last executing test programs: 3m58.203864651s ago: executing program 3 (id=1137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0) sendmsg$inet(r3, &(0x7f0000000a40)={&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000440)="bf7c5cdf232d0a521789fc6f21f80f7562c220ce5554eb592dca8d5ec2433c30e7bb042ab27ca3f71d0128bf14874fd4eac8eccb05aed5bba8515a34ec0c84b06a830e50f696670344f42de4143605126a94352a5cbcab2d9aee7d57b030b6a1f3bb9cbbf9cdf7da27654b1553305e41635f7e7695061c473359f4ad63bd59a79c81846ab97755ae0a460a8b09e67e", 0x8f}, {&(0x7f0000000600)="8f1f82f0febd2147c882645a35fdf812147997c3e076a2606526d3bf1cc801a07ad129671884c9356019b8659c90806a71bdc4b93195f792478dfe1ca1958c5557e08272c23bba86fd4adff03fec11b2b5cb7e1e475472c5fd742654e045a9ac2c386138d8ec067fb27b6c6a611f44feb4e020d3e862107d6125df1256adda", 0x7f}, {&(0x7f0000000700)}, {&(0x7f00000007c0)="84845a80", 0x4}], 0x4}, 0x40) 3m56.249237943s ago: executing program 3 (id=1141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r1, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x64}, 0x1, 0x620b}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) lseek(r4, 0x1, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, 0x0, 0x20004056) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7056}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x92, &(0x7f0000000300)=""/146}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x141, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 3m54.975471282s ago: executing program 3 (id=1142): mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0), 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, 0x0, 0x0) shutdown(r1, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0) socket(0x1d, 0x2, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) 3m54.855292568s ago: executing program 3 (id=1145): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$eJzs3c9vG1kdAPDvTOImm3U3XdgDIGDLslDQqs6P7kYrONC9gNBqJcSKE4duSNwoil1HcVKa0ENy5I5EJU7wJ3DjgNQTB27c4MalHJAqqEANUg9GM54mJoljs03iJv58pPHMe+P4+57t957nJc4LYGhdjYjtiLgUEZ9ExGSRnxRb3Gxv2f2ePrm/sPvk/kISrdbH/0jy81ledPxM5tXiMccj4offi/hJcjhuc3NrZb5Wq64V6an1+upUc3Pr+nJa5MzOzcxNv3/jvdkTq+ub9d8+/u7yhz/6/e++9OhP29/8WVas8s8v5+c663GS2lUvRbkjbzQiPjyNYAMyWrx/OH+y1vaZiHgrb/+TMZK/mv05olkDAOdAqzUZrcnONABw0WXX/+VI0koxF1CONK1U2nN4b8REWms019+ZbGzcWYx8DutKlNLby7XqdDFXeCVKSZaeyY/307MH0jci4vWI+MXYK3m6stCoLQ7ygw8ADLFXD4z//x5rj/8AwAU3PugCAABnzvgPAMPH+A8Aw+f/GP/7/3YgAPBSc/0PAMPH+A8Aw6fn+L9zNuUAAM7EDz76KNtau8X/v168u7nx7fLd64vV5kqlvrFQWWisrVaWGo2lWrWy0Gr1erxao7E68+5esrm5dave2Lizfmu5Pr9UvVUtnXJ9AIDeXn/z4V+SiNj+1iv5Fh1rORir4WJLB10AYGBGBl0AYGB8nweGVx/X+KYB4ILrtZZn1z8RemDxVzivrn3e/D8MK/P/MLw+3fz/d068HMDZM/8Pw6vVSqz5DwBDxhw/8EK//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhVc63JK3ka4FvZ7dppRJxOSKuRCm5vVyrTkfEaxHx57HSWJaeGXShAYAXlP49Kdb/ujb5dvng2UvJf8byfUT89Fcf//Le/Pr62kyW/8+9/PUHRf7spUFUAADodPNwVnucLvYdF/JPn9xfeL6dZREff9BeXDSLu1ts7TOjMZrvx6MUERP/Sop0W/Z5ZeQE4m/vRMTn9ut/ryNCOZ8Daa98ejB+FvvyKcTff/4Pxk//J36an8v2pfy5+OwJlAWGzcMP2v1k0fayJla0vzSu5vuj2/943kO9uOf93+6h/i/d6/9GDsVP8jZ/dS99fEkev/uH7x/KbE22z+1EfGH0qPjJXvykS//7dp91/OsXv/xWt3OtX0dci6Pjt9XzbnZqvb461dzcur5cn1+qLlXvzM7OzcxNv3/jvdmpfI66ffvHAw//rFjm/rWuz81OxESX+OM96v+1Puv/m2ef/Pgrx8T/xlePfv3fOCZ+NiZ+vc/48xM3uy7fncVf7FL/Xq//O33Gf/S3rcU+7woAnIHm5tbKfK1WXetxkH3W7HUfB+fzILYjXoJi9DpIi7fsy1KeC35wTKeRnlHnBJyq/UY/6JIAAAAAAAAAAAAAAADdNDe3VsbidL9ONOg6AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9NwAA//8tM9Id") setxattr$system_posix_acl(&(0x7f0000000240)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x3) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m53.053395712s ago: executing program 3 (id=1149): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1000009, 0x8013, r5, 0x180000000) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 3m45.823154561s ago: executing program 3 (id=1164): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @rand_addr=0x64010101, 0x0, 0x6, [@private=0xa010100, @multicast1, @rand_addr=0x64010102, @rand_addr=0x64010101, @broadcast, @broadcast]}, 0x28) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) r2 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000300)=' /new_domain\nfile read /etc/passwd task.uid=0 task.euid=0\nselect domain= /new_domain\n', 0x65) 3m44.265754844s ago: executing program 32 (id=1164): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @rand_addr=0x64010101, 0x0, 0x6, [@private=0xa010100, @multicast1, @rand_addr=0x64010102, @rand_addr=0x64010101, @broadcast, @broadcast]}, 0x28) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) r2 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000300)=' /new_domain\nfile read /etc/passwd task.uid=0 task.euid=0\nselect domain= /new_domain\n', 0x65) 3m10.716989706s ago: executing program 4 (id=1233): socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x150) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0xee00) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x3, 0x5}) 3m10.571943613s ago: executing program 4 (id=1235): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 3m9.845267697s ago: executing program 4 (id=1236): socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) fcntl$getown(0xffffffffffffffff, 0x9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r1, &(0x7f0000000080)=""/10, 0xa) 3m9.300216072s ago: executing program 4 (id=1238): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x3) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m6.292106053s ago: executing program 4 (id=1242): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xa40, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000001100)) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x24000000) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x11}}) 3m2.245301362s ago: executing program 4 (id=1253): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4005, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 3m1.001094771s ago: executing program 33 (id=1253): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4005, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 2m50.695967313s ago: executing program 1 (id=1274): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) 2m49.798629726s ago: executing program 1 (id=1276): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x8100) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x1, @pix={0xffffffff, 0x0, 0x34565348, 0x7, 0x0, 0x0, 0x9, 0xfeedcafe, 0xe7, 0xffffff80}}) 2m48.342489444s ago: executing program 1 (id=1279): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r1, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x64}, 0x1, 0x620b}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) lseek(r5, 0x1, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, 0x0, 0x20004056) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7056}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x92, &(0x7f0000000300)=""/146}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x141, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000001340)=@framed={{}, [@printk={@lx, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000005c0)={@mcast1, @loopback, @remote, 0x1, 0x2, 0x5, 0x400, 0xb8, 0xd30048, r3}) 2m47.301139523s ago: executing program 1 (id=1282): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") setxattr$system_posix_acl(&(0x7f0000000240)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m45.631386701s ago: executing program 1 (id=1286): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1000009, 0x8013, r4, 0x180000000) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2m38.304912264s ago: executing program 1 (id=1294): socket$inet(0xa, 0x1, 0x0) syz_emit_ethernet(0xd8, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth0_to_team\x00', @ifru_names='erspan0\x00'}}) close(0x3) 2m38.051724186s ago: executing program 34 (id=1294): socket$inet(0xa, 0x1, 0x0) syz_emit_ethernet(0xd8, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'veth0_to_team\x00', @ifru_names='erspan0\x00'}}) close(0x3) 2.1265567s ago: executing program 6 (id=1622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x3e, 0x14, 0x66, 0x0, 0xb, 0x6c, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0x22) 2.060268234s ago: executing program 2 (id=1623): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r0, 0x1) close(0x3) 1.955105649s ago: executing program 2 (id=1625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000003dc0)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000003c40)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4050) 1.901310562s ago: executing program 7 (id=1627): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newtfilter={0x6c, 0x2c, 0xd3f, 0x70ad25, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x30, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x7}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x3, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}]}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 1.827654015s ago: executing program 2 (id=1628): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x140c03, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.70539604s ago: executing program 7 (id=1631): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, 0x0, 0x0) sendmsg$NFC_CMD_START_POLL(r2, 0x0, 0x0) read$nci(r0, 0x0, 0x0) read$nci(r0, 0x0, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 1.693104641s ago: executing program 6 (id=1632): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000680)={0xffffffffffffffff, &(0x7f00000002c0)="d74911841622be7cf9b71f57f6852bf1fa3cb55d2d7ca6973a00a562a4b161d584ab18b2d2c17ef57697f39d29eeb4afadc5facd03ea4c98273cf1e3b2ed318a54e63c0c2153e89a95db5d5e6cd931ede90993644de19f", 0x0, 0x4}, 0x20) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="8211daaddd18", 0x6}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 1.446760583s ago: executing program 6 (id=1638): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x86}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x28, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}]}]}, 0x28}], 0x1}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) setsockopt$packet_int(r5, 0x107, 0x13, &(0x7f0000000000)=0x9, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004080}, 0x4014) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d2, &(0x7f0000000100)) 1.413762854s ago: executing program 7 (id=1639): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4) sendmsg$nl_route(r2, 0x0, 0x4004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_gettime(0xfffffff2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, 0x0, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000400)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x400, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x7, 0x0, 0xe}}}}}}, 0x0) 1.245405782s ago: executing program 7 (id=1640): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x8000000000000003}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000006c0)="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", 0x1000}, 0x1, 0x0, 0x0, 0x4c801}, 0x4000) 1.224197693s ago: executing program 2 (id=1641): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000854) shutdown(r1, 0x1) 1.121208538s ago: executing program 6 (id=1643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, 0x0, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c00018006000100ffd700"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.06892889s ago: executing program 0 (id=1644): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r2, 0x100}, 0x8) 1.022048152s ago: executing program 0 (id=1645): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006"], 0x58}}, 0x20000000) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000020000000000800040001000000", 0x24) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r4) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8405d22596f37403}, 0x4054) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x28}}, 0x0) 967.576995ms ago: executing program 6 (id=1646): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022"], 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f00000000c0)=0xfffffffe, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 904.689898ms ago: executing program 5 (id=1647): socket(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000280)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0xfffe, 0x2}}}}}, 0x0) 872.13439ms ago: executing program 0 (id=1648): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000003f80)={&(0x7f0000003c40), 0xc, &(0x7f0000003f40)={&(0x7f0000003d40)={0x60, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x60}, 0x1, 0x0, 0x0, 0x20019054}, 0x400c044) 809.384173ms ago: executing program 0 (id=1649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000010000100000000001b0000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a300000000048000480440001800b000100657874686472000034000280080001400000000b080004400000001908000340000000f905000200830000000800064000000002"], 0xf8}}, 0x6044040) 743.485226ms ago: executing program 5 (id=1650): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x7fffe, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0x1, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048800}, 0x20000000) sendto$packet(r2, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 743.316066ms ago: executing program 6 (id=1651): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01053000070028000600000060"], 0x64) 690.305558ms ago: executing program 0 (id=1652): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="28005080110001004abee33908f8eef16f162471f400000005000200020000000800030008ac0f00"], 0x50}}, 0x0) 560.383604ms ago: executing program 5 (id=1653): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010400008000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="29a3010000040100140035006d616376746170300000000000000009050027"], 0x3c}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) 497.438677ms ago: executing program 0 (id=1654): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$inet(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=ANY=[], 0x87}, 0x2000c040) 477.819688ms ago: executing program 5 (id=1655): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pread64(r1, 0x0, 0x0, 0x761) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl(0xffffffffffffffff, 0x2, 0x0) close(r1) pwritev(r2, &(0x7f0000004700)=[{&(0x7f0000004440)="f65a61c77b", 0x5}], 0x1, 0x1, 0x9) 316.644505ms ago: executing program 5 (id=1656): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2023f, 0xc00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x40) 206.497651ms ago: executing program 2 (id=1657): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x1d, 0xd, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0xd9, &(0x7f0000000680)=""/217, 0x41100, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x10, 0x4888}, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@fallback, 0x5, 0x0, 0x7, &(0x7f0000000940), 0x0, 0x0, &(0x7f0000000980)=[0x0, 0x0], &(0x7f00000009c0), &(0x7f0000000a00)}, 0x40) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)=@o_path={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r1, 0x4}, 0x38) 102.738835ms ago: executing program 7 (id=1658): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @empty}, {0x2, 0x0, @remote}, 0x4, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f00000001c0)='lo\x00', 0x6, 0x0, 0x3}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0xfffd, @empty}, {0x2, 0x4000, @loopback}, {0x2, 0x0, @private}, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) 102.497815ms ago: executing program 5 (id=1659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x675f, 0x9, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 173.46µs ago: executing program 2 (id=1660): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="5000000018000106010000000400000002180000fe04000100000000080001000a000300080004000100000006001500060000001c001600180001000800010004000000090002007465737400000000", 0x50) 0s ago: executing program 7 (id=1661): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010400008000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="29a3010000040100140035006d616376746170300000000000000009050027"], 0x3c}, 0x1, 0x0, 0x0, 0x4004801}, 0x8090) kernel console output (not intermixed with test programs): B disconnect, device number 7 [ 316.770262][ T6006] FAULT_INJECTION: forcing a failure. [ 316.770262][ T6006] name failslab, interval 1, probability 0, space 0, times 0 [ 316.782884][ T6006] CPU: 0 PID: 6006 Comm: syz.2.474 Not tainted syzkaller #0 [ 316.790147][ T6006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 316.800233][ T6006] Call Trace: [ 316.803502][ T6006] [ 316.806429][ T6006] dump_stack_lvl+0x188/0x250 [ 316.811506][ T6006] ? show_regs_print_info+0x20/0x20 [ 316.816687][ T6006] ? load_image+0x410/0x410 [ 316.821171][ T6006] ? __might_sleep+0xf0/0xf0 [ 316.825745][ T6006] ? __lock_acquire+0x7b50/0x7b50 [ 316.830760][ T6006] should_fail+0x383/0x4b0 [ 316.835186][ T6006] should_failslab+0x5/0x20 [ 316.839670][ T6006] slab_pre_alloc_hook+0x51/0xc0 [ 316.844592][ T6006] __kmalloc+0x6b/0x340 [ 316.848726][ T6006] ? mpi_alloc+0x73/0x130 [ 316.853037][ T6006] mpi_alloc+0x73/0x130 [ 316.857172][ T6006] mpi_read_raw_data+0x13f/0x970 [ 316.862091][ T6006] ? x509_key_preparse+0x60/0x5d0 [ 316.867095][ T6006] ? asymmetric_key_preparse+0xa5/0x140 [ 316.872620][ T6006] ? __se_sys_add_key+0x34b/0x410 [ 316.877628][ T6006] rsa_set_pub_key+0x18f/0x360 [ 316.882379][ T6006] ? rsa_dec+0x3c0/0x3c0 [ 316.886613][ T6006] pkcs1pad_set_pub_key+0xc0/0x1b0 [ 316.891711][ T6006] public_key_verify_signature+0x56d/0xd40 [ 316.897506][ T6006] ? public_key_free+0x80/0x80 [ 316.902262][ T6006] ? asymmetric_key_id_same+0x63/0xe0 [ 316.907617][ T6006] x509_check_for_self_signed+0x317/0x420 [ 316.913669][ T6006] x509_cert_parse+0x59c/0x7a0 [ 316.918418][ T6006] x509_key_preparse+0x60/0x5d0 [ 316.923247][ T6006] ? down_read+0x1aa/0x2e0 [ 316.927646][ T6006] asymmetric_key_preparse+0xa5/0x140 [ 316.933000][ T6006] key_create_or_update+0x432/0xa40 [ 316.938182][ T6006] ? security_key_permission+0x7c/0xa0 [ 316.943653][ T6006] ? key_type_put+0x20/0x20 [ 316.948159][ T6006] ? lookup_user_key_possessed+0x40/0x40 [ 316.953802][ T6006] ? __might_fault+0xb3/0x110 [ 316.958488][ T6006] __se_sys_add_key+0x34b/0x410 [ 316.963345][ T6006] ? __x64_sys_add_key+0xc0/0xc0 [ 316.968293][ T6006] ? lockdep_hardirqs_on+0x94/0x140 [ 316.973494][ T6006] ? __x64_sys_add_key+0x1c/0xc0 [ 316.978435][ T6006] do_syscall_64+0x4c/0xa0 [ 316.982851][ T6006] ? clear_bhb_loop+0x30/0x80 [ 316.987530][ T6006] ? clear_bhb_loop+0x30/0x80 [ 316.992222][ T6006] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 316.998127][ T6006] RIP: 0033:0x7f10263bb159 [ 317.002539][ T6006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.022482][ T6006] RSP: 002b:00007f1024613028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 317.030876][ T6006] RAX: ffffffffffffffda RBX: 00007f1026642fa0 RCX: 00007f10263bb159 [ 317.038827][ T6006] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 317.046779][ T6006] RBP: 00007f102645203b R08: ffffffffffffffff R09: 0000000000000000 [ 317.054732][ T6006] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 317.062688][ T6006] R13: 00007f1026643038 R14: 00007f1026642fa0 R15: 00007ffe1d0537f8 [ 317.070679][ T6006] [ 317.079142][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.124720][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.211129][ T6012] ip6t_srh: unknown srh match flags 4000 [ 318.715750][ T5991] block2mtd: error: cannot open device /dev/zram0 [ 319.188333][ T6021] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 319.555171][ T6023] dns_resolver: Unsupported server list version (0) [ 320.068685][ T6024] loop2: detected capacity change from 0 to 164 [ 322.864523][ T6069] ip6t_srh: unknown srh match flags 4000 [ 322.874459][ T6066] ip6t_srh: unknown srh match flags 4000 [ 324.433763][ T6074] dns_resolver: Unsupported server list version (0) [ 324.867066][ T6078] loop3: detected capacity change from 0 to 164 [ 325.325757][ T4228] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 326.765681][ T4228] usb 1-1: Using ep0 maxpacket: 16 [ 327.025832][ T4228] usb 1-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 327.245787][ T4268] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 327.515925][ T4268] usb 4-1: Using ep0 maxpacket: 16 [ 328.112701][ T4268] usb 4-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 328.370804][ T4268] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 329.036190][ T4268] usb 4-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 329.108216][ T4268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.257565][ T4268] usb 4-1: Product: syz [ 329.329379][ T4268] usb 4-1: Manufacturer: syz [ 329.425252][ T4268] usb 4-1: SerialNumber: syz [ 329.662214][ T4228] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 329.825647][ T4228] usb 1-1: string descriptor 0 read error: -71 [ 329.831905][ T4228] usb 1-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 329.855627][ T4228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.897214][ T4228] usb 1-1: can't set config #4, error -71 [ 329.926302][ T4228] usb 1-1: USB disconnect, device number 5 [ 330.035910][ T4268] usb 4-1: USB disconnect, device number 2 [ 330.072950][ T6094] FAULT_INJECTION: forcing a failure. [ 330.072950][ T6094] name failslab, interval 1, probability 0, space 0, times 0 [ 330.085675][ T6094] CPU: 0 PID: 6094 Comm: syz.1.501 Not tainted syzkaller #0 [ 330.092966][ T6094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 330.103019][ T6094] Call Trace: [ 330.106301][ T6094] [ 330.109240][ T6094] dump_stack_lvl+0x188/0x250 [ 330.113925][ T6094] ? show_regs_print_info+0x20/0x20 [ 330.119125][ T6094] ? load_image+0x410/0x410 [ 330.123643][ T6094] ? __might_sleep+0xf0/0xf0 [ 330.128241][ T6094] ? __lock_acquire+0x7b50/0x7b50 [ 330.133277][ T6094] should_fail+0x383/0x4b0 [ 330.137701][ T6094] should_failslab+0x5/0x20 [ 330.142206][ T6094] slab_pre_alloc_hook+0x51/0xc0 [ 330.147146][ T6094] __kmalloc+0x6b/0x340 [ 330.151302][ T6094] ? mpi_alloc+0x73/0x130 [ 330.155635][ T6094] mpi_alloc+0x73/0x130 [ 330.159793][ T6094] mpi_read_raw_data+0x13f/0x970 [ 330.164732][ T6094] ? x509_key_preparse+0x60/0x5d0 [ 330.169756][ T6094] ? asymmetric_key_preparse+0xa5/0x140 [ 330.175304][ T6094] ? __se_sys_add_key+0x34b/0x410 [ 330.180334][ T6094] rsa_set_pub_key+0x18f/0x360 [ 330.185110][ T6094] ? rsa_dec+0x3c0/0x3c0 [ 330.189375][ T6094] pkcs1pad_set_pub_key+0xc0/0x1b0 [ 330.194493][ T6094] public_key_verify_signature+0x56d/0xd40 [ 330.200315][ T6094] ? public_key_free+0x80/0x80 [ 330.205108][ T6094] ? asymmetric_key_id_same+0x63/0xe0 [ 330.210486][ T6094] x509_check_for_self_signed+0x317/0x420 [ 330.216214][ T6094] x509_cert_parse+0x59c/0x7a0 [ 330.220983][ T6094] x509_key_preparse+0x60/0x5d0 [ 330.225838][ T6094] ? down_read+0x1aa/0x2e0 [ 330.230260][ T6094] asymmetric_key_preparse+0xa5/0x140 [ 330.235634][ T6094] key_create_or_update+0x432/0xa40 [ 330.240830][ T6094] ? security_key_permission+0x7c/0xa0 [ 330.246295][ T6094] ? key_type_put+0x20/0x20 [ 330.250801][ T6094] ? lookup_user_key_possessed+0x40/0x40 [ 330.256445][ T6094] ? __might_fault+0xb3/0x110 [ 330.261126][ T6094] __se_sys_add_key+0x34b/0x410 [ 330.265977][ T6094] ? __x64_sys_add_key+0xc0/0xc0 [ 330.270918][ T6094] ? lockdep_hardirqs_on+0x94/0x140 [ 330.276114][ T6094] ? __x64_sys_add_key+0x1c/0xc0 [ 330.281052][ T6094] do_syscall_64+0x4c/0xa0 [ 330.285466][ T6094] ? clear_bhb_loop+0x30/0x80 [ 330.290142][ T6094] ? clear_bhb_loop+0x30/0x80 [ 330.294826][ T6094] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 330.300720][ T6094] RIP: 0033:0x7f7a9cdf3159 [ 330.305140][ T6094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.324746][ T6094] RSP: 002b:00007f7a9b04b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 330.333160][ T6094] RAX: ffffffffffffffda RBX: 00007f7a9d07afa0 RCX: 00007f7a9cdf3159 [ 330.341135][ T6094] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 330.349108][ T6094] RBP: 00007f7a9ce8a03b R08: ffffffffffffffff R09: 0000000000000000 [ 330.357078][ T6094] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 330.365045][ T6094] R13: 00007f7a9d07b038 R14: 00007f7a9d07afa0 R15: 00007ffe60e19a18 [ 330.373025][ T6094] [ 331.043452][ T6103] futex_wake_op: syz.1.503 tries to shift op by 144; fix this program [ 331.069758][ T6101] loop0: detected capacity change from 0 to 2048 [ 331.171276][ T6101] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 332.006384][ T6106] dns_resolver: Unsupported server list version (0) [ 332.621185][ T6112] dns_resolver: Unsupported server list version (0) [ 333.843359][ T6124] dns_resolver: Unsupported server list version (0) [ 333.849478][ T6125] loop0: detected capacity change from 0 to 164 [ 333.890416][ T6116] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 334.110499][ T6115] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 334.255827][ T6130] FAULT_INJECTION: forcing a failure. [ 334.255827][ T6130] name failslab, interval 1, probability 0, space 0, times 0 [ 334.268475][ T6130] CPU: 1 PID: 6130 Comm: syz.3.513 Not tainted syzkaller #0 [ 334.275742][ T6130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 334.285777][ T6130] Call Trace: [ 334.289041][ T6130] [ 334.291976][ T6130] dump_stack_lvl+0x188/0x250 [ 334.296646][ T6130] ? show_regs_print_info+0x20/0x20 [ 334.301831][ T6130] ? load_image+0x410/0x410 [ 334.306316][ T6130] ? __might_sleep+0xf0/0xf0 [ 334.310895][ T6130] ? __lock_acquire+0x7b50/0x7b50 [ 334.315906][ T6130] should_fail+0x383/0x4b0 [ 334.320318][ T6130] should_failslab+0x5/0x20 [ 334.324827][ T6130] slab_pre_alloc_hook+0x51/0xc0 [ 334.329747][ T6130] __kmalloc+0x6b/0x340 [ 334.333888][ T6130] ? mpi_alloc+0x73/0x130 [ 334.338209][ T6130] mpi_alloc+0x73/0x130 [ 334.342358][ T6130] mpi_read_raw_data+0x13f/0x970 [ 334.347307][ T6130] ? x509_key_preparse+0x60/0x5d0 [ 334.352310][ T6130] ? asymmetric_key_preparse+0xa5/0x140 [ 334.357849][ T6130] ? __se_sys_add_key+0x34b/0x410 [ 334.362884][ T6130] rsa_set_pub_key+0x18f/0x360 [ 334.367641][ T6130] ? rsa_dec+0x3c0/0x3c0 [ 334.371907][ T6130] pkcs1pad_set_pub_key+0xc0/0x1b0 [ 334.377019][ T6130] public_key_verify_signature+0x56d/0xd40 [ 334.382832][ T6130] ? public_key_free+0x80/0x80 [ 334.387593][ T6130] ? asymmetric_key_id_same+0x63/0xe0 [ 334.392957][ T6130] x509_check_for_self_signed+0x317/0x420 [ 334.398691][ T6130] x509_cert_parse+0x59c/0x7a0 [ 334.403459][ T6130] x509_key_preparse+0x60/0x5d0 [ 334.408309][ T6130] ? down_read+0x1aa/0x2e0 [ 334.412728][ T6130] asymmetric_key_preparse+0xa5/0x140 [ 334.418099][ T6130] key_create_or_update+0x432/0xa40 [ 334.423296][ T6130] ? security_key_permission+0x7c/0xa0 [ 334.428762][ T6130] ? key_type_put+0x20/0x20 [ 334.433266][ T6130] ? lookup_user_key_possessed+0x40/0x40 [ 334.438907][ T6130] ? __might_fault+0xb3/0x110 [ 334.443587][ T6130] __se_sys_add_key+0x34b/0x410 [ 334.448446][ T6130] ? __x64_sys_add_key+0xc0/0xc0 [ 334.453390][ T6130] ? lockdep_hardirqs_on+0x94/0x140 [ 334.458585][ T6130] ? __x64_sys_add_key+0x1c/0xc0 [ 334.463510][ T6130] do_syscall_64+0x4c/0xa0 [ 334.467923][ T6130] ? clear_bhb_loop+0x30/0x80 [ 334.472581][ T6130] ? clear_bhb_loop+0x30/0x80 [ 334.477239][ T6130] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 334.483112][ T6130] RIP: 0033:0x7f2e90666159 [ 334.487511][ T6130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.507097][ T6130] RSP: 002b:00007f2e8e8be028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 334.515493][ T6130] RAX: ffffffffffffffda RBX: 00007f2e908edfa0 RCX: 00007f2e90666159 [ 334.523461][ T6130] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 334.531413][ T6130] RBP: 00007f2e906fd03b R08: ffffffffffffffff R09: 0000000000000000 [ 334.539368][ T6130] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 334.547334][ T6130] R13: 00007f2e908ee038 R14: 00007f2e908edfa0 R15: 00007fffa62d1178 [ 334.555306][ T6130] [ 335.402636][ T6140] futex_wake_op: syz.4.518 tries to shift op by 144; fix this program [ 335.467934][ T6141] ip6t_srh: unknown srh match flags 4000 [ 339.195684][ T4730] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 339.489552][ T6148] futex_wake_op: syz.1.520 tries to shift op by 144; fix this program [ 339.505612][ T4730] usb 2-1: Using ep0 maxpacket: 16 [ 339.575940][ T4730] usb 2-1: device descriptor read/all, error -71 [ 341.426690][ T6165] futex_wake_op: syz.0.524 tries to shift op by 144; fix this program [ 341.501136][ T6168] CIFS: Attempting to mount \\127.0.0.1\share [ 341.507446][ T6168] CIFS: VFS: No username specified [ 342.093549][ T6170] FAULT_INJECTION: forcing a failure. [ 342.093549][ T6170] name failslab, interval 1, probability 0, space 0, times 0 [ 342.107258][ T6170] CPU: 1 PID: 6170 Comm: syz.3.527 Not tainted syzkaller #0 [ 342.114572][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 342.124635][ T6170] Call Trace: [ 342.127915][ T6170] [ 342.130842][ T6170] dump_stack_lvl+0x188/0x250 [ 342.135523][ T6170] ? show_regs_print_info+0x20/0x20 [ 342.140717][ T6170] ? load_image+0x410/0x410 [ 342.145230][ T6170] ? __might_sleep+0xf0/0xf0 [ 342.149819][ T6170] ? __lock_acquire+0x7b50/0x7b50 [ 342.154845][ T6170] should_fail+0x383/0x4b0 [ 342.159272][ T6170] should_failslab+0x5/0x20 [ 342.163774][ T6170] slab_pre_alloc_hook+0x51/0xc0 [ 342.168721][ T6170] __kmalloc+0x6b/0x340 [ 342.172885][ T6170] ? mpi_alloc+0x73/0x130 [ 342.177226][ T6170] mpi_alloc+0x73/0x130 [ 342.181390][ T6170] mpi_read_raw_data+0x13f/0x970 [ 342.186333][ T6170] ? x509_key_preparse+0x60/0x5d0 [ 342.191362][ T6170] ? asymmetric_key_preparse+0xa5/0x140 [ 342.196915][ T6170] ? __se_sys_add_key+0x34b/0x410 [ 342.201944][ T6170] rsa_set_pub_key+0x18f/0x360 [ 342.206719][ T6170] ? rsa_dec+0x3c0/0x3c0 [ 342.210982][ T6170] pkcs1pad_set_pub_key+0xc0/0x1b0 [ 342.216103][ T6170] public_key_verify_signature+0x56d/0xd40 [ 342.221927][ T6170] ? public_key_free+0x80/0x80 [ 342.226717][ T6170] ? asymmetric_key_id_same+0x63/0xe0 [ 342.232097][ T6170] x509_check_for_self_signed+0x317/0x420 [ 342.237829][ T6170] x509_cert_parse+0x59c/0x7a0 [ 342.242628][ T6170] x509_key_preparse+0x60/0x5d0 [ 342.247491][ T6170] ? down_read+0x1aa/0x2e0 [ 342.251917][ T6170] asymmetric_key_preparse+0xa5/0x140 [ 342.257299][ T6170] key_create_or_update+0x432/0xa40 [ 342.262505][ T6170] ? security_key_permission+0x7c/0xa0 [ 342.267973][ T6170] ? key_type_put+0x20/0x20 [ 342.272479][ T6170] ? lookup_user_key_possessed+0x40/0x40 [ 342.278122][ T6170] ? __might_fault+0xb3/0x110 [ 342.282805][ T6170] __se_sys_add_key+0x34b/0x410 [ 342.287662][ T6170] ? __x64_sys_add_key+0xc0/0xc0 [ 342.292611][ T6170] ? lockdep_hardirqs_on+0x94/0x140 [ 342.297810][ T6170] ? __x64_sys_add_key+0x1c/0xc0 [ 342.302747][ T6170] do_syscall_64+0x4c/0xa0 [ 342.307161][ T6170] ? clear_bhb_loop+0x30/0x80 [ 342.311837][ T6170] ? clear_bhb_loop+0x30/0x80 [ 342.316515][ T6170] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 342.322405][ T6170] RIP: 0033:0x7f2e90666159 [ 342.326822][ T6170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.346426][ T6170] RSP: 002b:00007f2e8e8be028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 342.354843][ T6170] RAX: ffffffffffffffda RBX: 00007f2e908edfa0 RCX: 00007f2e90666159 [ 342.362813][ T6170] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 342.370784][ T6170] RBP: 00007f2e906fd03b R08: ffffffffffffffff R09: 0000000000000000 [ 342.378754][ T6170] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 342.386719][ T6170] R13: 00007f2e908ee038 R14: 00007f2e908edfa0 R15: 00007fffa62d1178 [ 342.394702][ T6170] [ 342.874796][ T6175] loop4: detected capacity change from 0 to 164 [ 343.284691][ T6180] futex_wake_op: syz.1.530 tries to shift op by 144; fix this program [ 344.270515][ T6184] dns_resolver: Unsupported server list version (0) [ 345.180662][ T6196] futex_wake_op: syz.3.536 tries to shift op by 144; fix this program [ 346.476400][ T6203] CIFS: Attempting to mount \\127.0.0.1\share [ 346.482705][ T6203] CIFS: VFS: No username specified [ 347.306130][ T6205] dns_resolver: Unsupported server list version (0) [ 348.762013][ T6217] ODEBUG: Out of memory. ODEBUG disabled [ 348.863651][ T6225] loop0: detected capacity change from 0 to 164 [ 349.842849][ T6230] dns_resolver: Unsupported server list version (0) [ 349.951844][ T6217] syz.1.542 (6217): drop_caches: 2 [ 350.315745][ T1107] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 351.195986][ T4234] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 351.735689][ T4234] usb 2-1: Using ep0 maxpacket: 16 [ 351.945566][ T1107] usb 5-1: Using ep0 maxpacket: 16 [ 352.544599][ T6248] futex_wake_op: syz.3.553 tries to shift op by 144; fix this program [ 352.714304][ T1107] usb 5-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 352.752545][ T1107] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 352.766783][ T4234] usb 2-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 353.750116][ T4234] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 353.871866][ T4268] libceph: connect (1)[c::]:6789 error -101 [ 353.889380][ T4268] libceph: mon0 (1)[c::]:6789 connect error [ 353.895785][ T4234] usb 2-1: string descriptor 0 read error: -71 [ 353.903584][ T4234] usb 2-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 353.917784][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.925462][ T6267] sch_tbf: peakrate 14 is lower than or equals to rate 8880905504234938788 ! [ 353.945750][ T4234] usb 2-1: can't set config #4, error -71 [ 353.958447][ T4234] usb 2-1: USB disconnect, device number 10 [ 354.437384][ T4308] libceph: connect (1)[c::]:6789 error -101 [ 354.454014][ T4308] libceph: mon0 (1)[c::]:6789 connect error [ 354.840925][ T6233] ceph: No mds server is up or the cluster is laggy [ 354.995267][ T6271] dns_resolver: Unsupported server list version (0) [ 355.365591][ T5208] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 355.485128][ T1107] usb 5-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 356.142066][ T6258] block2mtd: error: cannot open device /dev/zram0 [ 356.148575][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.239919][ T1107] usb 5-1: can't set config #4, error -71 [ 356.360873][ T1107] usb 5-1: USB disconnect, device number 5 [ 358.233011][ T6283] syz.1.562 (6283): drop_caches: 2 [ 358.994890][ T6309] dns_resolver: Unsupported server list version (0) [ 359.920410][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.572'. [ 363.322073][ T6332] sch_tbf: peakrate 14 is lower than or equals to rate 8880905504234938788 ! [ 363.419851][ T6335] dns_resolver: Unsupported server list version (0) [ 363.665727][ T21] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 364.066045][ T21] usb 1-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 364.101323][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.370694][ T6338] CIFS: Attempting to mount \\127.0.0.1\share [ 364.377302][ T6338] CIFS: VFS: No username specified [ 366.353924][ T21] usb 1-1: NFC: Unable to get FW version [ 366.371652][ T21] pn533_usb: probe of 1-1:1.0 failed with error -71 [ 366.721584][ T21] usb 1-1: USB disconnect, device number 7 [ 368.115239][ T6373] futex_wake_op: syz.4.587 tries to shift op by 144; fix this program [ 369.480400][ T6383] dns_resolver: Unsupported server list version (0) [ 369.555016][ T6388] dns_resolver: Unsupported server list version (0) [ 369.986641][ T4234] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 370.746282][ T4234] usb 1-1: Using ep0 maxpacket: 16 [ 371.262088][ T6399] genirq: Flags mismatch irq 32. 00000000 (pcmmio) vs. 00000000 (virtio1-output.0) [ 371.430656][ T6391] syz.4.591 (6391): drop_caches: 2 [ 371.487157][ T4234] usb 1-1: device descriptor read/all, error -71 [ 371.678486][ T6407] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 371.755896][ T4268] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 372.653596][ T6405] syz.4.596 (6405): drop_caches: 2 [ 372.834218][ T6413] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 373.026766][ T4268] usb 2-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 373.787695][ T4268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.535625][ T4268] usb 2-1: NFC: Reader power on cmd error -71 [ 375.544629][ T4268] pn533_usb 2-1:1.0: NFC: Couldn't poweron the reader (error -71) [ 375.601544][ T4268] pn533_usb: probe of 2-1:1.0 failed with error -71 [ 376.563267][ T4268] usb 2-1: USB disconnect, device number 11 [ 378.302100][ T6453] FAULT_INJECTION: forcing a failure. [ 378.302100][ T6453] name failslab, interval 1, probability 0, space 0, times 0 [ 378.309262][ T4475] block nbd0: Attempted send on invalid socket [ 378.322525][ T4475] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 378.595101][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.601421][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.616634][ T6453] CPU: 0 PID: 6453 Comm: syz.2.606 Not tainted syzkaller #0 [ 378.623941][ T6453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 378.633998][ T6453] Call Trace: [ 378.634686][ T6455] befs: (nbd0): unable to read superblock [ 378.637333][ T6453] [ 378.637428][ T6453] dump_stack_lvl+0x188/0x250 [ 378.651135][ T6453] ? show_regs_print_info+0x20/0x20 [ 378.656341][ T6453] ? load_image+0x410/0x410 [ 378.660853][ T6453] ? __might_sleep+0xf0/0xf0 [ 378.665535][ T6453] ? __lock_acquire+0x7b50/0x7b50 [ 378.670630][ T6453] should_fail+0x383/0x4b0 [ 378.675119][ T6453] should_failslab+0x5/0x20 [ 378.679653][ T6453] slab_pre_alloc_hook+0x51/0xc0 [ 378.684602][ T6453] kmem_cache_alloc_trace+0x47/0x290 [ 378.689868][ T6453] ? mpi_alloc+0x4e/0x130 [ 378.694183][ T6453] mpi_alloc+0x4e/0x130 [ 378.698337][ T6453] mpi_read_raw_data+0x13f/0x970 [ 378.703259][ T6453] ? x509_key_preparse+0x60/0x5d0 [ 378.708321][ T6453] ? __se_sys_add_key+0x34b/0x410 [ 378.713446][ T6453] rsa_set_pub_key+0x1c4/0x360 [ 378.718251][ T6453] ? rsa_dec+0x3c0/0x3c0 [ 378.722492][ T6453] pkcs1pad_set_pub_key+0xc0/0x1b0 [ 378.727590][ T6453] public_key_verify_signature+0x56d/0xd40 [ 378.733391][ T6453] ? public_key_free+0x80/0x80 [ 378.738155][ T6453] ? asymmetric_key_id_same+0x63/0xe0 [ 378.743513][ T6453] x509_check_for_self_signed+0x317/0x420 [ 378.749216][ T6453] x509_cert_parse+0x59c/0x7a0 [ 378.753970][ T6453] x509_key_preparse+0x60/0x5d0 [ 378.758806][ T6453] ? down_read+0x1aa/0x2e0 [ 378.763269][ T6453] asymmetric_key_preparse+0xa5/0x140 [ 378.768634][ T6453] key_create_or_update+0x432/0xa40 [ 378.773817][ T6453] ? security_key_permission+0x7c/0xa0 [ 378.779305][ T6453] ? key_type_put+0x20/0x20 [ 378.783792][ T6453] ? lookup_user_key_possessed+0x40/0x40 [ 378.789416][ T6453] ? __might_fault+0xb3/0x110 [ 378.794123][ T6453] __se_sys_add_key+0x34b/0x410 [ 378.798957][ T6453] ? __x64_sys_add_key+0xc0/0xc0 [ 378.803881][ T6453] ? lockdep_hardirqs_on+0x94/0x140 [ 378.809105][ T6453] ? __x64_sys_add_key+0x1c/0xc0 [ 378.814028][ T6453] do_syscall_64+0x4c/0xa0 [ 378.818428][ T6453] ? clear_bhb_loop+0x30/0x80 [ 378.823127][ T6453] ? clear_bhb_loop+0x30/0x80 [ 378.827788][ T6453] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 378.833664][ T6453] RIP: 0033:0x7f10263bb159 [ 378.838096][ T6453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.857714][ T6453] RSP: 002b:00007f1024613028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 378.866110][ T6453] RAX: ffffffffffffffda RBX: 00007f1026642fa0 RCX: 00007f10263bb159 [ 378.874065][ T6453] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 378.882017][ T6453] RBP: 00007f102645203b R08: ffffffffffffffff R09: 0000000000000000 [ 378.889989][ T6453] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 378.897940][ T6453] R13: 00007f1026643038 R14: 00007f1026642fa0 R15: 00007ffe1d0537f8 [ 378.905907][ T6453] [ 380.148929][ T6473] syz.0.616 (6473): drop_caches: 2 [ 384.049949][ T6511] ip6t_srh: unknown srh match flags 4000 [ 384.209097][ T6513] CIFS: Attempting to mount \\127.0.0.1\share [ 384.215595][ T6513] CIFS: VFS: No username specified [ 386.816929][ T6516] dns_resolver: Unsupported server list version (0) [ 387.151400][ T6524] FAULT_INJECTION: forcing a failure. [ 387.151400][ T6524] name failslab, interval 1, probability 0, space 0, times 0 [ 387.223624][ T6524] CPU: 0 PID: 6524 Comm: syz.1.628 Not tainted syzkaller #0 [ 387.230946][ T6524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.240988][ T6524] Call Trace: [ 387.244251][ T6524] [ 387.247166][ T6524] dump_stack_lvl+0x188/0x250 [ 387.251834][ T6524] ? show_regs_print_info+0x20/0x20 [ 387.257015][ T6524] ? load_image+0x410/0x410 [ 387.261505][ T6524] ? __might_sleep+0xf0/0xf0 [ 387.266078][ T6524] ? __lock_acquire+0x7b50/0x7b50 [ 387.271093][ T6524] should_fail+0x383/0x4b0 [ 387.275500][ T6524] should_failslab+0x5/0x20 [ 387.279986][ T6524] slab_pre_alloc_hook+0x51/0xc0 [ 387.284935][ T6524] kmem_cache_alloc_trace+0x47/0x290 [ 387.290238][ T6524] ? mpi_alloc+0x4e/0x130 [ 387.294579][ T6524] mpi_alloc+0x4e/0x130 [ 387.298720][ T6524] mpi_read_raw_data+0x13f/0x970 [ 387.303649][ T6524] ? x509_key_preparse+0x60/0x5d0 [ 387.308656][ T6524] ? asymmetric_key_preparse+0xa5/0x140 [ 387.314188][ T6524] ? __se_sys_add_key+0x34b/0x410 [ 387.319201][ T6524] rsa_set_pub_key+0x18f/0x360 [ 387.323961][ T6524] ? rsa_dec+0x3c0/0x3c0 [ 387.328201][ T6524] pkcs1pad_set_pub_key+0xc0/0x1b0 [ 387.333304][ T6524] public_key_verify_signature+0x56d/0xd40 [ 387.339105][ T6524] ? public_key_free+0x80/0x80 [ 387.343868][ T6524] ? asymmetric_key_id_same+0x63/0xe0 [ 387.349238][ T6524] x509_check_for_self_signed+0x317/0x420 [ 387.354968][ T6524] x509_cert_parse+0x59c/0x7a0 [ 387.359728][ T6524] x509_key_preparse+0x60/0x5d0 [ 387.364577][ T6524] ? down_read+0x1aa/0x2e0 [ 387.369006][ T6524] asymmetric_key_preparse+0xa5/0x140 [ 387.374385][ T6524] key_create_or_update+0x432/0xa40 [ 387.379566][ T6524] ? security_key_permission+0x7c/0xa0 [ 387.385011][ T6524] ? key_type_put+0x20/0x20 [ 387.389498][ T6524] ? lookup_user_key_possessed+0x40/0x40 [ 387.395123][ T6524] ? __might_fault+0xb3/0x110 [ 387.399789][ T6524] __se_sys_add_key+0x34b/0x410 [ 387.404647][ T6524] ? __x64_sys_add_key+0xc0/0xc0 [ 387.409576][ T6524] ? lockdep_hardirqs_on+0x94/0x140 [ 387.414764][ T6524] ? __x64_sys_add_key+0x1c/0xc0 [ 387.419689][ T6524] do_syscall_64+0x4c/0xa0 [ 387.424087][ T6524] ? clear_bhb_loop+0x30/0x80 [ 387.428748][ T6524] ? clear_bhb_loop+0x30/0x80 [ 387.433411][ T6524] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 387.439285][ T6524] RIP: 0033:0x7f7a9cdf3159 [ 387.443687][ T6524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.463279][ T6524] RSP: 002b:00007f7a9b04b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 387.471680][ T6524] RAX: ffffffffffffffda RBX: 00007f7a9d07afa0 RCX: 00007f7a9cdf3159 [ 387.479636][ T6524] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 387.487588][ T6524] RBP: 00007f7a9ce8a03b R08: ffffffffffffffff R09: 0000000000000000 [ 387.495546][ T6524] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 387.503497][ T6524] R13: 00007f7a9d07b038 R14: 00007f7a9d07afa0 R15: 00007ffe60e19a18 [ 387.511461][ T6524] [ 389.700465][ T6535] ip6t_srh: unknown srh match flags 4000 [ 389.714812][ T6541] syz.4.634 (6541): drop_caches: 2 [ 393.572511][ T6572] ip6t_srh: unknown srh match flags 4000 [ 397.010093][ T6608] ip6t_srh: unknown srh match flags 4000 [ 397.580730][ T4228] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 401.166007][ T6647] futex_wake_op: syz.3.662 tries to shift op by 144; fix this program [ 404.190940][ T6659] loop4: detected capacity change from 0 to 1024 [ 405.694439][ T6671] dns_resolver: Unsupported server list version (0) [ 408.133412][ T6698] futex_wake_op: syz.2.676 tries to shift op by 144; fix this program [ 409.078435][ T6704] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 410.236876][ T4228] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 411.915690][ T4228] usb 3-1: Using ep0 maxpacket: 16 [ 412.276741][ T4228] usb 3-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 412.839078][ T4228] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 412.895668][ T4228] usb 3-1: string descriptor 0 read error: -71 [ 412.901919][ T4228] usb 3-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 412.911736][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.925734][ T6730] dns_resolver: Unsupported server list version (0) [ 412.935730][ T4228] usb 3-1: can't set config #4, error -71 [ 412.952414][ T4228] usb 3-1: USB disconnect, device number 3 [ 415.521862][ T6754] FAULT_INJECTION: forcing a failure. [ 415.521862][ T6754] name failslab, interval 1, probability 0, space 0, times 0 [ 415.681556][ T6754] CPU: 1 PID: 6754 Comm: syz.2.690 Not tainted syzkaller #0 [ 415.688884][ T6754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.698953][ T6754] Call Trace: [ 415.702239][ T6754] [ 415.705172][ T6754] dump_stack_lvl+0x188/0x250 [ 415.709859][ T6754] ? show_regs_print_info+0x20/0x20 [ 415.715054][ T6754] ? load_image+0x410/0x410 [ 415.719554][ T6754] ? __might_sleep+0xf0/0xf0 [ 415.724143][ T6754] ? __lock_acquire+0x7b50/0x7b50 [ 415.729176][ T6754] should_fail+0x383/0x4b0 [ 415.733601][ T6754] should_failslab+0x5/0x20 [ 415.738101][ T6754] slab_pre_alloc_hook+0x51/0xc0 [ 415.743037][ T6754] __kmalloc+0x6b/0x340 [ 415.747188][ T6754] ? mpi_alloc+0x73/0x130 [ 415.751523][ T6754] mpi_alloc+0x73/0x130 [ 415.755676][ T6754] mpi_read_raw_data+0x13f/0x970 [ 415.760614][ T6754] ? x509_key_preparse+0x60/0x5d0 [ 415.765633][ T6754] ? asymmetric_key_preparse+0xa5/0x140 [ 415.771172][ T6754] ? __se_sys_add_key+0x34b/0x410 [ 415.776198][ T6754] rsa_set_pub_key+0x18f/0x360 [ 415.780978][ T6754] ? rsa_dec+0x3c0/0x3c0 [ 415.785237][ T6754] pkcs1pad_set_pub_key+0xc0/0x1b0 [ 415.790367][ T6754] public_key_verify_signature+0x56d/0xd40 [ 415.796187][ T6754] ? public_key_free+0x80/0x80 [ 415.800983][ T6754] ? asymmetric_key_id_same+0x63/0xe0 [ 415.806361][ T6754] x509_check_for_self_signed+0x317/0x420 [ 415.812088][ T6754] x509_cert_parse+0x59c/0x7a0 [ 415.816854][ T6754] x509_key_preparse+0x60/0x5d0 [ 415.821710][ T6754] ? down_read+0x1aa/0x2e0 [ 415.826132][ T6754] asymmetric_key_preparse+0xa5/0x140 [ 415.831515][ T6754] key_create_or_update+0x432/0xa40 [ 415.836716][ T6754] ? security_key_permission+0x7c/0xa0 [ 415.842186][ T6754] ? key_type_put+0x20/0x20 [ 415.846701][ T6754] ? lookup_user_key_possessed+0x40/0x40 [ 415.852342][ T6754] ? __might_fault+0xb3/0x110 [ 415.857024][ T6754] __se_sys_add_key+0x34b/0x410 [ 415.861885][ T6754] ? __x64_sys_add_key+0xc0/0xc0 [ 415.866847][ T6754] ? lockdep_hardirqs_on+0x94/0x140 [ 415.872050][ T6754] ? __x64_sys_add_key+0x1c/0xc0 [ 415.876990][ T6754] do_syscall_64+0x4c/0xa0 [ 415.881408][ T6754] ? clear_bhb_loop+0x30/0x80 [ 415.886086][ T6754] ? clear_bhb_loop+0x30/0x80 [ 415.890777][ T6754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 415.896675][ T6754] RIP: 0033:0x7f10263bb159 [ 415.901092][ T6754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.920696][ T6754] RSP: 002b:00007f1024613028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 415.929120][ T6754] RAX: ffffffffffffffda RBX: 00007f1026642fa0 RCX: 00007f10263bb159 [ 415.937094][ T6754] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 415.945065][ T6754] RBP: 00007f102645203b R08: ffffffffffffffff R09: 0000000000000000 [ 415.953037][ T6754] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 415.961005][ T6754] R13: 00007f1026643038 R14: 00007f1026642fa0 R15: 00007ffe1d0537f8 [ 415.968986][ T6754] [ 416.466407][ T6759] ip6t_srh: unknown srh match flags 4000 [ 419.065103][ T6777] ip6t_srh: unknown srh match flags 4000 [ 419.559365][ T6788] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 420.440075][ T6787] dns_resolver: Unsupported server list version (0) [ 420.653868][ T6794] dns_resolver: Unsupported server list version (0) [ 421.681193][ T6802] CIFS: Attempting to mount \\127.0.0.1\share [ 421.687628][ T6802] CIFS: VFS: No username specified [ 422.426719][ T6804] dns_resolver: Unsupported server list version (0) [ 422.864526][ T6822] input: syz0 as /devices/virtual/input/input14 [ 425.272265][ T6838] dns_resolver: Unsupported server list version (0) [ 425.688898][ T6846] dns_resolver: Unsupported server list version (0) [ 425.725594][ T5208] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 426.095854][ T5208] usb 2-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 426.530235][ T5208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.703105][ T6848] CIFS: Attempting to mount \\127.0.0.1\share [ 426.709343][ T6848] CIFS: VFS: No username specified [ 427.935565][ C1] usb 2-1: NFC: Urb failure (status -71) [ 428.087795][ T5208] usb 2-1: NFC: Unable to get FW version [ 428.093706][ T5208] pn533_usb: probe of 2-1:1.0 failed with error -71 [ 428.154614][ T6867] loop0: detected capacity change from 0 to 164 [ 428.163555][ T5208] usb 2-1: USB disconnect, device number 12 [ 431.834540][ T6900] futex_wake_op: syz.0.730 tries to shift op by 144; fix this program [ 435.395670][ T26] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 435.494428][ T6923] dns_resolver: Unsupported server list version (0) [ 435.809083][ T26] usb 5-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 435.841640][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.208301][ T26] usb 5-1: NFC: Unable to get FW version [ 437.223698][ T26] pn533_usb: probe of 5-1:1.0 failed with error -71 [ 437.407986][ T26] usb 5-1: USB disconnect, device number 6 [ 438.145414][ T6949] futex_wake_op: syz.1.743 tries to shift op by 144; fix this program [ 438.709437][ T6953] futex_wake_op: syz.2.744 tries to shift op by 144; fix this program [ 439.837786][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.844219][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.095352][ T6960] ip6t_srh: unknown srh match flags 4000 [ 440.709906][ T6967] dns_resolver: Unsupported server list version (0) [ 441.410741][ T6971] ip6t_srh: unknown srh match flags 4000 [ 443.066473][ T6980] dns_resolver: Unsupported server list version (0) [ 443.257932][ T6987] dns_resolver: Unsupported server list version (0) [ 444.267086][ T6989] device syzkaller0 entered promiscuous mode [ 444.631058][ T6997] futex_wake_op: syz.1.758 tries to shift op by 144; fix this program [ 445.364981][ T7001] dns_resolver: Unsupported server list version (0) [ 446.941932][ T7014] dns_resolver: Unsupported server list version (0) [ 448.744323][ T7031] binder_alloc: 7029: binder_alloc_buf, no vma [ 449.759753][ T7031] syz.3.765 (7031): drop_caches: 2 [ 449.823241][ T7034] dns_resolver: Unsupported server list version (0) [ 450.469706][ T7043] input: syz0 as /devices/virtual/input/input17 [ 452.771926][ T7058] dns_resolver: Unsupported server list version (0) [ 453.760273][ T7061] dns_resolver: Unsupported server list version (0) [ 454.820896][ T7066] futex_wake_op: syz.4.775 tries to shift op by 144; fix this program [ 456.080578][ T7077] dns_resolver: Unsupported server list version (0) [ 456.635727][ T7049] block2mtd: error: cannot open device /dev/zram0 [ 456.665576][ T7076] dns_resolver: Unsupported server list version (0) [ 456.977747][ T7079] futex_wake_op: syz.4.780 tries to shift op by 144; fix this program [ 458.113663][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.783'. [ 459.431013][ T7094] netlink: 20 bytes leftover after parsing attributes in process `syz.2.783'. [ 460.469191][ T7101] CIFS: Attempting to mount \\127.0.0.1\share [ 460.476031][ T7101] CIFS: VFS: No username specified [ 463.465650][ T7118] dns_resolver: Unsupported server list version (0) [ 465.158984][ T7134] binder: BINDER_SET_CONTEXT_MGR already set [ 465.165310][ T7134] binder: 7133:7134 ioctl 4018620d 200000000040 returned -16 [ 466.073890][ T7134] syz.4.796 (7134): drop_caches: 2 [ 466.097247][ T7140] syz.2.798 (7140): drop_caches: 2 [ 467.538795][ T7147] netlink: 20 bytes leftover after parsing attributes in process `syz.4.801'. [ 467.675966][ T7120] block2mtd: error: cannot open device /dev/zram0 [ 469.530168][ T5301] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 469.896627][ T7170] dns_resolver: Unsupported server list version (0) [ 470.115621][ T5301] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 470.622378][ T5301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.675602][ T5301] usb 3-1: can't set config #1, error -71 [ 470.687496][ T5301] usb 3-1: USB disconnect, device number 4 [ 471.514518][ T7175] device syzkaller0 entered promiscuous mode [ 471.522473][ T7188] loop4: detected capacity change from 0 to 164 [ 472.064822][ T7197] input: syz0 as /devices/virtual/input/input19 [ 472.997956][ T7208] overlayfs: failed to resolve './file2': -2 [ 473.715751][ T1107] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 474.485620][ T7213] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 475.005612][ T1107] usb 4-1: Using ep0 maxpacket: 16 [ 475.745604][ T1107] usb 4-1: unable to get BOS descriptor set [ 475.816668][ T1107] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 476.335584][ T7231] netlink: 40 bytes leftover after parsing attributes in process `syz.3.824'. [ 476.785546][ T1107] usb 4-1: can't read configurations, error -71 [ 477.058483][ T7240] loop3: detected capacity change from 0 to 1024 [ 478.426609][ T7249] dns_resolver: Unsupported server list version (0) [ 478.875723][ T7220] block2mtd: error: cannot open device /dev/zram0 [ 482.171027][ T7272] device syzkaller0 entered promiscuous mode [ 483.244188][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'. [ 483.979334][ T7299] dns_resolver: Unsupported server list version (0) [ 484.060251][ T7300] futex_wake_op: syz.1.846 tries to shift op by 144; fix this program [ 487.266376][ T7320] binder: 7318:7320 ioctl 4018620d 0 returned -22 [ 487.418756][ T7320] syz.1.851 (7320): drop_caches: 2 [ 487.761320][ T7314] device syzkaller0 entered promiscuous mode [ 489.832765][ T7317] block2mtd: error: cannot open device /dev/zram0 [ 491.219929][ T7347] dns_resolver: Unsupported server list version (0) [ 492.115536][ T7351] loop2: detected capacity change from 0 to 1024 [ 495.035597][ T5099] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 496.525518][ T5099] usb 1-1: Using ep0 maxpacket: 16 [ 497.515546][ T5099] usb 1-1: device descriptor read/all, error -71 [ 497.527384][ T7375] dns_resolver: Unsupported server list version (0) [ 498.213149][ T7387] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 498.815502][ T7391] dns_resolver: Unsupported server list version (0) [ 499.369697][ T4228] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 500.314425][ T7393] dns_resolver: Unsupported server list version (0) [ 501.065525][ T4228] usb 4-1: Using ep0 maxpacket: 16 [ 501.278823][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.285128][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.405546][ T4228] usb 4-1: unable to get BOS descriptor set [ 503.609877][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'. [ 503.975879][ T4228] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 504.168911][ T4228] usb 4-1: can't read configurations, error -71 [ 508.545327][ T4231] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 511.211924][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'. [ 512.641403][ T7482] dns_resolver: Unsupported server list version (0) [ 512.771941][ T7500] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 513.783132][ T7506] CIFS: Attempting to mount \\127.0.0.1\share [ 513.789670][ T7506] CIFS: VFS: No username specified [ 514.704322][ T7502] futex_wake_op: syz.1.907 tries to shift op by 144; fix this program [ 514.991868][ T7505] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 515.111850][ T7505] device syzkaller0 entered promiscuous mode [ 515.961163][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.913'. [ 516.259687][ T7536] CIFS: Attempting to mount \\127.0.0.1\share [ 516.271051][ T7536] CIFS: VFS: No username specified [ 518.009205][ T7533] binder: BINDER_SET_CONTEXT_MGR already set [ 518.015212][ T7533] binder: 7532:7533 ioctl 4018620d 200000000040 returned -16 [ 519.524777][ T7552] dns_resolver: Unsupported server list version (0) [ 521.237131][ T7568] CIFS: Attempting to mount \\127.0.0.1\share [ 521.243530][ T7568] CIFS: VFS: No username specified [ 524.136816][ T7587] CIFS: Attempting to mount \\127.0.0.1\share [ 524.143184][ T7587] CIFS: VFS: No username specified [ 524.327041][ T7588] binder: BINDER_SET_CONTEXT_MGR already set [ 524.346077][ T7588] binder: 7582:7588 ioctl 4018620d 200000000040 returned -16 [ 524.425818][ T7593] binder: 7592:7593 ioctl c0306201 0 returned -14 [ 525.338599][ T7597] dns_resolver: Unsupported server list version (0) [ 525.351066][ T7593] syz.0.933 (7593): drop_caches: 2 [ 525.650040][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.936'. [ 526.126895][ T7327] block nbd1: Attempted send on invalid socket [ 526.133104][ T7327] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 526.150465][ T7600] befs: (nbd1): unable to read superblock [ 526.886110][ T1107] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 527.189843][ T1107] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 528.326126][ T1107] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 528.363665][ T7611] ceph: No mds server is up or the cluster is laggy [ 528.367109][ T7625] loop0: detected capacity change from 0 to 164 [ 528.897376][ T7637] binder: BINDER_SET_CONTEXT_MGR already set [ 528.927956][ T7637] binder: 7636:7637 ioctl 4018620d 200000000040 returned -16 [ 529.864153][ T7645] CIFS: Attempting to mount \\127.0.0.1\share [ 529.872692][ T7645] CIFS: VFS: No username specified [ 531.541910][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.950'. [ 533.923313][ T7680] binder: BINDER_SET_CONTEXT_MGR already set [ 533.976091][ T7680] binder: 7671:7680 ioctl 4018620d 200000000040 returned -16 [ 534.081570][ T7686] process 'syz.3.958' launched './file1' with NULL argv: empty string added [ 534.266167][ T4228] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 535.865907][ T4228] usb 1-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 536.390954][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.075587][ T4228] usb 1-1: can't set config #1, error -71 [ 537.098727][ T4228] usb 1-1: USB disconnect, device number 12 [ 537.516732][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.966'. [ 538.333389][ T7713] futex_wake_op: syz.1.965 tries to shift op by 144; fix this program [ 541.311765][ T7730] dns_resolver: Unsupported server list version (0) [ 543.851145][ T7711] block2mtd: error: cannot open device /dev/zram0 [ 544.039355][ T7327] block nbd1: Attempted send on invalid socket [ 544.054442][ T7327] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 544.073653][ T7741] befs: (nbd1): unable to read superblock [ 545.625498][ T1107] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 545.931085][ T7767] binder: 7766:7767 ioctl c0306201 0 returned -14 [ 545.942347][ T7767] syz.1.982 (7767): drop_caches: 2 [ 546.091484][ T7764] dns_resolver: Unsupported server list version (0) [ 546.115618][ T1107] usb 1-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 546.124677][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.420158][ T7772] trusted_key: encrypted_key: key user:syz not found [ 547.206984][ T7777] futex_wake_op: syz.1.985 tries to shift op by 144; fix this program [ 548.256879][ T1107] usb 1-1: NFC: Unable to get FW version [ 548.262650][ T1107] pn533_usb: probe of 1-1:1.0 failed with error -71 [ 548.884111][ T1107] usb 1-1: USB disconnect, device number 13 [ 551.035978][ T7800] CIFS: Attempting to mount \\127.0.0.1\share [ 551.042115][ T7800] CIFS: VFS: No username specified [ 552.235621][ T7787] block2mtd: error: cannot open device /dev/zram0 [ 554.071287][ T7827] binder: 7826:7827 ioctl c0306201 0 returned -14 [ 554.090989][ T7827] syz.2.1001 (7827): drop_caches: 2 [ 554.176192][ T1107] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 554.766438][ T7837] syz.0.1004 (7837): drop_caches: 2 [ 555.754723][ T1107] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 555.780620][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.136414][ T1107] usb 4-1: can't set config #1, error -71 [ 556.179896][ T1107] usb 4-1: USB disconnect, device number 8 [ 557.172353][ T7860] CIFS: Attempting to mount \\127.0.0.1\share [ 557.178779][ T7860] CIFS: VFS: No username specified [ 557.460742][ T7856] syz.1.1009 (7856): drop_caches: 2 [ 558.698385][ T7872] dns_resolver: Unsupported server list version (0) [ 559.763835][ T7849] block2mtd: error: cannot open device /dev/zram0 [ 561.365645][ T1107] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 561.635944][ T1107] usb 1-1: Using ep0 maxpacket: 16 [ 561.695557][ T4231] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 562.852170][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.853670][ T7891] syz.3.1021 (7891): drop_caches: 2 [ 562.861920][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.205715][ T1107] usb 1-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 563.267191][ T1107] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 563.355956][ T1107] usb 1-1: string descriptor 0 read error: -71 [ 563.370544][ T1107] usb 1-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 563.410486][ T4231] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 563.425251][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.473581][ T7908] ip6t_srh: unknown srh match flags 4000 [ 564.706600][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.935643][ T1107] usb 1-1: can't set config #4, error -71 [ 564.945730][ T4231] usb 3-1: can't set config #1, error -71 [ 564.956877][ T1107] usb 1-1: USB disconnect, device number 14 [ 564.980663][ T4231] usb 3-1: USB disconnect, device number 5 [ 565.138673][ T7926] binder: 7921:7926 ioctl 4018620d 0 returned -22 [ 565.451564][ T7922] syz.2.1029 (7922): drop_caches: 2 [ 567.423814][ T7942] dns_resolver: Unsupported server list version (0) [ 568.303307][ T7945] binder: 7944:7945 ioctl 4018620d 0 returned -22 [ 568.373052][ T7945] syz.2.1036 (7945): drop_caches: 2 [ 568.573392][ T7954] syz.0.1039 (7954): drop_caches: 2 [ 568.668913][ T7962] CIFS: Attempting to mount \\127.0.0.1\share [ 568.675389][ T7962] CIFS: VFS: No username specified [ 571.519732][ T7976] dns_resolver: Unsupported server list version (0) [ 571.567102][ T7978] futex_wake_op: syz.0.1047 tries to shift op by 144; fix this program [ 574.123747][ T7996] dns_resolver: Unsupported server list version (0) [ 574.800770][ T7997] CIFS: Attempting to mount \\127.0.0.1\share [ 574.807098][ T7997] CIFS: VFS: No username specified [ 576.860067][ T8020] futex_wake_op: syz.0.1061 tries to shift op by 144; fix this program [ 578.345573][ T4229] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 579.396693][ T8027] ip6t_srh: unknown srh match flags 4000 [ 579.456130][ T8032] futex_wake_op: syz.0.1064 tries to shift op by 144; fix this program [ 579.595472][ T4229] usb 4-1: Using ep0 maxpacket: 16 [ 580.587357][ T8042] dns_resolver: Unsupported server list version (0) [ 580.665718][ T4229] usb 4-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 580.929399][ T8044] CIFS: Attempting to mount \\127.0.0.1\share [ 580.935943][ T8044] CIFS: VFS: No username specified [ 581.494038][ T4229] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 581.587658][ T8046] dns_resolver: Unsupported server list version (0) [ 581.728692][ T4229] usb 4-1: string descriptor 0 read error: -71 [ 582.496314][ T4229] usb 4-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 582.505373][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.525656][ T8040] CIFS: Attempting to mount \\127.0.0.1\share [ 582.532061][ T8040] CIFS: VFS: No username specified [ 582.537354][ T4229] usb 4-1: can't set config #4, error -71 [ 582.544078][ T4229] usb 4-1: USB disconnect, device number 9 [ 583.710036][ T7327] block nbd3: Attempted send on invalid socket [ 583.716620][ T7327] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 583.729770][ T8062] befs: (nbd3): unable to read superblock [ 584.107588][ T8060] binder: 8059:8060 ioctl c0306201 0 returned -14 [ 584.170782][ T8060] syz.4.1074 (8060): drop_caches: 2 [ 584.278108][ T8065] futex_wake_op: syz.1.1075 tries to shift op by 144; fix this program [ 584.435524][ T5301] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 585.410431][ T8075] CIFS: Attempting to mount \\127.0.0.1\share [ 585.416904][ T8075] CIFS: VFS: No username specified [ 586.318160][ T8074] ip6t_srh: unknown srh match flags 4000 [ 586.385786][ T5301] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 587.317567][ T5301] usb 1-1: can't read configurations, error -71 [ 588.432306][ T8093] dns_resolver: Unsupported server list version (0) [ 589.450731][ T8098] dns_resolver: Unsupported server list version (0) [ 591.592314][ T8107] binder: 8105:8107 ioctl c0306201 0 returned -14 [ 591.614594][ T8107] syz.4.1088 (8107): drop_caches: 2 [ 591.658614][ T8109] CIFS: Attempting to mount \\127.0.0.1\share [ 591.664915][ T8109] CIFS: VFS: No username specified [ 592.015364][ T8113] dns_resolver: Unsupported server list version (0) [ 592.699023][ T8112] syz.1.1090 (8112): drop_caches: 2 [ 593.291435][ T8124] futex_wake_op: syz.3.1093 tries to shift op by 144; fix this program [ 594.196658][ T8126] ip6t_srh: unknown srh match flags 4000 [ 594.600324][ T8133] syz.2.1097 (8133): drop_caches: 2 [ 596.125282][ T7327] block nbd3: Attempted send on invalid socket [ 596.131534][ T7327] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 596.146571][ T8136] befs: (nbd3): unable to read superblock [ 597.941902][ T8159] ip6t_srh: unknown srh match flags 4000 [ 598.457601][ T8162] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 600.049919][ T8166] syz.0.1106 (8166): drop_caches: 2 [ 600.159906][ T8171] CIFS: Attempting to mount \\127.0.0.1\share [ 600.166352][ T8171] CIFS: VFS: No username specified [ 601.605992][ T8178] ip6t_srh: unknown srh match flags 4000 [ 601.635192][ T8181] hub 8-0:1.0: USB hub found [ 601.665991][ T8181] hub 8-0:1.0: 1 port detected [ 601.834183][ T8188] zram0: detected capacity change from 0 to 65536 [ 602.839451][ T8198] ip6t_srh: unknown srh match flags 4000 [ 604.467501][ T8195] syz.3.1115 (8195): drop_caches: 2 [ 604.502972][ T8205] loop2: detected capacity change from 0 to 512 [ 605.959792][ T8205] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 606.136256][ T8205] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 606.222687][ T8225] syz.1.1123 (8225): drop_caches: 2 [ 607.879756][ T8245] ip6t_srh: unknown srh match flags 4000 [ 608.017492][ T8248] hub 8-0:1.0: USB hub found [ 608.029787][ T8248] hub 8-0:1.0: 1 port detected [ 608.724363][ T8256] dns_resolver: Unsupported server list version (0) [ 610.565447][ T8270] binder: 8269:8270 ioctl c0306201 0 returned -14 [ 610.718008][ T8270] syz.0.1135 (8270): drop_caches: 2 [ 611.471998][ T5208] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 613.285499][ T5208] usb 5-1: Using ep0 maxpacket: 16 [ 613.918549][ T8294] zram: Cannot change disksize for initialized device [ 614.327163][ T5208] usb 5-1: device descriptor read/all, error -71 [ 614.395775][ T8298] futex_wake_op: syz.4.1143 tries to shift op by 144; fix this program [ 614.520151][ T8302] loop3: detected capacity change from 0 to 512 [ 615.470933][ T8302] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 615.483164][ T8302] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 616.757797][ T4194] EXT4-fs error (device loop3): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 616.916842][ T4194] EXT4-fs (loop3): Remounting filesystem read-only [ 617.009506][ T8322] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 617.019306][ T4194] EXT4-fs error (device loop3): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 617.162958][ T4194] EXT4-fs (loop3): Remounting filesystem read-only [ 617.410989][ T4194] EXT4-fs error (device loop3): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 617.684776][ T4194] EXT4-fs (loop3): Remounting filesystem read-only [ 617.694915][ T4194] EXT4-fs error (device loop3): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 617.713840][ T4194] EXT4-fs (loop3): Remounting filesystem read-only [ 617.721778][ T4194] EXT4-fs error (device loop3): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 617.812661][ T4194] EXT4-fs (loop3): Remounting filesystem read-only [ 617.855798][ T4194] EXT4-fs error (device loop3): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 617.891200][ T4194] EXT4-fs (loop3): Remounting filesystem read-only [ 618.068083][ T4194] EXT4-fs error (device loop3): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 618.204882][ T4194] EXT4-fs (loop3): Remounting filesystem read-only [ 618.233044][ T8338] CIFS: Attempting to mount \\127.0.0.1\share [ 618.239238][ T8338] CIFS: VFS: No username specified [ 618.286282][ T4194] EXT4-fs error (device loop3): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 618.300007][ T4194] EXT4-fs (loop3): Remounting filesystem read-only [ 618.307057][ T4194] EXT4-fs error (device loop3): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 618.367985][ T4194] EXT4-fs (loop3): Remounting filesystem read-only [ 618.379861][ T4194] EXT4-fs error (device loop3): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 618.401064][ T4194] EXT4-fs (loop3): Remounting filesystem read-only [ 618.590268][ T8343] ip6t_srh: unknown srh match flags 4000 [ 620.331561][ T8349] zram: Cannot change disksize for initialized device [ 623.689964][ T4275] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.730679][ T8368] ip6t_srh: unknown srh match flags 4000 [ 624.821505][ T4275] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.857799][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.864237][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.020977][ T4275] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.179622][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1167'. [ 625.211625][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1167'. [ 625.257084][ T4275] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.270119][ T8377] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1167'. [ 625.746915][ T8390] CIFS: Attempting to mount \\127.0.0.1\share [ 625.753314][ T8390] CIFS: VFS: No username specified [ 629.827492][ T8344] Bluetooth: hci4: command 0x0409 tx timeout [ 629.997699][ T8391] chnl_net:caif_netlink_parms(): no params data found [ 630.031345][ T8437] binder: 8436:8437 ioctl c0306201 0 returned -14 [ 630.124386][ T8437] syz.1.1179 (8437): drop_caches: 2 [ 630.369049][ T8448] dns_resolver: Unsupported server list version (0) [ 631.253319][ T8451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1182'. [ 631.295570][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1182'. [ 631.845512][ T8344] Bluetooth: hci4: command 0x041b tx timeout [ 631.874968][ T8391] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.936388][ T8391] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.944328][ T8391] device bridge_slave_0 entered promiscuous mode [ 632.353971][ T8391] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.361370][ T8391] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.369543][ T8391] device bridge_slave_1 entered promiscuous mode [ 632.415486][ T8344] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 632.462381][ T8391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.532757][ T8391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.735437][ T8344] usb 2-1: Using ep0 maxpacket: 16 [ 632.905983][ T8391] team0: Port device team_slave_0 added [ 632.925638][ T4624] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 632.945261][ T8391] team0: Port device team_slave_1 added [ 632.988279][ T8391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.998452][ T8391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.031435][ T8391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.055590][ T8344] usb 2-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 633.073183][ T8391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.080358][ T8344] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 633.093946][ T8391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.141421][ T8391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.185568][ T4624] usb 3-1: Using ep0 maxpacket: 16 [ 633.285852][ T8344] usb 2-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 633.307398][ T8344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.388733][ T8344] usb 2-1: Product: syz [ 633.393328][ T8344] usb 2-1: Manufacturer: syz [ 633.398586][ T8344] usb 2-1: SerialNumber: syz [ 633.405647][ T4624] usb 3-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 633.418198][ T4624] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 634.454695][ T5208] Bluetooth: hci4: command 0x040f tx timeout [ 634.567746][ T4624] usb 3-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 634.586714][ T4624] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.612575][ T4624] usb 3-1: Product: syz [ 634.630245][ T8498] dns_resolver: Unsupported server list version (0) [ 634.940426][ T8464] ceph: No mds server is up or the cluster is laggy [ 634.965574][ T4624] usb 3-1: Manufacturer: syz [ 635.001740][ T4624] usb 3-1: SerialNumber: syz [ 635.018153][ T5208] libceph: connect (1)[c::]:6789 error -101 [ 635.024258][ T5208] libceph: mon0 (1)[c::]:6789 connect error [ 635.035600][ T4624] usb 3-1: can't set config #4, error -71 [ 635.052173][ T4624] usb 3-1: USB disconnect, device number 6 [ 635.083089][ T8391] device hsr_slave_0 entered promiscuous mode [ 635.110601][ T8503] binder: 8502:8503 ioctl c0306201 0 returned -14 [ 635.117761][ T8391] device hsr_slave_1 entered promiscuous mode [ 635.159531][ T8391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 635.275368][ T8344] usb 2-1: USB disconnect, device number 14 [ 635.287923][ T8391] Cannot create hsr debugfs directory [ 635.291409][ T8503] syz.0.1191 (8503): drop_caches: 2 [ 637.017391][ T26] Bluetooth: hci4: command 0x0419 tx timeout [ 637.270442][ T8521] dns_resolver: Unsupported server list version (0) [ 637.297563][ T4275] device hsr_slave_0 left promiscuous mode [ 637.377254][ T4275] device hsr_slave_1 left promiscuous mode [ 637.418280][ T4275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.435517][ T4275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.470673][ T4275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.375509][ T4275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.396187][ T4275] device bridge_slave_1 left promiscuous mode [ 638.403687][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.705780][ T4275] device bridge_slave_0 left promiscuous mode [ 638.711993][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.830344][ T8536] zram: Cannot change disksize for initialized device [ 640.460506][ T4275] device veth1_macvtap left promiscuous mode [ 640.515528][ T4275] device veth0_macvtap left promiscuous mode [ 640.535208][ T4275] device veth1_vlan left promiscuous mode [ 640.600582][ T4275] device veth0_vlan left promiscuous mode [ 640.737139][ T8547] zram: Cannot change disksize for initialized device [ 642.595763][ T8556] CIFS: Attempting to mount \\127.0.0.1\share [ 642.602167][ T8556] CIFS: VFS: No username specified [ 643.226680][ T8562] CIFS: Attempting to mount \\127.0.0.1\share [ 643.233075][ T8562] CIFS: VFS: No username specified [ 645.477161][ T4275] team0 (unregistering): Port device team_slave_1 removed [ 645.617905][ T4275] team0 (unregistering): Port device team_slave_0 removed [ 645.815899][ T4275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.993084][ T4275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.101797][ T8580] dns_resolver: Unsupported server list version (0) [ 647.227508][ T4275] bond0 (unregistering): Released all slaves [ 648.559182][ T8589] ip6t_srh: unknown srh match flags 4000 [ 648.718525][ T8591] dns_resolver: Unsupported server list version (0) [ 649.598827][ T8391] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 650.367469][ T8391] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 650.462471][ T8391] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 650.642859][ T8391] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 651.650391][ T8620] loop4: detected capacity change from 0 to 164 [ 651.906942][ T8622] loop2: detected capacity change from 0 to 512 [ 653.236481][ T8391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.279380][ T8622] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 653.387101][ T8622] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.399948][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 653.424147][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 653.546762][ T8391] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.777751][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 653.824818][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 653.917789][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.924931][ T4365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.144534][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 654.203224][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 654.378056][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 654.590117][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.597257][ T4365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.013869][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 655.460606][ T8653] dns_resolver: Unsupported server list version (0) [ 655.614113][ T8391] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 656.171042][ T8391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 656.184477][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 657.200125][ T8659] CIFS: Attempting to mount \\127.0.0.1\share [ 657.206706][ T8659] CIFS: VFS: No username specified [ 657.517006][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 657.556787][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 658.415265][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 658.424345][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 658.433240][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 658.441952][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 658.451030][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 658.459682][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 658.473450][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 658.481622][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 659.995027][ T8693] loop4: detected capacity change from 0 to 512 [ 660.044591][ T8391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.116963][ T8697] hub 8-0:1.0: USB hub found [ 660.122259][ T8697] hub 8-0:1.0: 1 port detected [ 660.972393][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 661.002574][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 661.181815][ T8701] loop1: detected capacity change from 0 to 164 [ 661.254986][ T8693] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 661.277426][ T8693] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 663.052166][ T4190] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 663.184113][ T4190] EXT4-fs (loop4): Remounting filesystem read-only [ 663.343777][ T4190] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 663.554922][ T8729] hub 8-0:1.0: USB hub found [ 663.560929][ T8729] hub 8-0:1.0: 1 port detected [ 663.649928][ T4190] EXT4-fs (loop4): Remounting filesystem read-only [ 663.787230][ T4190] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 664.039663][ T4190] EXT4-fs (loop4): Remounting filesystem read-only [ 664.256260][ T4190] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 664.315557][ T4190] EXT4-fs (loop4): Remounting filesystem read-only [ 664.322552][ T4190] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 664.345978][ T4190] EXT4-fs (loop4): Remounting filesystem read-only [ 664.376327][ T6113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 664.396095][ T6113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 664.407043][ T4190] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 664.484994][ T8737] hub 8-0:1.0: USB hub found [ 664.490514][ T8737] hub 8-0:1.0: 1 port detected [ 664.705851][ T4190] EXT4-fs (loop4): Remounting filesystem read-only [ 664.773095][ T4190] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 664.913771][ T4190] EXT4-fs (loop4): Remounting filesystem read-only [ 664.972734][ T4190] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 665.057260][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 665.090502][ T4190] EXT4-fs (loop4): Remounting filesystem read-only [ 665.135974][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 665.144871][ T4190] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 665.260241][ T8391] device veth0_vlan entered promiscuous mode [ 665.285163][ T4190] EXT4-fs (loop4): Remounting filesystem read-only [ 665.313721][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 665.364845][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 665.410529][ T4190] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 665.424075][ T4190] EXT4-fs (loop4): Remounting filesystem read-only [ 665.453103][ T8391] device veth1_vlan entered promiscuous mode [ 665.672253][ T8391] device veth0_macvtap entered promiscuous mode [ 665.744155][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 665.753325][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 665.770776][ T8391] device veth1_macvtap entered promiscuous mode [ 665.784155][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 665.795000][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 665.813792][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.830841][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.845584][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.862167][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.875649][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.894623][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.905016][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.926274][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.944620][ T8391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.956993][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 665.972694][ T8760] syz.1.1249 (8760): drop_caches: 2 [ 665.974581][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 666.000538][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.016752][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.030419][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.126176][ T8766] hub 8-0:1.0: USB hub found [ 666.131525][ T8766] hub 8-0:1.0: 1 port detected [ 666.346503][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.379397][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.419517][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.544498][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.632811][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.718059][ T8391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.911580][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 666.948880][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 667.238379][ T8391] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.408698][ T8391] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.602559][ T8391] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.626448][ T8391] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.687826][ T4237] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.284933][ T4237] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.513842][ T8790] hub 8-0:1.0: USB hub found [ 669.519161][ T8790] hub 8-0:1.0: 1 port detected [ 670.584351][ T8791] CIFS: Attempting to mount \\127.0.0.1\share [ 670.590818][ T8791] CIFS: VFS: No username specified [ 671.444308][ T4237] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.533043][ T8798] loop0: detected capacity change from 0 to 512 [ 672.229804][ T8798] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.1260: bad orphan inode 15 [ 672.243142][ T8798] ext4_test_bit(bit=14, block=5) = 0 [ 672.248539][ T8798] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 672.809199][ T4237] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.085663][ T5063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.162245][ T5063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.231076][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.310189][ T8816] ip6t_srh: unknown srh match flags 4000 [ 673.328596][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.493842][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 673.536831][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 675.125439][ T4624] Bluetooth: hci2: command 0x0409 tx timeout [ 675.341480][ T8847] loop5: detected capacity change from 0 to 32768 [ 677.345690][ T8344] Bluetooth: hci2: command 0x041b tx timeout [ 678.212267][ T8847] JBD2: recovery failed [ 678.216916][ T8847] (syz.5.1266,8847,1):ocfs2_journal_load:1106 ERROR: Failed to load journal! [ 678.225783][ T8847] (syz.5.1266,8847,1):ocfs2_check_volume:2435 ERROR: ocfs2 journal load failed! -5 [ 678.235116][ T8847] (syz.5.1266,8847,1):ocfs2_check_volume:2491 ERROR: status = -5 [ 678.242856][ T8847] (syz.5.1266,8847,1):ocfs2_mount_volume:1824 ERROR: status = -5 [ 678.291621][ T8847] (syz.5.1266,8847,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 678.318566][ T8807] chnl_net:caif_netlink_parms(): no params data found [ 679.411807][ T5099] Bluetooth: hci2: command 0x040f tx timeout [ 680.013511][ T8807] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.225508][ T4263] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 680.850999][ T8807] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.859421][ T8807] device bridge_slave_0 entered promiscuous mode [ 681.052225][ T8807] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.069462][ T8807] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.495480][ T4263] usb 1-1: Using ep0 maxpacket: 16 [ 681.866738][ T8344] Bluetooth: hci2: command 0x0419 tx timeout [ 681.869953][ T8807] device bridge_slave_1 entered promiscuous mode [ 681.945483][ T4263] usb 1-1: unable to get BOS descriptor set [ 682.005490][ T4263] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 682.013084][ T4263] usb 1-1: can't read configurations, error -71 [ 682.061193][ T8807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.073207][ T8909] loop1: detected capacity change from 0 to 512 [ 682.098553][ T8807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.394082][ T8807] team0: Port device team_slave_0 added [ 683.273256][ T8909] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 683.329202][ T8909] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 683.348443][ T8807] team0: Port device team_slave_1 added [ 683.462288][ T8807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.505556][ T8807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.583117][ T8807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.596882][ T4185] EXT4-fs error (device loop1): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 683.624055][ T8807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.640601][ T8807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.714917][ T8807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.739464][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 683.755798][ T4185] EXT4-fs error (device loop1): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 683.815458][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 683.835941][ T4185] EXT4-fs error (device loop1): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 683.843855][ T8807] device hsr_slave_0 entered promiscuous mode [ 683.885673][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 683.905710][ T8807] device hsr_slave_1 entered promiscuous mode [ 683.905819][ T4185] EXT4-fs error (device loop1): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 683.926137][ T8807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 683.955088][ T8807] Cannot create hsr debugfs directory [ 683.991784][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 684.005731][ T4185] EXT4-fs error (device loop1): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 684.065886][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 684.075689][ T4234] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 684.078211][ T4185] EXT4-fs error (device loop1): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 684.099267][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 684.111633][ T4185] EXT4-fs error (device loop1): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 684.315826][ T4234] usb 6-1: device descriptor read/64, error -71 [ 684.605486][ T4234] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 684.809638][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 684.817775][ T4185] EXT4-fs error (device loop1): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 684.845436][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 684.853415][ T4185] EXT4-fs error (device loop1): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 684.955793][ T4234] usb 6-1: device descriptor read/64, error -71 [ 685.018183][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 685.025073][ T4185] EXT4-fs error (device loop1): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 685.165966][ T4234] usb usb6-port1: attempt power cycle [ 685.654950][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.661290][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.674044][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 685.692630][ T4237] device hsr_slave_0 left promiscuous mode [ 685.699458][ T4237] device hsr_slave_1 left promiscuous mode [ 685.705991][ T4237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 685.713456][ T4237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 685.805972][ T4237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 685.846673][ T4237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 685.887726][ T4237] device bridge_slave_1 left promiscuous mode [ 685.893937][ T4237] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.949615][ T4237] device bridge_slave_0 left promiscuous mode [ 686.065432][ T4234] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 686.537211][ T4237] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.775514][ T4234] usb 6-1: device descriptor read/8, error -71 [ 686.942589][ T4237] device veth1_macvtap left promiscuous mode [ 686.965750][ T4237] device veth0_macvtap left promiscuous mode [ 686.971820][ T4237] device veth1_vlan left promiscuous mode [ 687.002306][ T4237] device veth0_vlan left promiscuous mode [ 687.113920][ T8959] zram: Cannot change disksize for initialized device [ 689.182757][ T4237] team0 (unregistering): Port device team_slave_1 removed [ 689.220263][ T4237] team0 (unregistering): Port device team_slave_0 removed [ 689.285797][ T4237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.342079][ T4237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.621708][ T4237] bond0 (unregistering): Released all slaves [ 689.777983][ T8807] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 689.852538][ T8975] CIFS: Attempting to mount \\127.0.0.1\share [ 689.858941][ T8975] CIFS: VFS: No username specified [ 690.813827][ T8807] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 690.856696][ T8807] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 690.934091][ T8807] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 691.237733][ T8807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.223152][ T8807] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.315637][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 692.323502][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 692.404845][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 692.415051][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 692.449997][ T4410] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.457093][ T4410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.144337][ T8969] block2mtd: error: cannot open device /dev/zram [ 693.255775][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 693.312430][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 693.377840][ T4410] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.384963][ T4410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.427512][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 693.444972][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 693.454393][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 693.479016][ T9008] dns_resolver: Unsupported server list version (0) [ 693.812617][ T9007] dns_resolver: Unsupported server list version (0) [ 693.966262][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 694.007514][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 694.066046][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 694.103466][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 694.919334][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 695.146402][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 695.154774][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 695.217639][ T8807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 695.435455][ T5208] Bluetooth: hci0: command 0x0409 tx timeout [ 695.451702][ T9001] chnl_net:caif_netlink_parms(): no params data found [ 695.518941][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 695.528066][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 695.793240][ T9032] syz.0.1305 (9032): drop_caches: 2 [ 695.812582][ T9001] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.883398][ T9001] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.885578][ T9037] loop5: detected capacity change from 0 to 32768 [ 695.923837][ T9001] device bridge_slave_0 entered promiscuous mode [ 695.964565][ T9001] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.010143][ T9001] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.025782][ T9037] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 696.072700][ T9001] device bridge_slave_1 entered promiscuous mode [ 696.839023][ T9001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.907697][ T9001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.635530][ T9037] syz.5.1306 (9037) used greatest stack depth: 18208 bytes left [ 697.742588][ T4624] Bluetooth: hci0: command 0x041b tx timeout [ 697.747915][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 697.765162][ T9059] dns_resolver: Unsupported server list version (0) [ 697.803638][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 697.823783][ T8807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.859480][ T9001] team0: Port device team_slave_0 added [ 697.873388][ T8391] ocfs2: Unmounting device (7,5) on (node local) [ 697.900509][ T9001] team0: Port device team_slave_1 added [ 698.613509][ T9001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.639574][ T9001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.710473][ T9001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.730553][ T9001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.756458][ T9001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.059633][ T9001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.755697][ T26] Bluetooth: hci0: command 0x040f tx timeout [ 700.038548][ T9001] device hsr_slave_0 entered promiscuous mode [ 700.061411][ T9001] device hsr_slave_1 entered promiscuous mode [ 700.125538][ T9001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 700.133120][ T9001] Cannot create hsr debugfs directory [ 700.197355][ T9087] syz.2.1316 (9087): drop_caches: 2 [ 700.435970][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 700.481478][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 700.558597][ T8807] device veth0_vlan entered promiscuous mode [ 700.644375][ T8807] device veth1_vlan entered promiscuous mode [ 700.732492][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 700.752222][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 701.258810][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 701.921274][ T9116] input: syz0 as /devices/virtual/input/input26 [ 701.932324][ T26] Bluetooth: hci0: command 0x0419 tx timeout [ 702.010493][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 702.564805][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 702.581584][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 702.622164][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 702.652564][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 702.829613][ T8807] device veth0_macvtap entered promiscuous mode [ 703.419739][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 703.473667][ T9125] dns_resolver: Unsupported server list version (0) [ 703.610551][ T9129] loop2: detected capacity change from 0 to 32768 [ 703.620515][ T8807] device veth1_macvtap entered promiscuous mode [ 703.720845][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.770528][ T9133] syz.0.1326 (9133): drop_caches: 2 [ 703.799000][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.811325][ T9129] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 703.962594][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.025651][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.053645][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.930450][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.981224][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.035635][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.099913][ T8807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.146138][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.216166][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.244562][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.302565][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.331719][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.362828][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.390809][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.421794][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.491937][ T8807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.591078][ T9139] device hsr_slave_0 left promiscuous mode [ 705.605983][ T9139] device hsr_slave_1 left promiscuous mode [ 705.644490][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 705.674256][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 705.706444][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 705.724974][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 705.843504][ T8807] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.875244][ T8807] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.891147][ T8807] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.902217][ T8807] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.932254][ T9001] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 705.942830][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 705.962831][ T9152] ip6t_srh: unknown srh match flags 4000 [ 705.990459][ T9001] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 706.042621][ T9001] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 706.087447][ T9001] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 706.220165][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.247200][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.295135][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 706.326114][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.369942][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.417193][ T9163] hub 8-0:1.0: USB hub found [ 706.422822][ T9163] hub 8-0:1.0: 1 port detected [ 707.168500][ T9001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.180938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 707.223576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 707.249784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 708.185940][ T9001] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.316328][ T4237] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.394720][ T9188] ip6t_srh: unknown srh match flags 4000 [ 709.081056][ T9196] loop6: detected capacity change from 0 to 164 [ 709.188548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 710.087717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 710.116245][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.123353][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.153324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 710.177722][ T4237] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.287776][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 710.322693][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 710.353079][ T1269] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.360318][ T1269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.478469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 711.144293][ T4237] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.295486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 711.304238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 711.396620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 711.416228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 711.552631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 711.586969][ T9214] dns_resolver: Unsupported server list version (0) [ 711.686859][ T9220] input: syz0 as /devices/virtual/input/input27 [ 712.214259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 712.312475][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 712.486599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 712.569660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 712.580442][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 712.779650][ T4237] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.902513][ T9233] input: syz0 as /devices/virtual/input/input28 [ 713.751633][ T9242] loop5: detected capacity change from 0 to 1024 [ 715.332595][ T9256] dns_resolver: Unsupported server list version (0) [ 716.188464][ T9261] loop2: detected capacity change from 0 to 32768 [ 716.227290][ T9257] zram: Cannot change disksize for initialized device [ 716.369803][ T4237] tipc: Left network mode [ 716.386649][ T9261] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 716.696616][ T4231] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 717.178258][ T4231] usb 7-1: config 1 has an invalid descriptor of length 120, skipping remainder of the config [ 717.239224][ T4231] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 717.258532][ T4231] usb 7-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 717.295931][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 717.303436][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 717.308161][ T4231] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.348389][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 717.371822][ T9001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.615002][ T4263] usb 7-1: USB disconnect, device number 2 [ 718.768512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 718.780846][ T9317] loop2: detected capacity change from 0 to 512 [ 718.846517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 719.115879][ T9321] loop0: detected capacity change from 0 to 32768 [ 719.254071][ T9321] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 719.457253][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 719.524175][ T9317] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 719.570510][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 719.586384][ T9317] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 719.724908][ T9317] overlayfs: failed to resolve './bus': -2 [ 720.106251][ T9333] device hsr_slave_0 left promiscuous mode [ 720.112681][ T9333] device hsr_slave_1 left promiscuous mode [ 720.306481][ T9001] device veth0_vlan entered promiscuous mode [ 720.313590][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 720.322267][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 720.350653][ T9337] dns_resolver: Unsupported server list version (0) [ 720.376579][ T9001] device veth1_vlan entered promiscuous mode [ 720.662540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 720.719683][ T9345] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 720.794705][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 720.828238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 720.956112][ T9344] loop6: detected capacity change from 0 to 32768 [ 721.060782][ T9344] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 721.947537][ T9001] device veth0_macvtap entered promiscuous mode [ 721.959338][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 721.987858][ T9352] device hsr_slave_0 left promiscuous mode [ 721.994550][ T9352] device hsr_slave_1 left promiscuous mode [ 722.085022][ T9001] device veth1_macvtap entered promiscuous mode [ 722.330899][ T9001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.416269][ T9369] loop2: detected capacity change from 0 to 512 [ 722.459990][ T9001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.633644][ T9001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.815964][ T9001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.003655][ T9001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.066888][ T9001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.094511][ T9001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.114064][ T9001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.164799][ T9001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.190126][ T9001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.202393][ T9001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.271662][ T4237] device hsr_slave_0 left promiscuous mode [ 723.273757][ T8807] ocfs2: Unmounting device (7,6) on (node local) [ 723.289605][ T4237] device hsr_slave_1 left promiscuous mode [ 723.328301][ T4237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 723.337168][ T4237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.348173][ T4237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 723.358416][ T4237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 723.393729][ T9369] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.1367: bad orphan inode 15 [ 723.404273][ T9369] ext4_test_bit(bit=14, block=5) = 0 [ 723.409741][ T9369] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 723.416024][ T4237] device bridge_slave_1 left promiscuous mode [ 723.469785][ T4237] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.501931][ T4237] device bridge_slave_0 left promiscuous mode [ 723.525227][ T4237] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.633002][ T4237] device veth1_macvtap left promiscuous mode [ 723.667269][ T4237] device veth0_macvtap left promiscuous mode [ 723.673902][ T4237] device veth1_vlan left promiscuous mode [ 723.680258][ T4237] device veth0_vlan left promiscuous mode [ 724.243616][ T4237] team0 (unregistering): Port device team_slave_1 removed [ 724.260003][ T4237] team0 (unregistering): Port device team_slave_0 removed [ 724.275310][ T4237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.291238][ T4237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.369870][ T4237] bond0 (unregistering): Released all slaves [ 724.467027][ T9001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.483386][ T9001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.493851][ T9001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.510894][ T9001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.521066][ T9001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.537850][ T9001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.552491][ T9001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.572555][ T9001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.583902][ T9001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.603948][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 724.624410][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 724.634045][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 724.642960][ T9379] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 724.672158][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 724.810577][ T9001] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.838649][ T9001] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.847827][ T9001] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.856864][ T9001] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.172405][ T9397] loop0: detected capacity change from 0 to 32768 [ 725.192551][ T9400] hub 8-0:1.0: USB hub found [ 725.198324][ T9400] hub 8-0:1.0: 1 port detected [ 725.218470][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.331115][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.404675][ T9403] dns_resolver: Unsupported server list version (0) [ 725.552874][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 725.808233][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.853305][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.908204][ T9397] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 725.968555][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 726.872172][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 727.786280][ T9437] hub 8-0:1.0: USB hub found [ 727.791895][ T9437] hub 8-0:1.0: 1 port detected [ 728.296652][ T9430] ip6t_srh: unknown srh match flags 4000 [ 729.702286][ T9457] dns_resolver: Unsupported server list version (0) [ 730.439289][ T9453] syz.2.1384 (9453): drop_caches: 2 [ 731.791331][ T9470] loop2: detected capacity change from 0 to 32768 [ 733.033228][ T9470] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 733.887824][ T9492] hub 8-0:1.0: USB hub found [ 733.892644][ T9492] hub 8-0:1.0: 1 port detected [ 734.355498][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 736.272903][ T9501] dns_resolver: Unsupported server list version (0) [ 736.413471][ T9512] dns_resolver: Unsupported server list version (0) [ 737.533980][ T9519] loop2: detected capacity change from 0 to 40427 [ 737.567563][ T9519] F2FS-fs (loop2): invalid crc value [ 737.783658][ T9526] loop0: detected capacity change from 0 to 32768 [ 737.796380][ T9519] F2FS-fs (loop2): Found nat_bits in checkpoint [ 737.870206][ T9519] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 738.090197][ T9526] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 741.479927][ T9552] zram: Cannot change disksize for initialized device [ 741.632125][ T4191] attempt to access beyond end of device [ 741.632125][ T4191] loop2: rw=2049, want=45104, limit=40427 [ 741.681096][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 742.440265][ T9561] loop7: detected capacity change from 0 to 32768 [ 742.498791][ T9559] loop0: detected capacity change from 0 to 40427 [ 742.534014][ T9561] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 742.568065][ T9559] F2FS-fs (loop0): invalid crc value [ 742.940075][ T9559] F2FS-fs (loop0): Found nat_bits in checkpoint [ 742.983318][ T9568] device hsr_slave_0 left promiscuous mode [ 743.001056][ T9568] device hsr_slave_1 left promiscuous mode [ 743.460781][ T9559] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 743.653769][ T9001] ocfs2: Unmounting device (7,7) on (node local) [ 745.906280][ T4186] attempt to access beyond end of device [ 745.906280][ T4186] loop0: rw=2049, want=45104, limit=40427 [ 746.201592][ T9589] dns_resolver: Unsupported server list version (0) [ 746.671775][ T9602] loop0: detected capacity change from 0 to 32768 [ 747.074834][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.590886][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.701671][ T9602] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 748.038459][ T9616] loop7: detected capacity change from 0 to 40427 [ 748.197104][ T9616] F2FS-fs (loop7): invalid crc value [ 748.471579][ T9616] F2FS-fs (loop7): Found nat_bits in checkpoint [ 748.535949][ T9616] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 749.432045][ T9639] zram: Cannot change disksize for initialized device [ 750.322700][ T9001] attempt to access beyond end of device [ 750.322700][ T9001] loop7: rw=2049, want=45104, limit=40427 [ 750.353279][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 751.906055][ T9663] loop5: detected capacity change from 0 to 32768 [ 751.970323][ T9663] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 753.494147][ T8391] ocfs2: Unmounting device (7,5) on (node local) [ 754.635559][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 755.132948][ T9700] loop5: detected capacity change from 0 to 32768 [ 755.218588][ T9703] zram: Cannot change disksize for initialized device [ 756.542909][ T9711] loop7: detected capacity change from 0 to 1024 [ 757.789905][ T9700] JBD2: recovery failed [ 757.794110][ T9700] (syz.5.1433,9700,0):ocfs2_journal_load:1106 ERROR: Failed to load journal! [ 757.802985][ T9700] (syz.5.1433,9700,0):ocfs2_check_volume:2435 ERROR: ocfs2 journal load failed! -5 [ 757.812333][ T9700] (syz.5.1433,9700,0):ocfs2_check_volume:2491 ERROR: status = -5 [ 757.820143][ T9700] (syz.5.1433,9700,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 757.831316][ T9700] (syz.5.1433,9700,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 759.106603][ T9728] futex_wake_op: syz.5.1438 tries to shift op by 144; fix this program [ 761.092384][ T9762] loop5: detected capacity change from 0 to 32768 [ 761.273505][ T9767] hub 8-0:1.0: USB hub found [ 761.278899][ T9767] hub 8-0:1.0: 1 port detected [ 761.552521][ T9762] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 762.696000][ T9775] device hsr_slave_0 left promiscuous mode [ 762.726595][ T9775] device hsr_slave_1 left promiscuous mode [ 762.824644][ T9780] loop7: detected capacity change from 0 to 32768 [ 762.907225][ T9780] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 762.926108][ T9780] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 763.827724][ T8391] ocfs2: Unmounting device (7,5) on (node local) [ 763.951367][ T9001] ocfs2: Unmounting device (7,7) on (node local) [ 764.585105][ T9806] ip6t_srh: unknown srh match flags 4000 [ 765.227783][ T9814] hub 8-0:1.0: USB hub found [ 765.232617][ T9814] hub 8-0:1.0: 1 port detected [ 766.410868][ T9823] loop2: detected capacity change from 0 to 1024 [ 767.910644][ T9830] hub 8-0:1.0: USB hub found [ 767.929228][ T9830] hub 8-0:1.0: 1 port detected [ 770.019610][ T9865] binder: BINDER_SET_CONTEXT_MGR already set [ 770.029478][ T9865] binder: 9864:9865 ioctl 4018620d 200000000040 returned -16 [ 770.043824][ T9865] syz.2.1464 (9865): drop_caches: 2 [ 770.087737][ T9860] zram: Cannot change disksize for initialized device [ 771.121661][ T5301] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 771.574099][ T9870] loop0: detected capacity change from 0 to 32768 [ 771.895450][ T5301] usb 8-1: Using ep0 maxpacket: 16 [ 772.932962][ T9888] loop2: detected capacity change from 0 to 32768 [ 772.952770][ T9870] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 773.090063][ T9890] loop5: detected capacity change from 0 to 1024 [ 773.118409][ T9888] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 773.156252][ T9888] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 773.339177][ T5301] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 773.346896][ T5301] usb 8-1: can't read configurations, error -71 [ 774.132037][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 775.553756][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 776.330928][ T9924] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1480'. [ 776.520690][ T9924] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1480'. [ 776.816562][ T9934] loop2: detected capacity change from 0 to 32768 [ 776.923548][ T9934] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 779.399433][ T9958] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 779.832832][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 781.835821][ T9965] zram: Cannot change disksize for initialized device [ 788.228815][T10033] hub 8-0:1.0: USB hub found [ 788.234260][T10033] hub 8-0:1.0: 1 port detected [ 791.352313][T10046] loop0: detected capacity change from 0 to 32768 [ 793.141735][T10054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1507'. [ 793.189216][T10054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1507'. [ 793.251019][T10046] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 793.959490][T10063] hub 8-0:1.0: USB hub found [ 793.964463][T10063] hub 8-0:1.0: 1 port detected [ 794.199778][T10066] loop2: detected capacity change from 0 to 32768 [ 794.315354][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 794.425397][T10073] loop5: detected capacity change from 0 to 32768 [ 794.447981][T10066] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 794.565581][T10073] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 794.716063][T10073] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 796.346253][ T4233] Bluetooth: hci2: command 0x0406 tx timeout [ 798.169021][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 798.177447][ T8391] ocfs2: Unmounting device (7,5) on (node local) [ 800.198797][T10108] ip6t_srh: unknown srh match flags 4000 [ 801.075729][T10126] hub 8-0:1.0: USB hub found [ 801.080996][T10126] hub 8-0:1.0: 1 port detected [ 801.185649][T10127] loop6: detected capacity change from 0 to 1024 [ 803.317966][T10136] hub 8-0:1.0: USB hub found [ 803.322872][T10136] hub 8-0:1.0: 1 port detected [ 803.485904][T10138] loop2: detected capacity change from 0 to 32768 [ 803.647468][T10138] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 804.722774][T10152] loop7: detected capacity change from 0 to 32768 [ 804.762799][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 804.905957][T10157] loop5: detected capacity change from 0 to 32768 [ 804.924395][T10156] ip6t_srh: unknown srh match flags 4000 [ 804.940047][T10152] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 805.108451][T10157] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 805.384386][T10173] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 805.999285][T10157] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 806.179316][T10177] loop6: detected capacity change from 0 to 32768 [ 806.270848][T10177] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 806.698041][T10177] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 806.750679][ T8391] ocfs2: Unmounting device (7,5) on (node local) [ 806.779802][ T9001] ocfs2: Unmounting device (7,7) on (node local) [ 807.060602][T10191] loop0: detected capacity change from 0 to 32768 [ 807.559110][T10191] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 807.604664][ T8807] ocfs2: Unmounting device (7,6) on (node local) [ 808.487624][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.493973][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.504096][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 809.007100][T10193] loop2: detected capacity change from 0 to 40427 [ 809.227772][T10228] hub 8-0:1.0: USB hub found [ 809.232590][T10228] hub 8-0:1.0: 1 port detected [ 809.276531][T10193] F2FS-fs (loop2): invalid crc value [ 809.573828][T10233] loop5: detected capacity change from 0 to 32768 [ 809.634190][T10193] F2FS-fs (loop2): Found nat_bits in checkpoint [ 809.668395][T10233] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 810.902705][ T8391] ocfs2: Unmounting device (7,5) on (node local) [ 811.308303][T10261] loop6: detected capacity change from 0 to 512 [ 811.744138][T10261] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 811.983041][T10261] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 812.079401][T10261] overlayfs: missing 'lowerdir' [ 813.160742][T10280] ip6t_srh: unknown srh match flags 4000 [ 813.697321][T10291] loop6: detected capacity change from 0 to 40427 [ 813.843783][T10291] F2FS-fs (loop6): invalid crc value [ 813.893074][T10291] F2FS-fs (loop6): Found nat_bits in checkpoint [ 813.941974][T10291] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 814.092554][T10296] loop5: detected capacity change from 0 to 32768 [ 814.996959][T10296] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 815.951468][ T5301] Bluetooth: hci0: command 0x0406 tx timeout [ 816.088049][ T8807] attempt to access beyond end of device [ 816.088049][ T8807] loop6: rw=2049, want=45104, limit=40427 [ 816.351671][ T8391] ocfs2: Unmounting device (7,5) on (node local) [ 816.709424][T10326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1548'. [ 816.816866][T10326] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1548'. [ 817.184991][T10336] loop0: detected capacity change from 0 to 512 [ 817.365517][T10344] hub 8-0:1.0: USB hub found [ 817.370382][T10344] hub 8-0:1.0: 1 port detected [ 818.451274][T10336] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 818.594500][T10336] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 819.293422][T10336] overlayfs: missing 'lowerdir' [ 819.417885][T10356] loop5: detected capacity change from 0 to 32768 [ 819.555213][T10356] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 820.090924][T10369] loop0: detected capacity change from 0 to 32768 [ 820.408806][T10366] ip6t_srh: unknown srh match flags 4000 [ 820.488957][ T8391] ocfs2: Unmounting device (7,5) on (node local) [ 820.544669][T10369] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 821.135274][T10381] CIFS: Attempting to mount \\127.0.0.1\share [ 821.141686][T10381] CIFS: VFS: No username specified [ 821.253227][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 822.855095][T10400] loop0: detected capacity change from 0 to 32768 [ 822.946638][T10402] dns_resolver: Unsupported server list version (0) [ 823.401937][T10400] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 826.047101][T10431] ip6t_srh: unknown srh match flags 4000 [ 826.074392][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 826.178823][T10435] loop5: detected capacity change from 0 to 512 [ 827.169173][T10435] EXT4-fs error (device loop5): ext4_orphan_get:1436: comm syz.5.1564: bad orphan inode 15 [ 827.187961][T10435] ext4_test_bit(bit=14, block=5) = 0 [ 827.193318][T10435] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 828.109803][T10449] loop5: detected capacity change from 0 to 1024 [ 828.276055][T10454] loop0: detected capacity change from 0 to 32768 [ 828.471534][T10454] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 828.718361][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 830.631778][T10469] loop0: detected capacity change from 0 to 1024 [ 830.850606][T10473] zram: Cannot change disksize for initialized device [ 830.995549][T10477] loop5: detected capacity change from 0 to 40427 [ 831.009029][T10482] futex_wake_op: syz.6.1566 tries to shift op by 144; fix this program [ 831.828374][T10477] F2FS-fs (loop5): invalid crc value [ 831.999740][T10477] F2FS-fs (loop5): Found nat_bits in checkpoint [ 832.086330][T10491] loop7: detected capacity change from 0 to 512 [ 832.634369][T10477] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 832.775671][T10488] dns_resolver: Unsupported server list version (0) [ 832.835597][T10491] EXT4-fs error (device loop7): ext4_orphan_get:1436: comm syz.7.1576: bad orphan inode 15 [ 833.540263][T10491] ext4_test_bit(bit=14, block=5) = 0 [ 833.545659][T10491] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 833.792847][T10502] loop2: detected capacity change from 0 to 32768 [ 834.807169][T10497] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 835.567189][T10502] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 835.920312][ T8391] attempt to access beyond end of device [ 835.920312][ T8391] loop5: rw=2049, want=45104, limit=40427 [ 836.037924][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 837.063389][T10524] futex_wake_op: syz.0.1584 tries to shift op by 144; fix this program [ 840.396457][T10540] ip6t_srh: unknown srh match flags 4000 [ 840.508723][T10548] dns_resolver: Unsupported server list version (0) [ 841.980986][T10552] syz.6.1591 (10552): drop_caches: 2 [ 842.128714][T10557] netlink: 'syz.0.1594': attribute type 5 has an invalid length. [ 842.282264][T10559] loop5: detected capacity change from 0 to 32768 [ 842.438021][T10562] loop7: detected capacity change from 0 to 32768 [ 842.473029][T10569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1595'. [ 842.501013][T10569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1595'. [ 842.530836][T10565] loop2: detected capacity change from 0 to 32768 [ 842.551591][T10562] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 842.579641][T10559] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 842.590845][T10574] netlink: 'syz.0.1596': attribute type 4 has an invalid length. [ 842.599101][T10562] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 842.815486][T10565] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 843.255478][T10563] loop6: detected capacity change from 0 to 4096 [ 843.369268][T10565] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 845.560257][T10563] ntfs3: loop6: failed to replay log file. Can't mount rw! [ 845.604411][ T8391] ocfs2: Unmounting device (7,5) on (node local) [ 845.648294][T10597] IPVS: Error joining to the multicast group [ 845.834622][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 845.919807][ T9001] ocfs2: Unmounting device (7,7) on (node local) [ 846.002370][T10608] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 846.068731][T10610] syz.7.1599 uses obsolete (PF_INET,SOCK_PACKET) [ 846.461700][T10638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1610'. [ 846.474271][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1607'. [ 846.582874][T10637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1609'. [ 846.890844][T10657] device bridge1 entered promiscuous mode [ 846.927556][T10657] team0: Port device bridge1 added [ 846.991578][T10663] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1619'. [ 847.243975][T10672] device syzkaller1 entered promiscuous mode [ 847.436240][T10693] device veth1_macvtap left promiscuous mode [ 847.475394][T10693] device macsec0 entered promiscuous mode [ 847.875170][T10726] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1637'. [ 847.909506][T10726] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1637'. [ 848.233974][T10747] netlink: 'syz.0.1645': attribute type 6 has an invalid length. [ 848.265350][T10747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1645'. [ 848.449109][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1649'. [ 848.584502][T10769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1652'. [ 849.174377][T10795] device syzkaller0 entered promiscuous mode [ 849.217750][T10795] [ 849.220113][T10795] ============================================ [ 849.226250][T10795] WARNING: possible recursive locking detected [ 849.232392][T10795] syzkaller #0 Not tainted [ 849.236789][T10795] -------------------------------------------- [ 849.242917][T10795] syz.5.1659/10795 is trying to acquire lock: [ 849.248957][T10795] ffff88807d1ea108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 849.258176][T10795] [ 849.258176][T10795] but task is already holding lock: [ 849.265515][T10795] ffff88807dfb8108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 849.274625][T10795] [ 849.274625][T10795] other info that might help us debug this: [ 849.282661][T10795] Possible unsafe locking scenario: [ 849.282661][T10795] [ 849.290088][T10795] CPU0 [ 849.293348][T10795] ---- [ 849.296604][T10795] lock(&sch->q.lock); [ 849.300738][T10795] lock(&sch->q.lock); [ 849.304870][T10795] [ 849.304870][T10795] *** DEADLOCK *** [ 849.304870][T10795] [ 849.312988][T10795] May be due to missing lock nesting notation [ 849.312988][T10795] [ 849.321282][T10795] 3 locks held by syz.5.1659/10795: [ 849.326455][T10795] #0: ffffffff8c31efc0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 849.336039][T10795] #1: ffff88807dfb8108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 849.345600][T10795] #2: ffffffff8c31efc0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 849.355154][T10795] [ 849.355154][T10795] stack backtrace: [ 849.361025][T10795] CPU: 0 PID: 10795 Comm: syz.5.1659 Not tainted syzkaller #0 [ 849.368462][T10795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 849.378505][T10795] Call Trace: [ 849.381781][T10795] [ 849.384701][T10795] dump_stack_lvl+0x188/0x250 [ 849.389376][T10795] ? show_regs_print_info+0x20/0x20 [ 849.394561][T10795] ? load_image+0x410/0x410 [ 849.399052][T10795] __lock_acquire+0x1247/0x7b50 [ 849.403899][T10795] ? verify_lock_unused+0x140/0x140 [ 849.409085][T10795] ? verify_lock_unused+0x140/0x140 [ 849.414273][T10795] ? ___skb_get_hash+0x3f2/0x680 [ 849.419221][T10795] ? __skb_get_hash+0x10d/0x270 [ 849.424053][T10795] ? __skb_get_hash_symmetric+0x3b0/0x3b0 [ 849.429756][T10795] lock_acquire+0x19e/0x400 [ 849.434245][T10795] ? __dev_queue_xmit+0xa2b/0x2e50 [ 849.439348][T10795] ? read_lock_is_recursive+0x10/0x10 [ 849.444702][T10795] ? rcu_read_lock_bh_held+0x76/0xf0 [ 849.450053][T10795] ? rcu_read_lock_held+0x40/0x40 [ 849.455091][T10795] _raw_spin_lock+0x2a/0x40 [ 849.459579][T10795] ? __dev_queue_xmit+0xa2b/0x2e50 [ 849.464670][T10795] __dev_queue_xmit+0xa2b/0x2e50 [ 849.469593][T10795] ? dev_queue_xmit+0x20/0x20 [ 849.474253][T10795] ? __kernel_text_address+0x9a/0x100 [ 849.479674][T10795] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 849.485546][T10795] ? lockdep_hardirqs_on+0x94/0x140 [ 849.490731][T10795] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 849.496605][T10795] ? _raw_spin_unlock+0x40/0x40 [ 849.501436][T10795] ? stack_trace_save+0xa6/0xf0 [ 849.506327][T10795] ? netdev_core_pick_tx+0x300/0x300 [ 849.511597][T10795] sch_frag_xmit_hook+0x2d8/0x1be0 [ 849.516723][T10795] ? __kasan_slab_alloc+0xa9/0xc0 [ 849.521790][T10795] ? __kasan_slab_alloc+0x92/0xc0 [ 849.526793][T10795] ? slab_post_alloc_hook+0x4c/0x380 [ 849.532056][T10795] ? kmem_cache_alloc+0x15d/0x280 [ 849.537058][T10795] ? skb_clone+0x1bd/0x350 [ 849.541461][T10795] ? tcf_mirred_act+0x5b0/0x1640 [ 849.546454][T10795] ? tcf_action_exec+0x177/0x570 [ 849.551384][T10795] ? basic_classify+0x1ae/0x2c0 [ 849.556300][T10795] ? tcf_classify+0x218/0xad0 [ 849.560957][T10795] ? hfsc_enqueue+0x326/0xf30 [ 849.565645][T10795] ? dev_qdisc_enqueue+0x48/0x210 [ 849.570651][T10795] ? __dev_queue_xmit+0xbde/0x2e50 [ 849.575740][T10795] ? packet_sendmsg+0x3b4f/0x4de0 [ 849.580814][T10795] ? mq_dump_class_stats+0x430/0x430 [ 849.586077][T10795] ? do_syscall_64+0x4c/0xa0 [ 849.590648][T10795] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 849.596705][T10795] ? __copy_skb_header+0x3ba/0x4f0 [ 849.601801][T10795] ? memcpy+0x3c/0x60 [ 849.605762][T10795] ? __copy_skb_header+0x3ba/0x4f0 [ 849.610855][T10795] ? __skb_clone+0x446/0x6c0 [ 849.615426][T10795] ? skb_clone+0x1f1/0x350 [ 849.619820][T10795] ? tcf_mirred_act+0x59a/0x1640 [ 849.624738][T10795] tcf_mirred_act+0xc5a/0x1640 [ 849.629488][T10795] tcf_action_exec+0x177/0x570 [ 849.634233][T10795] basic_classify+0x1ae/0x2c0 [ 849.638897][T10795] tcf_classify+0x218/0xad0 [ 849.643387][T10795] hfsc_enqueue+0x326/0xf30 [ 849.647872][T10795] ? rcu_lock_release+0x20/0x20 [ 849.652705][T10795] ? do_raw_spin_lock+0x128/0x2f0 [ 849.657710][T10795] ? __rwlock_init+0x140/0x140 [ 849.662450][T10795] ? __alloc_skb+0x473/0x750 [ 849.667020][T10795] dev_qdisc_enqueue+0x48/0x210 [ 849.671939][T10795] __dev_queue_xmit+0xbde/0x2e50 [ 849.676862][T10795] ? dev_queue_xmit+0x20/0x20 [ 849.681686][T10795] ? virtio_net_hdr_to_skb+0xca1/0x1260 [ 849.687231][T10795] ? packet_cached_dev_get+0x270/0x270 [ 849.692677][T10795] ? skb_put+0x10e/0x200 [ 849.696907][T10795] packet_sendmsg+0x3b4f/0x4de0 [ 849.701745][T10795] ? sched_move_task+0x180/0x4f0 [ 849.706679][T10795] ? aa_sk_perm+0x7dc/0x910 [ 849.711235][T10795] ? packet_getsockopt+0x9a0/0x9a0 [ 849.716331][T10795] ? apparmor_setprocattr+0x42e/0x6a0 [ 849.721683][T10795] ? apparmor_socket_sendmsg+0x88/0x230 [ 849.727209][T10795] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 849.732565][T10795] ? security_socket_sendmsg+0x7c/0xa0 [ 849.738006][T10795] ? packet_getsockopt+0x9a0/0x9a0 [ 849.743101][T10795] ____sys_sendmsg+0x5be/0x8f0 [ 849.747890][T10795] ? __sys_sendmsg_sock+0x30/0x30 [ 849.752895][T10795] ? import_iovec+0x6f/0xa0 [ 849.757393][T10795] ___sys_sendmsg+0x236/0x2e0 [ 849.762054][T10795] ? __sys_sendmsg+0x290/0x290 [ 849.766836][T10795] __se_sys_sendmsg+0x1b7/0x2a0 [ 849.771671][T10795] ? __x64_sys_sendmsg+0x80/0x80 [ 849.776587][T10795] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 849.782551][T10795] ? lockdep_hardirqs_on+0x94/0x140 [ 849.787730][T10795] do_syscall_64+0x4c/0xa0 [ 849.792126][T10795] ? clear_bhb_loop+0x30/0x80 [ 849.796782][T10795] ? clear_bhb_loop+0x30/0x80 [ 849.801439][T10795] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 849.807312][T10795] RIP: 0033:0x7fb56ab82159 [ 849.811718][T10795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.831303][T10795] RSP: 002b:00007fb568dda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 849.839698][T10795] RAX: ffffffffffffffda RBX: 00007fb56ae09fa0 RCX: 00007fb56ab82159 [ 849.847650][T10795] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000007 [ 849.855603][T10795] RBP: 00007fb56ac1903b R08: 0000000000000000 R09: 0000000000000000 [ 849.863555][T10795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.871511][T10795] R13: 00007fb56ae0a038 R14: 00007fb56ae09fa0 R15: 00007ffd8f6752e8 [ 849.879468][T10795]