last executing test programs: 7.143301446s ago: executing program 4 (id=10): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x3}, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x1c, 0x30, 0x0, @in6={0xa, 0x4e22, 0x1, @mcast2, 0x6}, @ib={0x1b, 0xc, 0x7, {"4e31211a40e51c75adce5a1c234e4f87"}, 0x8, 0x2, 0x4}}}, 0x118) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001800050400000000000000001c140000fe0000010000000008000100000101000800"], 0x2c}}, 0x0) 7.074655125s ago: executing program 4 (id=12): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0xfd, 0x4, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x7, 0x400}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000280)={r5, 0x8000, 0x3ff}, 0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x2, @local, 'erspan0\x00'}}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) 6.991343009s ago: executing program 4 (id=13): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000006c0), 0x40000, 0x0) r1 = dup(r0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0xc9}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(r1, r7, &(0x7f0000000580)={0x0, 0x9e80, 0x1, 0x0, 0x27a, 0x0, r2}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfafb, 0x8, 0x3, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x61a, 0x0, 0x1, 0xd0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd920, 0x4, 0x404, 0x8f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6583, 0x80058, 0x0, 0x205, 0x0, r1}}], 0x4, &(0x7f0000001d00)={0x2e, 0x0, 0x0, r1, 0x1201, 0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, r6, '\x00', {0x1, 0x455, 0x0, 0x0}}, 0x0) 6.821518965s ago: executing program 4 (id=17): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1, 0x0, @multicast1, @remote}}}}}}, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x2640, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000002b40)) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="424384221f768c3c000000dc1851f39e68120a5db36d8c18e51d84f157306f1efe5a3a2696c5ea03144c8df6781cea6c5be0d8e6", @ANYRES16=r3, @ANYBLOB="00012bbd7000fbdbdf253b00000022003300a0a00600ffffffffffff0802110000000802110000002c0004004d012500000004006c00"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000080) sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f00000001c0)=0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 6.309584674s ago: executing program 4 (id=22): r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000040)='ns/net\x00') setns(r0, 0x40000000) socket(0x8, 0x2, 0x0) 6.278358371s ago: executing program 2 (id=24): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)) nanosleep(&(0x7f0000000180)={0x5}, &(0x7f00000001c0)) r8 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000000280)={0x5}, &(0x7f00000002c0)) r9 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64$ublk_bdev(r9, &(0x7f0000005000)=""/4096, 0x1000, 0x0) 6.21157977s ago: executing program 4 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='core\n\x00', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='mem\n\x00', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='disk\n\x00', 0x5) close(r2) 5.421241015s ago: executing program 2 (id=44): syslog(0x2, &(0x7f0000000000)=""/4096, 0x1000) 5.374183116s ago: executing program 2 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x0, 0x0) read(r0, &(0x7f0000000200), 0x100) 5.307649998s ago: executing program 2 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:01.0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000100)='driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='8250_mxpcie\x00', 0xc) close(r1) 5.30728079s ago: executing program 2 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/e1000\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/e1000e\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/drivers/ahci\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/drivers/piix4_smbus\x00', 0x0, 0x0) 5.307108911s ago: executing program 2 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='core\n\x00', 0x5) close(r0) 3.803431161s ago: executing program 1 (id=67): r0 = fsopen(&(0x7f0000000300)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='source\x00', &(0x7f0000000380)='240.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 3.776656033s ago: executing program 1 (id=68): syz_usb_connect(0x5, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="12011002000000402505a4a400000000000109022000010100c0000904000002ff0000000705810200020007050202000200"], &(0x7f0000000200)={0x0, 0x0, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="050f0f00010a1003000e0001000000"]}) r0 = syz_open_dev$usbfs(&(0x7f0000000400), 0x15, 0x2) read$usbfs(r0, &(0x7f0000000500)=""/10, 0xa) 2.141518652s ago: executing program 1 (id=72): syz_usb_connect(0x0, 0x3c, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ef0201407205a65801000000000109022a000201008032080b01020000000009040000000000000009040100010000000007058102400000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 1.523613285s ago: executing program 1 (id=82): syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040c00902020100000000010902200001010080320904000002ff0000000705820200020007050102000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x2) ioctl$FE_READ_SIGNAL_STRENGTH(r0, 0x80026f47, &(0x7f0000000200)) 936.831487ms ago: executing program 3 (id=89): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/slots/14\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/slots/15\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/slots/16\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/slots/17\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/slots/18\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/slots/19\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/slots/20\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/slots/31\x00', 0x0, 0x0) 875.655776ms ago: executing program 3 (id=90): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/pcspkr/power\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/devices/pcspkr/subsystem\x00', 0x0, 0x0) 875.275311ms ago: executing program 3 (id=91): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/devices/pcspkr\x00', 0x0, 0x0) openat(r0, &(0x7f0000000180)='driver_override\x00', 0x1, 0x0) 875.020361ms ago: executing program 3 (id=92): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:1f.2/uevent\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:1f.2/vendor\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:1f.2/device\x00', 0x0, 0x0) 856.931744ms ago: executing program 3 (id=93): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newsa={0x13c, 0x10, 0x401, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@loopback, 0x4d2, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha1)\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0) 833.782001ms ago: executing program 3 (id=94): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9170, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) nanosleep(&(0x7f0000000100)={0x1, 0x1dcd6500}, 0x0) 440.785033ms ago: executing program 0 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/e1000e\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/virtio-pci\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/piix4_smbus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/lpc_ich\x00', 0x0, 0x0) 395.681021ms ago: executing program 0 (id=96): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0x0) 395.100143ms ago: executing program 0 (id=97): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/online\x00', 0x0, 0x0) close(r0) 394.971054ms ago: executing program 0 (id=98): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./meta.img\x00', 0x42, 0x1b6) ftruncate(r0, 0x2000000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 377.615395ms ago: executing program 0 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 363.782769ms ago: executing program 0 (id=100): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff000040da0b538100300000000109022700010100a0320904000003ffff0000070581020002000705020200020007058303400008"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x20, &(0x7f0000000140)={0xc0, 0x5, 0x4, '\x00\x00\x00\\'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'\x00', 0x1}) 3.591482ms ago: executing program 1 (id=101): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x1b6) ftruncate(r2, 0x1000000) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x2) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x42, 0x1b6) ftruncate(r4, 0x1000000) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x2, 0x2) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r6, 0xc138fd03, &(0x7f0000000300)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006364657600") write(r6, &(0x7f0000000438)="000000000000000000800000000000000000000000000000636163686500000000000000373a3020373a3120373a3220363420302064656661756c74203000", 0x43) ioctl(r6, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000007c01000038010000010000000000000000000000000000000000000000000000000000006364657600") ioctl(r6, 0xc138fd0a, &(0x7f0000000300)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006364657600") r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/dm-0\x00', 0x2, 0x0) pwritev2(r7, &(0x7f0000000600)=[{&(0x7f0000000700)='\x00'/4096, 0x1000}], 0x1, 0x0, 0x0, 0x4) fsync(r7) 0s ago: executing program 1 (id=102): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000780)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0207518, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x0, 0xffff, 0x18, 0x7f00000007b0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) nanosleep(&(0x7f0000001a00)={0x0, 0x5f5e100}, 0x0) r9 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000001a40)={0x0, 0x5f5e100}, 0x0) r10 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x4002) pwrite64$ublk_bdev(r10, &(0x7f0000800000)='\x00'/4096, 0x1000, 0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00), 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.89' (ED25519) to the list of known hosts. [ 28.374481][ T4693] cgroup: Unknown subsys name 'net' [ 28.504231][ T4693] cgroup: Unknown subsys name 'cpuset' [ 28.506205][ T4693] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.705697][ T4693] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.272978][ T4718] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.274472][ T4719] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.275199][ T4718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.275686][ T4719] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.276007][ T4718] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.276113][ T4719] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.276458][ T4719] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.276776][ T4719] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.276895][ T4719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.277440][ T4719] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.277641][ T4719] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.277967][ T4719] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.279085][ T4719] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.279253][ T4719] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.279393][ T4719] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.279613][ T4719] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.279942][ T4719] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.280138][ T4719] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.280814][ T4719] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.282987][ T4719] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.283158][ T4717] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.284830][ T4719] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.285190][ T4719] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.288216][ T4719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.289004][ T4719] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.663928][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.664309][ T4705] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.664376][ T4705] bridge_slave_0: entered allmulticast mode [ 30.664854][ T4705] bridge_slave_0: entered promiscuous mode [ 30.672393][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.672451][ T4705] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.672505][ T4705] bridge_slave_1: entered allmulticast mode [ 30.674192][ T4705] bridge_slave_1: entered promiscuous mode [ 30.681896][ T4705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.693398][ T4705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.733121][ T4705] team0: Port device team_slave_0 added [ 30.733928][ T4705] team0: Port device team_slave_1 added [ 30.740465][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.740516][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.740647][ T4714] bridge_slave_0: entered allmulticast mode [ 30.741062][ T4714] bridge_slave_0: entered promiscuous mode [ 30.742347][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.742407][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.742495][ T4714] bridge_slave_1: entered allmulticast mode [ 30.743182][ T4714] bridge_slave_1: entered promiscuous mode [ 30.756286][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.756329][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.756389][ T4710] bridge_slave_0: entered allmulticast mode [ 30.756976][ T4710] bridge_slave_0: entered promiscuous mode [ 30.760904][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.760926][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.761014][ T4710] bridge_slave_1: entered allmulticast mode [ 30.761409][ T4710] bridge_slave_1: entered promiscuous mode [ 30.771308][ T4704] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.771378][ T4704] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.771441][ T4704] bridge_slave_0: entered allmulticast mode [ 30.771856][ T4704] bridge_slave_0: entered promiscuous mode [ 30.773742][ T4704] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.773766][ T4704] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.773818][ T4704] bridge_slave_1: entered allmulticast mode [ 30.774236][ T4704] bridge_slave_1: entered promiscuous mode [ 30.779644][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.779654][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.779667][ T4705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.780418][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.780425][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.780439][ T4705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.800706][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.801806][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.803530][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.803667][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.804055][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.804114][ T4712] bridge_slave_0: entered allmulticast mode [ 30.804573][ T4712] bridge_slave_0: entered promiscuous mode [ 30.805776][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.805797][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.805845][ T4712] bridge_slave_1: entered allmulticast mode [ 30.806310][ T4712] bridge_slave_1: entered promiscuous mode [ 30.807869][ T4704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.808854][ T4704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.816266][ T4704] team0: Port device team_slave_0 added [ 30.817072][ T4704] team0: Port device team_slave_1 added [ 30.823102][ T4704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.823110][ T4704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.823122][ T4704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.829858][ T4704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.829866][ T4704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.829879][ T4704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.841010][ T4704] hsr_slave_0: entered promiscuous mode [ 30.841360][ T4704] hsr_slave_1: entered promiscuous mode [ 30.855162][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.866635][ T4714] team0: Port device team_slave_0 added [ 30.868827][ T4710] team0: Port device team_slave_0 added [ 30.869695][ T4710] team0: Port device team_slave_1 added [ 30.871298][ T4705] hsr_slave_0: entered promiscuous mode [ 30.872016][ T4705] hsr_slave_1: entered promiscuous mode [ 30.872655][ T4705] debugfs: 'hsr0' already exists in 'hsr' [ 30.872975][ T4705] Cannot create hsr debugfs directory [ 30.878016][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.882388][ T4714] team0: Port device team_slave_1 added [ 30.894904][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.902502][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.903214][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.903246][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.903927][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.903935][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.903949][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.927267][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.928524][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.928558][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.930231][ T4710] hsr_slave_0: entered promiscuous mode [ 30.930531][ T4710] hsr_slave_1: entered promiscuous mode [ 30.930725][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 30.930741][ T4710] Cannot create hsr debugfs directory [ 30.930988][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.931002][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.931029][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.940560][ T4712] team0: Port device team_slave_0 added [ 30.941369][ T4712] team0: Port device team_slave_1 added [ 30.969790][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.969822][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.969836][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.978193][ T4714] hsr_slave_0: entered promiscuous mode [ 30.978510][ T4714] hsr_slave_1: entered promiscuous mode [ 30.978730][ T4714] debugfs: 'hsr0' already exists in 'hsr' [ 30.978739][ T4714] Cannot create hsr debugfs directory [ 30.983900][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.983923][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.983937][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.033831][ T4712] hsr_slave_0: entered promiscuous mode [ 31.034143][ T4712] hsr_slave_1: entered promiscuous mode [ 31.034320][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 31.034330][ T4712] Cannot create hsr debugfs directory [ 31.101560][ T4705] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.105200][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.105991][ T4705] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.107978][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.113890][ T4705] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.116385][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.123634][ T4705] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.126028][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.140105][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.140158][ T4705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.140325][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.140360][ T4705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.145405][ T4704] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.147615][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.147907][ T4704] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.150218][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.152143][ T4704] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.155097][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.157021][ T4704] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.159202][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.181462][ T4704] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.181528][ T4704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.181640][ T4704] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.181677][ T4704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.185322][ T4710] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.188267][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.200472][ T4705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.201922][ T4710] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.204709][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.205103][ T4710] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.206980][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.212500][ T4705] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.214463][ T4710] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.216826][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.220257][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.222169][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.225410][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.227725][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.241041][ T4704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.245084][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.245135][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.245479][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.245580][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.271441][ T4704] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.275449][ T4714] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.279419][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.281011][ T4714] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.284937][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.286715][ T4714] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.288853][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.292059][ T3607] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.292099][ T3607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.297907][ T4714] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.300391][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.304864][ T640] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.304917][ T640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.334465][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.340857][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.349868][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.349915][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.372970][ T3607] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.373015][ T3607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.378260][ T4712] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.380647][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.389579][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.393531][ T4712] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.395779][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.397397][ T4712] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.399535][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.401182][ T4712] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.404099][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.429276][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.439678][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.439723][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.448593][ T4710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.448640][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.465812][ T3607] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.465858][ T3607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.483372][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.499220][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.517750][ T4712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.519873][ T4712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.524334][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.524380][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.524787][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.524814][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.537063][ T4705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.540672][ T4714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.568716][ T4705] veth0_vlan: entered promiscuous mode [ 31.581258][ T4705] veth1_vlan: entered promiscuous mode [ 31.591719][ T4705] veth0_macvtap: entered promiscuous mode [ 31.594297][ T4705] veth1_macvtap: entered promiscuous mode [ 31.599525][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.609913][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.623005][ T3350] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.667979][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.668282][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.668290][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.668708][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.676815][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.686161][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.686199][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.692002][ T4704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.738691][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.750741][ T4710] veth0_vlan: entered promiscuous mode [ 31.754639][ T4710] veth1_vlan: entered promiscuous mode [ 31.760010][ T4710] veth0_macvtap: entered promiscuous mode [ 31.761046][ T4710] veth1_macvtap: entered promiscuous mode [ 31.776789][ T4705] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.788963][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.792074][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.800887][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.832380][ T4884] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1'. [ 31.864506][ T1175] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.864905][ T3350] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.865059][ T3350] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.877590][ T4887] loop0: detected capacity change from 0 to 256 [ 31.886946][ T4887] FAT-fs (loop0): Directory bread(block 1285) failed [ 31.888345][ T4887] FAT-fs (loop0): Directory bread(block 1286) failed [ 31.889616][ T4887] FAT-fs (loop0): Directory bread(block 1287) failed [ 31.891012][ T4887] FAT-fs (loop0): Directory bread(block 1288) failed [ 31.895138][ T4704] veth0_vlan: entered promiscuous mode [ 31.920356][ T4704] veth1_vlan: entered promiscuous mode [ 31.924310][ T4712] veth0_vlan: entered promiscuous mode [ 31.926751][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.930067][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.930095][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.933660][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.941581][ T4704] veth0_macvtap: entered promiscuous mode [ 31.950187][ T4712] veth1_vlan: entered promiscuous mode [ 31.979819][ T4704] veth1_macvtap: entered promiscuous mode [ 31.983194][ T3607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.983219][ T3607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.986100][ T4712] veth0_macvtap: entered promiscuous mode [ 31.987204][ T4712] veth1_macvtap: entered promiscuous mode [ 31.996869][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.002531][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.017249][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.019277][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.127119][ T4893] FAT-fs (loop0): Directory bread(block 1285) failed [ 32.127162][ T4893] FAT-fs (loop0): Directory bread(block 1286) failed [ 32.127189][ T4893] FAT-fs (loop0): Directory bread(block 1287) failed [ 32.127211][ T4893] FAT-fs (loop0): Directory bread(block 1288) failed [ 32.127302][ T4893] FAT-fs (loop0): FAT read failed (blocknr 1281) [ 32.127754][ T4893] FAT-fs (loop0): Directory bread(block 1285) failed [ 32.288584][ T4714] veth0_vlan: entered promiscuous mode [ 32.307280][ T4714] veth1_vlan: entered promiscuous mode [ 32.333486][ T4711] Bluetooth: hci2: command tx timeout [ 32.333806][ T4711] Bluetooth: hci3: command tx timeout [ 32.333869][ T4711] Bluetooth: hci0: command tx timeout [ 32.333928][ T4711] Bluetooth: hci1: command tx timeout [ 32.334069][ T50] Bluetooth: hci4: command tx timeout [ 32.346653][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.346685][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.352901][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.358220][ T3607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.358261][ T3607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.363361][ T3607] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.363421][ T3607] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.363445][ T3607] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.363462][ T3607] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.381503][ T3607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.381532][ T3607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.394825][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.394886][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.394928][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.406549][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.406583][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.409894][ T4714] veth0_macvtap: entered promiscuous mode [ 32.413282][ T4714] veth1_macvtap: entered promiscuous mode [ 32.425436][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.430783][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.458280][ T1175] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.459370][ T3607] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.459529][ T3607] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.473007][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.479324][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.479358][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.497441][ T640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.497471][ T640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.532118][ T4904] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 32.958828][ T4918] netlink: 209828 bytes leftover after parsing attributes in process `syz.0.9'. [ 32.961066][ T4918] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 32.963414][ T4918] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 33.015403][ T4913] loop2: detected capacity change from 0 to 512 [ 33.021084][ T4913] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.021117][ T4913] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 33.036291][ T4913] EXT4-fs (loop2): 1 truncate cleaned up [ 33.036804][ T4913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.061559][ T4913] EXT4-fs error (device loop2): __ext4_expand_extra_isize:6537: inode #12: comm syz.2.11: bad extra_isize 62 (inode size 256) [ 33.062098][ T4913] EXT4-fs (loop2): Remounting filesystem read-only [ 33.097869][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.185917][ T4931] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15'. [ 33.210857][ T4934] loop0: detected capacity change from 0 to 256 [ 33.751778][ T4940] lo speed is unknown, defaulting to 1000 [ 33.754770][ T4940] lo speed is unknown, defaulting to 1000 [ 33.755312][ T4940] lo speed is unknown, defaulting to 1000 [ 33.850922][ T4956] PM: suspend entry (deep) [ 33.928002][ T4808] lo speed is unknown, defaulting to 1000 [ 33.929265][ T640] Filesystems sync: 0.077 seconds [ 33.930637][ T4940] infiniband syz0: set active [ 33.930676][ T4940] infiniband syz0: added lo [ 33.951976][ T4940] RDS/IB: syz0: added [ 33.954035][ T4940] smc: adding ib device syz0 with port count 1 [ 33.955283][ T4940] smc: ib device syz0 port 1 has no pnetid [ 33.956812][ T4849] lo speed is unknown, defaulting to 1000 [ 33.958539][ T4940] lo speed is unknown, defaulting to 1000 [ 34.003727][ T4940] lo speed is unknown, defaulting to 1000 [ 34.041843][ T4940] lo speed is unknown, defaulting to 1000 [ 34.137634][ T4973] cgroup: Unknown subsys name 'cpuset' [ 34.160926][ T4976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.164953][ T4976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.185050][ T4940] lo speed is unknown, defaulting to 1000 [ 34.251763][ T4940] lo speed is unknown, defaulting to 1000 [ 34.339729][ T4989] ftl_cs: FTL header not found. [ 34.355792][ T4989] block2mtd: mtd1: [/dev/ram0] erase_size = 128KiB [131072] [ 34.412856][ T4718] Bluetooth: hci1: command tx timeout [ 34.412890][ T4718] Bluetooth: hci3: command tx timeout [ 34.412929][ T4718] Bluetooth: hci2: command tx timeout [ 34.413483][ T50] Bluetooth: hci4: command tx timeout [ 34.556057][ T5008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.558313][ T5008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.633144][ T4849] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.666896][ T4956] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 34.667468][ T4956] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 34.670207][ T4956] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 34.672187][ T4956] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 34.672244][ T4956] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 34.677742][ T4956] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 34.679528][ T4956] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 34.679901][ T4956] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 34.683338][ T4956] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 34.688227][ T4956] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 34.688271][ T4956] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 34.691258][ T4956] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 34.694303][ T4956] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 34.694363][ T4956] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 34.699370][ T4956] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 34.784441][ T4849] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 34.787031][ T4849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.787422][ T4849] usb 1-1: Product: syz [ 34.787431][ T4849] usb 1-1: Manufacturer: syz [ 34.787439][ T4849] usb 1-1: SerialNumber: syz [ 35.741721][ T5040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 35.793387][ T5040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 35.866047][ T5053] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 35.867211][ T3607] bond0: (slave bond_slave_0): interface is now down [ 35.867226][ T3607] bond0: no route to arp_ip_target 192.0.2.1 and arp_validate is set [ 35.867294][ T3607] bond0: (slave bond_slave_1): interface is now down [ 35.868426][ T5053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.883416][ T40] bond0: (slave bond_slave_0): interface is now down [ 35.883508][ T40] bond0: (slave bond_slave_1): interface is now down [ 35.883577][ T40] bond0: (slave dummy0): interface is now down [ 35.886578][ T40] bond0: now running without any active interface! [ 36.014358][ T50] Bluetooth: hci0: command 0x040f tx timeout [ 36.305226][ T5069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.305463][ T5069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.421922][ T5072] bonding: bond1 is being created... [ 36.434677][ T5072] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 36.732882][ T50] Bluetooth: hci4: command 0x0419 tx timeout [ 36.732936][ T50] Bluetooth: hci3: command 0x0419 tx timeout [ 36.732973][ T50] Bluetooth: hci2: command 0x0419 tx timeout [ 36.733013][ T50] Bluetooth: hci1: command 0x0419 tx timeout [ 36.769483][ T5078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.771415][ T5078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.395010][ T4849] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 37.395055][ T4849] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 37.396438][ T4849] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 37.396459][ T4849] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 37.396834][ T4849] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 37.411190][ T4849] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 37.421065][ T4849] usb 1-1: USB disconnect, device number 2 [ 37.732797][ T4849] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.893574][ T4849] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.00 [ 37.895692][ T4849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.896065][ T4849] usb 1-1: Product: syz [ 37.896077][ T4849] usb 1-1: Manufacturer: syz [ 37.896085][ T4849] usb 1-1: SerialNumber: syz [ 37.938920][ T5087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.939115][ T5087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.092899][ T4711] Bluetooth: hci0: command 0x040f tx timeout [ 38.378564][ T5094] rdma_rxe: rxe_newlink: failed to add veth0 [ 38.495889][ T5108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.496081][ T5108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.511767][ T5110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.512146][ T5110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.813269][ T4709] Bluetooth: hci2: command 0x0419 tx timeout [ 38.813288][ T4718] Bluetooth: hci1: command 0x0419 tx timeout [ 38.813312][ T4709] Bluetooth: hci4: command 0x0419 tx timeout [ 38.814144][ T4711] Bluetooth: hci3: command 0x0419 tx timeout [ 39.108269][ T4849] usb 1-1: USB disconnect, device number 3 [ 39.246737][ T5138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.248672][ T5138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.680226][ T5146] loop0: detected capacity change from 0 to 65536 [ 39.962726][ T4849] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 40.033796][ T5152] loop0: detected capacity change from 0 to 32768 [ 40.036548][ T5152] loop1: detected capacity change from 0 to 32768 [ 40.041130][ T5152] loop2: detected capacity change from 0 to 32768 [ 40.049614][ T5152] device-mapper: table: 248:0: cache: Error opening origin device (-ENOENT) [ 40.049645][ T5152] device-mapper: ioctl: error adding target to table [ 40.114325][ T4849] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=30.00 [ 40.115031][ T4849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.119638][ T4849] r8152-cfgselector 1-1: Unknown version 0x0000 [ 40.151916][ T5155] [ 40.152456][ T5155] ============================= [ 40.153536][ T5155] WARNING: suspicious RCU usage [ 40.154581][ T5155] syzkaller #0 Not tainted [ 40.155485][ T5155] ----------------------------- [ 40.156470][ T5155] lib/maple_tree.c:720 suspicious rcu_dereference_check() usage! [ 40.158030][ T5155] [ 40.158030][ T5155] other info that might help us debug this: [ 40.158030][ T5155] [ 40.160004][ T5155] [ 40.160004][ T5155] rcu_scheduler_active = 2, debug_locks = 1 [ 40.161556][ T5155] locks held by syz.1.102/5155: 1, last CPU#0: [ 40.162826][ T5155] #0: ffff0000d8b0e0a0 (&ctx->uring_lock){+.+.}-{4:4}, at: tctx_task_work_run+0x288/0xc2c [ 40.164768][ T5155] [ 40.164768][ T5155] stack backtrace: [ 40.165836][ T5155] CPU: 0 UID: 0 PID: 5155 Comm: syz.1.102 Not tainted syzkaller #0 PREEMPT [ 40.167412][ T5155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 40.169356][ T5155] Call trace: [ 40.169965][ T5155] show_stack+0x2c/0x3c (C) [ 40.170753][ T5155] __dump_stack+0x30/0x40 [ 40.171522][ T5155] dump_stack_lvl+0xd8/0x12c [ 40.172345][ T5155] dump_stack+0x1c/0x28 [ 40.173125][ T5155] lockdep_rcu_suspicious+0x168/0x26c [ 40.174068][ T5155] mas_start+0x3a0/0x5b4 [ 40.174829][ T5155] mas_walk+0x9c/0x2b8 [ 40.175549][ T5155] ublk_init_iod+0x4a4/0xa68 [ 40.176358][ T5155] ublk_setup_iod+0x1e8/0x260 [ 40.177188][ T5155] ublk_dispatch_req+0x94/0x52c [ 40.178086][ T5155] ublk_cmd_tw_cb+0x64/0x78 [ 40.178929][ T5155] tctx_task_work_run+0x5bc/0xc2c [ 40.179858][ T5155] tctx_task_work+0x3c/0x68 [ 40.180707][ T5155] task_work_run+0x1cc/0x25c [ 40.181557][ T5155] get_signal+0xf30/0x1094 [ 40.182377][ T5155] arch_do_signal_or_restart+0x288/0x444c [ 40.183435][ T5155] exit_to_user_mode_loop+0x70/0x17c [ 40.184392][ T5155] el0_svc+0x18c/0x260 [ 40.185129][ T5155] el0t_64_sync_handler+0x44/0x104 [ 40.186074][ T5155] el0t_64_sync+0x198/0x19c [ 40.187661][ T4711] Bluetooth: hci0: command 0x040f tx timeout [ 40.282797][ T4794] I/O error, dev ublkb2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 40.282923][ T4794] Buffer I/O error on dev ublkb2, logical block 0, async page read [ 40.284157][ T4381] I/O error, dev ublkb2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 40.284172][ T4381] Buffer I/O error on dev ublkb2, logical block 0, async page read [ 40.284315][ T4381] I/O error, dev ublkb2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 40.284326][ T4381] Buffer I/O error on dev ublkb2, logical block 0, async page read [ 40.284373][ T4381] I/O error, dev ublkb2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 40.284389][ T4381] Buffer I/O error on dev ublkb2, logical block 0, async page read [ 40.284448][ T4381] I/O error, dev ublkb2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 40.284458][ T4381] Buffer I/O error on dev ublkb2, logical block 0, async page read [ 40.284529][ T4381] I/O error, dev ublkb2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 40.284545][ T4381] Buffer I/O error on dev ublkb2, logical block 0, async page read [ 40.284605][ T4381] I/O error, dev ublkb2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 40.284616][ T4381] Buffer I/O error on dev ublkb2, logical block 0, async page read [ 40.284657][ T4381] I/O error, dev ublkb2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 40.284667][ T4381] Buffer I/O error on dev ublkb2, logical block 0, async page read [ 40.284742][ T9] ldm_validate_partition_table(): Disk read failed. [ 40.284790][ T4381] I/O error, dev ublkb2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 40.284806][ T4381] Buffer I/O error on dev ublkb2, logical block 0, async page read [ 40.284869][ T4381] I/O error, dev ublkb2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 40.284882][ T4381] Buffer I/O error on dev ublkb2, logical block 0, async page read [ 40.285093][ T9] Dev ublkb2: unable to read RDB block 0 [ 40.285437][ T9] ublkb2: unable to read partition table [ 40.892725][ T50] Bluetooth: hci2: command 0x0419 tx timeout [ 40.893408][ T4711] Bluetooth: hci4: command 0x0419 tx timeout [ 40.903151][ T4711] Bluetooth: hci3: command 0x0419 tx timeout [ 40.903194][ T50] Bluetooth: hci1: command 0x0419 tx timeout [ 41.025885][ T4849] r8152-cfgselector 1-1: Unknown version 0x0000 [ 41.029114][ T4849] r8152-cfgselector 1-1: USB disconnect, device number 4 [ 42.252719][ T4711] Bluetooth: hci0: command 0x040f tx timeout [ 42.982731][ T4709] Bluetooth: hci4: command 0x0419 tx timeout [ 42.982773][ T4709] Bluetooth: hci2: command 0x0419 tx timeout [ 42.984838][ T4711] Bluetooth: hci3: command 0x0419 tx timeout [ 42.984902][ T50] Bluetooth: hci1: command 0x0419 tx timeout [ 44.342715][ T50] Bluetooth: hci0: command 0x040f tx timeout