last executing test programs: 4.192335704s ago: executing program 0 (id=191): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000300)={0x1d, r1, 0x2, {0x0, 0xf0}, 0xc295a7c9ee09b05c}, 0x3b) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0x1, {0x0, 0xf0}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000005c0)={&(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x4}, 0x1}, 0x18, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20000089}, 0x800) 4.116648598s ago: executing program 3 (id=192): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0xf) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write(r0, &(0x7f0000001340)="89d87df03855", 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000007c0)=[0x5], 0x0, 0x0, 0x4c}}, 0xa3) 4.072958031s ago: executing program 2 (id=193): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') r1 = fanotify_init(0x0, 0x101000) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1) fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000680)=""/247, 0xf7) 3.928805029s ago: executing program 0 (id=196): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x71) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x40000000}) 3.817130116s ago: executing program 3 (id=197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xff, 0x7, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0xeeee0000, 0x5000, 0xa, 0x0, 0x40, 0x1, 0x7d, 0x7f, 0x5, 0x3, 0x3, 0xfc}, {0xdddd1000, 0xdddd0000, 0xe, 0x5, 0x3, 0x9, 0x0, 0x9, 0x21, 0xa7, 0x5, 0x81}, {0x9526c2d4b9cd9956, 0xeeee0000, 0xc, 0x6, 0x4, 0x42, 0x5, 0xff, 0x8, 0x7, 0xe, 0x8}, {0x2000, 0xdddd1000, 0xb, 0x3, 0x6, 0x7, 0xae, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0xffff4001, 0x80a0000, 0xb, 0xa0, 0xb1, 0x8, 0x8, 0xa0, 0x84, 0xf, 0x1, 0xfd}, {0xffff1000, 0x2, 0x10, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0x7, 0x6}, {0xeeef0000, 0x30}, {0x10000, 0x7}, 0x80000031, 0x0, 0xffff1000, 0x52007, 0x5, 0x10800, 0x30000, [0x6800000000000000, 0x6, 0x5e, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.440611058s ago: executing program 3 (id=198): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x208, 0x8f, 0x207, 0x6, 0x3, 0x81, 0xfffffe33, 0x37d3048d}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x209, 0x6, 0x807, 0x2097}, 0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000004c0), 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)="0e", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 3.281459207s ago: executing program 2 (id=199): unshare(0x22020400) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) 3.173740554s ago: executing program 3 (id=200): r0 = socket$unix(0x1, 0x1, 0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa0028010}) 3.150905895s ago: executing program 2 (id=201): unshare(0x26000400) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) 2.922680278s ago: executing program 3 (id=202): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast1}, 0xa, 0x0, 0xfffd}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 2.702788501s ago: executing program 0 (id=203): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="0f01f90f01c23ef36df20f300f01cf450f28a500000000c4e199d09396900000c744240000000000c7442402ad990000c7442406000000000f01142448b800000080000000000f23c80f21f8350800e0000f23f80f01d1", 0x57}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.631064575s ago: executing program 3 (id=204): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020800000000000800000524050000082407000000009ef6230700000000a3a82f07070d240701060000fd800000001a4824030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x83, 0x2, "0810"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f0000000600)={0x40, 0x0, 0x2, "b01a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.453936426s ago: executing program 1 (id=205): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x6) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000040)=0x7fffffff, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 2.186515692s ago: executing program 0 (id=206): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5, 0x0, 0xc}, {}, {0xfffb, 0x2, 0x6}, {0x3}, {0x2, 0x0, 0x5, 0x3}, {0x8000, 0x0, 0x0, 0x80000}, {0x1, 0x7, 0x0, 0x420008}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x1002, 0x2}}, 0x80, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 2.178377732s ago: executing program 2 (id=207): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)="b3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 1.967502845s ago: executing program 0 (id=208): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file7\x00', 0x0) 1.834686742s ago: executing program 1 (id=209): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffffffffffffffff]}, 0x8, 0x0) r1 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r1}, &(0x7f00000000c0)=0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/202, 0xca}], 0x1) timer_settime(r2, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 1.603969106s ago: executing program 1 (id=210): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) socket$packet(0x11, 0x3, 0x300) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000640)=0x6, 0x4) sendto$inet(r0, &(0x7f00000000c0)="8689d46205a341", 0x7, 0x0, 0x0, 0x0) 1.317534433s ago: executing program 1 (id=211): io_setup(0xb, &(0x7f00000003c0)=0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000b0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) io_submit(r0, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000340)='p', 0x300}]) 1.178658921s ago: executing program 2 (id=212): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x128, 0x5802, 0x294, 0x0, 0x294, 0x288, 0x378, 0x378, 0x288, 0x378, 0x3, 0x0, {[{{@uncond, 0xf202, 0xa8, 0xc8, 0x52020000, {0x0, 0x600}}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private0, [], [], 'team_slave_1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1.013730161s ago: executing program 0 (id=213): syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000400)='./bus\x00', 0xa18008, &(0x7f00000005c0)=ANY=[@ANYBLOB="6167655f657874656e745f63616368652c6e6f6c617a7974696d652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c61636c2c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c61636c2c6e6f61636c2c636f6d70726573735f63616368652c6261636b67726f756e645f67633d6f66662c6e6f626172726965722c636f6d70726573735f63616368652c6d6f64653d6c66732c00a0f136a7b12c237938b84e413b4410176f83a54dc492582695e005d110d725abbe2adec1ac2f6f77d172f0a20b3c1a8f19a6b28a8e0ba53dc3bf8ebe1ba50407cd64781927026076251050bd3ce7", @ANYRESHEX=0x0, @ANYRES8=0x0], 0x1, 0x5505, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000440)='2$', 0x2, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x1) sendfile(r1, r1, 0x0, 0x80000000) fallocate(r1, 0x10, 0x1ff, 0x3) 994.983322ms ago: executing program 1 (id=214): syz_mount_image$nilfs2(&(0x7f00000005c0), &(0x7f0000000340)='./bus\x00', 0x8, &(0x7f00000002c0)=ANY=[], 0x1, 0xad4, &(0x7f0000001540)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x2) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) truncate(&(0x7f0000000080)='./file2\x00', 0x1ffd) 167.47663ms ago: executing program 2 (id=215): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5800003a, r0, 0x0) 0s ago: executing program 1 (id=216): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x5}, 'syz0\x00', 0x42}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r0, 0x5501) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.125' (ED25519) to the list of known hosts. [ 81.608331][ T5755] cgroup: Unknown subsys name 'net' [ 81.745976][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.501668][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.731341][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.740194][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.741848][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.749108][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.758828][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.762750][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.772927][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.782975][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.784867][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.798135][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.799425][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.806066][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.813775][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.821554][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.834487][ T5083] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.859239][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.877822][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.897053][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.901088][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.905575][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.918734][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.926520][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.928313][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.941848][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.391568][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 86.556312][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 86.589854][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 86.601489][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 86.681098][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.688426][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.696116][ T5767] bridge_slave_0: entered allmulticast mode [ 86.704153][ T5767] bridge_slave_0: entered promiscuous mode [ 86.748917][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.756145][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.765699][ T5767] bridge_slave_1: entered allmulticast mode [ 86.773006][ T5767] bridge_slave_1: entered promiscuous mode [ 86.876484][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.898784][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.905987][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.913589][ T5769] bridge_slave_0: entered allmulticast mode [ 86.921762][ T5769] bridge_slave_0: entered promiscuous mode [ 86.942863][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.950230][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.957513][ T5770] bridge_slave_0: entered allmulticast mode [ 86.964764][ T5770] bridge_slave_0: entered promiscuous mode [ 86.976038][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.985574][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.993629][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.000976][ T5768] bridge_slave_0: entered allmulticast mode [ 87.008326][ T5768] bridge_slave_0: entered promiscuous mode [ 87.016272][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.023693][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.032055][ T5769] bridge_slave_1: entered allmulticast mode [ 87.039389][ T5769] bridge_slave_1: entered promiscuous mode [ 87.046296][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.054295][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.061617][ T5770] bridge_slave_1: entered allmulticast mode [ 87.069222][ T5770] bridge_slave_1: entered promiscuous mode [ 87.086908][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.094263][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.102056][ T5768] bridge_slave_1: entered allmulticast mode [ 87.121372][ T5768] bridge_slave_1: entered promiscuous mode [ 87.194324][ T5767] team0: Port device team_slave_0 added [ 87.220376][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.254583][ T5767] team0: Port device team_slave_1 added [ 87.263401][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.296711][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.330659][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.365767][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.429277][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.436293][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.467563][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.508786][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.522555][ T5768] team0: Port device team_slave_0 added [ 87.530326][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.537320][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.564869][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.580470][ T5770] team0: Port device team_slave_0 added [ 87.601944][ T5768] team0: Port device team_slave_1 added [ 87.633491][ T5770] team0: Port device team_slave_1 added [ 87.704282][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.711501][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.738682][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.753846][ T5769] team0: Port device team_slave_0 added [ 87.799217][ T5767] hsr_slave_0: entered promiscuous mode [ 87.806659][ T5767] hsr_slave_1: entered promiscuous mode [ 87.815224][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.823377][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.850023][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.863540][ T5769] team0: Port device team_slave_1 added [ 87.870779][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.878346][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.904724][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.921442][ T51] Bluetooth: hci1: command tx timeout [ 87.929390][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.936692][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.965845][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.977756][ T51] Bluetooth: hci2: command tx timeout [ 87.983497][ T51] Bluetooth: hci0: command tx timeout [ 87.989564][ T5778] Bluetooth: hci3: command tx timeout [ 88.047637][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.054662][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.080910][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.100100][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.107084][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.133233][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.232378][ T5768] hsr_slave_0: entered promiscuous mode [ 88.239650][ T5768] hsr_slave_1: entered promiscuous mode [ 88.245932][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.253928][ T5768] Cannot create hsr debugfs directory [ 88.271683][ T5769] hsr_slave_0: entered promiscuous mode [ 88.278680][ T5769] hsr_slave_1: entered promiscuous mode [ 88.284905][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.295872][ T5769] Cannot create hsr debugfs directory [ 88.307250][ T5770] hsr_slave_0: entered promiscuous mode [ 88.314781][ T5770] hsr_slave_1: entered promiscuous mode [ 88.321140][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.328980][ T5770] Cannot create hsr debugfs directory [ 88.784142][ T5767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.801081][ T5767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.816732][ T5767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.827255][ T5767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.898795][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.910923][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.936012][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.960249][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.042199][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.064125][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.094660][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.122382][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.194765][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.216834][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.235393][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.262112][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.292044][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.365966][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.389316][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.421886][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.429237][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.450435][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.457786][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.502095][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.553643][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.560830][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.576494][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.583741][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.712007][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.785777][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.801980][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.832129][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.839341][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.889332][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.896552][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.935780][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.978004][ T51] Bluetooth: hci1: command tx timeout [ 89.992183][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.999442][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.058166][ T51] Bluetooth: hci0: command tx timeout [ 90.063820][ T51] Bluetooth: hci3: command tx timeout [ 90.071267][ T5779] Bluetooth: hci2: command tx timeout [ 90.125616][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.132929][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.320535][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.435401][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.477138][ T5770] veth0_vlan: entered promiscuous mode [ 90.515026][ T5770] veth1_vlan: entered promiscuous mode [ 90.633060][ T5770] veth0_macvtap: entered promiscuous mode [ 90.666726][ T5767] veth0_vlan: entered promiscuous mode [ 90.685950][ T5770] veth1_macvtap: entered promiscuous mode [ 90.713410][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.726464][ T5767] veth1_vlan: entered promiscuous mode [ 90.784855][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.814317][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.828735][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.838742][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.848312][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.859057][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.903580][ T5768] veth0_vlan: entered promiscuous mode [ 90.956040][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.969237][ T5767] veth0_macvtap: entered promiscuous mode [ 90.986619][ T5767] veth1_macvtap: entered promiscuous mode [ 90.999944][ T5768] veth1_vlan: entered promiscuous mode [ 91.081220][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.091417][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.107841][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.119564][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.121127][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.155121][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.166798][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.181151][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.233610][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.244037][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.253461][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.261511][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.273129][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.282380][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.314814][ T5768] veth0_macvtap: entered promiscuous mode [ 91.325912][ T5769] veth0_vlan: entered promiscuous mode [ 91.346148][ T5768] veth1_macvtap: entered promiscuous mode [ 91.410380][ T5769] veth1_vlan: entered promiscuous mode [ 91.490239][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.517549][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.530856][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.542462][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.563499][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.564706][ T5861] syz.2.3[5861]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.585557][ T5861] loop2: detected capacity change from 0 to 64 [ 91.652202][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.653820][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.663230][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.663275][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.663291][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.669163][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.734608][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.836232][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.848813][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.858784][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.869544][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.910696][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.923154][ T5769] veth0_macvtap: entered promiscuous mode [ 91.937482][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.951843][ T5769] veth1_macvtap: entered promiscuous mode [ 92.057472][ T51] Bluetooth: hci1: command tx timeout [ 92.066161][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.088465][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.118103][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.138155][ T51] Bluetooth: hci3: command tx timeout [ 92.143737][ T51] Bluetooth: hci2: command tx timeout [ 92.147283][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.150061][ T51] Bluetooth: hci0: command tx timeout [ 92.168295][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.178880][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.190800][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.202759][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.213632][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.226569][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.240251][ T9] cfg80211: failed to load regulatory.db [ 92.246784][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.256897][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.271978][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.283677][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.359940][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.375112][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.385045][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.394057][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.477310][ T2936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.510067][ T2936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.642249][ T2924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.658755][ T2924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.666353][ T5870] Invalid ELF header magic: != ELF [ 92.848788][ T2936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.878625][ T2936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.932659][ T5874] loop1: detected capacity change from 0 to 256 [ 92.991226][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.009018][ T5874] ======================================================= [ 93.009018][ T5874] WARNING: The mand mount option has been deprecated and [ 93.009018][ T5874] and is ignored by this kernel. Remove the mand [ 93.009018][ T5874] option from the mount to silence this warning. [ 93.009018][ T5874] ======================================================= [ 93.058251][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.130598][ T5874] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xc3ae174d, utbl_chksum : 0xe619d30d) [ 93.173869][ T5874] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 93.370479][ T5878] loop2: detected capacity change from 0 to 4096 [ 93.471926][ T5882] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.764649][ T5889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.138210][ T51] Bluetooth: hci1: command tx timeout [ 94.220202][ T51] Bluetooth: hci2: command tx timeout [ 94.225706][ T51] Bluetooth: hci3: command tx timeout [ 94.232840][ T5779] Bluetooth: hci0: command tx timeout [ 94.289968][ T5902] capability: warning: `syz.2.19' uses deprecated v2 capabilities in a way that may be insecure [ 94.321845][ T28] audit: type=1326 audit(1770690245.606:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5899af79 code=0x7ffc0000 [ 94.392031][ T5902] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 94.418108][ T28] audit: type=1326 audit(1770690245.606:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5899af79 code=0x7ffc0000 [ 94.423666][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 94.477979][ T28] audit: type=1326 audit(1770690245.606:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c5899af79 code=0x7ffc0000 [ 94.531005][ T28] audit: type=1326 audit(1770690245.606:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5899af79 code=0x7ffc0000 [ 94.552981][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.595055][ T28] audit: type=1326 audit(1770690245.606:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5899af79 code=0x7ffc0000 [ 94.641805][ T28] audit: type=1326 audit(1770690245.606:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6c5899af79 code=0x7ffc0000 [ 94.675517][ T5905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.714136][ T28] audit: type=1326 audit(1770690245.606:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5899af79 code=0x7ffc0000 [ 94.736127][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.750406][ T28] audit: type=1326 audit(1770690245.606:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6c5899af79 code=0x7ffc0000 [ 94.772206][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.807610][ T28] audit: type=1326 audit(1770690245.616:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5899af79 code=0x7ffc0000 [ 94.847280][ T5913] netlink: 'syz.2.24': attribute type 1 has an invalid length. [ 94.851831][ T28] audit: type=1326 audit(1770690245.616:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5899af79 code=0x7ffc0000 [ 94.889403][ T5913] netlink: 'syz.2.24': attribute type 2 has an invalid length. [ 94.930977][ T5913] Zero length message leads to an empty skb [ 96.039016][ T5920] loop2: detected capacity change from 0 to 40427 [ 96.084200][ T5939] io-wq is not configured for unbound workers [ 96.089813][ T5920] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 96.150787][ T5920] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 96.187997][ T5920] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 96.222222][ T5920] F2FS-fs (loop2): Found nat_bits in checkpoint [ 96.243948][ T5929] loop1: detected capacity change from 0 to 40427 [ 96.255785][ T5929] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 96.303283][ T5929] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 96.316591][ T5945] TCP: tcp_parse_options: Illegal window scaling value 94 > 14 received [ 96.331510][ T5929] F2FS-fs (loop1): invalid crc value [ 96.362471][ T5929] F2FS-fs (loop1): Found nat_bits in checkpoint [ 96.453070][ T5920] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 96.488548][ T5920] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 96.496213][ T5929] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 96.528684][ T5929] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 96.705759][ T5929] F2FS-fs (loop1): Stopped filesystem due to reason: 0 [ 97.194005][ T5960] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.707081][ T5958] loop0: detected capacity change from 0 to 40427 [ 97.757454][ T5958] F2FS-fs (loop0): heap/no_heap options were deprecated [ 97.775539][ T5958] F2FS-fs (loop0): Image doesn't support compression [ 97.795698][ T5958] F2FS-fs (loop0): heap/no_heap options were deprecated [ 97.837615][ T5958] F2FS-fs (loop0): invalid crc value [ 97.864501][ T5958] F2FS-fs (loop0): Found nat_bits in checkpoint [ 98.003684][ T5958] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 98.175699][ T5958] syz.0.39: attempt to access beyond end of device [ 98.175699][ T5958] loop0: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 98.210037][ T5964] loop1: detected capacity change from 0 to 32768 [ 98.238963][ T5958] syz.0.39: attempt to access beyond end of device [ 98.238963][ T5958] loop0: rw=524288, sector=77824, nr_sectors = 8 limit=40427 [ 98.246420][ T5964] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.41 (5964) [ 98.279866][ T5958] syz.0.39: attempt to access beyond end of device [ 98.279866][ T5958] loop0: rw=524288, sector=77840, nr_sectors = 16 limit=40427 [ 98.318516][ T5958] syz.0.39: attempt to access beyond end of device [ 98.318516][ T5958] loop0: rw=524288, sector=77872, nr_sectors = 8 limit=40427 [ 98.333741][ T5964] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.347922][ T5964] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 98.357202][ T5958] syz.0.39: attempt to access beyond end of device [ 98.357202][ T5958] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 98.375884][ T5964] BTRFS info (device loop1): using free space tree [ 98.507062][ T5768] syz-executor: attempt to access beyond end of device [ 98.507062][ T5768] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 98.538820][ T5964] BTRFS info (device loop1): enabling ssd optimizations [ 98.558067][ T5964] BTRFS info (device loop1): auto enabling async discard [ 98.573412][ T5768] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 99.209068][ T11] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 99.620414][ T5767] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 99.734222][ T6003] netlink: 'syz.0.44': attribute type 39 has an invalid length. [ 100.507222][ T6018] loop0: detected capacity change from 0 to 2048 [ 100.579102][ T6018] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.691581][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 100.691598][ T28] audit: type=1800 audit(1770690251.986:20): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.57" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 100.835102][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.873356][ T6026] loop2: detected capacity change from 0 to 128 [ 100.952299][ T6026] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.985465][ T6026] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.160344][ T5770] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.256492][ T6032] mmap: syz.2.61 (6032) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.364504][ T5757] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.512700][ T6037] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000005 [ 101.570976][ T5757] usb 1-1: Using ep0 maxpacket: 32 [ 101.590651][ T5757] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.627754][ T5757] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.638673][ T5757] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 101.652600][ T5757] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 101.688364][ T5757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.743376][ T5757] usb 1-1: config 0 descriptor?? [ 101.847235][ T6051] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.258058][ T5757] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0001/input/input5 [ 102.298098][ T6058] loop1: detected capacity change from 0 to 4096 [ 102.373184][ T5757] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0001/input/input6 [ 102.411067][ T6058] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 102.576719][ T5757] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 102.600509][ T6058] ntfs3: loop1: Failed to load $Extend (-22). [ 102.638678][ T6058] ntfs3: loop1: Failed to initialize $Extend. [ 103.249035][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'. [ 103.258327][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'. [ 103.322255][ C0] kye 0003:0458:5011.0001: usb_submit_urb(ctrl) failed: -1 [ 103.357585][ T5757] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.484506][ T6076] loop2: detected capacity change from 0 to 1024 [ 103.557633][ T5757] usb 2-1: Using ep0 maxpacket: 16 [ 103.573647][ T5757] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 103.584065][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.592821][ T5757] usb 2-1: Product: syz [ 103.597287][ T5757] usb 2-1: Manufacturer: syz [ 103.602471][ T5757] usb 2-1: SerialNumber: syz [ 103.618289][ T5757] usb 2-1: config 0 descriptor?? [ 104.037927][ T5757] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 104.059005][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'. [ 104.073546][ T5757] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 104.096656][ T5757] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 104.124851][ T5757] usb 2-1: media controller created [ 104.159447][ T5757] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.195086][ T788] usb 1-1: USB disconnect, device number 2 [ 104.295811][ T5757] zl10353_read_register: readreg error (reg=127, ret==0) [ 104.336260][ T5757] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 104.355603][ T5757] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 104.558335][ T6089] loop2: detected capacity change from 0 to 128 [ 104.588664][ T6089] FAT-fs (loop2): bogus number of FAT structure [ 104.601235][ T6089] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 104.611611][ T6089] FAT-fs (loop2): Can't find a valid FAT filesystem [ 104.870334][ T6095] loop2: detected capacity change from 0 to 4096 [ 104.978056][ T27] usb 2-1: USB disconnect, device number 2 [ 105.044934][ T6095] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 105.088716][ T27] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 105.199313][ T28] audit: type=1800 audit(1770690256.496:21): pid=6095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.83" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 106.106823][ T6119] input: syz1 as /devices/virtual/input/input7 [ 106.131567][ T788] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.142616][ T6121] Bluetooth: MGMT ver 1.22 [ 106.351340][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.387801][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.423043][ T788] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 106.434298][ T788] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 106.443085][ T788] usb 2-1: Manufacturer: syz [ 106.458724][ T788] usb 2-1: config 0 descriptor?? [ 106.479942][ T6129] loop0: detected capacity change from 0 to 512 [ 106.500122][ T6129] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.589520][ T6129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.662018][ T6134] loop2: detected capacity change from 0 to 4096 [ 106.677667][ T6134] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 106.686992][ T6129] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.859851][ T97] null_blk: rq ffff888022858000 timed out [ 106.866175][ T97] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 106.879199][ T97] null_blk: rq ffff888022858180 timed out [ 106.885070][ T97] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 106.895698][ T97] null_blk: rq ffff888022858300 timed out [ 106.901562][ T97] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 106.912208][ T97] null_blk: rq ffff888022858480 timed out [ 106.918097][ T97] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 106.928667][ T97] null_blk: rq ffff888022858600 timed out [ 106.934666][ T97] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 106.953740][ T97] null_blk: rq ffff888022858780 timed out [ 106.959617][ T97] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 106.970182][ T97] null_blk: rq ffff888022858900 timed out [ 106.976002][ T97] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 106.986594][ T97] null_blk: rq ffff888022858a80 timed out [ 106.992464][ T97] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 107.005229][ T97] null_blk: rq ffff888022858c00 timed out [ 107.011586][ T97] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 107.022233][ T97] null_blk: rq ffff888022858d80 timed out [ 107.028169][ T97] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 107.038791][ T97] null_blk: rq ffff888022858f00 timed out [ 107.044646][ T97] null_blk: rq ffff888022859080 timed out [ 107.053165][ T97] null_blk: rq ffff888022859200 timed out [ 107.059128][ T97] null_blk: rq ffff888022859380 timed out [ 107.065094][ T97] null_blk: rq ffff888022859500 timed out [ 107.070976][ T97] null_blk: rq ffff888022859680 timed out [ 107.077560][ T97] null_blk: rq ffff888022859800 timed out [ 107.083404][ T97] null_blk: rq ffff888022859980 timed out [ 107.089476][ T97] null_blk: rq ffff888022859b00 timed out [ 107.095337][ T97] null_blk: rq ffff888022859c80 timed out [ 107.101853][ T97] null_blk: rq ffff888022859e00 timed out [ 107.107730][ T97] null_blk: rq ffff888022859f80 timed out [ 107.113827][ T97] null_blk: rq ffff88802285a100 timed out [ 107.119688][ T97] null_blk: rq ffff88802285a280 timed out [ 107.126514][ T97] null_blk: rq ffff88802285a400 timed out [ 107.132443][ T97] null_blk: rq ffff88802285a580 timed out [ 107.138337][ T97] null_blk: rq ffff88802285a700 timed out [ 107.144185][ T97] null_blk: rq ffff88802285a880 timed out [ 107.150343][ T97] null_blk: rq ffff88802285aa00 timed out [ 107.156182][ T97] null_blk: rq ffff88802285ab80 timed out [ 107.162191][ T97] null_blk: rq ffff88802285ad00 timed out [ 107.168150][ T97] null_blk: rq ffff88802285ae80 timed out [ 107.174057][ T97] null_blk: rq ffff88802285b000 timed out [ 107.179947][ T97] null_blk: rq ffff88802285b180 timed out [ 107.185740][ T97] null_blk: rq ffff88802285b300 timed out [ 107.191667][ T97] null_blk: rq ffff88802285b480 timed out [ 107.197543][ T97] null_blk: rq ffff88802285b600 timed out [ 107.203346][ T97] null_blk: rq ffff88802285b780 timed out [ 107.209190][ T97] null_blk: rq ffff88802285b900 timed out [ 107.214976][ T97] null_blk: rq ffff88802285ba80 timed out [ 107.220888][ T97] null_blk: rq ffff88802285bc00 timed out [ 107.226682][ T97] null_blk: rq ffff88802285bd80 timed out [ 107.232594][ T97] null_blk: rq ffff88802285bf00 timed out [ 107.238421][ T97] null_blk: rq ffff88802285c080 timed out [ 107.244223][ T97] null_blk: rq ffff88802285c200 timed out [ 107.250086][ T97] null_blk: rq ffff88802285c380 timed out [ 107.255876][ T97] null_blk: rq ffff88802285c500 timed out [ 107.261856][ T97] null_blk: rq ffff88802285c680 timed out [ 107.267777][ T97] null_blk: rq ffff88802285c800 timed out [ 107.273584][ T97] null_blk: rq ffff88802285c980 timed out [ 107.279784][ T97] null_blk: rq ffff88802285cb00 timed out [ 107.285767][ T97] null_blk: rq ffff88802285cc80 timed out [ 107.291681][ T97] null_blk: rq ffff88802285ce00 timed out [ 107.297540][ T97] null_blk: rq ffff88802285cf80 timed out [ 107.303341][ T97] null_blk: rq ffff88802285d100 timed out [ 107.309198][ T97] null_blk: rq ffff88802285d280 timed out [ 107.315080][ T97] null_blk: rq ffff88802285d400 timed out [ 107.320935][ T97] null_blk: rq ffff88802285d580 timed out [ 107.326723][ T97] null_blk: rq ffff88802285d700 timed out [ 107.332557][ T97] null_blk: rq ffff88802285d880 timed out [ 107.338396][ T97] null_blk: rq ffff88802285da00 timed out [ 107.344194][ T97] null_blk: rq ffff88802285db80 timed out [ 107.350051][ T97] null_blk: rq ffff88802285dd00 timed out [ 107.355847][ T97] null_blk: rq ffff88802285de80 timed out [ 107.584150][ T788] uclogic 0003:256C:006D.0002: v1 frame probing failed: -71 [ 107.596601][ T788] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 107.604347][ T788] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 107.627682][ T788] usb 2-1: USB disconnect, device number 3 [ 107.717218][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.945979][ T6150] loop3: detected capacity change from 0 to 512 [ 107.975306][ T6146] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2525290536 (5050581072 ns) > initial count (447779868 ns). Using initial count to start timer. [ 108.097291][ T6150] EXT4-fs: test_dummy_encryption requires encrypt feature [ 108.282483][ T6158] loop1: detected capacity change from 0 to 512 [ 108.294991][ T6158] EXT4-fs: Ignoring removed i_version option [ 108.331444][ T6158] EXT4-fs: Ignoring removed oldalloc option [ 108.374893][ T6158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.437710][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.558188][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.657580][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 108.696870][ T23] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 108.715811][ T23] usb 4-1: config 0 has no interface number 0 [ 108.737695][ T23] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 108.774835][ T23] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 108.786997][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.821834][ T23] usb 4-1: Product: syz [ 108.826112][ T23] usb 4-1: Manufacturer: syz [ 108.842125][ T23] usb 4-1: SerialNumber: syz [ 108.864342][ T23] usb 4-1: config 0 descriptor?? [ 108.875886][ T6150] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 109.108338][ T23] asix: probe of 4-1:0.188 failed with error -71 [ 109.154491][ T23] usb 4-1: USB disconnect, device number 2 [ 109.336271][ T6177] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 109.368093][ T6177] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 109.827712][ T5779] Bluetooth: hci3: command tx timeout [ 110.198516][ T6194] loop0: detected capacity change from 0 to 8192 [ 110.240193][ T6197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.262366][ T6194] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.359187][ T6189] loop1: detected capacity change from 0 to 32768 [ 110.481805][ T6189] JBD2: Ignoring recovery information on journal [ 110.629211][ T6189] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 110.944011][ T28] audit: type=1800 audit(1770690262.236:22): pid=6189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.119" name="file1" dev="loop1" ino=17059 res=0 errno=0 [ 111.385699][ T6189] syz.1.119 (6189) used greatest stack depth: 18768 bytes left [ 111.602686][ T5767] ocfs2: Unmounting device (7,1) on (node local) [ 111.679233][ T6221] sit0: entered promiscuous mode [ 111.738215][ T6221] netlink: 'syz.3.135': attribute type 1 has an invalid length. [ 111.788000][ T6221] netlink: 1 bytes leftover after parsing attributes in process `syz.3.135'. [ 112.111824][ T6236] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.136054][ T6236] netlink: 'syz.1.134': attribute type 12 has an invalid length. [ 112.163186][ T6236] netlink: 'syz.1.134': attribute type 29 has an invalid length. [ 112.173801][ T6236] netlink: 148 bytes leftover after parsing attributes in process `syz.1.134'. [ 112.205330][ T6236] netlink: 'syz.1.134': attribute type 1 has an invalid length. [ 112.215710][ T6230] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=2846233827 (22769870616 ns) > initial count (14430147192 ns). Using initial count to start timer. [ 112.236217][ T6236] netlink: 'syz.1.134': attribute type 2 has an invalid length. [ 112.252184][ T6236] netlink: 39 bytes leftover after parsing attributes in process `syz.1.134'. [ 112.263748][ T6230] kvm: apic: phys broadcast and lowest prio [ 112.270381][ T6230] kvm: Disabled LAPIC found during irq injection [ 112.406243][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 112.432613][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 112.453036][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 112.478914][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 112.486653][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 112.494860][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 112.503315][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 112.511324][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 112.519561][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 112.527209][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 112.544050][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 112.559231][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 112.590643][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 112.613641][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 112.641197][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 112.670228][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 112.694905][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 112.725120][ T23] hid-generic 0006:0004:0009.0003: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 112.962177][ T6255] loop3: detected capacity change from 0 to 1024 [ 113.019413][ T6255] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.074421][ T6251] fido_id[6251]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 113.126416][ T6255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.376137][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.585168][ T6265] loop0: detected capacity change from 0 to 2048 [ 113.671066][ T6267] loop3: detected capacity change from 0 to 1024 [ 113.706730][ T6269] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.058870][ T1130] hfsplus: b-tree write err: -5, ino 4 [ 114.197311][ T6275] loop2: detected capacity change from 0 to 2048 [ 114.269508][ T6275] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 114.306973][ T6275] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.422322][ T6279] loop1: detected capacity change from 0 to 4096 [ 114.539776][ T6279] ntfs3: loop1: ino=b, Correct links count -> 1. [ 114.557220][ T6279] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 114.970555][ T6285] Illegal XDP return value 32768 on prog (id 13) dev syz_tun, expect packet loss! [ 115.411077][ T6299] loop2: detected capacity change from 0 to 1024 [ 116.180715][ T6324] loop2: detected capacity change from 0 to 1024 [ 116.222464][ T6324] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.283784][ T6324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.391093][ T6329] loop1: detected capacity change from 0 to 1024 [ 116.526042][ T6306] loop3: detected capacity change from 0 to 32768 [ 116.545309][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.639107][ T11] hfsplus: b-tree write err: -5, ino 4 [ 116.652228][ T6306] JBD2: Ignoring recovery information on journal [ 116.806288][ T6306] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 117.078187][ T28] audit: type=1800 audit(1770690268.366:23): pid=6306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.168" name="file1" dev="loop3" ino=17059 res=0 errno=0 [ 117.573411][ T5769] ocfs2: Unmounting device (7,3) on (node local) [ 118.436295][ T6355] loop2: detected capacity change from 0 to 32768 [ 118.449615][ T6355] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.186 (6355) [ 118.483666][ T6355] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 118.499238][ T6355] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 118.512334][ T6355] BTRFS info (device loop2): enabling auto defrag [ 118.520491][ T6355] BTRFS info (device loop2): force clearing of disk cache [ 118.527826][ T6355] BTRFS info (device loop2): max_inline at 0 [ 118.533882][ T6355] BTRFS info (device loop2): turning on sync discard [ 118.540849][ T6355] BTRFS info (device loop2): using free space tree [ 118.684188][ T6355] BTRFS info (device loop2): enabling ssd optimizations [ 118.693155][ T6355] BTRFS info (device loop2): rebuilding free space tree [ 118.883767][ T28] audit: type=1800 audit(1770690270.176:24): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.186" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 119.355303][ T6385] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 119.454990][ T5770] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 120.362671][ T6390] loop1: detected capacity change from 0 to 32768 [ 120.380043][ T6390] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.194 (6390) [ 120.425173][ T6390] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.438064][ T6390] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 120.451410][ T6390] BTRFS info (device loop1): using free space tree [ 120.555551][ T28] audit: type=1326 audit(1770690271.846:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7d19af79 code=0x7ffc0000 [ 120.591245][ T6390] BTRFS info (device loop1): enabling ssd optimizations [ 120.610178][ T6390] BTRFS info (device loop1): auto enabling async discard [ 120.629087][ T28] audit: type=1326 audit(1770690271.876:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c7d19af79 code=0x7ffc0000 [ 120.720869][ T28] audit: type=1326 audit(1770690271.876:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7d19af79 code=0x7ffc0000 [ 120.822261][ T28] audit: type=1326 audit(1770690271.876:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7d19af79 code=0x7ffc0000 [ 120.898075][ T28] audit: type=1326 audit(1770690271.886:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c7d19af79 code=0x7ffc0000 [ 120.984813][ T28] audit: type=1326 audit(1770690271.886:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7d19af79 code=0x7ffc0000 [ 121.047586][ T28] audit: type=1326 audit(1770690271.886:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7d19af79 code=0x7ffc0000 [ 121.071390][ T5767] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 121.113432][ T28] audit: type=1326 audit(1770690271.886:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0c7d19af79 code=0x7ffc0000 [ 121.249676][ T5823] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 121.336764][ T6063] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (6063) [ 121.351323][ T6438] binder: 6437:6438 ioctl 4018620d 0 returned -22 [ 121.452633][ T6444] binder: 6437:6444 ioctl c0306201 0 returned -14 [ 121.497652][ T5823] usb 4-1: Using ep0 maxpacket: 16 [ 121.516003][ T5823] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 121.537880][ T5823] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.571480][ T5823] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.614276][ T5823] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.634159][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.654495][ T5823] usb 4-1: Product: syz [ 121.663831][ T5823] usb 4-1: Manufacturer: syz [ 121.679112][ T5823] usb 4-1: SerialNumber: syz [ 121.819900][ T6447] loop0: detected capacity change from 0 to 8192 [ 121.856861][ T6447] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 121.957479][ T6447] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 122.017688][ T6447] REISERFS (device loop0): using ordered data mode [ 122.024525][ T6447] reiserfs: using flush barriers [ 122.036217][ T6447] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 122.065589][ T6447] REISERFS (device loop0): checking transaction log (loop0) [ 122.120402][ T6447] REISERFS (device loop0): Using r5 hash to sort names [ 122.133888][ T5823] usb 4-1: 0:2 : does not exist [ 122.170515][ T6447] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 122.547281][ T6460] loop1: detected capacity change from 0 to 2048 [ 122.622415][ T6464] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.719330][ T6464] NILFS (loop1): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 122.732831][ T6464] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=2) [ 122.758948][ T5823] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 122.774315][ T6464] Remounting filesystem read-only [ 122.784114][ T2924] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 122.807648][ T2924] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 122.812381][ T6465] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 122.845014][ T2924] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 122.870501][ T2924] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 122.893319][ T5823] usb 4-1: USB disconnect, device number 3 [ 122.906061][ T2924] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 122.923271][ T2924] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 122.943522][ T2924] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 122.980763][ T2924] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 122.991144][ T2924] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 122.999278][ T2924] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 123.027170][ T2924] NILFS (loop1): discard dirty page: offset=65536, ino=3 [ 123.041616][ T2924] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 123.052015][ T2924] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 123.074002][ T2924] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 123.082772][ T2924] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 123.103039][ T2924] NILFS (loop1): discard dirty page: offset=0, ino=18 [ 123.118831][ T2924] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 123.126201][ T2924] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 123.141896][ T2924] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 123.152271][ T2924] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 123.164810][ T2924] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 123.173098][ T2924] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 123.206159][ T2924] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 123.230316][ T2924] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 123.244146][ T2924] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 123.273159][ T2924] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 123.281254][ T2924] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 123.288942][ T2924] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 123.298425][ T2924] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 123.308610][ T2924] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 123.322776][ T6460] NILFS (loop1): mounting fs with errors [ 123.400062][ T6464] ------------[ cut here ]------------ [ 123.405940][ T6464] WARNING: CPU: 0 PID: 6464 at fs/buffer.c:1188 mark_buffer_dirty+0x2bb/0x4c0 [ 123.415122][ T6464] Modules linked in: [ 123.419542][ T6464] CPU: 0 PID: 6464 Comm: segctord Not tainted syzkaller #0 [ 123.426809][ T6464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 123.437159][ T6464] RIP: 0010:mark_buffer_dirty+0x2bb/0x4c0 [ 123.443040][ T6464] Code: 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 9f 9a fc ff e8 ca c5 88 ff 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 0a 09 e8 ff e8 b5 c5 88 ff <0f> 0b e9 84 fd ff ff e8 a9 c5 88 ff 0f 0b e9 b0 fd ff ff e8 9d c5 [ 123.462913][ T6464] RSP: 0018:ffffc90019a076f0 EFLAGS: 00010293 [ 123.469114][ T6464] RAX: ffffffff81fe4efb RBX: ffff88805e34f488 RCX: ffff888027d08000 [ 123.477237][ T6464] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 123.485422][ T6464] RBP: ffffc90019a07b01 R08: ffff88805e34f48f R09: 1ffff1100bc69e91 [ 123.493571][ T6464] R10: dffffc0000000000 R11: ffffed100bc69e92 R12: 1ffff1100f0fe9c3 [ 123.501852][ T6464] R13: ffff8880787f4e28 R14: ffff88805dfdd328 R15: 1ffff1100f0fe9c5 [ 123.510002][ T6464] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 123.519050][ T6464] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.525706][ T6464] CR2: 00007fd465407498 CR3: 00000000629d7000 CR4: 00000000003506f0 [ 123.533833][ T6464] Call Trace: [ 123.537180][ T6464] [ 123.540200][ T6464] nilfs_segctor_do_construct+0x307/0x68a0 [ 123.546111][ T6464] ? verify_lock_unused+0x140/0x140 [ 123.551464][ T6464] ? verify_lock_unused+0x140/0x140 [ 123.556748][ T6464] ? nilfs_transaction_unlock+0x220/0x220 [ 123.562610][ T6464] ? nilfs_bmap_test_and_clear_dirty+0x50/0x70 [ 123.568889][ T6464] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 123.574416][ T6464] ? __lock_acquire+0x7d40/0x7d40 [ 123.579621][ T6464] ? __rwlock_init+0x150/0x150 [ 123.584470][ T6464] ? do_raw_spin_unlock+0x121/0x230 [ 123.589915][ T6464] ? _raw_spin_unlock+0x28/0x40 [ 123.594835][ T6464] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 123.600443][ T6464] nilfs_segctor_construct+0x17b/0x690 [ 123.606000][ T6464] nilfs_segctor_thread+0x536/0x10d0 [ 123.611440][ T6464] ? nilfs_iput_work_func+0x70/0x70 [ 123.616699][ T6464] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 123.622756][ T6464] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 123.628757][ T6464] ? wake_bit_function+0x200/0x200 [ 123.633984][ T6464] ? __kthread_parkme+0x7a/0x1c0 [ 123.639015][ T6464] kthread+0x2fa/0x390 [ 123.643140][ T6464] ? nilfs_iput_work_func+0x70/0x70 [ 123.648444][ T6464] ? kthread_blkcg+0xd0/0xd0 [ 123.653100][ T6464] ret_from_fork+0x48/0x80 [ 123.657750][ T6464] ? kthread_blkcg+0xd0/0xd0 [ 123.662411][ T6464] ret_from_fork_asm+0x11/0x20 [ 123.667252][ T6464] [ 123.670353][ T6464] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 123.677673][ T6464] CPU: 0 PID: 6464 Comm: segctord Not tainted syzkaller #0 [ 123.684914][ T6464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 123.695012][ T6464] Call Trace: [ 123.698343][ T6464] [ 123.701316][ T6464] dump_stack_lvl+0x18c/0x250 [ 123.706045][ T6464] ? show_regs_print_info+0x20/0x20 [ 123.711283][ T6464] ? load_image+0x400/0x400 [ 123.715850][ T6464] panic+0x2dc/0x730 [ 123.719787][ T6464] ? bpf_jit_dump+0xd0/0xd0 [ 123.724338][ T6464] ? ret_from_fork_asm+0x11/0x20 [ 123.729329][ T6464] __warn+0x2e0/0x470 [ 123.733341][ T6464] ? mark_buffer_dirty+0x2bb/0x4c0 [ 123.738495][ T6464] ? mark_buffer_dirty+0x2bb/0x4c0 [ 123.743642][ T6464] report_bug+0x2be/0x4f0 [ 123.748016][ T6464] ? mark_buffer_dirty+0x2bb/0x4c0 [ 123.753160][ T6464] ? mark_buffer_dirty+0x2bb/0x4c0 [ 123.758310][ T6464] ? mark_buffer_dirty+0x2bd/0x4c0 [ 123.763455][ T6464] handle_bug+0xcf/0x120 [ 123.767743][ T6464] exc_invalid_op+0x1a/0x50 [ 123.772371][ T6464] asm_exc_invalid_op+0x1a/0x20 [ 123.777254][ T6464] RIP: 0010:mark_buffer_dirty+0x2bb/0x4c0 [ 123.783196][ T6464] Code: 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 9f 9a fc ff e8 ca c5 88 ff 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 0a 09 e8 ff e8 b5 c5 88 ff <0f> 0b e9 84 fd ff ff e8 a9 c5 88 ff 0f 0b e9 b0 fd ff ff e8 9d c5 [ 123.802859][ T6464] RSP: 0018:ffffc90019a076f0 EFLAGS: 00010293 [ 123.808963][ T6464] RAX: ffffffff81fe4efb RBX: ffff88805e34f488 RCX: ffff888027d08000 [ 123.816970][ T6464] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 123.824978][ T6464] RBP: ffffc90019a07b01 R08: ffff88805e34f48f R09: 1ffff1100bc69e91 [ 123.832994][ T6464] R10: dffffc0000000000 R11: ffffed100bc69e92 R12: 1ffff1100f0fe9c3 [ 123.841127][ T6464] R13: ffff8880787f4e28 R14: ffff88805dfdd328 R15: 1ffff1100f0fe9c5 [ 123.849157][ T6464] ? mark_buffer_dirty+0x2bb/0x4c0 [ 123.854325][ T6464] nilfs_segctor_do_construct+0x307/0x68a0 [ 123.860203][ T6464] ? verify_lock_unused+0x140/0x140 [ 123.865888][ T6464] ? verify_lock_unused+0x140/0x140 [ 123.871126][ T6464] ? nilfs_transaction_unlock+0x220/0x220 [ 123.876888][ T6464] ? nilfs_bmap_test_and_clear_dirty+0x50/0x70 [ 123.883089][ T6464] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 123.888585][ T6464] ? __lock_acquire+0x7d40/0x7d40 [ 123.893641][ T6464] ? __rwlock_init+0x150/0x150 [ 123.898467][ T6464] ? do_raw_spin_unlock+0x121/0x230 [ 123.903703][ T6464] ? _raw_spin_unlock+0x28/0x40 [ 123.908583][ T6464] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 123.914097][ T6464] nilfs_segctor_construct+0x17b/0x690 [ 123.919605][ T6464] nilfs_segctor_thread+0x536/0x10d0 [ 123.925040][ T6464] ? nilfs_iput_work_func+0x70/0x70 [ 123.930289][ T6464] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 123.936216][ T6464] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 123.942143][ T6464] ? wake_bit_function+0x200/0x200 [ 123.947320][ T6464] ? __kthread_parkme+0x7a/0x1c0 [ 123.952303][ T6464] kthread+0x2fa/0x390 [ 123.956401][ T6464] ? nilfs_iput_work_func+0x70/0x70 [ 123.961628][ T6464] ? kthread_blkcg+0xd0/0xd0 [ 123.966252][ T6464] ret_from_fork+0x48/0x80 [ 123.970788][ T6464] ? kthread_blkcg+0xd0/0xd0 [ 123.975611][ T6464] ret_from_fork_asm+0x11/0x20 [ 123.980424][ T6464] [ 123.984054][ T6464] Kernel Offset: disabled [ 123.988455][ T6464] Rebooting in 86400 seconds..