_ioctl2+0x30/0x30 [ 1720.979374][T30078] ? __might_fault+0xc6/0x120 [ 1720.984061][T30078] ? __might_fault+0xaa/0x120 [ 1720.988761][T30078] video_usercopy+0x889/0x1360 [ 1720.993560][T30078] ? video_ioctl2+0x30/0x30 [ 1720.998081][T30078] ? v4l_printk_ioctl+0x160/0x160 [ 1721.003141][T30078] v4l2_ioctl+0x18a/0x1e0 [ 1721.007488][T30078] ? v4l2_poll+0x2b0/0x2b0 [ 1721.011916][T30078] __se_sys_ioctl+0xfd/0x170 [ 1721.016580][T30078] do_syscall_64+0x55/0xb0 [ 1721.021076][T30078] ? clear_bhb_loop+0x40/0x90 [ 1721.025832][T30078] ? clear_bhb_loop+0x40/0x90 [ 1721.030527][T30078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1721.036448][T30078] RIP: 0033:0x7f3ae259e0d9 [ 1721.040958][T30078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1721.060650][T30078] RSP: 002b:00007f3ae3465028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1721.069164][T30078] RAX: ffffffffffffffda RBX: 00007f3ae2826180 RCX: 00007f3ae259e0d9 [ 1721.077156][T30078] RDX: 00002000000001c0 RSI: 00000000c0145608 RDI: 0000000000000008 [ 1721.085149][T30078] RBP: 00007f3ae2635024 R08: 0000000000000000 R09: 0000000000000000 [ 1721.093192][T30078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1721.101195][T30078] R13: 00007f3ae2826218 R14: 00007f3ae2826180 R15: 00007ffee103de38 [ 1721.109212][T30078] [ 1721.113402][T30078] Mem-Info: [ 1721.116544][T30078] active_anon:14887 inactive_anon:0 isolated_anon:0 [ 1721.116544][T30078] active_file:3063 inactive_file:49593 isolated_file:0 [ 1721.116544][T30078] unevictable:768 dirty:93 writeback:0 [ 1721.116544][T30078] slab_reclaimable:11218 slab_unreclaimable:107202 [ 1721.116544][T30078] mapped:36702 shmem:9710 pagetables:554 [ 1721.116544][T30078] sec_pagetables:0 bounce:0 [ 1721.116544][T30078] kernel_misc_reclaimable:0 [ 1721.116544][T30078] free:1317471 free_pcp:4237 free_cma:0 [ 1721.162252][T30078] Node 0 active_anon:59548kB inactive_anon:0kB active_file:12200kB inactive_file:198156kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146744kB dirty:368kB writeback:0kB shmem:37304kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11812kB pagetables:2216kB sec_pagetables:0kB all_unreclaimable? no [ 1721.194706][T30078] Node 1 active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:216kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1721.225327][T30078] Node 0 DMA free:15356kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1721.252489][T30078] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1721.258777][T30078] Node 0 DMA32 free:1347892kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:60512kB inactive_anon:0kB active_file:12200kB inactive_file:197328kB unevictable:1536kB writepending:368kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:12544kB local_pcp:8684kB free_cma:0kB [ 1721.289343][T30078] lowmem_reserve[]: 0 0 0 0 0 [ 1721.294416][T30078] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1721.321225][T30078] lowmem_reserve[]: 0 0 0 0 0 [ 1721.325968][T30078] Node 1 Normal free:3905628kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:216kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:4384kB local_pcp:4384kB free_cma:0kB [ 1721.355432][T30078] lowmem_reserve[]: 0 0 0 0 0 [ 1721.360242][T30078] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 1721.376111][T30078] Node 0 DMA32: 2*4kB (UE) 36*8kB (ME) 692*16kB (UE) 371*32kB (UE) 658*64kB (UME) 294*128kB (UME) 96*256kB (UME) 29*512kB (UME) 16*1024kB (UME) 4*2048kB (UME) 288*4096kB (UM) = 1346632kB [ 1721.394815][T30078] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1721.406416][T30078] Node 1 Normal: 215*4kB (UME) 60*8kB (UE) 34*16kB (UME) 228*32kB (UME) 84*64kB (UME) 33*128kB (UE) 9*256kB (UE) 5*512kB (UME) 1*1024kB (U) 3*2048kB (UME) 946*4096kB (M) = 3905628kB [ 1721.424633][T30078] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1721.434243][T30078] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1721.443608][T30078] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1721.453339][T30078] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1721.462671][T30078] 62363 total pagecache pages [ 1721.467970][T30078] 1 pages in swap cache [ 1721.472195][T30078] Free swap = 124500kB [ 1721.476366][T30078] Total swap = 124996kB [ 1721.480577][T30078] 2097051 pages RAM [ 1721.484394][T30078] 0 pages HighMem/MovableOnly [ 1721.489077][T30078] 416958 pages reserved [ 1721.493275][T30078] 0 pages cma reserved [ 1721.850045][T30087] syzkaller0: entered promiscuous mode [ 1721.855604][T30087] syzkaller0: entered allmulticast mode [ 1722.261960][T30098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1722.284703][T30098] batadv_slave_1: entered promiscuous mode [ 1722.993701][T30106] bond9: entered promiscuous mode [ 1722.999747][T30106] bond9: entered allmulticast mode [ 1723.284801][T30113] syzkaller0: entered promiscuous mode [ 1723.292554][T30113] syzkaller0: entered allmulticast mode [ 1724.166680][T30122] syzkaller0: entered promiscuous mode [ 1724.185385][T30122] syzkaller0: entered allmulticast mode [ 1724.762327][T30082] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1728.011238][T30143] tipc: Started in network mode [ 1728.016192][T30143] tipc: Node identity da3ce54e3236, cluster identity 4711 [ 1728.035735][T30143] tipc: Enabled bearer , priority 0 [ 1728.046719][T30134] syzkaller0: entered promiscuous mode [ 1728.052625][T30134] syzkaller0: entered allmulticast mode [ 1728.069637][T30129] tipc: Resetting bearer [ 1728.201816][T30129] tipc: Disabling bearer [ 1728.607243][T30157] syzkaller0: entered promiscuous mode [ 1728.640103][T30157] syzkaller0: entered allmulticast mode [ 1730.587553][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.594853][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.373537][T30161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1731.917584][T30181] syzkaller0: entered promiscuous mode [ 1731.930877][T30181] syzkaller0: entered allmulticast mode [ 1735.856223][T30212] tipc: Enabling of bearer rejected, failed to enable media [ 1736.129135][T30226] syzkaller0: entered promiscuous mode [ 1736.135701][T30226] syzkaller0: entered allmulticast mode [ 1738.999834][T30219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1739.240772][T30251] syzkaller0: entered promiscuous mode [ 1739.254078][T30251] syzkaller0: entered allmulticast mode [ 1739.279755][T30251] tipc: Enabled bearer , priority 0 [ 1739.406019][T30248] tipc: Resetting bearer [ 1739.512781][T30248] tipc: Disabling bearer [ 1739.570709][T30268] dummy_hcd dummy_hcd.0: remove, state 1 [ 1739.591165][T30268] usb usb1: USB disconnect, device number 1 [ 1739.593552][T30257] syzkaller0: entered promiscuous mode [ 1739.612008][T30257] syzkaller0: entered allmulticast mode [ 1739.695102][T30268] dummy_hcd dummy_hcd.0: stopped [ 1739.728341][T30268] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 1744.245032][T30305] syzkaller0: entered promiscuous mode [ 1744.264436][T30305] syzkaller0: entered allmulticast mode [ 1744.372760][T30305] tipc: Enabled bearer , priority 0 [ 1744.403260][T30304] tipc: Resetting bearer [ 1744.485235][T30304] tipc: Disabling bearer [ 1746.414293][T30336] syzkaller0: entered promiscuous mode [ 1746.419837][T30336] syzkaller0: entered allmulticast mode [ 1747.120187][T30345] syzkaller0: entered promiscuous mode [ 1747.150641][T30345] syzkaller0: entered allmulticast mode [ 1747.192171][T30345] tipc: Enabled bearer , priority 0 [ 1747.293399][T30341] tipc: Resetting bearer [ 1747.361328][T30341] tipc: Disabling bearer [ 1747.437912][T30355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1747.458677][T30355] batadv_slave_1: entered promiscuous mode [ 1747.678050][T30373] bond2: entered promiscuous mode [ 1747.683446][T30373] bond2: entered allmulticast mode [ 1747.907434][T30381] syzkaller0: entered promiscuous mode [ 1747.913911][T30381] syzkaller0: entered allmulticast mode [ 1748.116579][T30385] syzkaller0: entered promiscuous mode [ 1748.122559][T30385] syzkaller0: entered allmulticast mode [ 1748.133390][T30385] tipc: Enabled bearer , priority 0 [ 1748.145889][T30384] tipc: Resetting bearer [ 1748.231681][T30384] tipc: Disabling bearer [ 1749.150452][T30403] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7771'. [ 1749.337646][T30407] syzkaller0: entered promiscuous mode [ 1749.347769][T30407] syzkaller0: entered allmulticast mode [ 1749.485867][T30413] syzkaller0: entered promiscuous mode [ 1749.497179][T30413] syzkaller0: entered allmulticast mode [ 1749.534142][T30413] tipc: Enabled bearer , priority 0 [ 1749.554369][T30412] tipc: Resetting bearer [ 1749.604646][T30412] tipc: Disabling bearer [ 1751.312164][T30445] syzkaller0: entered promiscuous mode [ 1751.317716][T30445] syzkaller0: entered allmulticast mode [ 1751.396787][T30447] syzkaller0: entered promiscuous mode [ 1751.402710][T30447] syzkaller0: entered allmulticast mode [ 1752.349649][T30454] syzkaller0: entered promiscuous mode [ 1752.355524][T30454] syzkaller0: entered allmulticast mode [ 1752.429505][T30454] tipc: Enabled bearer , priority 0 [ 1752.439150][T30452] tipc: Resetting bearer [ 1752.502475][T30452] tipc: Disabling bearer [ 1754.002314][T30478] syzkaller0: entered promiscuous mode [ 1754.007863][T30478] syzkaller0: entered allmulticast mode [ 1754.286105][T30487] syzkaller0: entered promiscuous mode [ 1754.327067][T30487] syzkaller0: entered allmulticast mode [ 1755.263613][T30498] syzkaller0: entered promiscuous mode [ 1755.269170][T30498] syzkaller0: entered allmulticast mode [ 1755.370077][T30499] tipc: Started in network mode [ 1755.379096][T30499] tipc: Node identity 62d1eedd5766, cluster identity 4711 [ 1755.421758][T30499] tipc: Enabled bearer , priority 0 [ 1755.447080][T30488] tipc: Resetting bearer [ 1755.514758][T30488] tipc: Disabling bearer [ 1757.223657][T30533] syzkaller0: entered promiscuous mode [ 1757.229166][T30533] syzkaller0: entered allmulticast mode [ 1758.229034][T30539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7813'. [ 1758.288434][T30545] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1760.262178][T30586] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7825'. [ 1760.518565][T30586] bond3: entered promiscuous mode [ 1760.523906][T30586] bond3: entered allmulticast mode [ 1763.841643][T30609] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1768.432592][T30722] fuse: Bad value for 'fd' [ 1769.108647][T13044] Bluetooth: hci0: command 0x0406 tx timeout [ 1771.464111][T30764] fuse: Bad value for 'fd' [ 1773.829965][T30788] vivid-000: kernel_thread() failed [ 1775.875147][T30805] fuse: Bad value for 'fd' [ 1780.344956][T30847] fuse: Bad value for 'fd' [ 1784.945289][T30891] fuse: Bad value for 'fd' [ 1792.070643][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.076999][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1798.838737][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1798.838755][ T28] audit: type=1326 audit(1786405056.331:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31026 comm="syz.0.7939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61199e0d9 code=0x7ffc0000 [ 1798.908261][ T28] audit: type=1326 audit(1786405056.331:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31026 comm="syz.0.7939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61199e0d9 code=0x7ffc0000 [ 1798.932899][ T28] audit: type=1326 audit(1786405056.401:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31026 comm="syz.0.7939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc61199e0d9 code=0x7ffc0000 [ 1798.958209][ T28] audit: type=1326 audit(1786405056.401:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31026 comm="syz.0.7939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61199e0d9 code=0x7ffc0000 [ 1798.983462][ T28] audit: type=1326 audit(1786405056.401:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31026 comm="syz.0.7939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61199e0d9 code=0x7ffc0000 [ 1799.018041][ T28] audit: type=1326 audit(1786405056.411:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31026 comm="syz.0.7939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc61199e0d9 code=0x7ffc0000 [ 1799.086565][ T28] audit: type=1326 audit(1786405056.411:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31026 comm="syz.0.7939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61199e0d9 code=0x7ffc0000 [ 1799.219612][ T28] audit: type=1326 audit(1786405056.411:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31026 comm="syz.0.7939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc61199e0d9 code=0x7ffc0000 [ 1799.319124][ T28] audit: type=1326 audit(1786405056.411:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31026 comm="syz.0.7939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61199e0d9 code=0x7ffc0000 [ 1799.346656][ T28] audit: type=1326 audit(1786405056.411:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31026 comm="syz.0.7939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc61195e90e code=0x7ffc0000 [ 1804.390347][T31070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7950'. [ 1804.421868][T31074] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1806.540604][T31097] syzkaller0: entered promiscuous mode [ 1806.554522][T31097] syzkaller0: entered allmulticast mode [ 1811.431781][T31134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7962'. [ 1811.542391][T31136] bond10: entered promiscuous mode [ 1811.548835][T31136] bond10: entered allmulticast mode [ 1814.118535][T31170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7971'. [ 1814.295898][T31176] bond4: entered promiscuous mode [ 1814.311974][T31176] bond4: entered allmulticast mode [ 1815.718718][T31199] overlayfs: missing 'lowerdir' [ 1815.818886][T31200] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7975'. [ 1815.840605][T31200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7975'. [ 1817.670698][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 1817.670736][ T28] audit: type=1326 audit(1786405075.171:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31214 comm="syz.0.7982" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc61199e0d9 code=0x0 [ 1818.219294][T31223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7984'. [ 1818.467131][T31228] bond11: entered promiscuous mode [ 1818.488602][T31228] bond11: entered allmulticast mode [ 1824.261520][T31329] tipc: Enabling of bearer rejected, failed to enable media [ 1824.307189][T21442] block nbd0: Receive control failed (result -32) [ 1824.318355][T13044] block nbd0: Receive control failed (result -32) [ 1827.488728][T31391] tipc: Enabling of bearer rejected, failed to enable media [ 1831.845812][T31409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1832.400696][T31446] tipc: Enabling of bearer rejected, failed to enable media [ 1832.839382][T31455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8039'. [ 1832.870803][T31455] bond4: entered promiscuous mode [ 1832.876467][T31455] bond4: entered allmulticast mode [ 1836.586258][T31467] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1839.568513][T31534] tipc: Enabling of bearer rejected, failed to enable media [ 1842.618759][T31543] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1843.119665][T31592] tipc: Enabling of bearer rejected, failed to enable media [ 1849.317508][T31619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1850.142362][T31666] bond12: entered promiscuous mode [ 1850.157199][T31666] bond12: entered allmulticast mode [ 1853.460383][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.466736][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.958529][T31679] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1860.307043][T31740] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1866.422618][T31814] tipc: Enabled bearer , priority 0 [ 1866.678470][T31812] tipc: Disabling bearer [ 1868.073592][T31827] overlayfs: missing 'lowerdir' [ 1868.243481][T31829] syzkaller0: entered promiscuous mode [ 1868.249061][T31829] syzkaller0: entered allmulticast mode [ 1869.988875][T31859] syzkaller0: entered promiscuous mode [ 1870.008161][T31859] syzkaller0: entered allmulticast mode [ 1872.397386][T31851] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1872.564581][T31884] syzkaller0: entered promiscuous mode [ 1872.570366][T31884] syzkaller0: entered allmulticast mode [ 1873.991363][T31895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1874.142245][T31895] batadv_slave_1: entered promiscuous mode [ 1875.326714][T31915] syzkaller0: entered promiscuous mode [ 1875.349994][T31915] syzkaller0: entered allmulticast mode [ 1875.393632][T31915] tipc: Enabled bearer , priority 0 [ 1875.422430][T31914] tipc: Resetting bearer [ 1875.505290][T31914] tipc: Disabling bearer [ 1875.723396][T31924] syzkaller0: entered promiscuous mode [ 1875.734573][T31924] syzkaller0: entered allmulticast mode [ 1878.573933][T31918] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1879.387710][T31959] syzkaller0: entered promiscuous mode [ 1879.416844][T31959] syzkaller0: entered allmulticast mode [ 1879.477458][T31959] tipc: Enabled bearer , priority 0 [ 1879.511460][T31958] tipc: Resetting bearer [ 1880.078289][T31958] tipc: Disabling bearer [ 1880.307645][T31966] syzkaller0: entered promiscuous mode [ 1880.340599][T31966] syzkaller0: entered allmulticast mode [ 1882.794056][T32003] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1882.849208][T32003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8167'. [ 1882.973899][ T5843] IPVS: starting estimator thread 0... [ 1883.113772][T32004] IPVS: using max 17 ests per chain, 40800 per kthread [ 1883.675767][T32010] syzkaller0: entered promiscuous mode [ 1883.691671][T32010] syzkaller0: entered allmulticast mode [ 1884.170513][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1884.615101][T31990] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1887.689315][T32050] syzkaller0: entered promiscuous mode [ 1887.699246][T32050] syzkaller0: entered allmulticast mode [ 1890.698124][T32052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1891.466911][T32096] syzkaller0: entered promiscuous mode [ 1891.473714][T32096] syzkaller0: entered allmulticast mode [ 1895.312792][T32133] syzkaller0: entered promiscuous mode [ 1895.333741][T32133] syzkaller0: entered allmulticast mode [ 1897.671357][T32120] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1899.800291][T32170] syzkaller0: entered promiscuous mode [ 1899.805829][T32170] syzkaller0: entered allmulticast mode [ 1904.060114][T32189] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1904.256235][T32224] syzkaller0: entered promiscuous mode [ 1904.297122][T32224] syzkaller0: entered allmulticast mode [ 1909.798396][T32281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8229'. [ 1909.829015][T32281] bond4: entered promiscuous mode [ 1909.834242][T32281] bond4: entered allmulticast mode [ 1915.002711][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.012095][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1922.388774][T32361] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1922.524712][T32400] fuse: Bad value for 'fd' [ 1930.527850][T32464] fuse: Bad value for 'fd' [ 1931.499140][T32442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1932.375548][T32479] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1932.435269][T32475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8271'. [ 1935.800451][T32515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8281'. [ 1938.970407][T32508] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1940.190289][T32551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8290'. [ 1943.196617][T32592] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1943.205876][T32592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8298'. [ 1943.421695][ T789] IPVS: starting estimator thread 0... [ 1943.473028][T32595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8300'. [ 1943.807651][T32593] IPVS: using max 23 ests per chain, 55200 per kthread [ 1947.234391][T32640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8310'. [ 1951.207183][T32680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8319'. [ 1955.539583][T32722] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1955.547934][T32722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8329'. [ 1956.150108][ T5805] IPVS: starting estimator thread 0... [ 1956.313666][T32723] IPVS: using max 24 ests per chain, 57600 per kthread [ 1956.323749][T32730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8330'. [ 1961.691005][ T309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8341'. [ 1965.824059][ T348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8351'. [ 1967.990776][ T373] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1968.031935][ T373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8357'. [ 1968.140354][ T789] IPVS: starting estimator thread 0... [ 1968.250833][ T375] IPVS: using max 17 ests per chain, 40800 per kthread [ 1968.678895][ T380] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8358'. [ 1969.226276][ T385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8360'. [ 1972.503209][ T416] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1972.515323][ T416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8367'. [ 1972.741930][ T419] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1972.751432][ T419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8368'. [ 1973.407449][ T423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8370'. [ 1973.559281][ T432] fuse: Bad value for 'fd' [ 1974.614394][ T440] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1974.627766][ T440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8373'. [ 1976.336351][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.343235][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.186128][ T458] 0x0000000036d7-0xc28001060036d7 : "" [ 1977.192250][ T458] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1c929 [ 1977.313573][ T458] ftl_cs: FTL header corrupt! [ 1978.059375][ T474] fuse: Bad value for 'fd' [ 1978.992586][ T479] overlayfs: missing 'lowerdir' [ 1979.128295][ T480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8379'. [ 1979.171449][ T480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8379'. [ 1979.458864][ T482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8381'. [ 1981.544170][ T500] syzkaller0: entered promiscuous mode [ 1981.549706][ T500] syzkaller0: entered allmulticast mode [ 1983.669501][ T515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8390'. [ 1983.821341][ T515] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8390'. [ 1984.041499][ T522] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1984.050849][ T522] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8389'. [ 1988.344959][ T556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8399'. [ 1988.448066][ T559] syzkaller0: entered promiscuous mode [ 1988.467905][ T559] syzkaller0: entered allmulticast mode [ 1988.501776][ T556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8399'. [ 1990.922338][ T578] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1990.937801][ T578] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8402'. [ 1991.532908][ T592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8408'. [ 1991.653889][ T592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8408'. [ 1991.881360][ T599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8406'. [ 1992.957141][ T608] syzkaller0: entered promiscuous mode [ 1992.975477][ T608] syzkaller0: entered allmulticast mode [ 1995.475702][ T634] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1995.489411][ T634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8416'. [ 1996.655407][ T644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8419'. [ 1996.778684][ T644] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8419'. [ 1997.218275][ T657] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1997.521812][ T658] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8420'. [ 2001.849255][ T687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8429'. [ 2002.017854][ T692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8429'. [ 2002.649059][ T706] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 2002.663451][ T706] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8431'. [ 2005.926432][ T734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8439'. [ 2006.080916][ T734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8439'. [ 2009.342307][ T772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8448'. [ 2009.476354][ T772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8448'. [ 2009.494085][ T772] bond10: entered promiscuous mode [ 2009.499280][ T772] bond10: entered allmulticast mode [ 2012.953390][ T820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8460'. [ 2013.073784][ T820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8460'. [ 2013.083814][ T820] bond19: entered promiscuous mode [ 2013.088974][ T820] bond19: entered allmulticast mode [ 2013.656987][ T835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8463'. [ 2016.263827][ T859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8471'. [ 2016.558063][ T863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8471'. [ 2016.626516][ T863] bond20: entered promiscuous mode [ 2016.636963][ T863] bond20: entered allmulticast mode [ 2025.251998][ T984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8499'. [ 2027.783481][ T1025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8506'. [ 2027.904223][ T1025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8506'. [ 2027.938751][ T1025] bond10: entered promiscuous mode [ 2027.962887][ T1025] bond10: entered allmulticast mode [ 2028.993147][ T1051] overlayfs: missing 'lowerdir' [ 2029.264534][ T1052] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8508'. [ 2029.279763][ T1052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8508'. [ 2031.422113][ T1081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8516'. [ 2031.486293][ T1081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8516'. [ 2031.495840][ T1081] bond11: entered promiscuous mode [ 2031.501977][ T1081] bond11: entered allmulticast mode [ 2032.689475][ T1112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8525'. [ 2032.777098][ T1112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8525'. [ 2032.796062][ T1112] bond11: entered promiscuous mode [ 2032.801438][ T1112] bond11: entered allmulticast mode [ 2034.569377][ T1151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8534'. [ 2034.628715][ T1151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8534'. [ 2034.638269][ T1151] bond6: entered promiscuous mode [ 2034.643799][ T1151] bond6: entered allmulticast mode [ 2036.507423][ T1183] syzkaller0: entered promiscuous mode [ 2036.527264][ T1183] syzkaller0: entered allmulticast mode [ 2036.568818][ T1183] tipc: Enabled bearer , priority 0 [ 2036.607582][ T1182] tipc: Resetting bearer [ 2036.784290][ T1182] tipc: Disabling bearer [ 2036.956816][ T1194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8543'. [ 2037.050857][ T1194] bond7: entered promiscuous mode [ 2037.069516][ T1194] bond7: entered allmulticast mode [ 2037.784022][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.791784][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.199215][ T1218] syzkaller0: entered promiscuous mode [ 2038.212141][ T1218] syzkaller0: entered allmulticast mode [ 2038.226128][ T1218] tipc: Enabled bearer , priority 0 [ 2038.241657][ T1217] tipc: Resetting bearer [ 2038.293951][ T1217] tipc: Disabling bearer [ 2039.259473][ T1232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8553'. [ 2039.501982][ T1239] bond21: entered promiscuous mode [ 2039.510245][ T1239] bond21: entered allmulticast mode [ 2040.338223][ T1261] fuse: Bad value for 'fd' [ 2042.322275][ T1288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8566'. [ 2042.350975][ T1288] bond8: entered promiscuous mode [ 2042.356095][ T1288] bond8: entered allmulticast mode [ 2042.418829][ T1292] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 2042.431916][ T1292] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8567'. [ 2044.033868][ T1310] fuse: Bad value for 'fd' [ 2046.084029][ T1340] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 2046.093682][ T1340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8578'. [ 2047.958099][ T1355] fuse: Bad value for 'fd' [ 2050.236859][ T1386] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 2050.885824][ T1387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8589'. [ 2051.893393][ T1401] tipc: Enabled bearer , priority 0 [ 2052.097692][ T1400] tipc: Disabling bearer [ 2054.622957][ T1436] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 2054.632630][ T1436] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8600'. [ 2058.682763][ T1489] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 2058.695924][ T1489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8614'. [ 2063.099467][ T1533] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 2063.112152][ T1533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8627'. [ 2064.562705][ T1552] 0x0000000036d7-0xc28001060036d7 : "" [ 2064.568294][ T1552] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1c929 [ 2064.851898][ T1552] ftl_cs: FTL header corrupt! [ 2064.863530][ T1551] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 2066.450940][ T1580] No such timeout policy "syz1" [ 2066.727701][ T1582] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 2066.737074][ T1582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8639'. [ 2067.433738][ T1595] 0x0000000036d7-0x000000020000 : "" [ 2067.456905][ T1595] ftl_cs: FTL header corrupt! [ 2070.877557][ T1637] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 2070.886780][ T1637] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8651'. [ 2071.358128][ T1601] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2074.042243][ T1670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8661'. [ 2076.933927][ T1706] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 2076.943528][ T1706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8671'. [ 2080.364008][ T1748] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 2080.373386][ T1748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8683'. [ 2080.910128][ T1760] syzkaller0: entered promiscuous mode [ 2080.915781][ T1760] syzkaller0: entered allmulticast mode [ 2081.703381][ T1776] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 2081.713371][ T1776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8692'. [ 2083.581123][ T1799] syzkaller0: entered promiscuous mode [ 2083.586662][ T1799] syzkaller0: entered allmulticast mode [ 2084.606208][ T1815] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 2084.615740][ T1815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8703'. [ 2085.852848][ T1832] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8708'. [ 2086.888926][ T1842] syzkaller0: entered promiscuous mode [ 2086.896542][ T1842] syzkaller0: entered allmulticast mode [ 2088.414096][ T1857] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 2088.424701][ T1857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8715'. [ 2089.417243][T13044] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 2089.684050][ T1877] syzkaller0: entered promiscuous mode [ 2089.689584][ T1877] syzkaller0: entered allmulticast mode [ 2091.035562][ T1894] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 2091.052153][ T1894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8726'. [ 2091.132471][ T1885] Bluetooth: hci0: command 0x0406 tx timeout [ 2091.769875][ T1907] syzkaller0: entered promiscuous mode [ 2091.778530][ T1907] syzkaller0: entered allmulticast mode [ 2094.429301][ T1932] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 2094.438572][ T1932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8738'. [ 2095.130630][ T1885] Bluetooth: hci0: command 0x0406 tx timeout [ 2095.177076][ T1940] syzkaller0: entered promiscuous mode [ 2095.184760][ T1940] syzkaller0: entered allmulticast mode [ 2096.427003][ T1950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8743'. [ 2099.201947][ T1994] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8754'. [ 2099.215489][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.215644][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2100.660782][ T2012] syzkaller0: entered promiscuous mode [ 2100.688785][ T2012] syzkaller0: entered allmulticast mode [ 2101.734390][ T2022] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8763'. [ 2102.726648][ T2042] syzkaller0: entered promiscuous mode [ 2102.739675][ T2042] syzkaller0: entered allmulticast mode [ 2104.168525][ T2060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8774'. [ 2105.534151][ T2076] syzkaller0: entered promiscuous mode [ 2105.539795][ T2076] syzkaller0: entered allmulticast mode [ 2106.835119][ T2096] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8784'. [ 2108.116053][ T2111] 0x0000000036d7-0xc28001060036d7 : "" [ 2108.121676][ T2111] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1c929 [ 2108.236824][ T2111] ftl_cs: FTL header corrupt! [ 2112.925107][ T2162] 0x0000000036d7-0xc28001060036d7 : "" [ 2112.930732][ T2162] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1c929 [ 2113.038997][ T2162] ftl_cs: FTL header corrupt! [ 2113.442478][ T2161] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 2117.552600][ T2208] ================================================================== [ 2117.560721][ T2208] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc9/0x360 [ 2117.568525][ T2208] Read of size 8 at addr ffff888142e44818 by task syz.3.8810/2208 [ 2117.576381][ T2208] [ 2117.578772][ T2208] CPU: 1 PID: 2208 Comm: syz.3.8810 Not tainted syzkaller #0 [ 2117.586158][ T2208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2117.596223][ T2208] Call Trace: [ 2117.599508][ T2208] [ 2117.602443][ T2208] dump_stack_lvl+0x18c/0x250 [ 2117.607133][ T2208] ? read_lock_is_recursive+0x20/0x20 [ 2117.612553][ T2208] ? show_regs_print_info+0x20/0x20 [ 2117.617765][ T2208] ? load_image+0x420/0x420 [ 2117.622285][ T2208] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 2117.627760][ T2208] ? __virt_addr_valid+0x10c/0x380 [ 2117.632927][ T2208] ? __virt_addr_valid+0x10c/0x380 [ 2117.638075][ T2208] ? __virt_addr_valid+0x10c/0x380 [ 2117.643203][ T2208] print_report+0xa8/0x210 [ 2117.647634][ T2208] ? dvb_device_open+0xc9/0x360 [ 2117.652496][ T2208] kasan_report+0x117/0x150 [ 2117.657047][ T2208] ? chrdev_open+0x385/0x600 [ 2117.661659][ T2208] ? dvb_device_open+0xc9/0x360 [ 2117.666537][ T2208] dvb_device_open+0xc9/0x360 [ 2117.671237][ T2208] chrdev_open+0x58c/0x600 [ 2117.675680][ T2208] ? cd_forget+0x160/0x160 [ 2117.680155][ T2208] do_dentry_open+0x880/0x14b0 [ 2117.684940][ T2208] ? cd_forget+0x160/0x160 [ 2117.689373][ T2208] path_openat+0x284f/0x3270 [ 2117.693981][ T2208] ? requeue_task_rt+0x400/0x400 [ 2117.698977][ T2208] ? verify_lock_unused+0x140/0x140 [ 2117.704183][ T2208] ? do_filp_open+0x430/0x430 [ 2117.708865][ T2208] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2117.714512][ T2208] ? asan.module_dtor+0x20/0x20 [ 2117.719385][ T2208] do_filp_open+0x1f2/0x430 [ 2117.723902][ T2208] ? vfs_tmpfile+0x620/0x620 [ 2117.728519][ T2208] ? _raw_spin_unlock+0x3a/0x40 [ 2117.733382][ T2208] ? alloc_fd+0x590/0x640 [ 2117.737755][ T2208] do_sys_openat2+0x134/0x1d0 [ 2117.742442][ T2208] ? lockdep_hardirqs_on+0x98/0x150 [ 2117.747654][ T2208] ? do_sys_open+0xe0/0xe0 [ 2117.752086][ T2208] ? __x64_sys_openat+0x123/0x160 [ 2117.757126][ T2208] __x64_sys_openat+0x139/0x160 [ 2117.761988][ T2208] do_syscall_64+0x55/0xb0 [ 2117.766412][ T2208] ? clear_bhb_loop+0x40/0x90 [ 2117.771101][ T2208] ? clear_bhb_loop+0x40/0x90 [ 2117.775785][ T2208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2117.781688][ T2208] RIP: 0033:0x7f9fa6f5e90e [ 2117.786110][ T2208] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2117.805731][ T2208] RSP: 002b:00007f9fa7edeb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2117.814166][ T2208] RAX: ffffffffffffffda RBX: 00007f9fa7edf6c0 RCX: 00007f9fa6f5e90e [ 2117.822150][ T2208] RDX: 0000000000000002 RSI: 00007f9fa7edec00 RDI: ffffffffffffff9c [ 2117.830125][ T2208] RBP: 00007f9fa7edec00 R08: 0000000000000000 R09: 0000000000000000 [ 2117.838103][ T2208] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 2117.846071][ T2208] R13: 00007f9fa7226218 R14: 00007f9fa7226180 R15: 00007ffd25faed58 [ 2117.854048][ T2208] [ 2117.857057][ T2208] [ 2117.859364][ T2208] Allocated by task 1: [ 2117.863502][ T2208] kasan_set_track+0x4e/0x70 [ 2117.868115][ T2208] __kasan_kmalloc+0x8f/0xa0 [ 2117.872696][ T2208] dvb_register_device+0x309/0x1df0 [ 2117.877886][ T2208] dvb_register_frontend+0x62d/0x900 [ 2117.883162][ T2208] vidtv_bridge_probe+0x9d6/0xf60 [ 2117.888337][ T2208] platform_probe+0x13b/0x1c0 [ 2117.893024][ T2208] really_probe+0x247/0xae0 [ 2117.897519][ T2208] __driver_probe_device+0x1f5/0x390 [ 2117.902800][ T2208] driver_probe_device+0x4f/0x420 [ 2117.907810][ T2208] __driver_attach+0x444/0x6d0 [ 2117.912566][ T2208] bus_for_each_dev+0x235/0x2b0 [ 2117.917412][ T2208] bus_add_driver+0x340/0x630 [ 2117.922079][ T2208] driver_register+0x23a/0x310 [ 2117.926830][ T2208] vidtv_bridge_init+0x49/0x80 [ 2117.931683][ T2208] do_one_initcall+0x242/0x790 [ 2117.936452][ T2208] do_initcall_level+0x13d/0x1f0 [ 2117.941437][ T2208] do_initcalls+0x69/0xd0 [ 2117.945781][ T2208] kernel_init_freeable+0x3d9/0x560 [ 2117.950990][ T2208] kernel_init+0x1d/0x1c0 [ 2117.955329][ T2208] ret_from_fork+0x48/0x80 [ 2117.959740][ T2208] ret_from_fork_asm+0x11/0x20 [ 2117.964500][ T2208] [ 2117.966808][ T2208] Freed by task 2161: [ 2117.970769][ T2208] kasan_set_track+0x4e/0x70 [ 2117.975358][ T2208] kasan_save_free_info+0x28/0x40 [ 2117.980374][ T2208] ____kasan_slab_free+0x126/0x1f0 [ 2117.985478][ T2208] slab_free_freelist_hook+0x130/0x1a0 [ 2117.990922][ T2208] __kmem_cache_free+0xba/0x1f0 [ 2117.995766][ T2208] dvb_device_open+0x2d9/0x360 [ 2118.000537][ T2208] chrdev_open+0x58c/0x600 [ 2118.004942][ T2208] do_dentry_open+0x880/0x14b0 [ 2118.009695][ T2208] path_openat+0x284f/0x3270 [ 2118.014277][ T2208] do_filp_open+0x1f2/0x430 [ 2118.018768][ T2208] do_sys_openat2+0x134/0x1d0 [ 2118.023441][ T2208] __x64_sys_openat+0x139/0x160 [ 2118.028283][ T2208] do_syscall_64+0x55/0xb0 [ 2118.032689][ T2208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2118.038574][ T2208] [ 2118.040884][ T2208] The buggy address belongs to the object at ffff888142e44800 [ 2118.040884][ T2208] which belongs to the cache kmalloc-256 of size 256 [ 2118.055045][ T2208] The buggy address is located 24 bytes inside of [ 2118.055045][ T2208] freed 256-byte region [ffff888142e44800, ffff888142e44900) [ 2118.068763][ T2208] [ 2118.071081][ T2208] The buggy address belongs to the physical page: [ 2118.077579][ T2208] page:ffffea00050b9100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x142e44 [ 2118.087801][ T2208] head:ffffea00050b9100 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2118.096721][ T2208] flags: 0x57ff00000000840(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 2118.104771][ T2208] page_type: 0xffffffff() [ 2118.109131][ T2208] raw: 057ff00000000840 ffff888017c41b40 dead000000000122 0000000000000000 [ 2118.117711][ T2208] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 2118.126288][ T2208] page dumped because: kasan: bad access detected [ 2118.132762][ T2208] page_owner tracks the page as allocated [ 2118.138460][ T2208] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16446297712, free_ts 0 [ 2118.158168][ T2208] post_alloc_hook+0x1c1/0x200 [ 2118.162933][ T2208] get_page_from_freelist+0x2181/0x22a0 [ 2118.168496][ T2208] __alloc_pages+0x1f0/0x460 [ 2118.173075][ T2208] alloc_page_interleave+0x24/0x1e0 [ 2118.178267][ T2208] alloc_slab_page+0x5d/0x180 [ 2118.182934][ T2208] new_slab+0x87/0x2d0 [ 2118.186992][ T2208] ___slab_alloc+0xc5c/0x12f0 [ 2118.191659][ T2208] __kmem_cache_alloc_node+0x11f/0x250 [ 2118.197113][ T2208] kmalloc_trace+0x2a/0xe0 [ 2118.201526][ T2208] bus_add_driver+0x162/0x630 [ 2118.206195][ T2208] driver_register+0x23a/0x310 [ 2118.210951][ T2208] i2c_register_driver+0xba/0x160 [ 2118.216062][ T2208] do_one_initcall+0x242/0x790 [ 2118.220818][ T2208] do_initcall_level+0x13d/0x1f0 [ 2118.225749][ T2208] do_initcalls+0x69/0xd0 [ 2118.230072][ T2208] kernel_init_freeable+0x3d9/0x560 [ 2118.235264][ T2208] page_owner free stack trace missing [ 2118.240630][ T2208] [ 2118.242944][ T2208] Memory state around the buggy address: [ 2118.248558][ T2208] ffff888142e44700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2118.256613][ T2208] ffff888142e44780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2118.264681][ T2208] >ffff888142e44800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2118.272751][ T2208] ^ [ 2118.277598][ T2208] ffff888142e44880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2118.285643][ T2208] ffff888142e44900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2118.293709][ T2208] ================================================================== [ 2118.303054][ T2208] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2118.310277][ T2208] CPU: 1 PID: 2208 Comm: syz.3.8810 Not tainted syzkaller #0 [ 2118.317698][ T2208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2118.327775][ T2208] Call Trace: [ 2118.331105][ T2208] [ 2118.334058][ T2208] dump_stack_lvl+0x18c/0x250 [ 2118.338757][ T2208] ? show_regs_print_info+0x20/0x20 [ 2118.343982][ T2208] ? load_image+0x420/0x420 [ 2118.348520][ T2208] panic+0x2ca/0x720 [ 2118.352437][ T2208] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2118.358613][ T2208] ? bpf_jit_dump+0xd0/0xd0 [ 2118.363151][ T2208] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 2118.368189][ T2209] 0x0000000036d7-0xc28001060036d7 : "" [ 2118.368204][ T2209] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1c929 [ 2118.385598][ T2208] ? _raw_spin_unlock+0x40/0x40 [ 2118.390486][ T2208] ? dvb_device_open+0xc9/0x360 [ 2118.395358][ T2208] check_panic_on_warn+0x84/0xa0 [ 2118.400313][ T2208] ? dvb_device_open+0xc9/0x360 [ 2118.405175][ T2208] end_report+0x6f/0x130 [ 2118.409429][ T2208] kasan_report+0x128/0x150 [ 2118.413945][ T2208] ? chrdev_open+0x385/0x600 [ 2118.418553][ T2208] ? dvb_device_open+0xc9/0x360 [ 2118.423427][ T2208] dvb_device_open+0xc9/0x360 [ 2118.428128][ T2208] chrdev_open+0x58c/0x600 [ 2118.432563][ T2208] ? cd_forget+0x160/0x160 [ 2118.436999][ T2208] do_dentry_open+0x880/0x14b0 [ 2118.441795][ T2208] ? cd_forget+0x160/0x160 [ 2118.446236][ T2208] path_openat+0x284f/0x3270 [ 2118.450860][ T2208] ? requeue_task_rt+0x400/0x400 [ 2118.455823][ T2208] ? verify_lock_unused+0x140/0x140 [ 2118.461051][ T2208] ? do_filp_open+0x430/0x430 [ 2118.465747][ T2208] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2118.471403][ T2208] ? asan.module_dtor+0x20/0x20 [ 2118.476281][ T2208] do_filp_open+0x1f2/0x430 [ 2118.480806][ T2208] ? vfs_tmpfile+0x620/0x620 [ 2118.485424][ T2208] ? _raw_spin_unlock+0x3a/0x40 [ 2118.490298][ T2208] ? alloc_fd+0x590/0x640 [ 2118.494658][ T2208] do_sys_openat2+0x134/0x1d0 [ 2118.499362][ T2208] ? lockdep_hardirqs_on+0x98/0x150 [ 2118.504582][ T2208] ? do_sys_open+0xe0/0xe0 [ 2118.509030][ T2208] ? __x64_sys_openat+0x123/0x160 [ 2118.514078][ T2208] __x64_sys_openat+0x139/0x160 [ 2118.518952][ T2208] do_syscall_64+0x55/0xb0 [ 2118.523393][ T2208] ? clear_bhb_loop+0x40/0x90 [ 2118.528097][ T2208] ? clear_bhb_loop+0x40/0x90 [ 2118.532794][ T2208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2118.538708][ T2208] RIP: 0033:0x7f9fa6f5e90e [ 2118.543136][ T2208] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2118.545797][ T2209] ftl_cs: FTL header corrupt! [ 2118.567422][ T2208] RSP: 002b:00007f9fa7edeb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2118.575860][ T2208] RAX: ffffffffffffffda RBX: 00007f9fa7edf6c0 RCX: 00007f9fa6f5e90e [ 2118.583850][ T2208] RDX: 0000000000000002 RSI: 00007f9fa7edec00 RDI: ffffffffffffff9c [ 2118.591837][ T2208] RBP: 00007f9fa7edec00 R08: 0000000000000000 R09: 0000000000000000 [ 2118.599821][ T2208] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 2118.607810][ T2208] R13: 00007f9fa7226218 R14: 00007f9fa7226180 R15: 00007ffd25faed58 [ 2118.615849][ T2208] [ 2118.619128][ T2208] Kernel Offset: disabled [ 2118.623441][ T2208] Rebooting in 86400 seconds..