last executing test programs: 1m12.308057627s ago: executing program 0 (id=124): unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x1048e2) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 1m12.168385404s ago: executing program 0 (id=128): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x49, [0x9, 0x7, 0x2, 0x4, 0x8, 0x155f, 0x10000006, 0x3, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0xfffffff7, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x8002, 0x5, 0x5, 0xd500, 0x8, 0x79, 0x7, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff9, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100089, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x110000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x9b54, 0x8, 0x274, 0x46, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000183, 0x2, 0x7, 0xf2, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x8000b, 0x7, 0xfffffffffffffff8, 0x9, 0x4], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ipvlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m11.755524383s ago: executing program 0 (id=131): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000940), 0x4) sendmsg$kcm(r0, 0x0, 0x4805) 1m11.521462504s ago: executing program 0 (id=133): syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000400)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0x2b4, &(0x7f00000000c0)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@grpquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000580)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) 1m10.555159889s ago: executing program 0 (id=142): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x80) socket$packet(0x11, 0x2, 0x300) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000380)={0xa, &(0x7f00000000c0)=[{0x20, '\x00', @data, 0xfff}]}) 1m8.943433125s ago: executing program 0 (id=149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x2, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0xc, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x8, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0x101, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0x1, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x5, 0x8001}, {0x4, 0xffffffff, 0x1, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xeffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x2007fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x4, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0xffffffff, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x6, 0x2, 0x53ce}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0xaf5d, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x10, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x5, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0xffffffff}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8001, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x0, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x14, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x7}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xf1d}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0xee33}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x2, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46afbe0e1232", 0x7}], 0x1}, 0x20000885) 1m8.727650045s ago: executing program 32 (id=149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x2, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0xc, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x8, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0x101, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0x1, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x5, 0x8001}, {0x4, 0xffffffff, 0x1, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xeffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x2007fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x4, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0xffffffff, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x6, 0x2, 0x53ce}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0xaf5d, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x10, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x5, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0xffffffff}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8001, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x0, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x14, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x7}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xf1d}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0xee33}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x2, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46afbe0e1232", 0x7}], 0x1}, 0x20000885) 6.572073831s ago: executing program 4 (id=624): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c033, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc9) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 6.238790518s ago: executing program 4 (id=628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x141, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, 0x0, &(0x7f0000000140)="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", 0x1d8, r3) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000900) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0xfe) 4.06281504s ago: executing program 1 (id=640): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x141, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, 0x0, 0x0, 0x0, r3) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000900) syz_mount_image$iso9660(&(0x7f0000000480), &(0x7f0000000080)='./file2\x00', 0x800040, &(0x7f00000004c0)=ANY=[], 0x1, 0x5db, &(0x7f0000000ac0)="$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") r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) bind$can_j1939(r4, 0x0, 0x0) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) 3.998751922s ago: executing program 5 (id=642): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xc99, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000280)="0b031260feffffff02005400f6a13bb1000000086086dd4803", 0x19, 0x0, &(0x7f0000000140)={0x11, 0x7, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x14) 3.859606629s ago: executing program 4 (id=643): setns(0xc9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000100, @loopback, 0xfffffffe}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r2, 0xc138fd05, &(0x7f0000000000)="04000000020000") getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040), &(0x7f0000000100)=0x4) shutdown(r1, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r3, 0x0, 0x4, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x7, 0xc9, 0xff}}}, 0x8) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0xc, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.709926746s ago: executing program 4 (id=645): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0) r3 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r4 = userfaultfd(0x80001) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000140)=0x8, 0x4) getsockopt$inet6_tcp_buf(r5, 0x6, 0xd, &(0x7f00000003c0)=""/203, &(0x7f0000000100)=0xcb) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) getpriority(0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r3, 0x0) ftruncate(r3, 0xffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) 3.652078039s ago: executing program 3 (id=646): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000380), &(0x7f0000000480)=r2}, 0x20) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 3.028586778s ago: executing program 2 (id=647): unshare(0x4a000200) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x403, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30501}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0xba01, 0x0, 0x40045}, 0x24004890) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) write(r0, 0x0, 0x0) 3.015197198s ago: executing program 5 (id=648): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) acct(&(0x7f0000000100)='./debug/tracing/trace_pipe\x00') unshare(0x22020400) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) syncfs(r0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x452700) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000040)={0x0, 0x1, {0x1c, 0x3fbfff, 0x9, 0x9d, 0x5, 0x143, 0xfffffff9, 0x10a, 0xffffffffffffffff}}) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) syz_clone3(&(0x7f0000000080)={0x8690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) futex(0x0, 0x6, 0xfffffffe, 0x0, 0x0, 0x1) 2.579539059s ago: executing program 3 (id=649): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0'], 0x30}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000680), 0x42, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x100) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) open(&(0x7f00000004c0)='./file0\x00', 0x880, 0x0) timerfd_create(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x400, 0x4, &(0x7f0000000380)=[r2, r2, r2, r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x801}) 2.488041074s ago: executing program 4 (id=650): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x7, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x81, 0xb, 0xc07, 0x7f}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000d2}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x60b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0x5, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @random="000863ee0a3d"}, 0x14) 2.418606117s ago: executing program 3 (id=651): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x492, &(0x7f00000006c0)=ANY=[], 0x1, 0x62f, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0xfffffff7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 2.378816068s ago: executing program 4 (id=652): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x12e6, &(0x7f00000000c0)={0x0, 0xa982, 0x10000, 0x0, 0x2aa}, 0x0, &(0x7f0000000180), 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x68, 0x2, 0x6, 0x1, 0x0, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x9a}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000810010000000000095000000000000"], 0x0, 0x6, 0xbe, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004000000003"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000540), 0x1003, r6}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES16=r3], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 2.303292662s ago: executing program 1 (id=653): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x141, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, 0x0, &(0x7f0000000140)="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", 0x1d8, r3) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000900) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0xfe) 2.151868509s ago: executing program 3 (id=654): setns(0xc9, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x4d06abca42744787, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="330312001200140000007ef52f555f2a0c09000000fd810000f786dd3baa4b1f0f85114632f4704204000b8ca9767e06b5a31e7690641b36b584ad00bfb47dc15c0001da415578a03cb7b864b06a13c3593c5136c4fe55", 0x57, 0x3674842c2925b8c7, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x5e, 0x6, @remote}, 0x14) 2.030853165s ago: executing program 5 (id=655): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x82, 0xfffffdff}) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x1e5a1fa047f245c2, 0x0, 0x82, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext3\x00', &(0x7f00000005c0)='./file0\x00', 0xa0148a, &(0x7f0000000000), 0x21, 0x4d8, &(0x7f0000000d40)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) userfaultfd(0x1) fchmodat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0xffffff78) mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x21) rename(&(0x7f0000000580)='./bus/file0\x00', &(0x7f0000000200)='./file0\x00') 1.140005386s ago: executing program 3 (id=656): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r2, 0x2}, &(0x7f00000000c0)=0x8) 1.048471081s ago: executing program 2 (id=657): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r3, &(0x7f0000000300)}, 0x20) 1.000946403s ago: executing program 5 (id=658): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x900, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1d084, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 784.095273ms ago: executing program 2 (id=659): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 700.090898ms ago: executing program 2 (id=660): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mlock2(&(0x7f00001e2000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000008000000ff00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000001e40)=ANY=[], 0x0) 683.565038ms ago: executing program 5 (id=661): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0'], 0x30}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000680), 0x42, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='smaps_rollup\x00') socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x100) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) open(&(0x7f00000004c0)='./file0\x00', 0x880, 0x0) timerfd_create(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x400, 0x4, &(0x7f0000000380)=[r2, r2, r2, r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x801}) 562.711264ms ago: executing program 1 (id=662): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e0067"], 0x1c}}, 0x0) unshare(0x22020600) recvmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) 471.882588ms ago: executing program 5 (id=663): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) epoll_create1(0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) r2 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioprio_get$pid(0x1, 0x0) shmctl$SHM_LOCK(r2, 0xb) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_read_part_table(0x105e, &(0x7f00000024c0)="$eJzsz7GNwjAYx9F/csnd6XIiFYPQMAErsAQlC0BDTckObMIcDGKURCAmAIr3JNtf8ZMth7eqkk3zGJMuWSRpn5JZ3R233bIdg2F9/U7t38+w91PVrr6T7HPphztKSU5Vk2vyf3+pms7DPGUcyq5en1/2UQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4YLcAAAD//xntC5c=") getsockopt(r3, 0x4000, 0xffffffff, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 376.059353ms ago: executing program 1 (id=664): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x492, &(0x7f00000006c0)=ANY=[], 0x1, 0x62f, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0xfffffff7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 293.762086ms ago: executing program 3 (id=665): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, 0x0, 0x0) 289.872456ms ago: executing program 2 (id=666): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@float={0x3, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x0, 0x30]}}, 0x0, 0x28, 0x0, 0x1, 0x3}, 0x28) 139.890513ms ago: executing program 2 (id=667): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x1, 0x20040, 0x5, 0x41, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f40)={{r0}, &(0x7f0000000ec0), &(0x7f0000000f00)='%pK \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 139.122593ms ago: executing program 1 (id=668): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000f300000000000000b900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000006008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbfc}, 0x94) 0s ago: executing program 1 (id=669): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x82, 0xfffffdff}) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x1e5a1fa047f245c2, 0x0, 0x82, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext3\x00', &(0x7f00000005c0)='./file0\x00', 0xa0148a, &(0x7f0000000000), 0x21, 0x4d8, &(0x7f0000000d40)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0xffffff78) mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x21) rename(&(0x7f0000000580)='./bus/file0\x00', &(0x7f0000000200)='./file0\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.114' (ED25519) to the list of known hosts. [ 60.662413][ T4170] cgroup: Unknown subsys name 'net' [ 60.796347][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.247377][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.701250][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 63.728697][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 63.788126][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 63.840013][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 63.856298][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 63.939281][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.946384][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.954852][ T4191] device bridge_slave_0 entered promiscuous mode [ 63.964455][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.971594][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.980038][ T4191] device bridge_slave_1 entered promiscuous mode [ 63.993793][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.000953][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.009377][ T4184] device bridge_slave_0 entered promiscuous mode [ 64.033721][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.041047][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.049670][ T4192] device bridge_slave_0 entered promiscuous mode [ 64.061791][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.068997][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.077244][ T4184] device bridge_slave_1 entered promiscuous mode [ 64.109610][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.119137][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.126232][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.135569][ T4192] device bridge_slave_1 entered promiscuous mode [ 64.152532][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.163819][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.197620][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.254309][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.263821][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.271331][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.279731][ T4186] device bridge_slave_0 entered promiscuous mode [ 64.287886][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.294973][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.303421][ T4187] device bridge_slave_0 entered promiscuous mode [ 64.313758][ T4184] team0: Port device team_slave_0 added [ 64.322815][ T4191] team0: Port device team_slave_0 added [ 64.330774][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.340387][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.347854][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.355920][ T4186] device bridge_slave_1 entered promiscuous mode [ 64.363307][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.370746][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.379113][ T4187] device bridge_slave_1 entered promiscuous mode [ 64.387238][ T4184] team0: Port device team_slave_1 added [ 64.394100][ T4191] team0: Port device team_slave_1 added [ 64.450446][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.461994][ T4192] team0: Port device team_slave_0 added [ 64.482981][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.494819][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.505491][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.515896][ T4192] team0: Port device team_slave_1 added [ 64.522688][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.530013][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.556283][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.569088][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.576096][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.602304][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.638608][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.645601][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.672034][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.684377][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.691733][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.717890][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.747312][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.754297][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.780503][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.805220][ T4187] team0: Port device team_slave_0 added [ 64.812921][ T4187] team0: Port device team_slave_1 added [ 64.822779][ T4186] team0: Port device team_slave_0 added [ 64.829405][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.837388][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.863434][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.907382][ T4186] team0: Port device team_slave_1 added [ 64.927947][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.934953][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.961227][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.978493][ T4191] device hsr_slave_0 entered promiscuous mode [ 64.985299][ T4191] device hsr_slave_1 entered promiscuous mode [ 65.001575][ T4184] device hsr_slave_0 entered promiscuous mode [ 65.008974][ T4184] device hsr_slave_1 entered promiscuous mode [ 65.015603][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.023944][ T4184] Cannot create hsr debugfs directory [ 65.037579][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.044557][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.070841][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.127597][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.134589][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.161109][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.176352][ T4192] device hsr_slave_0 entered promiscuous mode [ 65.183521][ T4192] device hsr_slave_1 entered promiscuous mode [ 65.191052][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.198786][ T4192] Cannot create hsr debugfs directory [ 65.221565][ T4187] device hsr_slave_0 entered promiscuous mode [ 65.228508][ T4187] device hsr_slave_1 entered promiscuous mode [ 65.235121][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.242762][ T4187] Cannot create hsr debugfs directory [ 65.248727][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.255691][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.281694][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.377372][ T4193] Bluetooth: hci3: command 0x0409 tx timeout [ 65.383747][ T4193] Bluetooth: hci2: command 0x0409 tx timeout [ 65.397339][ T4193] Bluetooth: hci0: command 0x0409 tx timeout [ 65.418376][ T4186] device hsr_slave_0 entered promiscuous mode [ 65.425248][ T4186] device hsr_slave_1 entered promiscuous mode [ 65.432337][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.440152][ T4186] Cannot create hsr debugfs directory [ 65.461396][ T4193] Bluetooth: hci4: command 0x0409 tx timeout [ 65.468223][ T4193] Bluetooth: hci1: command 0x0409 tx timeout [ 65.689312][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.701939][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.711750][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.722436][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.767238][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.778840][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.789510][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.804048][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.862754][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.884183][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.908219][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.919687][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.982579][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.005772][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.031585][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.041727][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.051482][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.062238][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.073592][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.089365][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.118576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.128443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.138766][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.145959][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.160275][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.170837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.182615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.192138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.200834][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.207955][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.245388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.254830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.266029][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.281750][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.291793][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.308180][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.318289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.329169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.339304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.356029][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.375481][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.386253][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.398592][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.408695][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.418281][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.426138][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.434033][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.442950][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.453481][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.462532][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.471287][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.478409][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.486875][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.495461][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.506173][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.514697][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.543895][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.554880][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.564885][ T441] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.571992][ T441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.582579][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.610990][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.625477][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.638058][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.654764][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.666324][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.694008][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.717972][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.727353][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.735934][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.745884][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.761529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.774473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.791230][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.807861][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.825514][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.833816][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.848019][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.855915][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.873783][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.885967][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.896400][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.905426][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.912519][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.941406][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.949791][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.959789][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.976357][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.983492][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.993606][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.002687][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.012332][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.019455][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.029007][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.038757][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.047767][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.054847][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.070223][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.081024][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.101537][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.110218][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.121332][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.145690][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.166157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.187177][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.211274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.222987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.232329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.241367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.252701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.265058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.278766][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.300160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.308351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.316310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.324734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.334059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.345211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.366217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.374785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.384163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.394018][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.401189][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.410039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.419611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.429908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.439830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.447964][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 67.456970][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 67.463149][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.470030][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 67.497698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.506104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.514736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.523775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.532130][ T4185] Bluetooth: hci1: command 0x041b tx timeout [ 67.533416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.538387][ T4185] Bluetooth: hci4: command 0x041b tx timeout [ 67.554799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.564204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.572996][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.580119][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.588695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.597751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.606111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.615379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.623870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.638760][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.649932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.664728][ T4192] device veth0_vlan entered promiscuous mode [ 67.676805][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.700844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.710296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.719708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.730517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.739981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.748056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.755893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.781148][ T4192] device veth1_vlan entered promiscuous mode [ 67.804844][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.817663][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.830875][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.846829][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.855752][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.870460][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.882148][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.895406][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.910767][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.922106][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.936319][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.981491][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.023042][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.060091][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.078878][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.094727][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.113017][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.131604][ T4184] device veth0_vlan entered promiscuous mode [ 68.140944][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.149280][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.173166][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.192119][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.205225][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.216337][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.231964][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.241834][ T4184] device veth1_vlan entered promiscuous mode [ 68.262189][ T4192] device veth0_macvtap entered promiscuous mode [ 68.272592][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.314691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.323445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.338543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.351652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.361893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.373393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.384668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.396347][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.405198][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.418704][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.430738][ T4192] device veth1_macvtap entered promiscuous mode [ 68.442226][ T4184] device veth0_macvtap entered promiscuous mode [ 68.496912][ T4184] device veth1_macvtap entered promiscuous mode [ 68.507780][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.516396][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.526027][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.536599][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.545352][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.565186][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.580222][ T4186] device veth0_vlan entered promiscuous mode [ 68.594116][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.604364][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.613602][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.623671][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.632980][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.642046][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.651811][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.660029][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.668943][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.677046][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.687256][ T4187] device veth0_vlan entered promiscuous mode [ 68.702487][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.720962][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.743176][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.756126][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.775295][ T4186] device veth1_vlan entered promiscuous mode [ 68.784017][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.795384][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.804548][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.814806][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.824135][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.835615][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.847228][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.859486][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.870199][ T4187] device veth1_vlan entered promiscuous mode [ 68.887664][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.896635][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.904827][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.913360][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.922403][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.933150][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.942291][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.951537][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.960367][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.995804][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.004842][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.013963][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.022992][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.047519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.056218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.072239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.082028][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.094925][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.106248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.143867][ T4186] device veth0_macvtap entered promiscuous mode [ 69.152453][ T4187] device veth0_macvtap entered promiscuous mode [ 69.181512][ T4191] device veth0_vlan entered promiscuous mode [ 69.189080][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.200442][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.210902][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.221002][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.229996][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.251272][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.262029][ T4187] device veth1_macvtap entered promiscuous mode [ 69.283789][ T4186] device veth1_macvtap entered promiscuous mode [ 69.316782][ T4191] device veth1_vlan entered promiscuous mode [ 69.362561][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.378362][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.388734][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.399488][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.410748][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.426170][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.439472][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.450604][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.461527][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.471398][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.482310][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.493747][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.518958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.527260][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 69.533448][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 69.536165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.541150][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 69.556000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.564702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.573591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.583113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.592385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.605392][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.617131][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 69.623527][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 69.624717][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.640738][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.651549][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.663666][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.677123][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.688590][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.698693][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.709219][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.719130][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.729852][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.740923][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.755887][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.764254][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.782411][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.787899][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.799521][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.809366][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.814004][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.820662][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.834569][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.843070][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.860269][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.869637][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.880019][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.889322][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.927540][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.935407][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.950005][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.959410][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.968445][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.978138][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.000458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.013862][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.022766][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.042649][ T4191] device veth0_macvtap entered promiscuous mode [ 70.073851][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.100543][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.113383][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.122600][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.168116][ T4191] device veth1_macvtap entered promiscuous mode [ 70.288198][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.296075][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.304569][ T4268] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 70.334747][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.357626][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.374029][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.385201][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.395622][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.407654][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.423297][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.435207][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.448619][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.483360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.496384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.506149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.523236][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.537121][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.550628][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.579269][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.644295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.655717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.685001][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.704342][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.725453][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.751238][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.787687][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.804185][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.829174][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.851429][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.864908][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.888209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.899454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.924921][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.942143][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.957349][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.965245][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.972896][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.992230][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.030770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.123188][ T4287] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.210637][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.217371][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.231129][ T4298] sctp: [Deprecated]: syz.3.4 (pid 4298) Use of int in maxseg socket option. [ 71.231129][ T4298] Use struct sctp_assoc_value instead [ 71.298802][ T4298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 71.319871][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.351181][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.384417][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.494399][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.510095][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.562635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.626744][ T4297] Bluetooth: hci3: command 0x0419 tx timeout [ 71.633507][ T4297] Bluetooth: hci0: command 0x0419 tx timeout [ 71.641405][ T4297] Bluetooth: hci2: command 0x0419 tx timeout [ 71.687137][ T4297] Bluetooth: hci1: command 0x0419 tx timeout [ 71.693834][ T4297] Bluetooth: hci4: command 0x0419 tx timeout [ 71.735552][ T4320] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.027492][ T4328] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 72.738240][ T4379] netlink: 'syz.4.34': attribute type 1 has an invalid length. [ 72.756123][ T4379] netlink: 'syz.4.34': attribute type 2 has an invalid length. [ 72.890141][ T4384] device gre0 entered promiscuous mode [ 74.791854][ T4495] loop0: detected capacity change from 0 to 512 [ 74.866246][ T4495] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 74.909308][ T4495] UDF-fs: Scanning with blocksize 512 failed [ 74.973971][ T4503] loop2: detected capacity change from 0 to 128 [ 74.982857][ T4495] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 75.015475][ T4495] UDF-fs: Scanning with blocksize 1024 failed [ 75.045972][ T4495] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 75.048981][ T4503] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 75.090210][ T4495] UDF-fs: Scanning with blocksize 2048 failed [ 75.124446][ T4503] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.163525][ T4495] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 75.188778][ T4495] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 75.268174][ T4515] loop4: detected capacity change from 0 to 128 [ 75.612638][ T4532] IPv6: Can't replace route, no match found [ 75.660391][ T4535] loop4: detected capacity change from 0 to 8 [ 75.687126][ T4231] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.809485][ T4193] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 75.857643][ T4535] SQUASHFS error: Failed to read block 0x6e6: -5 [ 75.897503][ T4535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 75.931924][ T4535] SQUASHFS error: Unable to read directory block [6aa:26] [ 76.249237][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.752652][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.789110][ T4231] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.802727][ T4231] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.812430][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.861111][ T4231] usb 4-1: config 0 descriptor?? [ 76.996848][ T4193] usb 2-1: unable to get BOS descriptor or descriptor too short [ 77.055327][ T4552] loop4: detected capacity change from 0 to 2048 [ 77.058167][ T4193] usb 2-1: not running at top speed; connect to a high speed hub [ 77.092379][ T4556] loop0: detected capacity change from 0 to 128 [ 77.133150][ T4552] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.183792][ T4556] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 77.192317][ T4552] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.203391][ T4193] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.245485][ T4556] System zones: 1-3, 19-19, 35-36 [ 77.250895][ T4193] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 77.260988][ T4556] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 77.300400][ T4552] fs-verity: sha512 using implementation "sha512-avx2" [ 77.315134][ T4556] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.324910][ T4193] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 77.390681][ T4231] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 77.415761][ T4231] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 77.424875][ T4552] syz.4.98 (4552) used greatest stack depth: 21120 bytes left [ 77.445376][ T4231] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 77.460768][ T4556] process 'syz.0.101' launched './file0' with NULL argv: empty string added [ 77.632238][ T4193] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 77.647610][ T4193] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 77.655703][ T4193] usb 2-1: Product: syz [ 77.733236][ T4193] usb 2-1: Manufacturer: syz [ 77.741771][ T1107] usb 4-1: USB disconnect, device number 2 [ 77.819225][ T4193] usb 2-1: Found UVC 1.00 device syz (8086:0ad2) [ 77.825845][ T4193] usb 2-1: No valid video chain found. [ 77.841640][ T4567] fido_id[4567]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 77.978604][ T4580] loop2: detected capacity change from 0 to 256 [ 78.008597][ T4580] ======================================================= [ 78.008597][ T4580] WARNING: The mand mount option has been deprecated and [ 78.008597][ T4580] and is ignored by this kernel. Remove the mand [ 78.008597][ T4580] option from the mount to silence this warning. [ 78.008597][ T4580] ======================================================= [ 78.043534][ C0] vkms_vblank_simulate: vblank timer overrun [ 78.065012][ T4297] usb 2-1: USB disconnect, device number 2 [ 78.789230][ T4601] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.924840][ T4609] loop4: detected capacity change from 0 to 1024 [ 79.149806][ T4619] loop1: detected capacity change from 0 to 512 [ 79.181489][ T4626] loop3: detected capacity change from 0 to 256 [ 79.213555][ T4619] EXT4-fs (loop1): inline encryption not supported [ 79.256570][ T4626] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.279433][ T4619] EXT4-fs (loop1): Ignoring removed orlov option [ 79.285824][ T4619] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 79.300552][ T4626] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 79.330117][ T4626] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdf6b9da2, utbl_chksum : 0xe619d30d) [ 79.371109][ T4619] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 79.511816][ T4619] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.126: invalid indirect mapped block 2683928664 (level 1) [ 79.544256][ T4619] EXT4-fs (loop1): 1 truncate cleaned up [ 79.560753][ T4619] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,jqfmt=vfsv1,bsdgroups,inlinecrypt,usrjquota=.sb=0x0000000000000006,nodiscard,jqfmt=vfsv0,noload,debug_want_extra_isize=0x0000000000000006,orlov,,,errors=continue. Quota mode: writeback. [ 79.716571][ T4297] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.799258][ T4637] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 79.860509][ T4644] set_capacity_and_notify: 1 callbacks suppressed [ 79.860525][ T4644] loop0: detected capacity change from 0 to 256 [ 79.970338][ T4646] loop2: detected capacity change from 0 to 8 [ 79.989640][ T26] audit: type=1800 audit(1789417389.519:2): pid=4619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.126" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 80.079182][ T4646] SQUASHFS error: Unable to read inode 0xa7 [ 80.178846][ T4297] usb 5-1: unable to get BOS descriptor or descriptor too short [ 80.296693][ T4297] usb 5-1: config 0 interface 0 has no altsetting 0 [ 80.309059][ T4650] loop2: detected capacity change from 0 to 128 [ 80.396009][ T4650] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.459919][ T4650] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.506990][ T4297] usb 5-1: New USB device found, idVendor=19ff, idProduct=0239, bcdDevice=2f.8f [ 80.516088][ T4297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.611712][ T4297] usb 5-1: Product: syz [ 80.616035][ T4297] usb 5-1: Manufacturer: syz [ 80.648319][ T4297] usb 5-1: SerialNumber: syz [ 80.685746][ T4297] usb 5-1: config 0 descriptor?? [ 80.701439][ T4187] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 80.731583][ T4187] FAT-fs (loop0): Filesystem has been set read-only [ 80.888389][ T4665] loop1: detected capacity change from 0 to 1024 [ 80.916989][ T4187] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000007) [ 80.936172][ T4665] EXT4-fs (loop1): Ignoring removed orlov option [ 81.187407][ T4187] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000007) [ 81.198640][ T4665] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 81.220283][ C1] vkms_vblank_simulate: vblank timer overrun [ 81.238146][ T4297] usb 5-1: USB disconnect, device number 2 [ 81.859009][ T4677] syz.2.143 (4677) used greatest stack depth: 21008 bytes left [ 82.233505][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.370822][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.475871][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.595172][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.959628][ T4687] device syzkaller0 entered promiscuous mode [ 82.993454][ T4689] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.070173][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807915b400: rx timeout, send abort [ 83.080225][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807915b400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 83.483226][ T4705] loop1: detected capacity change from 0 to 164 [ 83.922565][ T4719] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 84.273158][ T4732] loop1: detected capacity change from 0 to 1024 [ 84.296199][ T4732] EXT4-fs (loop1): Ignoring removed orlov option [ 84.465041][ T4732] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 84.499517][ T4690] chnl_net:caif_netlink_parms(): no params data found [ 84.944022][ T4690] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.951977][ T4690] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.963966][ T4690] device bridge_slave_0 entered promiscuous mode [ 84.979393][ T4690] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.986974][ T4690] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.998466][ T4690] device bridge_slave_1 entered promiscuous mode [ 85.042537][ T4690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.172246][ T4690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.288747][ T4193] Bluetooth: hci1: command 0x0409 tx timeout [ 85.390973][ T4690] team0: Port device team_slave_0 added [ 85.445210][ T4690] team0: Port device team_slave_1 added [ 85.725578][ T4690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.743927][ T4690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.791168][ T4690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.831715][ T4690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.867916][ T4690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.893889][ C1] vkms_vblank_simulate: vblank timer overrun [ 85.950076][ T4690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.144082][ T4772] device syzkaller0 entered promiscuous mode [ 86.206683][ T9] device hsr_slave_0 left promiscuous mode [ 86.245001][ T9] device hsr_slave_1 left promiscuous mode [ 86.259571][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.282630][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.304130][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.323117][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.338434][ T9] device bridge_slave_1 left promiscuous mode [ 86.345888][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.393600][ T9] device bridge_slave_0 left promiscuous mode [ 86.425925][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.468744][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061b39800: rx timeout, send abort [ 86.477444][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888061b39800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 86.585107][ T1110] cfg80211: failed to load regulatory.db [ 86.756085][ T9] device veth1_macvtap left promiscuous mode [ 86.781630][ T9] device veth0_macvtap left promiscuous mode [ 86.812116][ T9] device veth1_vlan left promiscuous mode [ 86.831933][ T9] device veth0_vlan left promiscuous mode [ 86.904654][ T4794] loop2: detected capacity change from 0 to 164 [ 87.382240][ T4297] Bluetooth: hci1: command 0x041b tx timeout [ 87.557087][ T9] team0 (unregistering): Port device team_slave_1 removed [ 87.577147][ T9] team0 (unregistering): Port device team_slave_0 removed [ 87.601276][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.647229][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.839405][ T9] bond0 (unregistering): Released all slaves [ 87.926991][ T4690] device hsr_slave_0 entered promiscuous mode [ 87.944227][ T4690] device hsr_slave_1 entered promiscuous mode [ 87.954668][ T4690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.972138][ T4690] Cannot create hsr debugfs directory [ 88.266803][ T4802] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 88.572464][ T4690] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 88.598775][ T4815] loop4: detected capacity change from 0 to 1024 [ 88.640377][ T4690] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 88.655562][ T4815] EXT4-fs (loop4): Ignoring removed orlov option [ 88.668529][ T4690] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 88.691132][ T4690] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 88.723630][ T4815] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 89.235645][ T4690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.406720][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.429737][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.456756][ T4262] Bluetooth: hci1: command 0x040f tx timeout [ 89.577703][ T4690] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.665993][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.725110][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.758363][ T4838] loop4: detected capacity change from 0 to 164 [ 89.796474][ T4243] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.803630][ T4243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.918507][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.132860][ T4841] device syzkaller0 entered promiscuous mode [ 90.155621][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.180597][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.205937][ T4243] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.213171][ T4243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.230443][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.338904][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.461408][ C0] vcan0: j1939_tp_rxtimer: 0xffff888022d4a800: rx timeout, send abort [ 90.470017][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888022d4a800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 90.633527][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.652022][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.693472][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.723856][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.754733][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.826598][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.877655][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.929148][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.955393][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.021001][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.090572][ T4868] loop4: detected capacity change from 0 to 1024 [ 91.157423][ T4874] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 91.185987][ T4868] EXT4-fs (loop4): Ignoring removed orlov option [ 91.277544][ T4868] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 91.526962][ T1110] Bluetooth: hci1: command 0x0419 tx timeout [ 91.660937][ T4894] loop3: detected capacity change from 0 to 164 [ 91.962223][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.974317][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.058239][ T4690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.387250][ T4904] device syzkaller0 entered promiscuous mode [ 92.431674][ T4918] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.153156][ C0] vcan0: j1939_tp_rxtimer: 0xffff888062b33800: rx timeout, send abort [ 93.161650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.175288][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888062b33800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 93.327315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.387464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.406234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.438346][ T4690] device veth0_vlan entered promiscuous mode [ 93.444592][ T4948] loop2: detected capacity change from 0 to 1024 [ 93.511292][ T4948] EXT4-fs (loop2): Ignoring removed orlov option [ 93.587605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.627442][ T4948] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 93.667188][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.682294][ T4690] device veth1_vlan entered promiscuous mode [ 93.689846][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.792361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.814906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.139025][ T4690] device veth0_macvtap entered promiscuous mode [ 94.170988][ T4963] loop3: detected capacity change from 0 to 164 [ 94.292973][ T4690] device veth1_macvtap entered promiscuous mode [ 94.333036][ T4690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.352901][ T4690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.437282][ T4690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.484896][ T4690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.505141][ T4690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.523146][ T4690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.533370][ T4690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.544797][ T4974] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 94.554968][ T4690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.576388][ T4690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.609488][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.637852][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.742297][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.751980][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.777889][ T4690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.799929][ T4690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.820178][ T4690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.850606][ T4690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.883986][ T4690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.944501][ T4690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.971872][ T4690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.993964][ T4690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.008969][ T4690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.027578][ T4690] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.056458][ T4690] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.067949][ T4690] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.077825][ T4690] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.096177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.108932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.329031][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.343137][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.382280][ T5001] loop2: detected capacity change from 0 to 1024 [ 95.404884][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.431499][ T4961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.433218][ T5003] loop3: detected capacity change from 0 to 1024 [ 95.456550][ T4961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.484558][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.495336][ T5001] EXT4-fs (loop2): Ignoring removed orlov option [ 95.587441][ T5001] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 95.911017][ T5015] loop5: detected capacity change from 0 to 164 [ 96.549584][ T5034] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.636665][ T5048] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 96.799071][ T5034] device-mapper: table: 248:0: thin-pool: Error creating metadata object [ 96.856071][ T5034] device-mapper: ioctl: error adding target to table [ 97.587071][ T5096] device syzkaller0 entered promiscuous mode [ 97.873568][ T5105] loop2: detected capacity change from 0 to 164 [ 98.053261][ T5109] loop1: detected capacity change from 0 to 2048 [ 98.130388][ T5109] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 98.202914][ T5109] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.632809][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fe24800: rx timeout, send abort [ 98.641518][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805fe24800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 98.696533][ T4297] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.800133][ T5143] device syzkaller0 entered promiscuous mode [ 98.826663][ T4230] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.116579][ T4230] usb 2-1: Using ep0 maxpacket: 16 [ 99.347770][ T4230] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 99.658986][ T4230] usb 2-1: config 0 interface 0 has no altsetting 0 [ 99.665656][ T4230] usb 2-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.00 [ 99.675115][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.685159][ T4230] usb 2-1: config 0 descriptor?? [ 99.722221][ T5150] loop2: detected capacity change from 0 to 512 [ 99.806788][ T4297] usb 5-1: config 9 has an invalid interface number: 84 but max is 0 [ 99.824834][ T4297] usb 5-1: config 9 has no interface number 0 [ 99.865970][ T4297] usb 5-1: config 9 interface 84 has no altsetting 0 [ 99.878224][ T5150] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 99.878224][ T5150] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 99.878224][ T5150] [ 99.943438][ T5156] loop5: detected capacity change from 0 to 164 [ 100.004264][ T5150] EXT4-fs (loop2): mounted filesystem without journal. Opts: noacl,errors=remount-ro,. Quota mode: writeback. [ 100.046785][ T5150] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.093236][ T4297] usb 5-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 0.da [ 100.107162][ T4297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.115379][ T4297] usb 5-1: Product: syz [ 100.119812][ T4297] usb 5-1: Manufacturer: syz [ 100.124447][ T4297] usb 5-1: SerialNumber: syz [ 100.170966][ T4230] wacom 0003:056A:0026.0002: Unknown device_type for 'HID 056a:0026'. Assuming pen. [ 100.232059][ T4230] wacom 0003:056A:0026.0002: hidraw0: USB HID vff.fe Joystick [HID 056a:0026] on usb-dummy_hcd.1-1/input0 [ 100.304666][ T4230] input: Wacom Intuos5 touch S Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0026.0002/input/input6 [ 100.458648][ T4230] usb 2-1: USB disconnect, device number 3 [ 100.626605][ T4297] usb 5-1: Found UVC 0.00 device syz (19ab:1000) [ 100.643275][ T4297] usb 5-1: No valid video chain found. [ 100.715975][ T4297] usb 5-1: USB disconnect, device number 3 [ 100.882455][ T5189] fido_id[5189]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 101.034715][ T5204] loop2: detected capacity change from 0 to 128 [ 101.107489][ T5204] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.164500][ T5204] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.275595][ T5218] loop4: detected capacity change from 0 to 1024 [ 101.393051][ T5218] hfsplus: unable to parse mount options [ 101.558257][ T5225] loop2: detected capacity change from 0 to 164 [ 101.827247][ T4264] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.853572][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802bc98800: rx timeout, send abort [ 101.862056][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802bc98800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 102.046323][ T5241] loop5: detected capacity change from 0 to 1024 [ 102.068629][ T5243] device syzkaller0 entered promiscuous mode [ 102.116576][ T4264] usb 2-1: Using ep0 maxpacket: 8 [ 102.256798][ T5241] EXT4-fs (loop5): blocks per group (0) and clusters per group (8192) inconsistent [ 102.346768][ T4264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 102.398299][ T4264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59378, setting to 1024 [ 102.464005][ T4264] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 102.489852][ T4264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.521516][ T4264] usb 2-1: config 0 descriptor?? [ 102.562674][ T5227] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 102.573238][ T5258] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 102.849737][ T4264] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 102.888619][ T4264] usb 2-1: USB disconnect, device number 4 [ 103.521851][ T5285] device syzkaller0 entered promiscuous mode [ 103.572267][ T5287] loop4: detected capacity change from 0 to 164 [ 104.419146][ T5296] FAULT_INJECTION: forcing a failure. [ 104.419146][ T5296] name failslab, interval 1, probability 0, space 0, times 1 [ 104.420167][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802bc95c00: rx timeout, send abort [ 104.440314][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802bc95c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 104.454720][ T5296] CPU: 0 PID: 5296 Comm: syz.5.303 Not tainted syzkaller #0 [ 104.462042][ T5296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.472168][ T5296] Call Trace: [ 104.475486][ T5296] [ 104.478444][ T5296] dump_stack_lvl+0x188/0x250 [ 104.483172][ T5296] ? show_regs_print_info+0x20/0x20 [ 104.488400][ T5296] ? load_image+0x410/0x410 [ 104.492942][ T5296] ? rcu_lock_release+0x5/0x20 [ 104.497766][ T5296] should_fail+0x383/0x4b0 [ 104.502215][ T5296] should_failslab+0x5/0x20 [ 104.506757][ T5296] slab_pre_alloc_hook+0x51/0xc0 [ 104.511724][ T5296] kmem_cache_alloc_trace+0x47/0x290 [ 104.517051][ T5296] ? proc_thread_self_get_link+0xf8/0x190 [ 104.522807][ T5296] proc_thread_self_get_link+0xf8/0x190 [ 104.528393][ T5296] ? proc_setup_thread_self+0x2d0/0x2d0 [ 104.533978][ T5296] pick_link+0x701/0xdc0 [ 104.538252][ T5296] step_into+0xac6/0xcd0 [ 104.542539][ T5296] ? set_root+0x3a0/0x3a0 [ 104.546886][ T5296] ? walk_component+0x1b6/0x460 [ 104.551762][ T5296] link_path_walk+0x688/0xde0 [ 104.556486][ T5296] ? handle_lookup_down+0x130/0x130 [ 104.561730][ T5296] path_lookupat+0x83/0x420 [ 104.566267][ T5296] filename_lookup+0x21e/0x550 [ 104.571053][ T5296] ? __lock_acquire+0x7b50/0x7b50 [ 104.576106][ T5296] ? hashlen_string+0x110/0x110 [ 104.581001][ T5296] ? strncpy_from_user+0x1f4/0x350 [ 104.586142][ T5296] ? getname_flags+0x1f9/0x4f0 [ 104.590944][ T5296] user_path_at_empty+0x40/0x190 [ 104.595910][ T5296] vfs_statx+0x107/0x4c0 [ 104.600184][ T5296] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 104.606199][ T5296] ? vfs_fstatat+0x40/0x40 [ 104.610654][ T5296] __x64_sys_newlstat+0x116/0x1c0 [ 104.615709][ T5296] ? __ia32_sys_newstat+0x1c0/0x1c0 [ 104.620952][ T5296] ? lock_chain_count+0x20/0x20 [ 104.625850][ T5296] ? lockdep_hardirqs_on+0x94/0x140 [ 104.631077][ T5296] do_syscall_64+0x4c/0xa0 [ 104.635502][ T5296] ? clear_bhb_loop+0x30/0x80 [ 104.640206][ T5296] ? clear_bhb_loop+0x30/0x80 [ 104.644935][ T5296] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.650864][ T5296] RIP: 0033:0x7f1fe4f1d159 [ 104.655302][ T5296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.674927][ T5296] RSP: 002b:00007f1fe3175028 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 104.683369][ T5296] RAX: ffffffffffffffda RBX: 00007f1fe51a4fa0 RCX: 00007f1fe4f1d159 [ 104.691382][ T5296] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 00002000000001c0 [ 104.699494][ T5296] RBP: 00007f1fe4fb403b R08: 0000000000000000 R09: 0000000000000000 [ 104.707487][ T5296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.715480][ T5296] R13: 00007f1fe51a5038 R14: 00007f1fe51a4fa0 R15: 00007ffc763a1708 [ 104.723500][ T5296] [ 104.783143][ T5300] capability: warning: `syz.4.304' uses deprecated v2 capabilities in a way that may be insecure [ 105.082265][ T5311] loop4: detected capacity change from 0 to 2048 [ 105.181904][ T5316] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 105.285104][ T5311] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.331366][ T5311] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 105.925847][ T5352] loop4: detected capacity change from 0 to 1024 [ 106.178890][ T5352] EXT4-fs (loop4): Ignoring removed orlov option [ 106.536880][ T5352] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 106.887453][ T5374] device syzkaller0 entered promiscuous mode [ 107.019729][ C0] vcan0: j1939_tp_rxtimer: 0xffff888062ee6400: rx timeout, send abort [ 107.028453][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888062ee6400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 107.387143][ T5398] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 107.505887][ T5408] loop4: detected capacity change from 0 to 1024 [ 107.523324][ T5410] loop5: detected capacity change from 0 to 164 [ 107.578720][ T5408] EXT4-fs (loop4): Ignoring removed orlov option [ 107.808080][ T5408] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 107.854996][ T5419] device syzkaller0 entered promiscuous mode [ 108.028793][ T5422] loop5: detected capacity change from 0 to 512 [ 108.123357][ T5422] EXT4-fs (loop5): Ignoring removed oldalloc option [ 108.193706][ T5422] EXT4-fs (loop5): mounted filesystem without journal. Opts: oldalloc,,errors=continue. Quota mode: writeback. [ 108.435194][ T5436] capability: warning: `syz.4.348' uses 32-bit capabilities (legacy support in use) [ 108.472632][ T5422] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #2: comm syz.5.344: No space for directory leaf checksum. Please run e2fsck -D. [ 108.514518][ T5422] EXT4-fs error (device loop5): __ext4_find_entry:1698: inode #2: comm syz.5.344: checksumming directory block 0 [ 108.955874][ T5451] device syzkaller0 entered promiscuous mode [ 109.104617][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880607e3000: rx timeout, send abort [ 109.113204][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880607e3000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 109.296630][ T5458] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 109.453540][ T5467] loop5: detected capacity change from 0 to 512 [ 109.550640][ T5467] EXT4-fs (loop5): 1 truncate cleaned up [ 109.569158][ T5467] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.802165][ T5479] loop4: detected capacity change from 0 to 512 [ 109.857213][ T5479] EXT4-fs (loop4): Ignoring removed oldalloc option [ 109.912391][ T5479] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 110.669179][ T26] audit: type=1326 audit(1789417420.199:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5478 comm="syz.4.366" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd22c3ec159 code=0x0 [ 111.864684][ T5524] loop5: detected capacity change from 0 to 512 [ 111.939379][ T5526] loop4: detected capacity change from 0 to 1024 [ 111.961660][ T5520] loop2: detected capacity change from 0 to 4096 [ 111.972043][ T5524] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 111.989917][ T5524] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.023007][ T5526] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 112.034401][ T5520] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 112.066184][ T5520] EXT4-fs (loop2): inline encryption not supported [ 112.141109][ T5524] EXT4-fs error (device loop5): ext4_get_first_dir_block:3621: inode #12: comm syz.5.376: directory missing '..' [ 112.169955][ T5526] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2002c018, mo2=0102] [ 112.194541][ T5526] System zones: 0-1, 3-12 [ 112.207982][ T5526] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,nodelalloc,max_dir_size_kb=0x00000000000007b1,debug,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 112.235011][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.288436][ T5520] EXT4-fs (loop2): Test dummy encryption mode enabled [ 112.305124][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f75e000: rx timeout, send abort [ 112.313575][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f75e000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 112.434122][ T5520] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003] [ 112.455180][ T5520] System zones: 0-5 [ 112.479240][ T5526] EXT4-fs error (device loop4): ext4_discard_preallocations:5134: comm syz.4.377: Error -117 loading buddy information for 4294961127 [ 112.524656][ T5526] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.377: Invalid inode table block 5 in block_group 0 [ 112.542749][ T5520] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,test_dummy_encryption,nodelalloc,norecovery,delalloc,usrquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 112.588620][ T5526] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 112.625580][ T5526] EXT4-fs error (device loop4): ext4_ext_truncate:4487: inode #18: comm syz.4.377: mark_inode_dirty error [ 112.662960][ T5526] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.377: Invalid inode table block 5 in block_group 0 [ 112.687453][ T5526] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 112.702616][ T5526] EXT4-fs error (device loop4): ext4_truncate:4286: inode #18: comm syz.4.377: mark_inode_dirty error [ 112.714392][ T5526] EXT4-fs error (device loop4) in ext4_setattr:5645: Corrupt filesystem [ 112.949227][ T5564] loop1: detected capacity change from 0 to 1024 [ 113.550239][ T5564] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 113.795771][ T5564] EXT4-fs (loop1): orphan cleanup on readonly fs [ 113.919507][ T5564] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.383: bg 0: block 10: padding at end of block bitmap is not set [ 113.995104][ T5564] Quota error (device loop1): write_blk: dquota write failed [ 114.093366][ T5564] Quota error (device loop1): find_free_dqentry: Can't remove block (3) from entry free list [ 114.376727][ T5564] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 114.452118][ T5564] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.383: Failed to acquire dquot type 0 [ 114.666380][ T5564] Quota error (device loop1): write_blk: dquota write failed [ 114.675394][ T5564] Quota error (device loop1): find_free_dqentry: Can't remove block (3) from entry free list [ 115.074084][ T5598] loop4: detected capacity change from 0 to 164 [ 115.087651][ T5564] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 115.250404][ T5564] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.383: Failed to acquire dquot type 0 [ 115.456025][ T5564] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.383: Freeing blocks not in datazone - block = 0, count = 4096 [ 115.502116][ T5564] Quota error (device loop1): write_blk: dquota write failed [ 115.539510][ T5564] Quota error (device loop1): find_free_dqentry: Can't remove block (3) from entry free list [ 115.606788][ T5564] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 115.624116][ T5564] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.383: Failed to acquire dquot type 0 [ 115.691159][ T5564] EXT4-fs (loop1): 1 orphan inode deleted [ 115.708392][ T5564] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.729416][ T5607] loop2: detected capacity change from 0 to 164 [ 115.799908][ T5564] syz.1.383 (5564) used greatest stack depth: 20752 bytes left [ 115.846625][ T5605] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 115.987481][ T5618] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 116.016642][ T5618] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 116.076003][ T5624] loop5: detected capacity change from 0 to 1024 [ 116.185873][ T5632] loop4: detected capacity change from 0 to 256 [ 116.266680][ T5636] loop2: detected capacity change from 0 to 512 [ 116.454908][ T5632] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 116.637927][ T5636] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 116.960124][ T5636] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.402: invalid indirect mapped block 256 (level 1) [ 117.344000][ T5636] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.402: invalid indirect mapped block 2683928664 (level 1) [ 117.378678][ T5651] device syzkaller0 entered promiscuous mode [ 117.407014][ T5636] EXT4-fs (loop2): 1 truncate cleaned up [ 117.466555][ T5636] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 118.307601][ T5664] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 118.412944][ T5673] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.402: Invalid block bitmap block 3 in block_group 0 [ 118.660932][ T5679] loop4: detected capacity change from 0 to 8 [ 118.964984][ T5679] SQUASHFS error: lzo decompression failed, data probably corrupt [ 119.006316][ T5679] SQUASHFS error: Failed to read block 0x0: -5 [ 119.010660][ T5688] loop5: detected capacity change from 0 to 256 [ 119.061647][ T5679] SQUASHFS error: Unable to read data cache entry [0] [ 119.132698][ T5679] SQUASHFS error: Unable to read page, block 0, size ff [ 119.161512][ T5679] SQUASHFS error: Unable to read data cache entry [0] [ 119.188916][ T26] audit: type=1804 audit(1789417428.719:4): pid=5695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.417" name="file1" dev="ramfs" ino=39565 res=1 errno=0 [ 119.193581][ T5679] SQUASHFS error: Unable to read page, block 0, size ff [ 119.303842][ T5679] SQUASHFS error: lzo decompression failed, data probably corrupt [ 119.330228][ T5679] SQUASHFS error: Failed to read block 0x0: -5 [ 119.436797][ T5679] SQUASHFS error: lzo decompression failed, data probably corrupt [ 119.459420][ T5706] loop1: detected capacity change from 0 to 8 [ 119.483337][ T5679] SQUASHFS error: Failed to read block 0x0: -5 [ 119.521066][ T26] audit: type=1800 audit(1789417429.049:5): pid=5679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.410" name="file2" dev="loop4" ino=3 res=0 errno=0 [ 119.582809][ T5709] device syzkaller0 entered promiscuous mode [ 119.593332][ T5679] syz.4.410 (5679) used greatest stack depth: 20592 bytes left [ 119.605430][ T5710] loop2: detected capacity change from 0 to 164 [ 119.981426][ T5733] loop5: detected capacity change from 0 to 512 [ 120.087934][ T5733] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.119908][ T5740] Zero length message leads to an empty skb [ 120.163580][ T5733] FAT-fs (loop5): Directory bread(block 1056) failed [ 120.182780][ T5733] FAT-fs (loop5): Directory bread(block 1057) failed [ 120.241264][ T5733] FAT-fs (loop5): Directory bread(block 1058) failed [ 120.287350][ T5733] FAT-fs (loop5): Directory bread(block 1059) failed [ 120.313568][ T5733] FAT-fs (loop5): Directory bread(block 1060) failed [ 120.326969][ T5747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.435'. [ 120.348595][ T5733] FAT-fs (loop5): Directory bread(block 1061) failed [ 120.377412][ T5733] FAT-fs (loop5): Directory bread(block 1062) failed [ 120.400810][ T5733] FAT-fs (loop5): Directory bread(block 1063) failed [ 120.445941][ T5755] loop1: detected capacity change from 0 to 1024 [ 120.456467][ T5733] FAT-fs (loop5): Directory bread(block 1064) failed [ 120.463231][ T5733] FAT-fs (loop5): Directory bread(block 1065) failed [ 120.511518][ T5755] EXT4-fs (loop1): Ignoring removed orlov option [ 120.589560][ T5763] loop4: detected capacity change from 0 to 512 [ 120.622926][ T5755] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 120.804745][ T5763] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 121.088713][ T5763] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 121.252487][ T5763] EXT4-fs (loop4): 1 truncate cleaned up [ 121.305874][ T5790] loop2: detected capacity change from 0 to 128 [ 121.317820][ T5763] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 121.373410][ T26] audit: type=1800 audit(1789417430.899:6): pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.443" name="file1" dev="loop2" ino=1048615 res=0 errno=0 [ 121.408279][ T5790] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 121.472301][ T5790] FAT-fs (loop2): Filesystem has been set read-only [ 121.507454][ T5790] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 121.558399][ T5763] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.439: Invalid inode table block 5 in block_group 0 [ 121.620757][ T5763] EXT4-fs (loop4): Remounting filesystem read-only [ 121.653408][ T5763] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 121.718265][ T5763] EXT4-fs (loop4): Remounting filesystem read-only [ 121.767984][ T5763] EXT4-fs error (device loop4): ext4_setattr:5586: inode #15: comm syz.4.439: mark_inode_dirty error [ 121.851855][ T5763] EXT4-fs (loop4): Remounting filesystem read-only [ 121.876747][ T5763] EXT4-fs error (device loop4) in ext4_setattr:5645: Corrupt filesystem [ 121.926245][ T5763] EXT4-fs (loop4): Remounting filesystem read-only [ 121.935661][ T5763] EXT4-fs error (device loop4): ext4_discard_preallocations:5134: comm syz.4.439: Error -117 loading buddy information for 4294868606 [ 122.000814][ T5763] EXT4-fs (loop4): Remounting filesystem read-only [ 122.202399][ T5824] loop4: detected capacity change from 0 to 164 [ 122.221503][ T5830] loop2: detected capacity change from 0 to 1024 [ 122.351964][ T5830] EXT4-fs (loop2): Ignoring removed orlov option [ 122.489684][ T5830] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 122.855535][ T5863] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x00000000000000dd,nojournal_checksum,acl,errors=remount-ro,. Quota mode: writeback. [ 122.901134][ T5863] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.080914][ T5863] EXT4-fs error (device loop4): ext4_get_verity_descriptor_location:338: inode #15: comm syz.4.460: verity file corrupted; can't find descriptor [ 123.189741][ T5863] EXT4-fs (loop4): Remounting filesystem read-only [ 123.251369][ T5863] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size [ 124.393240][ T5909] set_capacity_and_notify: 3 callbacks suppressed [ 124.393256][ T5909] loop2: detected capacity change from 0 to 1024 [ 124.423232][ T5911] device syzkaller0 entered promiscuous mode [ 124.564746][ T5909] hfsplus: xattr searching failed [ 124.573242][ T26] audit: type=1800 audit(1789417434.099:7): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.474" name="file1" dev="loop2" ino=2 res=0 errno=0 [ 124.587013][ T5920] loop1: detected capacity change from 0 to 512 [ 124.643246][ T5909] hfsplus: xattr searching failed [ 124.666875][ T5913] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 124.671374][ T5920] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 124.716193][ T5913] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 124.787360][ T5920] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 124.795370][ T5920] System zones: 1-12 [ 124.827641][ T5920] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.477: bad orphan inode 131072 [ 124.911115][ T5920] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue. Quota mode: none. [ 124.976442][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 124.996431][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #188!!! [ 125.006426][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 125.016425][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 125.026428][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 125.036433][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 125.046426][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 125.056436][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 125.066426][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 125.076432][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 125.850137][ T5948] loop5: detected capacity change from 0 to 164 [ 126.018211][ T5957] binder: BINDER_SET_CONTEXT_MGR already set [ 126.024562][ T5957] binder: 5953:5957 ioctl 4018620d 200000004a80 returned -16 [ 126.114052][ T5958] loop2: detected capacity change from 0 to 1024 [ 126.168798][ T5960] loop1: detected capacity change from 0 to 4096 [ 126.377079][ T5958] EXT4-fs (loop2): Ignoring removed orlov option [ 126.582849][ T5960] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 126.759322][ T5958] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 127.084406][ T5964] device syzkaller0 entered promiscuous mode [ 127.901107][ T5987] syz.3.493 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 127.930763][ T5986] loop1: detected capacity change from 0 to 512 [ 128.129826][ T5986] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 128.231572][ T5986] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.387193][ T6004] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 128.438969][ T6004] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 128.522173][ T6020] loop5: detected capacity change from 0 to 164 [ 128.700360][ T6028] loop1: detected capacity change from 0 to 16 [ 128.712598][ T6030] loop2: detected capacity change from 0 to 512 [ 128.791581][ T6028] erofs: (device loop1): mounted with root inode @ nid 36. [ 128.804849][ T6033] netlink: 'syz.4.503': attribute type 1 has an invalid length. [ 128.883604][ T6030] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 129.061958][ T6030] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.501: corrupted inode contents [ 129.332849][ T6030] EXT4-fs error (device loop2): ext4_dirty_inode:6087: inode #16: comm syz.2.501: mark_inode_dirty error [ 129.604278][ T6030] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.501: corrupted inode contents [ 129.641779][ T6030] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.501: mark_inode_dirty error [ 129.659286][ T6030] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.501: corrupted inode contents [ 129.675615][ T6030] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 129.689689][ T6030] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.501: corrupted inode contents [ 129.705258][ T6030] EXT4-fs error (device loop2): ext4_truncate:4286: inode #16: comm syz.2.501: mark_inode_dirty error [ 129.752691][ T6030] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 129.789635][ T6030] EXT4-fs (loop2): 1 truncate cleaned up [ 129.825820][ T6030] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.875034][ T6030] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.281569][ T6046] device syzkaller0 entered promiscuous mode [ 131.066409][ C1] sched: RT throttling activated [ 131.936532][ T6056] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 132.765880][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.772641][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.266320][ T6074] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 133.495341][ T6074] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 133.846965][ T6094] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 133.884445][ T6094] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 134.069475][ T6103] loop5: detected capacity change from 0 to 1024 [ 135.625042][ T6139] device syzkaller0 entered promiscuous mode [ 135.751158][ T6153] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 136.748301][ T6167] loop2: detected capacity change from 0 to 1024 [ 136.896730][ T6176] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 137.238568][ T6195] device syzkaller0 entered promiscuous mode [ 137.364222][ T6198] loop4: detected capacity change from 0 to 164 [ 138.686543][ T4231] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 138.704311][ T1107] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 138.795613][ T6242] loop4: detected capacity change from 0 to 164 [ 139.719000][ T6250] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 139.734678][ T6250] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 139.743531][ T4231] usb 2-1: Using ep0 maxpacket: 8 [ 140.019697][ T1107] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 140.031246][ T4231] usb 2-1: unable to get BOS descriptor or descriptor too short [ 140.820921][ T4231] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 140.846914][ T4231] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 156, changing to 7 [ 140.916794][ T1107] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 140.936130][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.966993][ T1107] usb 6-1: Product: syz [ 140.971296][ T1107] usb 6-1: Manufacturer: syz [ 140.985026][ T1107] usb 6-1: SerialNumber: syz [ 141.016960][ T4231] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 141.026029][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.066167][ T4231] usb 2-1: Product: syz [ 141.091337][ T4231] usb 2-1: Manufacturer: syz [ 141.095962][ T4231] usb 2-1: SerialNumber: syz [ 141.497995][ T4231] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 141.796964][ T4231] usb 2-1: unit 4 not found! [ 141.885526][ T4231] usb 2-1: USB disconnect, device number 5 [ 141.936732][ T1107] usb 6-1: 1:1 : format type 0 is detected, processed as PCM [ 141.944173][ T1107] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 141.977507][ T1107] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 142.063134][ T1107] usb 6-1: USB disconnect, device number 2 [ 142.147875][ T6322] (unnamed net_device) (uninitialized): (slave dummy0): Device is not bonding slave [ 142.269015][ T6322] (unnamed net_device) (uninitialized): option active_slave: invalid value (dummy0) [ 142.368593][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.422470][ T4632] udevd[4632]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 143.749172][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.612'. [ 143.988790][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.612'. [ 144.042288][ T6348] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 144.608946][ T6377] binder: BINDER_SET_CONTEXT_MGR already set [ 144.614994][ T6377] binder: 6373:6377 ioctl 4018620d 200000004a80 returned -16 [ 145.092575][ T6389] loop1: detected capacity change from 0 to 164 [ 147.259351][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880243d3400: rx timeout, send abort [ 147.267787][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880243d3400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 147.651712][ T6436] loop1: detected capacity change from 0 to 164 [ 149.980055][ T6464] loop5: detected capacity change from 0 to 512 [ 150.329902][ T6473] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.379664][ T6473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.394629][ T6473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.569668][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024b31800: rx timeout, send abort [ 150.578186][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888024b31800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 150.892085][ T6490] loop1: detected capacity change from 0 to 1024 [ 151.146074][ T6491] loop5: detected capacity change from 0 to 8192 [ 151.232078][ T6491] loop5: p1 < > p2 < > p3 p4 < p5 > [ 151.257847][ T6500] ------------[ cut here ]------------ [ 151.266035][ T6491] loop5: partition table partially beyond EOD, truncated [ 151.309190][ T6491] loop5: p1 start 83886080 is beyond EOD, truncated [ 151.347243][ T6500] trace type BPF program uses run-time allocation [ 151.353900][ T6491] loop5: p2 start 16776960 is beyond EOD, truncated [ 151.384400][ T6500] WARNING: CPU: 1 PID: 6500 at kernel/bpf/verifier.c:11777 check_map_prog_compatibility+0x6cf/0x870 [ 151.484950][ T6500] Modules linked in: [ 151.526588][ T6500] CPU: 0 PID: 6500 Comm: syz.2.667 Not tainted syzkaller #0 [ 151.576441][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.641790][ T6500] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 151.681564][ T6500] Code: ff e8 55 b5 ef ff 48 c7 c6 c0 46 31 8a e9 0d fd ff ff e8 44 b5 ef ff c6 05 d3 04 ee 0b 01 48 c7 c7 20 43 31 8a e8 61 ea 2c 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 151.735628][ T4437] udevd[4437]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 151.748476][ T4263] udevd[4263]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 151.751015][ T4632] udevd[4632]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 151.858787][ T6500] RSP: 0018:ffffc90003347470 EFLAGS: 00010246 [ 151.873418][ T6500] RAX: 34f65f0f5419c900 RBX: 0000000000000001 RCX: 0000000000080000 [ 151.911106][ T6500] RDX: ffffc90005c11000 RSI: 0000000000002c4e RDI: 0000000000002c4f [ 151.941311][ T6500] RBP: ffff888057840000 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 151.972045][ T6500] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffffc900011ac038 [ 152.001811][ T6500] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff92000235807 [ 152.041914][ T6500] FS: 00007fb97844b6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 152.075527][ T6500] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.114008][ T6500] CR2: 000000110c36ffbf CR3: 0000000029616000 CR4: 00000000003506e0 [ 152.144501][ T6500] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 152.175511][ T6500] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 152.200713][ T6500] Call Trace: [ 152.204159][ T6500] [ 152.213350][ T6500] resolve_pseudo_ldimm64+0x616/0xfd0 [ 152.221309][ T6500] ? check_attach_btf_id+0xde0/0xde0 [ 152.231944][ T6500] ? __mark_reg_known+0x1a0/0x1a0 [ 152.239768][ T6500] bpf_check+0x2c4b/0xf6c0 [ 152.244371][ T6500] ? mark_lock+0x94/0x320 [ 152.257068][ T6500] ? bpf_get_btf_vmlinux+0x10/0x10 [ 152.287714][ T6500] ? __lock_acquire+0x13dc/0x7b50 [ 152.292871][ T6500] ? verify_lock_unused+0x140/0x140 [ 152.313037][ T6500] ? verify_lock_unused+0x140/0x140 [ 152.346029][ T6500] ? rcu_lock_release+0x5/0x20 [ 152.356160][ T6500] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 152.380583][ T6500] ? lock_chain_count+0x20/0x20 [ 152.385494][ T6500] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 152.404232][ T6500] ? lockdep_hardirqs_on+0x94/0x140 [ 152.416520][ T6500] ? ktime_get_with_offset+0xff/0x320 [ 152.428717][ T6500] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 152.451444][ T6500] ? ktime_get_real_ts64+0x440/0x440 [ 152.469164][ T6500] ? pcpu_alloc+0x11e6/0x16d0 [ 152.478718][ T6500] ? __might_fault+0xb3/0x110 [ 152.483523][ T6500] ? memset+0x1e/0x40 [ 152.489340][ T6500] ? bpf_obj_name_cpy+0x190/0x1d0 [ 152.494495][ T6500] bpf_prog_load+0xfdf/0x14e0 [ 152.499340][ T6500] ? map_freeze+0x360/0x360 [ 152.503954][ T6500] ? __might_fault+0xb7/0x110 [ 152.509506][ T6500] ? __might_fault+0xb3/0x110 [ 152.514340][ T6500] ? bpf_lsm_bpf+0x5/0x10 [ 152.532575][ T6500] ? security_bpf+0x7a/0xa0 [ 152.563656][ T6500] __sys_bpf+0x532/0x6f0 [ 152.585348][ T6500] ? bpf_link_show_fdinfo+0x380/0x380 [ 152.591369][ T6500] __x64_sys_bpf+0x78/0x90 [ 152.595908][ T6500] do_syscall_64+0x4c/0xa0 [ 152.600878][ T6500] ? clear_bhb_loop+0x30/0x80 [ 152.605660][ T6500] ? clear_bhb_loop+0x30/0x80 [ 152.610772][ T6500] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.618032][ T6500] RIP: 0033:0x7fb97a1f3159 [ 152.622552][ T6500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.643204][ T6500] RSP: 002b:00007fb97844b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 152.652959][ T6500] RAX: ffffffffffffffda RBX: 00007fb97a47afa0 RCX: 00007fb97a1f3159 [ 152.661222][ T6500] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 152.670239][ T6500] RBP: 00007fb97a28a03b R08: 0000000000000000 R09: 0000000000000000 [ 152.684198][ T6500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.692447][ T6500] R13: 00007fb97a47b038 R14: 00007fb97a47afa0 R15: 00007ffd56c8dfb8 [ 152.700773][ T6500] [ 152.703895][ T6500] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 152.711191][ T6500] CPU: 0 PID: 6500 Comm: syz.2.667 Not tainted syzkaller #0 [ 152.718500][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.728582][ T6500] Call Trace: [ 152.731884][ T6500] [ 152.734827][ T6500] dump_stack_lvl+0x188/0x250 [ 152.739546][ T6500] ? show_regs_print_info+0x20/0x20 [ 152.744784][ T6500] ? load_image+0x410/0x410 [ 152.749323][ T6500] panic+0x2f8/0x850 [ 152.753256][ T6500] ? bpf_jit_dump+0xd0/0xd0 [ 152.757794][ T6500] ? check_map_prog_compatibility+0x6cf/0x870 [ 152.763896][ T6500] __warn+0x248/0x2b0 [ 152.767908][ T6500] ? check_map_prog_compatibility+0x6cf/0x870 [ 152.774013][ T6500] report_bug+0x1b9/0x2e0 [ 152.778387][ T6500] handle_bug+0x3a/0x70 [ 152.782592][ T6500] exc_invalid_op+0x16/0x40 [ 152.787121][ T6500] asm_exc_invalid_op+0x16/0x20 [ 152.791996][ T6500] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 152.798691][ T6500] Code: ff e8 55 b5 ef ff 48 c7 c6 c0 46 31 8a e9 0d fd ff ff e8 44 b5 ef ff c6 05 d3 04 ee 0b 01 48 c7 c7 20 43 31 8a e8 61 ea 2c 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 152.818321][ T6500] RSP: 0018:ffffc90003347470 EFLAGS: 00010246 [ 152.824438][ T6500] RAX: 34f65f0f5419c900 RBX: 0000000000000001 RCX: 0000000000080000 [ 152.832429][ T6500] RDX: ffffc90005c11000 RSI: 0000000000002c4e RDI: 0000000000002c4f [ 152.840426][ T6500] RBP: ffff888057840000 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 152.848422][ T6500] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffffc900011ac038 [ 152.856421][ T6500] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff92000235807 [ 152.864430][ T6500] resolve_pseudo_ldimm64+0x616/0xfd0 [ 152.869854][ T6500] ? check_attach_btf_id+0xde0/0xde0 [ 152.875162][ T6500] ? __mark_reg_known+0x1a0/0x1a0 [ 152.880252][ T6500] bpf_check+0x2c4b/0xf6c0 [ 152.884722][ T6500] ? mark_lock+0x94/0x320 [ 152.889083][ T6500] ? bpf_get_btf_vmlinux+0x10/0x10 [ 152.894250][ T6500] ? __lock_acquire+0x13dc/0x7b50 [ 152.899323][ T6500] ? verify_lock_unused+0x140/0x140 [ 152.904557][ T6500] ? verify_lock_unused+0x140/0x140 [ 152.909784][ T6500] ? rcu_lock_release+0x5/0x20 [ 152.914585][ T6500] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 152.920592][ T6500] ? lock_chain_count+0x20/0x20 [ 152.925468][ T6500] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 152.931778][ T6500] ? lockdep_hardirqs_on+0x94/0x140 [ 152.937025][ T6500] ? ktime_get_with_offset+0xff/0x320 [ 152.942415][ T6500] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 152.948677][ T6500] ? ktime_get_real_ts64+0x440/0x440 [ 152.953988][ T6500] ? pcpu_alloc+0x11e6/0x16d0 [ 152.958699][ T6500] ? __might_fault+0xb3/0x110 [ 152.963404][ T6500] ? memset+0x1e/0x40 [ 152.967408][ T6500] ? bpf_obj_name_cpy+0x190/0x1d0 [ 152.972459][ T6500] bpf_prog_load+0xfdf/0x14e0 [ 152.977163][ T6500] ? map_freeze+0x360/0x360 [ 152.981683][ T6500] ? __might_fault+0xb7/0x110 [ 152.986388][ T6500] ? __might_fault+0xb3/0x110 [ 152.991113][ T6500] ? bpf_lsm_bpf+0x5/0x10 [ 152.995474][ T6500] ? security_bpf+0x7a/0xa0 [ 153.000011][ T6500] __sys_bpf+0x532/0x6f0 [ 153.004273][ T6500] ? bpf_link_show_fdinfo+0x380/0x380 [ 153.009693][ T6500] __x64_sys_bpf+0x78/0x90 [ 153.014140][ T6500] do_syscall_64+0x4c/0xa0 [ 153.018587][ T6500] ? clear_bhb_loop+0x30/0x80 [ 153.023295][ T6500] ? clear_bhb_loop+0x30/0x80 [ 153.027991][ T6500] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.033901][ T6500] RIP: 0033:0x7fb97a1f3159 [ 153.038352][ T6500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.058006][ T6500] RSP: 002b:00007fb97844b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 153.066445][ T6500] RAX: ffffffffffffffda RBX: 00007fb97a47afa0 RCX: 00007fb97a1f3159 [ 153.074442][ T6500] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 153.082466][ T6500] RBP: 00007fb97a28a03b R08: 0000000000000000 R09: 0000000000000000 [ 153.090462][ T6500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.098485][ T6500] R13: 00007fb97a47b038 R14: 00007fb97a47afa0 R15: 00007ffd56c8dfb8 [ 153.106510][ T6500] [ 153.109659][ T6500] Kernel Offset: disabled [ 153.114053][ T6500] Rebooting in 86400 seconds..