last executing test programs: 8m30.745244553s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000099c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000009a40), 0x0, 0x0) read$msr(r3, &(0x7f0000009a80)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000022a80)=0x7) futex(0x0, 0xa, 0x2, 0x0, 0x0, 0x400000) syz_emit_ethernet(0x11, &(0x7f0000022ac0)={@broadcast, @empty, @void, {@llc_tr={0x11, {@llc={0x2, 0xf0, "11"}}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000022c40), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000022d40)) 8m28.456042623s ago: executing program 2 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019180)=0x7) r4 = socket(0x10, 0x803, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000019280)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f00000192c0)="0a000000010001", 0x7) io_uring_enter(0xffffffffffffffff, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, 0x0, 0x20000000) 8m25.311682391s ago: executing program 2 (id=8): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000680)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000006c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r3, &(0x7f0000001d40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f000001ad40)={0x2, 0xe, &(0x7f000001ae00)=ANY=[@ANYBLOB="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"], &(0x7f000001bb80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f000001bbc0), 0xffffffffffffff97, 0x10, &(0x7f000001bc00), 0xfffffffffffffd27}, 0x48) 8m25.003442341s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000780)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000007c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0) read$msr(r3, &(0x7f00000018c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f000001a8c0)=0x40003) openat$sequencer2(0xffffffffffffff9c, &(0x7f000001a900), 0x902, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x40044160, 0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) r5 = io_uring_setup(0x73c7, &(0x7f0000000300)={0x0, 0xc63b, 0x2, 0x2, 0x1f9}) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) io_uring_enter(r5, 0x0, 0x2783, 0x6f, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd0a, 0x0) 8m22.535584077s ago: executing program 0 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019480)=0x4000007) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000194c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000019500)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000019540)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000019700), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) semget$private(0x0, 0x2, 0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x2, &(0x7f0000000200)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x52}, @exit], 0x0}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000019800)={0xffffffffffffffff, &(0x7f0000019700)='\x00', 0x201, &(0x7f0000019740)={@_ha_fsid={[0x10000, 0x2]}, {0xfff8, 0x1ff, 0x8, 0x5}}, 0x1ff, &(0x7f0000019780)={@_ha_fsid}, 0x0}) 8m22.399374013s ago: executing program 4 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019480)=0x4000007) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000194c0)={0x2, 0x4e21, @multicast2}, 0x10) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="edd26cd1428860f2c52cd3d0070b8b4866da9fe831535980c5c8faa66352612f5cf565e817c0664c44bd4dc5aa7a8fc5ca1345669b63551cd6c704bd26ea839b5f03654a00a9cd23d8281ab4d251", 0x4e, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000019c00)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25cfdbfd, {0x0, 0x0, 0x0, 0x0, 0x32c76, 0x10200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r7}) r8 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000019680)="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", 0x559, r8) keyctl$KEYCTL_MOVE(0x1e, r5, r7, r8, 0x1) recvfrom$inet(r4, &(0x7f0000019700), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 8m19.700829457s ago: executing program 4 (id=11): syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000001c0), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) gettid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$video4linux(&(0x7f0000000240), 0x4, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000280)={0x1, 0x0, {0x0, 0x0, 0x100b, 0x4, 0x0, 0x0, 0x5, 0x4}}) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)=ANY=[], 0xdc}}, 0x0) close(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x0, 0x2000}}}}, @TCA_STAB={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x11) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r6 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x1, 0x0) r7 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f00000005c0)={{0x1088, 0x1, 0x2, 0x800, 'syz0\x00', 0xce6f7df0}, 0x4, 0x20000000, 0x1, r7, 0x0, 0x8, 'syz1\x00', 0x0}) r8 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x800, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fchdir(r8) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x101000, 0x108) getdents64(r9, &(0x7f0000000980)=""/4096, 0x1000) 8m8.128261888s ago: executing program 32 (id=8): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000680)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000006c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r3, &(0x7f0000001d40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f000001ad40)={0x2, 0xe, &(0x7f000001ae00)=ANY=[@ANYBLOB="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"], &(0x7f000001bb80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f000001bbc0), 0xffffffffffffff97, 0x10, &(0x7f000001bc00), 0xfffffffffffffd27}, 0x48) 8m7.061657977s ago: executing program 33 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019480)=0x4000007) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000194c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000019500)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000019540)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000019700), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) semget$private(0x0, 0x2, 0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x2, &(0x7f0000000200)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x52}, @exit], 0x0}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000019800)={0xffffffffffffffff, &(0x7f0000019700)='\x00', 0x201, &(0x7f0000019740)={@_ha_fsid={[0x10000, 0x2]}, {0xfff8, 0x1ff, 0x8, 0x5}}, 0x1ff, &(0x7f0000019780)={@_ha_fsid}, 0x0}) 8m3.827402343s ago: executing program 34 (id=11): syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000001c0), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) gettid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$video4linux(&(0x7f0000000240), 0x4, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000280)={0x1, 0x0, {0x0, 0x0, 0x100b, 0x4, 0x0, 0x0, 0x5, 0x4}}) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)=ANY=[], 0xdc}}, 0x0) close(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x0, 0x2000}}}}, @TCA_STAB={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x11) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r6 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x1, 0x0) r7 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f00000005c0)={{0x1088, 0x1, 0x2, 0x800, 'syz0\x00', 0xce6f7df0}, 0x4, 0x20000000, 0x1, r7, 0x0, 0x8, 'syz1\x00', 0x0}) r8 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x800, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fchdir(r8) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x101000, 0x108) getdents64(r9, &(0x7f0000000980)=""/4096, 0x1000) 2m10.173135053s ago: executing program 3 (id=335): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x4aa40, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x14b102) socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x0) close(r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) syz_ublk_setup_io_uring(0x735d, &(0x7f0000000500)={0x0, 0x8eb4, 0x40208, 0x1, 0xa1, 0x0, r2}, 0x0, &(0x7f00000005c0), &(0x7f0000000600)) 2m9.762457085s ago: executing program 3 (id=338): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000780)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000007c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0) read$msr(r3, &(0x7f00000018c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f000001a8c0)=0x40003) openat$sequencer2(0xffffffffffffff9c, &(0x7f000001a900), 0x902, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x40044160, 0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = io_uring_setup(0x73c7, &(0x7f0000000300)={0x0, 0xc63b, 0x2, 0x2, 0x1f9}) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) io_uring_enter(r4, 0x0, 0x2783, 0x6f, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd0a, 0x0) 2m6.444137852s ago: executing program 3 (id=340): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000780)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000007c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0) read$msr(r3, &(0x7f00000018c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f000001a8c0)=0x40003) openat$sequencer2(0xffffffffffffff9c, &(0x7f000001a900), 0x902, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x40044160, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) r5 = io_uring_setup(0x73c7, &(0x7f0000000300)={0x0, 0xc63b, 0x2, 0x2, 0x1f9}) io_uring_enter(r5, 0x0, 0x2783, 0x6f, 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd0a, 0x0) 2m2.797545586s ago: executing program 3 (id=342): sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x4080) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchmod(r0, 0x4) 1m54.97222154s ago: executing program 3 (id=350): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r2, &(0x7f0000000340)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000019340)=0x7) r3 = syz_open_dev$sg(&(0x7f0000019d00), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000019d40)) socket$nl_generic(0x10, 0x3, 0x10) 1m52.937665716s ago: executing program 3 (id=352): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001600)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x5, 0x80, 0x2, 0x3, 0x5, 0x6, 0x4c, 0x39cc191a, 0x5f, 0x9, 0x5, 0x80, 0xffffff01, 0x6, 0x939b, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x6, 0x3, 0xe, 0x0, 0x71, 0x1, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0xfffffff7, 0xe, 0x312, 0x78, 0xea4, 0x80000, 0x4, 0x4, 0x8000, 0x4, 0x7, 0x6, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x5, 0x42, 0xa, 0x4, 0x9, 0x8, 0xf4, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0x1, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x85, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x3, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbd, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x20000001, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x5, 0x6, 0xaaed, 0x404, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x2, 0x938, 0x806, 0x6, 0x0, 0x5, 0xce7, 0x8000400, 0xffffffff, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x3, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a8, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x10002, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001a80), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000001ac0)=0x15) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001440)={0x1, &(0x7f0000001500)=[{0x6, 0x9, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m36.795101057s ago: executing program 35 (id=352): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001600)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x5, 0x80, 0x2, 0x3, 0x5, 0x6, 0x4c, 0x39cc191a, 0x5f, 0x9, 0x5, 0x80, 0xffffff01, 0x6, 0x939b, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x6, 0x3, 0xe, 0x0, 0x71, 0x1, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0xfffffff7, 0xe, 0x312, 0x78, 0xea4, 0x80000, 0x4, 0x4, 0x8000, 0x4, 0x7, 0x6, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x5, 0x42, 0xa, 0x4, 0x9, 0x8, 0xf4, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0x1, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x85, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x3, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbd, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x20000001, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x5, 0x6, 0xaaed, 0x404, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x2, 0x938, 0x806, 0x6, 0x0, 0x5, 0xce7, 0x8000400, 0xffffffff, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x3, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a8, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x10002, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001a80), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000001ac0)=0x15) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001440)={0x1, &(0x7f0000001500)=[{0x6, 0x9, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 16.809230747s ago: executing program 1 (id=417): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80000, &(0x7f0000000400)={[{}, {'erspan0\x00'}, {}, {}, {'GPL\x00'}, {'\\@'}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x63, 0x66, 0x30, 0x61, 0x61, 0x63], 0x2d, [0x64, 0xd, 0x63, 0x64], 0x2d, [0x37, 0x1, 0x32, 0x38], 0x2d, [0x39, 0x63, 0x64, 0x35], 0x2d, [0x38, 0x0, 0x37, 0x30, 0x31, 0x33, 0x31, 0x30]}}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@smackfshat={'smackfshat', 0x3d, 'erspan0\x00'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r4}}]}) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7313}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 15.433483426s ago: executing program 7 (id=418): socket$rds(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='nfsd 127.0.0.1 2147483647 *\n', 0x1c) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) write(r1, &(0x7f00000008c0)='* 1 \\x00000000 2147483647 /\n', 0x1c) 15.226839662s ago: executing program 1 (id=419): sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000004c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000002140)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f000001b140)=0x7) setns(0xc9, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000040)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) brk(0x689d80000000) 14.93436027s ago: executing program 7 (id=420): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES16=r0], 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13.71275894s ago: executing program 5 (id=421): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000850) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000500)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r5, &(0x7f0000000a80)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000019a80)=0x7) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r6, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000) recvmmsg(r6, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x20000005) 11.844124078s ago: executing program 5 (id=422): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102) writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x2000, 0x18, 0xffffffffffffffff, 0x8000000, '\x00', 0x0, r1, 0x1, 0x3, 0x0, 0x0, @void, @value, @void, @value=0x6000000}, 0x50) 11.428652867s ago: executing program 7 (id=423): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000780)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000007c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0) read$msr(r3, &(0x7f00000018c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f000001a8c0)=0x40003) openat$sequencer2(0xffffffffffffff9c, &(0x7f000001a900), 0x902, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) r5 = io_uring_setup(0x73c7, &(0x7f0000000300)={0x0, 0xc63b, 0x2, 0x2, 0x1f9}) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) io_uring_enter(r5, 0x0, 0x2783, 0x6f, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd0a, 0x0) 9.349768406s ago: executing program 7 (id=424): r0 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./mydev/v4l-touch0\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000a00)={0x206, 0x3, 0x4, {0x1, @win={{0x7, 0x0, 0x5, 0x2}, 0x5, 0x5, 0x0, 0x3, 0x0, 0x5}}, 0x6}) 8.789292918s ago: executing program 1 (id=425): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000640)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000680)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000006c0)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x4}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000740)={0x2, 0x15, @loopback}, 0x10) write(r2, &(0x7f0000000780)='PASV\r\n', 0x6) r3 = accept4(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write(r3, &(0x7f00000007c0)='227 Entering Passive Mode (127,0,0,1,19,(', 0x29) 7.478669445s ago: executing program 1 (id=426): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000900)='27', 0x2) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./trace\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) 6.768758042s ago: executing program 5 (id=427): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000400)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r2, &(0x7f0000000480)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000019480)=0x4000007) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r3}) 6.612060131s ago: executing program 1 (id=428): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80000, &(0x7f0000000400)={[{}, {'erspan0\x00'}, {}, {}, {'GPL\x00'}, {'\\@'}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x63, 0x66, 0x30, 0x61, 0x61, 0x63], 0x2d, [0x64, 0xd, 0x63, 0x64], 0x2d, [0x37, 0x1, 0x32, 0x38], 0x2d, [0x39, 0x63, 0x64, 0x35], 0x2d, [0x38, 0x0, 0x37, 0x30, 0x31, 0x33, 0x31, 0x30]}}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@smackfshat={'smackfshat', 0x3d, 'erspan0\x00'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r4}}]}) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7313}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.805574387s ago: executing program 5 (id=429): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x4aa40, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x14b102) socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) syz_ublk_setup_io_uring(0x735d, &(0x7f0000000500)={0x0, 0x8eb4, 0x40208, 0x1, 0xa1, 0x0, r2}, 0x0, &(0x7f00000005c0), &(0x7f0000000600)) 2.402180616s ago: executing program 7 (id=430): r0 = creat(0x0, 0x40) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f00000008c0)='./file0\x00', 0x400, &(0x7f00000001c0)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c640100000072642c757466383d312c756e695f786c6174653d302c73686f72746e616d65c27d8ca70369796e6e695f786c6174653d05ee6b895f5f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a82562f247c301e9bdd6100f9aeb8576d329be6e4bb168f1434000000a2368afae8088b0556e68e6f", @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRESHEX, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64, @ANYRES32=r0], 0xfd, 0x296, &(0x7f0000000a00)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000001a00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ac0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001b00)=@file={0x0, './bus\x00'}, 0x6e) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB], 0x33) 2.332810706s ago: executing program 5 (id=431): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x9100, 0x0, 0x0) sched_setaffinity(r2, 0x47, &(0x7f0000019bc0)=0x7) socket$packet(0x11, 0x2, 0x300) r5 = socket(0x10, 0x803, 0x0) r6 = syz_io_uring_setup(0xefd, &(0x7f0000019c00)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000019c80)=0x0, &(0x7f0000019cc0)=0x0, &(0x7f0000019d00)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000019d40)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r5, 0x0, &(0x7f0000019dc0)={0x0, 0x0, 0x0}, 0x0, 0x40000122}) io_uring_enter(r6, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000019e00), r5) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x158, 0x10, 0x1, 0x70bc2b, 0x44000000, {{@in6=@dev={0xfe, 0x80, '\x00', 0x22}, @in=@rand_addr=0x64010100, 0x0, 0x8, 0x4e20, 0x5, 0xa, 0x60, 0x0, 0x3c}, {@in=@remote, 0x0, 0x32}, @in=@multicast2, {0xfffffffffffffffe, 0x4, 0x1, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffc, 0x0, 0x89}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x70bd26, 0x0, 0x2, 0x4, 0x0, 0x2c}, [@algo_crypt={0x68, 0x2, {{'cbc(twofish)\x00'}, 0x100, "72f01afe020000f8288a4c1c024e99ee5bf500362a6a849a7390450024006222"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) 551.5686ms ago: executing program 7 (id=432): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f0000000540)=ANY=[], 0x41, 0x5e97, &(0x7f00000006c0)="$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") creat(&(0x7f0000006580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) mknod(&(0x7f0000006680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x0) symlink(&(0x7f00000067c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000068c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f00000069c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000006ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, &(0x7f0000006bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x140048, 0x0, 0x0, 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000006dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8a408, 0x0, 0x0, 0x0, &(0x7f0000006f00)) creat(&(0x7f0000006f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x71) 122.583977ms ago: executing program 5 (id=433): timer_create(0x1, 0x0, &(0x7f00000002c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x7, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000140)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000440), 0x2, 0x143102) writev(r1, &(0x7f0000000480)=[{&(0x7f00000004c0)}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="8b", 0x1, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys\x00', 0x1fd) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) 0s ago: executing program 1 (id=434): sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000004c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000002140)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f000001b140)=0x7) setns(0xc9, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000040)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) brk(0x689d80000000) kernel console output (not intermixed with test programs): 95879][ T141] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.849375][ T141] bridge_slave_0: left allmulticast mode [ 271.849412][ T141] bridge_slave_0: left promiscuous mode [ 271.849647][ T141] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.906675][ T141] bridge_slave_1: left allmulticast mode [ 271.906712][ T141] bridge_slave_1: left promiscuous mode [ 271.906948][ T141] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.919321][ T141] bridge_slave_0: left allmulticast mode [ 271.919436][ T141] bridge_slave_0: left promiscuous mode [ 271.919679][ T141] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.214991][ T141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.219153][ T141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.221120][ T141] bond0 (unregistering): Released all slaves [ 272.312897][ T990] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 273.015155][ T141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.023981][ T990] usb 6-1: Using ep0 maxpacket: 32 [ 273.103426][ T990] usb 6-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 273.108318][ T990] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 273.108360][ T990] usb 6-1: config 0 has no interface number 0 [ 274.481574][ T141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.518218][ T990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.518261][ T990] usb 6-1: Product: syz [ 274.518287][ T990] usb 6-1: Manufacturer: syz [ 274.518313][ T990] usb 6-1: SerialNumber: syz [ 274.521773][ T141] bond0 (unregistering): Released all slaves [ 274.590072][ T990] usb 6-1: config 0 descriptor?? [ 274.618956][ T990] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 274.839088][ T6607] hsr_slave_0: entered promiscuous mode [ 274.841992][ T6607] hsr_slave_1: entered promiscuous mode [ 274.848500][ T6607] debugfs: 'hsr0' already exists in 'hsr' [ 274.848529][ T6607] Cannot create hsr debugfs directory [ 274.880761][ T990] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 274.959761][ T990] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 275.243941][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 275.257713][ T5774] usb 6-1: USB disconnect, device number 2 [ 275.356943][ T5774] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 275.429653][ T5774] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 275.431798][ T5774] quatech2 6-1:0.51: device disconnected [ 275.759477][ T6612] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.759656][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.759838][ T6612] bridge_slave_0: entered allmulticast mode [ 275.795790][ T6612] bridge_slave_0: entered promiscuous mode [ 275.808536][ T6612] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.808654][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.808815][ T6612] bridge_slave_1: entered allmulticast mode [ 275.837431][ T6612] bridge_slave_1: entered promiscuous mode [ 277.861203][ T141] hsr_slave_0: left promiscuous mode [ 277.869649][ T141] hsr_slave_1: left promiscuous mode [ 277.872096][ T141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.888153][ T141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.912255][ T141] hsr_slave_0: left promiscuous mode [ 277.918560][ T141] hsr_slave_1: left promiscuous mode [ 277.919591][ T141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.920850][ T141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.099526][ T6811] FAULT_INJECTION: forcing a failure. [ 280.099526][ T6811] name fail_futex, interval 1, probability 0, space 0, times 0 [ 280.099577][ T6811] CPU: 0 UID: 0 PID: 6811 Comm: syz.5.141 Not tainted syzkaller #0 PREEMPT(full) [ 280.099621][ T6811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 280.099644][ T6811] Call Trace: [ 280.099655][ T6811] [ 280.099670][ T6811] dump_stack_lvl+0x100/0x190 [ 280.099729][ T6811] should_fail_ex.cold+0x5/0xa [ 280.099774][ T6811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.099827][ T6811] get_futex_key+0x1c9/0x13e0 [ 280.099891][ T6811] ? __pfx_get_futex_key+0x10/0x10 [ 280.099946][ T6811] ? futex_wake+0x4ea/0x5e0 [ 280.100000][ T6811] futex_wake+0xf4/0x5e0 [ 280.100048][ T6811] ? __pfx_futex_wake+0x10/0x10 [ 280.100091][ T6811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.100138][ T6811] ? lock_acquire+0x1d1/0x380 [ 280.100189][ T6811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.100235][ T6811] ? find_held_lock+0x2b/0x80 [ 280.100294][ T6811] ? __fget_files+0x215/0x3d0 [ 280.100342][ T6811] ? __fget_files+0x215/0x3d0 [ 280.100385][ T6811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.100441][ T6811] do_futex+0x2b2/0x440 [ 280.100511][ T6811] ? __pfx_do_futex+0x10/0x10 [ 280.100576][ T6811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.100621][ T6811] ? fdget+0x18b/0x210 [ 280.100673][ T6811] __x64_sys_futex+0x34f/0x4d0 [ 280.100715][ T6811] ? __pfx___x64_sys_futex+0x10/0x10 [ 280.100787][ T6811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.100840][ T6811] do_syscall_64+0x123/0x790 [ 280.100889][ T6811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.100928][ T6811] RIP: 0033:0x7f590779f559 [ 280.100957][ T6811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.100992][ T6811] RSP: 002b:00007f59086420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 280.101028][ T6811] RAX: ffffffffffffffda RBX: 00007f5907a25fa8 RCX: 00007f590779f559 [ 280.101054][ T6811] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5907a25fac [ 280.101078][ T6811] RBP: 00007f5907a25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 280.101101][ T6811] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 280.101125][ T6811] R13: 00007f5907a26038 R14: 00007fff3903e620 R15: 00007fff3903e708 [ 280.101175][ T6811] [ 280.118494][ T141] team0 (unregistering): Port device team_slave_1 removed [ 280.136815][ T141] team0 (unregistering): Port device team_slave_0 removed [ 280.209835][ T6811] loop5: detected capacity change from 0 to 16 [ 280.243292][ T6811] erofs (device loop5): mounted with root inode @ nid 36. [ 282.505449][ T141] team0 (unregistering): Port device team_slave_1 removed [ 282.546574][ T141] team0 (unregistering): Port device team_slave_0 removed [ 284.699127][ T6612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.828962][ T6612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.960291][ T6664] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.960513][ T6664] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.960671][ T6664] bridge_slave_0: entered allmulticast mode [ 284.970106][ T6664] bridge_slave_0: entered promiscuous mode [ 285.000755][ T6612] team0: Port device team_slave_0 added [ 285.043717][ T6664] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.043910][ T6664] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.044089][ T6664] bridge_slave_1: entered allmulticast mode [ 285.052305][ T6664] bridge_slave_1: entered promiscuous mode [ 285.107388][ T6612] team0: Port device team_slave_1 added [ 285.192424][ T6664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.273132][ T6664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.390155][ T6612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.390182][ T6612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.390227][ T6612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.406751][ T6664] team0: Port device team_slave_0 added [ 285.419267][ T6664] team0: Port device team_slave_1 added [ 285.516134][ T6612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.516161][ T6612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.516205][ T6612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.949623][ T6664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.949647][ T6664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.949688][ T6664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.503325][ T6664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.503350][ T6664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.503396][ T6664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.808111][ T6612] hsr_slave_0: entered promiscuous mode [ 287.816508][ T6612] hsr_slave_1: entered promiscuous mode [ 289.742270][ T6664] hsr_slave_0: entered promiscuous mode [ 289.746662][ T6664] hsr_slave_1: entered promiscuous mode [ 289.750637][ T6664] debugfs: 'hsr0' already exists in 'hsr' [ 289.750666][ T6664] Cannot create hsr debugfs directory [ 289.811124][ T6607] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 289.833817][ T6607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 289.837316][ T6607] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 289.852176][ T6607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 289.909677][ T87] bridge_slave_1: left allmulticast mode [ 289.909715][ T87] bridge_slave_1: left promiscuous mode [ 289.909947][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.934167][ T87] bridge_slave_0: left allmulticast mode [ 289.934201][ T87] bridge_slave_0: left promiscuous mode [ 289.939567][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.251274][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.265058][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.267079][ T87] bond0 (unregistering): Released all slaves [ 290.613941][ T990] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 291.234972][ T6607] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 291.255388][ T6607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 291.256452][ T6607] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 291.292730][ T6607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 291.375209][ T990] usb 6-1: Using ep0 maxpacket: 32 [ 291.376924][ T990] usb 6-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 291.378014][ T990] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 291.378052][ T990] usb 6-1: config 0 has no interface number 0 [ 291.380386][ T990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.380424][ T990] usb 6-1: Product: syz [ 291.380451][ T990] usb 6-1: Manufacturer: syz [ 291.380477][ T990] usb 6-1: SerialNumber: syz [ 291.411209][ T990] usb 6-1: config 0 descriptor?? [ 291.431011][ T990] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 291.724063][ T6848] __vm_enough_memory: pid: 6848, comm: syz.1.149, bytes: 21200312291328 not enough memory for the allocation [ 292.385547][ T990] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 292.419624][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 292.577926][ T990] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 292.633706][ T990] usb 6-1: USB disconnect, device number 3 [ 294.515387][ T990] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 294.587342][ T990] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 294.600754][ T990] quatech2 6-1:0.51: device disconnected [ 294.614805][ T6859] FAULT_INJECTION: forcing a failure. [ 294.614805][ T6859] name fail_futex, interval 1, probability 0, space 0, times 0 [ 294.614851][ T6859] CPU: 0 UID: 0 PID: 6859 Comm: syz.3.151 Not tainted syzkaller #0 PREEMPT(full) [ 294.614895][ T6859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 294.614917][ T6859] Call Trace: [ 294.614929][ T6859] [ 294.614944][ T6859] dump_stack_lvl+0x100/0x190 [ 294.615004][ T6859] should_fail_ex.cold+0x5/0xa [ 294.615064][ T6859] get_futex_key+0x1c9/0x13e0 [ 294.615129][ T6859] ? __pfx_get_futex_key+0x10/0x10 [ 294.615201][ T6859] futex_wait_setup+0x91/0x540 [ 294.615260][ T6859] __futex_wait+0x19f/0x360 [ 294.615309][ T6859] ? __pfx___futex_wait+0x10/0x10 [ 294.615352][ T6859] ? __pfx_try_to_wake_up+0x10/0x10 [ 294.615399][ T6859] ? futex_hash+0x311/0x400 [ 294.615459][ T6859] ? __pfx_futex_wake_mark+0x10/0x10 [ 294.615511][ T6859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.615561][ T6859] ? find_held_lock+0x2b/0x80 [ 294.615615][ T6859] ? futex_wake+0x4ea/0x5e0 [ 294.615654][ T6859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.615701][ T6859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.615750][ T6859] futex_wait+0xe6/0x370 [ 294.615793][ T6859] ? __pfx_futex_wait+0x10/0x10 [ 294.615843][ T6859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.615885][ T6859] ? rcu_read_lock_any_held+0x6a/0x90 [ 294.615942][ T6859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.615984][ T6859] ? find_held_lock+0x2b/0x80 [ 294.616042][ T6859] ? ksys_write+0x190/0x250 [ 294.616076][ T6859] ? ksys_write+0x190/0x250 [ 294.616113][ T6859] do_futex+0x265/0x440 [ 294.616172][ T6859] ? __pfx_do_futex+0x10/0x10 [ 294.616230][ T6859] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 294.616281][ T6859] __x64_sys_futex+0x34f/0x4d0 [ 294.616320][ T6859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.616362][ T6859] ? fput+0x7c/0x100 [ 294.616405][ T6859] ? __pfx___x64_sys_futex+0x10/0x10 [ 294.616464][ T6859] ? ksys_write+0x1ac/0x250 [ 294.616501][ T6859] ? __pfx_ksys_write+0x10/0x10 [ 294.616544][ T6859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.616600][ T6859] do_syscall_64+0x123/0x790 [ 294.616645][ T6859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.616685][ T6859] RIP: 0033:0x7f4936d9f559 [ 294.616715][ T6859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.616752][ T6859] RSP: 002b:00007f4934ff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 294.616789][ T6859] RAX: ffffffffffffffda RBX: 00007f4937025fa8 RCX: 00007f4936d9f559 [ 294.616815][ T6859] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4937025fa8 [ 294.616840][ T6859] RBP: 00007f4937025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 294.616864][ T6859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.616888][ T6859] R13: 00007f4937026038 R14: 00007ffce69dde80 R15: 00007ffce69ddf68 [ 294.616938][ T6859] [ 294.619024][ T6859] loop3: detected capacity change from 0 to 16 [ 296.600021][ T6859] erofs (device loop3): mounted with root inode @ nid 36. [ 299.099218][ T87] hsr_slave_0: left promiscuous mode [ 299.100475][ T87] hsr_slave_1: left promiscuous mode [ 299.117485][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.124378][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.473241][ T87] team0 (unregistering): Port device team_slave_1 removed [ 301.504946][ T87] team0 (unregistering): Port device team_slave_0 removed [ 302.078418][ T6874] loop1: detected capacity change from 0 to 32768 [ 302.098832][ T6874] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.152 (6874) [ 302.106987][ T6874] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 302.107031][ T6874] BTRFS info (device loop1): using sha256 checksum algorithm [ 302.292135][ T6874] BTRFS info (device loop1): enabling ssd optimizations [ 302.292173][ T6874] BTRFS info (device loop1): turning on sync discard [ 302.292202][ T6874] BTRFS info (device loop1): enabling free space tree [ 302.413629][ T29] audit: type=1800 audit(1793128605.621:4): pid=6874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.152" name="file1" dev="loop1" ino=260 res=0 errno=-22 [ 303.820411][ T6607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.904171][ T5634] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 303.937447][ T6607] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.985980][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.986116][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.028127][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.028245][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.968797][ T6901] __vm_enough_memory: pid: 6901, comm: syz.1.159, bytes: 21200312291328 not enough memory for the allocation [ 307.968045][ T6912] device-mapper: ioctl: Invalid data size in the ioctl structure: 4294966917 [ 308.986650][ T5289] 8021q: adding VLAN 0 to HW filter on device eth11 [ 311.183491][ T5653] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 311.188139][ T5653] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 311.189199][ T5653] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 311.201043][ T5653] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.216864][ T5653] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.506525][ T5653] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 311.522986][ T5653] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 311.525968][ T5653] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 311.527274][ T5653] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 311.528005][ T5653] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 312.387995][ T5653] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 312.399235][ T6934] netlink: 24 bytes leftover after parsing attributes in process `syz.5.165'. [ 312.410451][ T5653] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 312.412348][ T5653] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 312.428379][ T5653] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 312.429197][ T5653] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 312.592953][ T6934] logitech-hidpp-device 0003:046D:C082.0001: hid_field_extract() called with n (221) > 32! (syz.5.165) [ 312.988663][ T5774] logitech-hidpp-device 0003:046D:C082.0001: hidraw0: USB HID v0.04 Device [syz0] on syz0 [ 313.292877][ T5645] Bluetooth: hci5: command tx timeout [ 313.484256][ T6955] loop5: detected capacity change from 0 to 64 [ 313.519118][ T6948] fido_id[6948]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 313.622189][ T5645] Bluetooth: hci6: command tx timeout [ 314.492914][ T5645] Bluetooth: hci8: command tx timeout [ 314.784305][ T5774] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 314.938044][ T6918] rxe_eth0 speed is unknown, defaulting to 1000 [ 314.943414][ T5774] usb 2-1: Using ep0 maxpacket: 32 [ 314.944630][ T5774] usb 2-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 314.952745][ T5774] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 314.952783][ T5774] usb 2-1: config 0 has no interface number 0 [ 314.959153][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.959191][ T5774] usb 2-1: Product: syz [ 314.959216][ T5774] usb 2-1: Manufacturer: syz [ 314.959242][ T5774] usb 2-1: SerialNumber: syz [ 314.975104][ T5774] usb 2-1: config 0 descriptor?? [ 314.995927][ T5774] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 315.041483][ T6007] bridge_slave_1: left allmulticast mode [ 315.041521][ T6007] bridge_slave_1: left promiscuous mode [ 315.041833][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.093596][ T6007] bridge_slave_0: left allmulticast mode [ 315.093650][ T6007] bridge_slave_0: left promiscuous mode [ 315.101945][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.130698][ T6971] FAULT_INJECTION: forcing a failure. [ 315.130698][ T6971] name fail_futex, interval 1, probability 0, space 0, times 0 [ 315.130745][ T6971] CPU: 1 UID: 0 PID: 6971 Comm: syz.3.164 Not tainted syzkaller #0 PREEMPT(full) [ 315.130789][ T6971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 315.130812][ T6971] Call Trace: [ 315.130825][ T6971] [ 315.130839][ T6971] dump_stack_lvl+0x100/0x190 [ 315.130900][ T6971] should_fail_ex.cold+0x5/0xa [ 315.130955][ T6971] get_futex_key+0x1c9/0x13e0 [ 315.131021][ T6971] ? __pfx_get_futex_key+0x10/0x10 [ 315.131092][ T6971] futex_wait_setup+0x91/0x540 [ 315.131152][ T6971] __futex_wait+0x19f/0x360 [ 315.131201][ T6971] ? __pfx___futex_wait+0x10/0x10 [ 315.131243][ T6971] ? __pfx_try_to_wake_up+0x10/0x10 [ 315.131290][ T6971] ? futex_hash+0x311/0x400 [ 315.131352][ T6971] ? __pfx_futex_wake_mark+0x10/0x10 [ 315.131404][ T6971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.131452][ T6971] ? find_held_lock+0x2b/0x80 [ 315.131530][ T6971] ? futex_wake+0x4ea/0x5e0 [ 315.131574][ T6971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.131624][ T6971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.131677][ T6971] futex_wait+0xe6/0x370 [ 315.131726][ T6971] ? __pfx_futex_wait+0x10/0x10 [ 315.131781][ T6971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.131826][ T6971] ? rcu_read_lock_any_held+0x6a/0x90 [ 315.131889][ T6971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.131935][ T6971] ? find_held_lock+0x2b/0x80 [ 315.131993][ T6971] ? ksys_write+0x190/0x250 [ 315.132031][ T6971] ? ksys_write+0x190/0x250 [ 315.132072][ T6971] do_futex+0x265/0x440 [ 315.132136][ T6971] ? __pfx_do_futex+0x10/0x10 [ 315.132201][ T6971] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 315.132257][ T6971] __x64_sys_futex+0x34f/0x4d0 [ 315.132296][ T6971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.132342][ T6971] ? fput+0x7c/0x100 [ 315.132390][ T6971] ? __pfx___x64_sys_futex+0x10/0x10 [ 315.132452][ T6971] ? ksys_write+0x1ac/0x250 [ 315.132489][ T6971] ? __pfx_ksys_write+0x10/0x10 [ 315.132537][ T6971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.132591][ T6971] do_syscall_64+0x123/0x790 [ 315.132640][ T6971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.132681][ T6971] RIP: 0033:0x7f4936d9f559 [ 315.132710][ T6971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.132746][ T6971] RSP: 002b:00007f4934ff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 315.132782][ T6971] RAX: ffffffffffffffda RBX: 00007f4937025fa8 RCX: 00007f4936d9f559 [ 315.132808][ T6971] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4937025fa8 [ 315.132832][ T6971] RBP: 00007f4937025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 315.132855][ T6971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.132878][ T6971] R13: 00007f4937026038 R14: 00007ffce69dde80 R15: 00007ffce69ddf68 [ 315.132928][ T6971] [ 315.281468][ T5774] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 315.296055][ T6972] loop3: detected capacity change from 0 to 16 [ 315.340344][ T6972] erofs (device loop3): mounted with root inode @ nid 36. [ 315.365462][ T5774] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 315.382886][ T5645] Bluetooth: hci5: command tx timeout [ 315.677350][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 315.680678][ T990] usb 2-1: USB disconnect, device number 2 [ 315.702956][ T5645] Bluetooth: hci6: command tx timeout [ 315.749120][ T990] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 317.010403][ T5645] Bluetooth: hci8: command tx timeout [ 317.011097][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.011169][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.120166][ T990] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 317.641361][ T5645] Bluetooth: hci5: command tx timeout [ 317.772824][ T5645] Bluetooth: hci6: command tx timeout [ 317.944604][ T990] quatech2 2-1:0.51: device disconnected [ 319.018539][ T6988] __vm_enough_memory: pid: 6988, comm: syz.5.171, bytes: 21199908921344 not enough memory for the allocation [ 319.056796][ T5645] Bluetooth: hci8: command tx timeout [ 319.516557][ T6007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.548955][ T6007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.559836][ T6007] bond0 (unregistering): Released all slaves [ 319.703861][ T5645] Bluetooth: hci5: command tx timeout [ 319.771047][ T6990] device-mapper: ioctl: Invalid data size in the ioctl structure: 4294966917 [ 319.863719][ T5645] Bluetooth: hci6: command tx timeout [ 321.133173][ T5645] Bluetooth: hci8: command tx timeout [ 321.441432][ T6924] rxe_eth0 speed is unknown, defaulting to 1000 [ 321.552297][ T6998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.175'. [ 321.574901][ T7001] loop3: detected capacity change from 0 to 64 [ 322.392621][ T990] logitech-hidpp-device 0003:046D:C082.0002: hidraw0: USB HID v0.04 Device [syz0] on syz0 [ 322.639778][ T7006] fido_id[7006]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 323.096568][ T7016] FAULT_INJECTION: forcing a failure. [ 323.096568][ T7016] name fail_futex, interval 1, probability 0, space 0, times 0 [ 323.096618][ T7016] CPU: 1 UID: 0 PID: 7016 Comm: syz.1.178 Not tainted syzkaller #0 PREEMPT(full) [ 323.096663][ T7016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 323.096686][ T7016] Call Trace: [ 323.096698][ T7016] [ 323.096712][ T7016] dump_stack_lvl+0x100/0x190 [ 323.096773][ T7016] should_fail_ex.cold+0x5/0xa [ 323.096827][ T7016] get_futex_key+0x1c9/0x13e0 [ 323.096892][ T7016] ? __pfx_get_futex_key+0x10/0x10 [ 323.096946][ T7016] ? wakeup_preempt_fair+0x4fc/0xf60 [ 323.097020][ T7016] futex_wait_setup+0x91/0x540 [ 323.097079][ T7016] __futex_wait+0x19f/0x360 [ 323.097129][ T7016] ? __pfx___futex_wait+0x10/0x10 [ 323.097171][ T7016] ? __pfx_try_to_wake_up+0x10/0x10 [ 323.097216][ T7016] ? futex_hash+0x311/0x400 [ 323.097278][ T7016] ? __pfx_futex_wake_mark+0x10/0x10 [ 323.097329][ T7016] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.097376][ T7016] ? find_held_lock+0x2b/0x80 [ 323.097434][ T7016] ? futex_wake+0x4ea/0x5e0 [ 323.097478][ T7016] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.097526][ T7016] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.097580][ T7016] futex_wait+0xe6/0x370 [ 323.097626][ T7016] ? __pfx_futex_wait+0x10/0x10 [ 323.097681][ T7016] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.097728][ T7016] ? rcu_read_lock_any_held+0x6a/0x90 [ 323.097791][ T7016] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.097838][ T7016] ? find_held_lock+0x2b/0x80 [ 323.097897][ T7016] ? ksys_write+0x190/0x250 [ 323.097934][ T7016] ? ksys_write+0x190/0x250 [ 323.097976][ T7016] do_futex+0x265/0x440 [ 323.098050][ T7016] ? __pfx_do_futex+0x10/0x10 [ 323.098115][ T7016] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 323.098172][ T7016] __x64_sys_futex+0x34f/0x4d0 [ 323.098211][ T7016] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.098257][ T7016] ? fput+0x7c/0x100 [ 323.098306][ T7016] ? __pfx___x64_sys_futex+0x10/0x10 [ 323.098368][ T7016] ? ksys_write+0x1ac/0x250 [ 323.098404][ T7016] ? __pfx_ksys_write+0x10/0x10 [ 323.098446][ T7016] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.098501][ T7016] do_syscall_64+0x123/0x790 [ 323.098550][ T7016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.098590][ T7016] RIP: 0033:0x7eff8459f559 [ 323.098621][ T7016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.098658][ T7016] RSP: 002b:00007eff855360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 323.098695][ T7016] RAX: ffffffffffffffda RBX: 00007eff84825fa8 RCX: 00007eff8459f559 [ 323.098720][ T7016] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007eff84825fa8 [ 323.098744][ T7016] RBP: 00007eff84825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 323.098768][ T7016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.098792][ T7016] R13: 00007eff84826038 R14: 00007ffc0fc09d70 R15: 00007ffc0fc09e58 [ 323.098842][ T7016] [ 323.215254][ T7021] loop1: detected capacity change from 0 to 16 [ 323.223129][ T7021] erofs (device loop1): mounted with root inode @ nid 36. [ 323.857941][ T6935] rxe_eth0 speed is unknown, defaulting to 1000 [ 326.651992][ T7041] loop1: detected capacity change from 0 to 512 [ 326.664232][ T7041] EXT4-fs: Ignoring removed oldalloc option [ 327.429399][ T7041] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842c018, mo2=0002] [ 327.464681][ T7041] System zones: 1-3, 19-19, 35-38 [ 327.825563][ T7041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.825700][ T7041] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.201196][ T7058] device-mapper: ioctl: Invalid data size in the ioctl structure: 4294966917 [ 328.207486][ T7041] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.181: corrupted xattr block 32: invalid ea_ino [ 329.353425][ T5634] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.462017][ T7063] loop3: detected capacity change from 0 to 64 [ 330.390856][ T6007] hsr_slave_0: left promiscuous mode [ 330.406855][ T6007] hsr_slave_1: left promiscuous mode [ 330.407820][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.428800][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.562422][ T7074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.187'. [ 330.919560][ T7081] FAULT_INJECTION: forcing a failure. [ 330.919560][ T7081] name fail_futex, interval 1, probability 0, space 0, times 0 [ 330.919612][ T7081] CPU: 1 UID: 0 PID: 7081 Comm: syz.3.190 Not tainted syzkaller #0 PREEMPT(full) [ 330.919657][ T7081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 330.919680][ T7081] Call Trace: [ 330.919693][ T7081] [ 330.919708][ T7081] dump_stack_lvl+0x100/0x190 [ 330.919770][ T7081] should_fail_ex.cold+0x5/0xa [ 330.919825][ T7081] get_futex_key+0x1c9/0x13e0 [ 330.919890][ T7081] ? __pfx_get_futex_key+0x10/0x10 [ 330.919945][ T7081] ? wakeup_preempt_fair+0x4fc/0xf60 [ 330.920012][ T7081] futex_wait_setup+0x91/0x540 [ 330.920072][ T7081] __futex_wait+0x19f/0x360 [ 330.920121][ T7081] ? __pfx___futex_wait+0x10/0x10 [ 330.920167][ T7081] ? __pfx_try_to_wake_up+0x10/0x10 [ 330.920213][ T7081] ? futex_hash+0x311/0x400 [ 330.920275][ T7081] ? __pfx_futex_wake_mark+0x10/0x10 [ 330.920327][ T7081] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.920375][ T7081] ? find_held_lock+0x2b/0x80 [ 330.920434][ T7081] ? futex_wake+0x4ea/0x5e0 [ 330.920477][ T7081] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.920531][ T7081] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.920586][ T7081] futex_wait+0xe6/0x370 [ 330.920631][ T7081] ? __pfx_futex_wait+0x10/0x10 [ 330.920687][ T7081] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.920733][ T7081] ? rcu_read_lock_any_held+0x6a/0x90 [ 330.920795][ T7081] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.920841][ T7081] ? find_held_lock+0x2b/0x80 [ 330.920900][ T7081] ? ksys_write+0x190/0x250 [ 330.920937][ T7081] ? ksys_write+0x190/0x250 [ 330.920979][ T7081] do_futex+0x265/0x440 [ 330.921043][ T7081] ? __pfx_do_futex+0x10/0x10 [ 330.921109][ T7081] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 330.921165][ T7081] __x64_sys_futex+0x34f/0x4d0 [ 330.921204][ T7081] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.921250][ T7081] ? fput+0x7c/0x100 [ 330.921296][ T7081] ? __pfx___x64_sys_futex+0x10/0x10 [ 330.921358][ T7081] ? ksys_write+0x1ac/0x250 [ 330.921395][ T7081] ? __pfx_ksys_write+0x10/0x10 [ 330.921436][ T7081] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.921492][ T7081] do_syscall_64+0x123/0x790 [ 330.921546][ T7081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.921585][ T7081] RIP: 0033:0x7f4936d9f559 [ 330.921615][ T7081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.921653][ T7081] RSP: 002b:00007f4934ff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 330.921690][ T7081] RAX: ffffffffffffffda RBX: 00007f4937025fa8 RCX: 00007f4936d9f559 [ 330.921716][ T7081] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4937025fa8 [ 330.921740][ T7081] RBP: 00007f4937025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 330.921764][ T7081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.921788][ T7081] R13: 00007f4937026038 R14: 00007ffce69dde80 R15: 00007ffce69ddf68 [ 330.921840][ T7081] [ 330.936964][ T7081] loop3: detected capacity change from 0 to 16 [ 330.979084][ T7081] erofs (device loop3): mounted with root inode @ nid 36. [ 331.323935][ T5773] logitech-hidpp-device 0003:046D:C082.0003: hidraw0: USB HID v0.04 Device [syz0] on syz0 [ 332.290319][ T7086] fido_id[7086]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 332.312313][ T6007] team0 (unregistering): Port device team_slave_1 removed [ 332.346053][ T6007] team0 (unregistering): Port device team_slave_0 removed [ 332.740482][ T6918] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.740612][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.741093][ T6918] bridge_slave_0: entered allmulticast mode [ 332.767633][ T6918] bridge_slave_0: entered promiscuous mode [ 332.780171][ T6918] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.780318][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.780475][ T6918] bridge_slave_1: entered allmulticast mode [ 332.854169][ T6918] bridge_slave_1: entered promiscuous mode [ 333.154917][ T5289] 8021q: adding VLAN 0 to HW filter on device eth12 [ 334.390386][ T6918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.422194][ T6918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.487473][ T6918] team0: Port device team_slave_0 added [ 334.509472][ T6918] team0: Port device team_slave_1 added [ 334.607815][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.607842][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.607889][ T6918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.762734][ T5862] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 335.933045][ T5862] usb 2-1: Using ep0 maxpacket: 8 [ 335.933786][ T5862] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 335.935141][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 335.935208][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.939685][ T5862] usb 2-1: config 0 descriptor?? [ 336.361964][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.362023][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.362070][ T6918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.636279][ T5862] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 338.592323][ T6918] hsr_slave_0: entered promiscuous mode [ 338.601567][ T6918] hsr_slave_1: entered promiscuous mode [ 338.643577][ T24] usb 2-1: USB disconnect, device number 3 [ 338.735995][ T7132] loop5: detected capacity change from 0 to 64 [ 339.656152][ T7136] FAULT_INJECTION: forcing a failure. [ 339.656152][ T7136] name fail_futex, interval 1, probability 0, space 0, times 0 [ 339.656205][ T7136] CPU: 0 UID: 0 PID: 7136 Comm: syz.1.200 Not tainted syzkaller #0 PREEMPT(full) [ 339.656249][ T7136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 339.656273][ T7136] Call Trace: [ 339.656285][ T7136] [ 339.656299][ T7136] dump_stack_lvl+0x100/0x190 [ 339.656359][ T7136] should_fail_ex.cold+0x5/0xa [ 339.656408][ T7136] get_futex_key+0x1c9/0x13e0 [ 339.656471][ T7136] ? __pfx_get_futex_key+0x10/0x10 [ 339.656533][ T7136] ? wakeup_preempt_fair+0x4fc/0xf60 [ 339.656604][ T7136] futex_wait_setup+0x91/0x540 [ 339.656663][ T7136] __futex_wait+0x19f/0x360 [ 339.656711][ T7136] ? __pfx___futex_wait+0x10/0x10 [ 339.656754][ T7136] ? __pfx_try_to_wake_up+0x10/0x10 [ 339.656800][ T7136] ? futex_hash+0x311/0x400 [ 339.656861][ T7136] ? __pfx_futex_wake_mark+0x10/0x10 [ 339.656912][ T7136] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.656959][ T7136] ? find_held_lock+0x2b/0x80 [ 339.657017][ T7136] ? futex_wake+0x4ea/0x5e0 [ 339.657061][ T7136] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.657110][ T7136] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.657164][ T7136] futex_wait+0xe6/0x370 [ 339.657209][ T7136] ? __pfx_futex_wait+0x10/0x10 [ 339.657263][ T7136] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.657309][ T7136] ? rcu_read_lock_any_held+0x6a/0x90 [ 339.657371][ T7136] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.657417][ T7136] ? find_held_lock+0x2b/0x80 [ 339.657474][ T7136] ? ksys_write+0x190/0x250 [ 339.657510][ T7136] ? ksys_write+0x190/0x250 [ 339.657557][ T7136] do_futex+0x265/0x440 [ 339.657621][ T7136] ? __pfx_do_futex+0x10/0x10 [ 339.657687][ T7136] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 339.657743][ T7136] __x64_sys_futex+0x34f/0x4d0 [ 339.657781][ T7136] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.657826][ T7136] ? fput+0x7c/0x100 [ 339.657872][ T7136] ? __pfx___x64_sys_futex+0x10/0x10 [ 339.657932][ T7136] ? ksys_write+0x1ac/0x250 [ 339.657970][ T7136] ? __pfx_ksys_write+0x10/0x10 [ 339.658011][ T7136] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.658065][ T7136] do_syscall_64+0x123/0x790 [ 339.658113][ T7136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.658152][ T7136] RIP: 0033:0x7eff8459f559 [ 339.658181][ T7136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.658219][ T7136] RSP: 002b:00007eff855360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 339.658255][ T7136] RAX: ffffffffffffffda RBX: 00007eff84825fa8 RCX: 00007eff8459f559 [ 339.658280][ T7136] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007eff84825fa8 [ 339.658305][ T7136] RBP: 00007eff84825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 339.658334][ T7136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.658358][ T7136] R13: 00007eff84826038 R14: 00007ffc0fc09d70 R15: 00007ffc0fc09e58 [ 339.658410][ T7136] [ 339.661168][ T7136] loop1: detected capacity change from 0 to 16 [ 339.681729][ T7136] erofs (device loop1): mounted with root inode @ nid 36. [ 340.518024][ T7144] loop5: detected capacity change from 0 to 128 [ 340.529054][ T7144] vfat: Unknown parameter 'd' [ 340.590109][ T5645] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 340.681430][ T7146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.202'. [ 340.771508][ T5289] 8021q: adding VLAN 0 to HW filter on device eth13 [ 340.772194][ T6924] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.772311][ T6924] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.772471][ T6924] bridge_slave_0: entered allmulticast mode [ 340.803661][ T6924] bridge_slave_0: entered promiscuous mode [ 340.901726][ T5773] logitech-hidpp-device 0003:046D:C082.0004: hidraw0: USB HID v0.04 Device [syz0] on syz0 [ 340.990046][ T6924] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.990228][ T6924] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.990389][ T6924] bridge_slave_1: entered allmulticast mode [ 341.000920][ T6924] bridge_slave_1: entered promiscuous mode [ 341.114767][ T7149] fido_id[7149]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 343.088451][ T5645] Bluetooth: hci1: command 0x0406 tx timeout [ 343.191227][ T6924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.220260][ T6924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.224857][ T6924] team0: Port device team_slave_0 added [ 346.381901][ T6935] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.382024][ T6935] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.382209][ T6935] bridge_slave_0: entered allmulticast mode [ 346.401731][ T6935] bridge_slave_0: entered promiscuous mode [ 346.419358][ T6935] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.424247][ T6935] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.426082][ T6935] bridge_slave_1: entered allmulticast mode [ 346.438175][ T6935] bridge_slave_1: entered promiscuous mode [ 346.463182][ T6924] team0: Port device team_slave_1 added [ 346.897356][ T6935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.093951][ T6935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.165862][ T6924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.165890][ T6924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.165954][ T6924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.345564][ T6924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.345591][ T6924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.345638][ T6924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.416699][ T6007] bridge_slave_1: left allmulticast mode [ 347.418127][ T6007] bridge_slave_1: left promiscuous mode [ 347.418372][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.445940][ T6007] bridge_slave_0: left allmulticast mode [ 347.445971][ T6007] bridge_slave_0: left promiscuous mode [ 347.450329][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.694350][ T6007] bridge_slave_1: left allmulticast mode [ 348.694389][ T6007] bridge_slave_1: left promiscuous mode [ 348.694624][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.709870][ T6007] bridge_slave_0: left allmulticast mode [ 348.709905][ T6007] bridge_slave_0: left promiscuous mode [ 348.710122][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.185666][ T6007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.223639][ T6007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.230614][ T6007] bond0 (unregistering): Released all slaves [ 349.522794][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 351.393189][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 351.394328][ T24] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 351.422039][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 351.422109][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.458878][ T6007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.459383][ T24] usb 2-1: config 0 descriptor?? [ 351.500728][ T6007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.521213][ T6007] bond0 (unregistering): Released all slaves [ 351.556658][ T6935] team0: Port device team_slave_0 added [ 351.622499][ T6935] team0: Port device team_slave_1 added [ 351.759309][ T24] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 351.917215][ T6935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.917241][ T6935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.917288][ T6935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.008917][ T6924] hsr_slave_0: entered promiscuous mode [ 352.028076][ T6924] hsr_slave_1: entered promiscuous mode [ 352.047218][ T6924] debugfs: 'hsr0' already exists in 'hsr' [ 352.047246][ T6924] Cannot create hsr debugfs directory [ 352.065041][ T6935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.065063][ T6935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.065109][ T6935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.125871][ T5289] 8021q: adding VLAN 0 to HW filter on device eth15 [ 352.183606][ T24] usb 2-1: USB disconnect, device number 4 [ 352.520686][ T6935] hsr_slave_0: entered promiscuous mode [ 352.521973][ T6935] hsr_slave_1: entered promiscuous mode [ 352.543625][ T6935] debugfs: 'hsr0' already exists in 'hsr' [ 352.543656][ T6935] Cannot create hsr debugfs directory [ 356.181871][ T6007] hsr_slave_0: left promiscuous mode [ 356.190897][ T6007] hsr_slave_1: left promiscuous mode [ 356.191934][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.197931][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.240172][ T6007] hsr_slave_0: left promiscuous mode [ 356.243434][ T6007] hsr_slave_1: left promiscuous mode [ 356.244505][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.280916][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.238867][ T7244] loop3: detected capacity change from 0 to 64 [ 359.567577][ T6007] team0 (unregistering): Port device team_slave_1 removed [ 359.610293][ T6007] team0 (unregistering): Port device team_slave_0 removed [ 359.752299][ T7250] netlink: 24 bytes leftover after parsing attributes in process `syz.1.212'. [ 360.285677][ T6007] team0 (unregistering): Port device team_slave_1 removed [ 360.322529][ T6007] team0 (unregistering): Port device team_slave_0 removed [ 360.415949][ T7253] __vm_enough_memory: pid: 7253, comm: syz.5.215, bytes: 21199908921344 not enough memory for the allocation [ 360.878897][ T5616] logitech-hidpp-device 0003:046D:C082.0005: hidraw0: USB HID v0.04 Device [syz0] on syz0 [ 361.115917][ T7255] fido_id[7255]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 363.322295][ T5289] 8021q: adding VLAN 0 to HW filter on device eth16 [ 363.861864][ T6918] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 363.918183][ T6918] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 363.926693][ T6918] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 365.147097][ T6918] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 365.311661][ T6918] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 365.348215][ T6918] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 365.358599][ T6918] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 365.388522][ T6918] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 366.796745][ T6918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.046122][ T7300] device-mapper: ioctl: Invalid data size in the ioctl structure: 4294966917 [ 367.840176][ T6918] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.872015][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.872151][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.889603][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.889711][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.556279][ T6935] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 368.619160][ T6935] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 368.631615][ T6935] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 368.694014][ T6935] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 368.714211][ T6935] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 368.841784][ T7309] loop1: detected capacity change from 0 to 64 [ 368.855584][ T6935] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 368.856413][ T6935] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 368.922525][ T6935] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 369.341828][ T5653] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 369.355867][ T5653] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 369.357137][ T5653] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 369.358174][ T5653] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 369.358838][ T5653] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 370.948712][ T5616] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 371.284009][ T5616] usb 6-1: Using ep0 maxpacket: 16 [ 371.286219][ T5616] usb 6-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00 [ 371.300964][ T5616] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.301015][ T5616] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.301054][ T5616] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 371.301102][ T5616] usb 6-1: config 0 interface 0 has no altsetting 0 [ 371.301150][ T5616] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.322034][ T5616] usb 6-1: config 0 descriptor?? [ 371.453025][ T5653] Bluetooth: hci3: command tx timeout [ 372.266202][ T5638] usb 6-1: USB disconnect, device number 4 [ 372.655077][ T5645] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 372.676534][ T5645] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 372.682898][ T5645] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 372.691217][ T5645] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 372.692044][ T5645] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 374.015465][ T5645] Bluetooth: hci3: command tx timeout [ 374.209981][ T7348] __vm_enough_memory: pid: 7348, comm: syz.1.228, bytes: 21200312291328 not enough memory for the allocation [ 374.571597][ T5653] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 374.591426][ T5653] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 374.606974][ T5653] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 374.614938][ T5653] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 374.629121][ T5653] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 374.733198][ T5645] Bluetooth: hci4: command tx timeout [ 375.927530][ T6007] bridge_slave_1: left allmulticast mode [ 375.927568][ T6007] bridge_slave_1: left promiscuous mode [ 375.927823][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.969480][ T6007] bridge_slave_0: left allmulticast mode [ 375.969517][ T6007] bridge_slave_0: left promiscuous mode [ 375.984515][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.022842][ T28] rcu_tasks_wait_gp: rcu_tasks grace period number 17 (since boot) is 1043 jiffies old. [ 376.093475][ T5645] Bluetooth: hci3: command tx timeout [ 376.734672][ T5645] Bluetooth: hci5: command tx timeout [ 376.814269][ T5645] Bluetooth: hci4: command tx timeout [ 376.899251][ T6007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.932381][ T6007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.948130][ T6007] bond0 (unregistering): Released all slaves [ 377.154076][ T7343] rxe_eth0 speed is unknown, defaulting to 1000 [ 378.073803][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.073913][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.541623][ T5645] Bluetooth: hci3: command tx timeout [ 378.814300][ T5645] Bluetooth: hci5: command tx timeout [ 378.893065][ T5645] Bluetooth: hci4: command tx timeout [ 378.908364][ T5616] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 379.074963][ T5616] usb 4-1: Using ep0 maxpacket: 8 [ 379.077193][ T5616] usb 4-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 379.094557][ T5616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 379.094627][ T5616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.148766][ T5616] usb 4-1: config 0 descriptor?? [ 379.389860][ T7411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.230'. [ 379.415821][ T5616] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 379.417708][ T7324] rxe_eth0 speed is unknown, defaulting to 1000 [ 379.652713][ T5862] logitech-hidpp-device 0003:046D:C082.0007: hidraw0: USB HID v0.04 Device [syz0] on syz0 [ 379.906784][ T5616] usb 4-1: USB disconnect, device number 2 [ 380.004453][ T7413] fido_id[7413]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 380.982777][ T5645] Bluetooth: hci5: command tx timeout [ 380.982833][ T5645] Bluetooth: hci4: command tx timeout [ 381.489714][ T7424] loop1: detected capacity change from 0 to 1024 [ 381.529985][ T7429] loop5: detected capacity change from 0 to 64 [ 381.699811][ T6007] hsr_slave_0: left promiscuous mode [ 381.718869][ T6007] hsr_slave_1: left promiscuous mode [ 381.720717][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.736784][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.019600][ T12] IPVS: starting estimator thread 0... [ 383.052702][ T5653] Bluetooth: hci5: command tx timeout [ 383.196470][ T7440] IPVS: using max 22 ests per chain, 52800 per kthread [ 384.625490][ T7444] __vm_enough_memory: pid: 7444, comm: syz.5.239, bytes: 21199908921344 not enough memory for the allocation [ 384.893664][ T7450] 9p: Bad value for 'wfdno' [ 385.235141][ T6007] team0 (unregistering): Port device team_slave_1 removed [ 385.270868][ T6007] team0 (unregistering): Port device team_slave_0 removed [ 385.675645][ T7354] rxe_eth0 speed is unknown, defaulting to 1000 [ 386.120779][ T7465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.245'. [ 386.938172][ T5861] logitech-hidpp-device 0003:046D:C082.0008: hidraw0: USB HID v0.04 Device [syz0] on syz0 [ 387.018730][ T7470] fido_id[7470]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 387.351788][ T7478] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 387.465543][ T5913] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 387.679245][ T7478] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 389.252197][ T7343] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.252316][ T7343] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.252474][ T7343] bridge_slave_0: entered allmulticast mode [ 390.226942][ T7343] bridge_slave_0: entered promiscuous mode [ 390.227388][ T5774] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 390.301014][ T7343] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.301147][ T7343] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.301300][ T7343] bridge_slave_1: entered allmulticast mode [ 390.311153][ T7343] bridge_slave_1: entered promiscuous mode [ 390.384560][ T5774] usb 2-1: Using ep0 maxpacket: 8 [ 390.385320][ T5774] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 390.386690][ T5774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 390.386757][ T5774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.402511][ T5774] usb 2-1: config 0 descriptor?? [ 390.652504][ T5774] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 390.831672][ T7343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.007202][ T7343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.074192][ T5861] usb 2-1: USB disconnect, device number 5 [ 391.358194][ T7343] team0: Port device team_slave_0 added [ 391.378608][ T7324] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.378737][ T7324] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.378894][ T7324] bridge_slave_0: entered allmulticast mode [ 391.409174][ T7324] bridge_slave_0: entered promiscuous mode [ 391.436159][ T7343] team0: Port device team_slave_1 added [ 391.553555][ T7324] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.553681][ T7324] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.553831][ T7324] bridge_slave_1: entered allmulticast mode [ 391.563665][ T7324] bridge_slave_1: entered promiscuous mode [ 391.910255][ T7343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.910300][ T7343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.910348][ T7343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.974396][ T7516] loop3: detected capacity change from 0 to 1024 [ 391.988211][ T7324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.031219][ T7343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.031246][ T7343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.031312][ T7343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.317726][ T7324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.603724][ T7521] __vm_enough_memory: pid: 7521, comm: syz.1.252, bytes: 21200312291328 not enough memory for the allocation [ 393.418005][ T7343] hsr_slave_0: entered promiscuous mode [ 393.426928][ T7343] hsr_slave_1: entered promiscuous mode [ 393.439278][ T7324] team0: Port device team_slave_0 added [ 393.510385][ T7533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.255'. [ 393.638104][ T7324] team0: Port device team_slave_1 added [ 393.693662][ T5774] logitech-hidpp-device 0003:046D:C082.0009: hidraw0: USB HID v0.04 Device [syz0] on syz0 [ 393.992096][ T7537] fido_id[7537]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 394.139151][ T7541] null_blk: nullb1: using native zone append [ 394.587853][ T7541] null_blk: disk nullb1 created [ 395.015957][ T7324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.015982][ T7324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.016025][ T7324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.104207][ T7324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.104235][ T7324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.104283][ T7324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.325977][ T7324] hsr_slave_0: entered promiscuous mode [ 398.344844][ T7324] hsr_slave_1: entered promiscuous mode [ 398.359060][ T7324] debugfs: 'hsr0' already exists in 'hsr' [ 398.359097][ T7324] Cannot create hsr debugfs directory [ 398.375311][ T7354] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.375433][ T7354] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.375625][ T7354] bridge_slave_0: entered allmulticast mode [ 398.396215][ T7354] bridge_slave_0: entered promiscuous mode [ 398.509681][ T7354] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.509805][ T7354] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.509981][ T7354] bridge_slave_1: entered allmulticast mode [ 398.517405][ T7354] bridge_slave_1: entered promiscuous mode [ 400.414428][ T7354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.445119][ T7354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.846650][ T7354] team0: Port device team_slave_0 added [ 401.013841][ T7354] team0: Port device team_slave_1 added [ 401.327568][ T7354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.327596][ T7354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.327637][ T7354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.394631][ T6007] bridge_slave_1: left allmulticast mode [ 401.394660][ T6007] bridge_slave_1: left promiscuous mode [ 401.394847][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.424713][ T6007] bridge_slave_0: left allmulticast mode [ 401.424744][ T6007] bridge_slave_0: left promiscuous mode [ 401.425918][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.360514][ T6007] bridge_slave_1: left allmulticast mode [ 402.360552][ T6007] bridge_slave_1: left promiscuous mode [ 402.360786][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.390221][ T6007] bridge_slave_0: left allmulticast mode [ 402.390257][ T6007] bridge_slave_0: left promiscuous mode [ 402.390497][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.686504][ T6007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.722368][ T6007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.744044][ T6007] bond0 (unregistering): Released all slaves [ 403.258643][ T6007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.320996][ T6007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.346732][ T6007] bond0 (unregistering): Released all slaves [ 403.609965][ T7354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.609987][ T7354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.610022][ T7354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.750446][ T7354] hsr_slave_0: entered promiscuous mode [ 403.751679][ T7354] hsr_slave_1: entered promiscuous mode [ 403.752470][ T7354] debugfs: 'hsr0' already exists in 'hsr' [ 403.752498][ T7354] Cannot create hsr debugfs directory [ 404.128729][ T7589] loop3: detected capacity change from 0 to 1024 [ 406.137546][ T7598] __vm_enough_memory: pid: 7598, comm: syz.1.262, bytes: 21200312291328 not enough memory for the allocation [ 406.607769][ T7603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.265'. [ 406.814688][ T5862] logitech-hidpp-device 0003:046D:C082.000A: hidraw0: USB HID v0.04 Device [syz0] on syz0 [ 407.340726][ T7607] fido_id[7607]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 407.780848][ T7343] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 407.888486][ T7343] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 407.905610][ T7343] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 407.959626][ T7343] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 407.981338][ T7343] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 408.032194][ T7343] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 408.045806][ T7343] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 408.116802][ T7343] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 408.533903][ T6007] hsr_slave_0: left promiscuous mode [ 408.549201][ T6007] hsr_slave_1: left promiscuous mode [ 408.549986][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.578356][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.668506][ T6007] hsr_slave_0: left promiscuous mode [ 408.684499][ T6007] hsr_slave_1: left promiscuous mode [ 408.685463][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.708067][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.310912][ T6007] team0 (unregistering): Port device team_slave_1 removed [ 411.391919][ T6007] team0 (unregistering): Port device team_slave_0 removed [ 414.165286][ T7638] netlink: 20 bytes leftover after parsing attributes in process `syz.1.266'. [ 414.209959][ T6007] team0 (unregistering): Port device team_slave_1 removed [ 414.238052][ T6007] team0 (unregistering): Port device team_slave_0 removed [ 414.238887][ T7639] loop1: detected capacity change from 0 to 512 [ 414.246886][ T7639] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 414.246913][ T7639] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 414.247173][ T7639] EXT4-fs (loop1): orphan cleanup on readonly fs [ 414.247505][ T7639] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #13: comm syz.1.266: iget: bad i_size value: 12154761577498 [ 414.247720][ T7639] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 414.249157][ T7639] EXT4-fs error (device loop1): ext4_orphan_get:1407: comm syz.1.266: couldn't read orphan inode 13 (err -117) [ 414.249333][ T7639] loop1: lost filesystem error report for type 5 error -117 [ 414.275004][ T7639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 414.358932][ T7639] EXT4-fs warning (device loop1): dx_probe:859: inode #2: comm syz.1.266: dx entry: limit 65535 != root limit 120 [ 414.358987][ T7639] EXT4-fs warning (device loop1): dx_probe:933: inode #2: comm syz.1.266: Corrupt directory, running e2fsck is recommended [ 414.359382][ T7639] EXT4-fs error (device loop1): ext4_readdir:278: inode #2: block 3: comm syz.1.266: path /73/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 414.768802][ T5634] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.177466][ T7651] loop3: detected capacity change from 0 to 1024 [ 415.457748][ T7343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.661052][ T7343] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.736623][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.736758][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.827191][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.827318][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.967288][ T7324] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 415.998860][ T7324] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 416.001887][ T7324] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 416.031558][ T7324] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 416.170077][ T7324] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 416.213394][ T7324] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 416.245053][ T7324] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 416.264409][ T7324] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 417.733535][ T7663] __vm_enough_memory: pid: 7663, comm: syz.3.275, bytes: 21200032137216 not enough memory for the allocation [ 420.832329][ T7324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.868905][ T7354] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 421.221748][ T7354] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.223727][ T7354] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 421.237461][ T7354] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.251993][ T7354] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 421.261705][ T7354] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.267018][ T7354] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 421.282487][ T7354] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.445399][ T7324] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.552640][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.552759][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.677308][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.677404][ T6007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.147863][ T7354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.947850][ T7343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.998529][ T7354] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.047107][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.047240][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.119473][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.119568][ T6145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.475059][ T7743] netlink: 24 bytes leftover after parsing attributes in process `syz.3.276'. [ 425.599817][ T5862] logitech-hidpp-device 0003:046D:C082.000B: hidraw0: USB HID v0.04 Device [syz0] on syz0 [ 425.675998][ T7343] veth0_vlan: entered promiscuous mode [ 425.742386][ T7343] veth1_vlan: entered promiscuous mode [ 425.844593][ T7324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.057951][ T7343] veth0_macvtap: entered promiscuous mode [ 426.101532][ T7343] veth1_macvtap: entered promiscuous mode [ 426.178615][ T7751] fido_id[7751]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 428.115279][ T7343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.215311][ T7343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.304899][ T5877] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.306494][ T150] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.307255][ T150] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.354533][ T150] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.817590][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.817632][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.897516][ T7354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.057784][ T6000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.057817][ T6000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.848741][ T7794] loop5: detected capacity change from 0 to 1024 [ 432.543094][ T7803] __vm_enough_memory: pid: 7803, comm: syz.1.285, bytes: 21200312291328 not enough memory for the allocation [ 432.625296][ T7354] veth0_vlan: entered promiscuous mode [ 432.641765][ T7354] veth1_vlan: entered promiscuous mode [ 433.644378][ T5645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 433.647604][ T5645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 433.658578][ T5645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 433.675126][ T5645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 433.675833][ T5645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 434.657013][ T5645] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 434.659975][ T5645] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 434.660695][ T5645] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 434.662204][ T5645] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 434.663455][ T5645] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 435.773398][ T5653] Bluetooth: hci3: command tx timeout [ 437.881536][ T5653] Bluetooth: hci6: command tx timeout [ 437.882271][ T5645] Bluetooth: hci3: command tx timeout [ 437.988519][ T30] bridge_slave_1: left allmulticast mode [ 437.988560][ T30] bridge_slave_1: left promiscuous mode [ 437.988821][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.041125][ T30] bridge_slave_0: left allmulticast mode [ 438.041162][ T30] bridge_slave_0: left promiscuous mode [ 438.051407][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.465715][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.465795][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.700348][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.734847][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.758574][ T30] bond0 (unregistering): Released all slaves [ 439.934171][ T5645] Bluetooth: hci6: command tx timeout [ 439.934189][ T5653] Bluetooth: hci3: command tx timeout [ 441.461505][ T7810] rxe_eth0 speed is unknown, defaulting to 1000 [ 441.682570][ T30] hsr_slave_0: left promiscuous mode [ 441.699842][ T30] hsr_slave_1: left promiscuous mode [ 441.709004][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.721570][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.052414][ T5645] Bluetooth: hci3: command tx timeout [ 443.052481][ T5653] Bluetooth: hci6: command tx timeout [ 445.139148][ T5653] Bluetooth: hci6: command tx timeout [ 445.662389][ T7889] netlink: 24 bytes leftover after parsing attributes in process `syz.3.291'. [ 445.680530][ T30] team0 (unregistering): Port device team_slave_1 removed [ 445.720324][ T30] team0 (unregistering): Port device team_slave_0 removed [ 447.332863][ T7892] __vm_enough_memory: pid: 7892, comm: syz.1.298, bytes: 21200312291328 not enough memory for the allocation [ 447.775007][ T5766] logitech-hidpp-device 0003:046D:C082.000C: hidraw0: USB HID v0.04 Device [syz0] on syz0 [ 448.090474][ T7825] rxe_eth0 speed is unknown, defaulting to 1000 [ 448.244953][ T7895] fido_id[7895]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 449.895014][ T5773] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 450.044086][ T5773] usb 6-1: Using ep0 maxpacket: 8 [ 450.045259][ T5773] usb 6-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 450.046589][ T5773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 450.046646][ T5773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.130202][ T5773] usb 6-1: config 0 descriptor?? [ 450.390203][ T5773] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 450.833853][ T5861] usb 6-1: USB disconnect, device number 5 [ 451.305089][ T7908] loop7: detected capacity change from 0 to 1024 [ 453.668659][ T7810] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.668791][ T7810] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.668977][ T7810] bridge_slave_0: entered allmulticast mode [ 453.699416][ T7810] bridge_slave_0: entered promiscuous mode [ 453.791065][ T7810] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.791186][ T7810] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.791345][ T7810] bridge_slave_1: entered allmulticast mode [ 453.801270][ T7810] bridge_slave_1: entered promiscuous mode [ 453.996302][ T7810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.017373][ T7810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.457326][ T7810] team0: Port device team_slave_0 added [ 455.461497][ T177] IPVS: starting estimator thread 0... [ 455.497794][ T7810] team0: Port device team_slave_1 added [ 455.633017][ T7933] IPVS: using max 24 ests per chain, 57600 per kthread [ 458.392510][ T7810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.392536][ T7810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.398872][ T7810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.457547][ T7810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.457571][ T7810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.457618][ T7810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.661876][ T30] bridge_slave_1: left allmulticast mode [ 458.661915][ T30] bridge_slave_1: left promiscuous mode [ 458.662163][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.707888][ T30] bridge_slave_0: left allmulticast mode [ 458.707928][ T30] bridge_slave_0: left promiscuous mode [ 458.709850][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.649178][ T5616] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 464.649753][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.708431][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.735226][ T30] bond0 (unregistering): Released all slaves [ 464.793542][ T5616] usb 6-1: Using ep0 maxpacket: 8 [ 464.795327][ T5616] usb 6-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 464.800093][ T5616] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 464.800167][ T5616] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.821549][ T5616] usb 6-1: config 0 descriptor?? [ 465.119330][ T5616] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 465.526772][ T5861] usb 6-1: USB disconnect, device number 6 [ 465.746136][ T7810] hsr_slave_0: entered promiscuous mode [ 465.756822][ T7810] hsr_slave_1: entered promiscuous mode [ 465.764073][ T7810] debugfs: 'hsr0' already exists in 'hsr' [ 465.764103][ T7810] Cannot create hsr debugfs directory [ 466.204475][ T7825] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.204568][ T7825] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.204690][ T7825] bridge_slave_0: entered allmulticast mode [ 466.216247][ T7825] bridge_slave_0: entered promiscuous mode [ 466.227434][ T7825] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.227558][ T7825] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.227728][ T7825] bridge_slave_1: entered allmulticast mode [ 466.242322][ T7825] bridge_slave_1: entered promiscuous mode [ 466.343570][ T30] hsr_slave_0: left promiscuous mode [ 466.349660][ T30] hsr_slave_1: left promiscuous mode [ 466.365951][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.391253][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.454179][ T30] veth1_vlan: left promiscuous mode [ 466.454260][ T30] veth0_vlan: left promiscuous mode [ 466.655233][ T7969] loop7: detected capacity change from 0 to 1024 [ 467.072339][ T7974] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 467.163236][ T51] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 467.206988][ T7974] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 467.407337][ T30] team0 (unregistering): Port device team_slave_1 removed [ 467.473832][ T30] team0 (unregistering): Port device team_slave_0 removed [ 468.715593][ T12] IPVS: starting estimator thread 0... [ 469.843328][ T7979] IPVS: using max 24 ests per chain, 57600 per kthread [ 472.991609][ T7825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.091760][ T7825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.231991][ T7825] team0: Port device team_slave_0 added [ 475.280401][ T7825] team0: Port device team_slave_1 added [ 475.525400][ T8012] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 475.584537][ T7825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.584564][ T7825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.584600][ T7825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.610380][ T7825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.610404][ T7825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.610451][ T7825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.625992][ T5773] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 477.192897][ T141] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 477.520520][ T8012] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 477.571235][ T5773] usb 2-1: Using ep0 maxpacket: 8 [ 477.579127][ T5773] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 477.591196][ T5773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 477.591262][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.617881][ T5773] usb 2-1: config 0 descriptor?? [ 477.862504][ T5773] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 477.924943][ T7825] hsr_slave_0: entered promiscuous mode [ 477.941387][ T7825] hsr_slave_1: entered promiscuous mode [ 477.945242][ T7825] debugfs: 'hsr0' already exists in 'hsr' [ 477.945271][ T7825] Cannot create hsr debugfs directory [ 479.536692][ T5861] usb 2-1: USB disconnect, device number 6 [ 485.356616][ T7810] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 485.387958][ T7810] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 485.398122][ T7810] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 485.417736][ T7810] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 485.426745][ T7810] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 485.445476][ T7810] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 485.448511][ T7810] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 485.474807][ T7810] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 486.037299][ T7810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.140080][ T7810] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.187875][ T6001] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.188003][ T6001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.253489][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.253614][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.666620][ T7825] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 486.689501][ T7825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 486.714091][ T7825] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 486.731805][ T8058] loop1: detected capacity change from 0 to 32768 [ 486.734745][ T7825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 486.738742][ T7825] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 486.751205][ T8077] loop5: detected capacity change from 0 to 128 [ 486.772198][ T8077] vfat: Unknown parameter 'd' [ 486.775995][ T7825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 486.798063][ T7825] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 486.828713][ T7825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 486.862056][ T5653] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 488.728995][ T8058] read_mapping_page failed! [ 488.729483][ T8058] jfs_mount: Failed to read AGGREGATE_I [ 488.729842][ T8058] Mount JFS Failure: -5 [ 488.729859][ T8058] jfs_mount failed w/return code = -5 [ 488.894873][ T5653] Bluetooth: hci1: command 0x0406 tx timeout [ 489.215208][ T7825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.345456][ T7825] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.393767][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.393867][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.458227][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.458321][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.028607][ T5645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 493.037248][ T5645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 493.040005][ T5645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 493.052713][ T5645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 493.055077][ T5645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 493.091491][ T5648] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 495.694065][ T5653] Bluetooth: hci5: command tx timeout [ 498.585592][ T5648] Bluetooth: hci4: command 0x0406 tx timeout [ 498.585682][ T5645] Bluetooth: hci5: command tx timeout [ 498.806559][ T5645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 498.821834][ T5645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 498.831539][ T5645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 498.842887][ T5645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 498.843660][ T5645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 499.056423][ T8119] rxe_eth0 speed is unknown, defaulting to 1000 [ 500.725052][ T5653] Bluetooth: hci5: command tx timeout [ 500.895477][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.895555][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.896690][ T5653] Bluetooth: hci3: command tx timeout [ 501.226157][ T8176] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 501.376013][ T12] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 501.418960][ T8176] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 501.625369][ T5877] bridge_slave_1: left allmulticast mode [ 501.625410][ T5877] bridge_slave_1: left promiscuous mode [ 501.625675][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.660021][ T5877] bridge_slave_0: left allmulticast mode [ 501.660055][ T5877] bridge_slave_0: left promiscuous mode [ 501.661973][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.685182][ T5645] Bluetooth: hci5: command tx timeout [ 503.685220][ T5645] Bluetooth: hci3: command tx timeout [ 504.334923][ T5877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.364971][ T5877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.390353][ T5877] bond0 (unregistering): Released all slaves [ 504.420625][ T5289] 8021q: adding VLAN 0 to HW filter on device eth15 [ 505.761915][ T5653] Bluetooth: hci3: command tx timeout [ 506.646593][ T5877] hsr_slave_0: left promiscuous mode [ 506.650131][ T5877] hsr_slave_1: left promiscuous mode [ 506.651095][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.674807][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.780857][ T8209] loop5: detected capacity change from 0 to 128 [ 506.782192][ T8209] vfat: Unknown parameter 'd' [ 506.833122][ T5653] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 507.575027][ T5877] team0 (unregistering): Port device team_slave_1 removed [ 507.623348][ T5877] team0 (unregistering): Port device team_slave_0 removed [ 507.923666][ T8221] __vm_enough_memory: pid: 8221, comm: syz.5.360, bytes: 21199908921344 not enough memory for the allocation [ 509.034742][ T5653] Bluetooth: hci3: command tx timeout [ 509.034790][ T5645] Bluetooth: hci1: command 0x0406 tx timeout [ 512.335129][ T5289] 8021q: adding VLAN 0 to HW filter on device eth16 [ 512.559619][ T8119] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.559814][ T8119] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.559974][ T8119] bridge_slave_0: entered allmulticast mode [ 512.561895][ T8119] bridge_slave_0: entered promiscuous mode [ 512.598738][ T8161] rxe_eth0 speed is unknown, defaulting to 1000 [ 512.599304][ T8119] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.599428][ T8119] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.599585][ T8119] bridge_slave_1: entered allmulticast mode [ 512.637676][ T8119] bridge_slave_1: entered promiscuous mode [ 512.784617][ T8119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.827237][ T8119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.950146][ T8119] team0: Port device team_slave_0 added [ 514.979215][ T8119] team0: Port device team_slave_1 added [ 515.223542][ T8119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.223570][ T8119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.223617][ T8119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.257535][ T8119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.257562][ T8119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.257609][ T8119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.631356][ T5648] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 515.636285][ T5648] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 515.647902][ T5648] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 515.650110][ T5648] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 515.651349][ T5648] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 515.736758][ T8119] hsr_slave_0: entered promiscuous mode [ 515.767098][ T8119] hsr_slave_1: entered promiscuous mode [ 515.780927][ T8119] debugfs: 'hsr0' already exists in 'hsr' [ 515.780957][ T8119] Cannot create hsr debugfs directory [ 517.614640][ T8273] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 517.694241][ T5653] Bluetooth: hci0: command tx timeout [ 517.748008][ T5877] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 517.779754][ T8273] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 519.772687][ T5653] Bluetooth: hci0: command tx timeout [ 520.071955][ T8286] loop7: detected capacity change from 0 to 128 [ 520.076694][ T8286] vfat: Unknown parameter 'd' [ 520.098509][ T5653] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 522.085093][ T5653] Bluetooth: hci0: command tx timeout [ 522.615014][ T5653] Bluetooth: hci4: command 0x0406 tx timeout [ 524.792302][ T5653] Bluetooth: hci0: command tx timeout [ 529.471792][ T8260] rxe_eth0 speed is unknown, defaulting to 1000 [ 529.768515][ T13] bridge_slave_1: left allmulticast mode [ 529.768554][ T13] bridge_slave_1: left promiscuous mode [ 529.768804][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.815712][ T13] bridge_slave_0: left allmulticast mode [ 529.815742][ T13] bridge_slave_0: left promiscuous mode [ 529.815924][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.766995][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.791742][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.806781][ T13] bond0 (unregistering): Released all slaves [ 532.594414][ T8337] __vm_enough_memory: pid: 8337, comm: syz.1.372, bytes: 21200312291328 not enough memory for the allocation [ 534.620417][ T8346] comedi comedi1: Minor 4 specified more than once! [ 536.830221][ T13] hsr_slave_0: left promiscuous mode [ 536.831139][ T13] hsr_slave_1: left promiscuous mode [ 536.834159][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.853843][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.160258][ T13] team0 (unregistering): Port device team_slave_1 removed [ 539.189731][ T13] team0 (unregistering): Port device team_slave_0 removed [ 539.649133][ T8161] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.649309][ T8161] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.649465][ T8161] bridge_slave_0: entered allmulticast mode [ 539.686185][ T8161] bridge_slave_0: entered promiscuous mode [ 539.739131][ T8161] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.739304][ T8161] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.739458][ T8161] bridge_slave_1: entered allmulticast mode [ 539.754458][ T8161] bridge_slave_1: entered promiscuous mode [ 539.932406][ T8161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.964377][ T8161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.174859][ T8161] team0: Port device team_slave_0 added [ 540.192315][ T8161] team0: Port device team_slave_1 added [ 541.312349][ T5289] 8021q: adding VLAN 0 to HW filter on device eth15 [ 543.316347][ T8161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.316374][ T8161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.316422][ T8161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.636424][ T8161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.636444][ T8161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.636480][ T8161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.744988][ T5289] 8021q: adding VLAN 0 to HW filter on device eth16 [ 544.316298][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.688173][ T8161] hsr_slave_0: entered promiscuous mode [ 545.847201][ T8161] hsr_slave_1: entered promiscuous mode [ 545.857095][ T8161] debugfs: 'hsr0' already exists in 'hsr' [ 545.857124][ T8161] Cannot create hsr debugfs directory [ 545.857373][ T8119] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 545.904865][ T8119] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 545.905825][ T8119] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 545.942155][ T8119] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 546.050147][ T8119] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 546.078870][ T8119] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 546.087466][ T8119] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 546.124485][ T8119] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 546.188714][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.570647][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.040722][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.097943][ T8260] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.107425][ T8260] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.107621][ T8260] bridge_slave_0: entered allmulticast mode [ 547.124699][ T8260] bridge_slave_0: entered promiscuous mode [ 547.215632][ T8260] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.215776][ T8260] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.215949][ T8260] bridge_slave_1: entered allmulticast mode [ 547.224538][ T8260] bridge_slave_1: entered promiscuous mode [ 549.239878][ T8260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.331492][ T8260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.516625][ T8260] team0: Port device team_slave_0 added [ 549.736246][ T8260] team0: Port device team_slave_1 added [ 549.891371][ T8409] loop5: detected capacity change from 0 to 128 [ 549.910142][ T8409] vfat: Unknown parameter 'd' [ 549.971905][ T8260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.971932][ T8260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.971980][ T8260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.994802][ T8260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.994824][ T8260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.994871][ T8260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.006747][ T5653] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 550.456260][ T13] bridge_slave_1: left allmulticast mode [ 550.456299][ T13] bridge_slave_1: left promiscuous mode [ 550.456564][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.487807][ T13] bridge_slave_0: left allmulticast mode [ 550.487840][ T13] bridge_slave_0: left promiscuous mode [ 550.491323][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.180126][ T5653] Bluetooth: hci1: command 0x0406 tx timeout [ 552.786287][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.817972][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.825885][ T13] bond0 (unregistering): Released all slaves [ 552.925694][ T8260] hsr_slave_0: entered promiscuous mode [ 552.926904][ T8260] hsr_slave_1: entered promiscuous mode [ 552.927692][ T8260] debugfs: 'hsr0' already exists in 'hsr' [ 552.927720][ T8260] Cannot create hsr debugfs directory [ 554.420623][ T8415] __vm_enough_memory: pid: 8415, comm: syz.5.386, bytes: 21199908921344 not enough memory for the allocation [ 555.405659][ T5648] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 555.429299][ T5648] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 555.431863][ T5648] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 555.451787][ T5648] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 555.463639][ T5648] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 556.928454][ T13] hsr_slave_0: left promiscuous mode [ 556.930124][ T13] hsr_slave_1: left promiscuous mode [ 556.931213][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.931242][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.963121][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.963145][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.075203][ T13] veth1_macvtap: left promiscuous mode [ 557.075267][ T13] veth0_macvtap: left promiscuous mode [ 557.075507][ T13] veth1_vlan: left promiscuous mode [ 557.075597][ T13] veth0_vlan: left promiscuous mode [ 558.398772][ T5653] Bluetooth: hci6: command tx timeout [ 558.912686][ T5788] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 559.064595][ T5788] usb 8-1: Using ep0 maxpacket: 8 [ 559.066751][ T5788] usb 8-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 559.071446][ T5788] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 559.071512][ T5788] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.120638][ T5788] usb 8-1: config 0 descriptor?? [ 559.174130][ T5648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 559.175028][ T5648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 559.175815][ T5648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 559.187008][ T5648] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 559.206413][ T5648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 559.458511][ T5788] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 559.872108][ T5788] usb 8-1: USB disconnect, device number 2 [ 560.175772][ T13] team0 (unregistering): Port device team_slave_1 removed [ 560.261168][ T13] team0 (unregistering): Port device team_slave_0 removed [ 560.412631][ T5648] Bluetooth: hci6: command tx timeout [ 561.194619][ T5289] 8021q: adding VLAN 0 to HW filter on device eth17 [ 561.293057][ T5648] Bluetooth: hci5: command tx timeout [ 562.335101][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.335178][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.493075][ T5648] Bluetooth: hci6: command tx timeout [ 562.544971][ T8260] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 562.607635][ T8260] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 562.624555][ T8260] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 562.680045][ T8260] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 562.694052][ T8260] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 562.708719][ T13] IPVS: stop unused estimator thread 0... [ 562.746525][ T8260] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 562.760603][ T8260] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 562.830829][ T8260] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 563.373906][ T5648] Bluetooth: hci5: command tx timeout [ 564.741848][ T5648] Bluetooth: hci6: command tx timeout [ 565.032450][ T8497] loop1: detected capacity change from 0 to 128 [ 565.043087][ T8497] vfat: Unknown parameter 'd' [ 565.055785][ T5648] Bluetooth: hci2: unexpected event 0x04 length: 11 > 10 [ 565.141245][ T8422] rxe_eth0 speed is unknown, defaulting to 1000 [ 565.452708][ T5648] Bluetooth: hci5: command tx timeout [ 565.751721][ T8260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.091868][ T8260] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.142718][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.142849][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.197103][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.197232][ T5913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.462234][ T5289] 8021q: adding VLAN 0 to HW filter on device eth18 [ 566.708974][ T13] bridge_slave_1: left allmulticast mode [ 566.709013][ T13] bridge_slave_1: left promiscuous mode [ 566.709271][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.759356][ T13] bridge_slave_0: left allmulticast mode [ 566.759384][ T13] bridge_slave_0: left promiscuous mode [ 566.759563][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.134050][ T5648] Bluetooth: hci2: command 0x0406 tx timeout [ 567.244077][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.284026][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.301692][ T13] bond0 (unregistering): Released all slaves [ 567.387684][ T8451] rxe_eth0 speed is unknown, defaulting to 1000 [ 568.272783][ T8505] __vm_enough_memory: pid: 8505, comm: syz.1.397, bytes: 21200312291328 not enough memory for the allocation [ 568.610967][ T5648] Bluetooth: hci5: command tx timeout [ 570.671309][ T8514] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 570.792188][ T177] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 570.834738][ T8514] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 571.594115][ T5773] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 571.743280][ T5773] usb 6-1: Using ep0 maxpacket: 8 [ 571.745144][ T5773] usb 6-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 571.775540][ T5773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 571.775610][ T5773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.838035][ T5773] usb 6-1: config 0 descriptor?? [ 572.150357][ T5773] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 572.590145][ T5773] usb 6-1: USB disconnect, device number 7 [ 573.243800][ T28] rcu_tasks_wait_gp: rcu_tasks grace period number 37 (since boot) is 1005 jiffies old. [ 573.540775][ T13] hsr_slave_0: left promiscuous mode [ 573.561310][ T13] hsr_slave_1: left promiscuous mode [ 573.563267][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.595851][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.425547][ T13] team0 (unregistering): Port device team_slave_1 removed [ 575.491716][ T13] team0 (unregistering): Port device team_slave_0 removed [ 578.664153][ T5648] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 578.666203][ T5648] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 578.667250][ T5648] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 578.669737][ T5648] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 578.670719][ T5648] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 579.073098][ T5289] 8021q: adding VLAN 0 to HW filter on device eth19 [ 579.089606][ T8422] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.089731][ T8422] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.089910][ T8422] bridge_slave_0: entered allmulticast mode [ 579.116086][ T8422] bridge_slave_0: entered promiscuous mode [ 579.130351][ T8422] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.130473][ T8422] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.130627][ T8422] bridge_slave_1: entered allmulticast mode [ 579.159528][ T8422] bridge_slave_1: entered promiscuous mode [ 579.337931][ T8422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.358479][ T8422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.638303][ T8584] loop7: detected capacity change from 0 to 128 [ 579.639775][ T8584] vfat: Unknown parameter 'd' [ 579.655731][ T8422] team0: Port device team_slave_0 added [ 579.680569][ T8422] team0: Port device team_slave_1 added [ 579.733573][ T5653] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 580.147973][ T8422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.148000][ T8422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.148047][ T8422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.361502][ T8422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.361529][ T8422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.361577][ T8422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.733370][ T5653] Bluetooth: hci3: command tx timeout [ 581.139674][ T8422] hsr_slave_0: entered promiscuous mode [ 581.150249][ T8422] hsr_slave_1: entered promiscuous mode [ 581.151038][ T8422] debugfs: 'hsr0' already exists in 'hsr' [ 581.151064][ T8422] Cannot create hsr debugfs directory [ 581.782797][ T5653] Bluetooth: hci4: command 0x0406 tx timeout [ 582.498808][ T8593] loop7: detected capacity change from 0 to 32768 [ 582.586964][ T8593] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.407 (8593) [ 582.700511][ T8567] rxe_eth0 speed is unknown, defaulting to 1000 [ 582.825187][ T5653] Bluetooth: hci3: command tx timeout [ 582.888314][ T8593] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 582.888356][ T8593] BTRFS info (device loop7): using sha256 checksum algorithm [ 583.185914][ T8593] BTRFS info (device loop7): enabling ssd optimizations [ 583.185957][ T8593] BTRFS info (device loop7): turning on sync discard [ 583.185986][ T8593] BTRFS info (device loop7): enabling free space tree [ 583.299454][ T8451] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.299573][ T8451] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.299737][ T8451] bridge_slave_0: entered allmulticast mode [ 583.300812][ T29] audit: type=1800 audit(1793128886.511:5): pid=8593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.407" name="file1" dev="loop7" ino=260 res=0 errno=-22 [ 583.327160][ T8451] bridge_slave_0: entered promiscuous mode [ 583.366975][ T8451] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.389940][ T8451] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.390141][ T8451] bridge_slave_1: entered allmulticast mode [ 583.414875][ T8451] bridge_slave_1: entered promiscuous mode [ 584.943486][ T8603] __vm_enough_memory: pid: 8603, comm: syz.1.408, bytes: 21200312291328 not enough memory for the allocation [ 584.943809][ T5653] Bluetooth: hci3: command tx timeout [ 585.113694][ T7343] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 585.217913][ T8451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.241678][ T8451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.521469][ T8451] team0: Port device team_slave_0 added [ 586.983922][ T5653] Bluetooth: hci3: command tx timeout [ 588.217839][ T8451] team0: Port device team_slave_1 added [ 589.939459][ T5289] 8021q: adding VLAN 0 to HW filter on device eth20 [ 590.399113][ T8451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.400695][ T8451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.400751][ T8451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.769301][ T8451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.770938][ T8451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.770990][ T8451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.901259][ T8451] hsr_slave_0: entered promiscuous mode [ 592.911004][ T8451] hsr_slave_1: entered promiscuous mode [ 592.913506][ T8451] debugfs: 'hsr0' already exists in 'hsr' [ 592.913534][ T8451] Cannot create hsr debugfs directory [ 594.894234][ T8422] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 594.913024][ T8422] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 594.919569][ T8422] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 594.953193][ T8422] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 595.106265][ T8422] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 595.329967][ T8422] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 596.314628][ T8422] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 596.364125][ T8422] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 596.421110][ T8567] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.429535][ T8567] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.429714][ T8567] bridge_slave_0: entered allmulticast mode [ 596.445460][ T8567] bridge_slave_0: entered promiscuous mode [ 596.465165][ T8567] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.465261][ T8567] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.465394][ T8567] bridge_slave_1: entered allmulticast mode [ 596.475091][ T8567] bridge_slave_1: entered promiscuous mode [ 596.771959][ T8567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.822379][ T8567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.951634][ T8681] loop5: detected capacity change from 0 to 128 [ 596.963626][ T5861] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 596.975605][ T8681] vfat: Unknown parameter 'd' [ 597.020281][ T5653] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 597.088975][ T13] bridge_slave_1: left allmulticast mode [ 597.089014][ T13] bridge_slave_1: left promiscuous mode [ 597.089292][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.126542][ T13] bridge_slave_0: left allmulticast mode [ 597.126571][ T13] bridge_slave_0: left promiscuous mode [ 597.126761][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.151626][ T5861] usb 8-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 597.164121][ T5861] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 597.164168][ T5861] usb 8-1: config 0 interface 0 has no altsetting 0 [ 597.200996][ T5861] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 597.202903][ T5861] usb 8-1: Product: syz [ 597.202932][ T5861] usb 8-1: Manufacturer: syz [ 597.202960][ T5861] usb 8-1: SerialNumber: syz [ 597.233414][ T5861] usb 8-1: config 0 descriptor?? [ 597.269162][ T13] bridge_slave_1: left allmulticast mode [ 597.269201][ T13] bridge_slave_1: left promiscuous mode [ 597.269433][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.311587][ T13] bridge_slave_0: left allmulticast mode [ 597.313485][ T13] bridge_slave_0: left promiscuous mode [ 597.313697][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.361710][ T5861] usb 8-1: selecting invalid altsetting 0 [ 597.583614][ T8677] snd-usb-audio 8-1:0.0: Runtime PM usage count underflow! [ 597.591177][ T5861] usb 8-1: USB disconnect, device number 3 [ 597.804664][ T8682] udevd[8682]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 599.659509][ T5653] Bluetooth: hci1: command 0x0406 tx timeout [ 600.059395][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.090285][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.120358][ T13] bond0 (unregistering): Released all slaves [ 602.410934][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.465226][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.479526][ T13] bond0 (unregistering): Released all slaves [ 602.538336][ T8567] team0: Port device team_slave_0 added [ 602.559133][ T8567] team0: Port device team_slave_1 added [ 602.977871][ T8567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.977897][ T8567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.977944][ T8567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.996734][ T8567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.996756][ T8567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.996802][ T8567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.156427][ T8699] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 603.798197][ T8567] hsr_slave_0: entered promiscuous mode [ 603.801250][ T8567] hsr_slave_1: entered promiscuous mode [ 603.802089][ T8567] debugfs: 'hsr0' already exists in 'hsr' [ 603.802119][ T8567] Cannot create hsr debugfs directory [ 604.650787][ T8706] FAULT_INJECTION: forcing a failure. [ 604.650787][ T8706] name failslab, interval 1, probability 0, space 0, times 0 [ 604.650826][ T8706] CPU: 0 UID: 0 PID: 8706 Comm: syz.1.426 Not tainted syzkaller #0 PREEMPT(full) [ 604.650859][ T8706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 604.650877][ T8706] Call Trace: [ 604.650887][ T8706] [ 604.650898][ T8706] dump_stack_lvl+0x100/0x190 [ 604.650944][ T8706] should_fail_ex.cold+0x5/0xa [ 604.650979][ T8706] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.651019][ T8706] should_failslab+0xc2/0x120 [ 604.651052][ T8706] __kmalloc_noprof+0xfc/0x840 [ 604.651099][ T8706] ? tomoyo_encode2+0xfb/0x3c0 [ 604.651134][ T8706] tomoyo_encode2+0xfb/0x3c0 [ 604.651167][ T8706] tomoyo_encode+0x29/0x50 [ 604.651193][ T8706] tomoyo_realpath_from_path+0x18c/0x690 [ 604.651230][ T8706] tomoyo_mount_acl+0x1b6/0x8b0 [ 604.651279][ T8706] ? is_bpf_text_address+0x8a/0x1a0 [ 604.651322][ T8706] ? is_bpf_text_address+0x8a/0x1a0 [ 604.651363][ T8706] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.651402][ T8706] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 604.651440][ T8706] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 604.651483][ T8706] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.651518][ T8706] ? kernel_text_address+0x8d/0x100 [ 604.651566][ T8706] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.651600][ T8706] ? unwind_get_return_address+0x59/0xa0 [ 604.651644][ T8706] ? arch_stack_walk+0xa6/0xf0 [ 604.651685][ T8706] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.651731][ T8706] ? __lock_acquire+0x5c0/0x1f40 [ 604.651784][ T8706] ? tomoyo_mount_permission+0x1f6/0x460 [ 604.651833][ T8706] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.651870][ T8706] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.651905][ T8706] ? tomoyo_domain+0xb2/0x150 [ 604.651936][ T8706] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.651971][ T8706] ? tomoyo_profile+0x47/0x60 [ 604.652007][ T8706] tomoyo_mount_permission+0x214/0x460 [ 604.652052][ T8706] ? tomoyo_mount_permission+0x1f6/0x460 [ 604.652100][ T8706] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 604.652170][ T8706] security_sb_mount+0xdd/0x270 [ 604.652221][ T8706] path_mount+0x158/0x2850 [ 604.652279][ T8706] ? __pfx_path_mount+0x10/0x10 [ 604.652319][ T8706] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.652354][ T8706] ? lockdep_hardirqs_on+0x7d/0x110 [ 604.652387][ T8706] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.652425][ T8706] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.652460][ T8706] ? kmem_cache_free+0x127/0x6c0 [ 604.652516][ T8706] ? __x64_sys_mount+0x293/0x310 [ 604.652573][ T8706] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.652619][ T8706] __x64_sys_mount+0x293/0x310 [ 604.652679][ T8706] ? __pfx___x64_sys_mount+0x10/0x10 [ 604.652743][ T8706] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.652803][ T8706] do_syscall_64+0x123/0x790 [ 604.652851][ T8706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.652895][ T8706] RIP: 0033:0x7eff8459f559 [ 604.652924][ T8706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.652961][ T8706] RSP: 002b:00007eff85536028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 604.652999][ T8706] RAX: ffffffffffffffda RBX: 00007eff84825fa0 RCX: 00007eff8459f559 [ 604.653023][ T8706] RDX: 0000200000000440 RSI: 0000200000000400 RDI: 0000000000000000 [ 604.653047][ T8706] RBP: 00007eff84636b20 R08: 0000000000000000 R09: 0000000000000000 [ 604.653071][ T8706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.653095][ T8706] R13: 00007eff84826038 R14: 00007eff84825fa0 R15: 00007ffc0fc09e58 [ 604.653147][ T8706] [ 604.662405][ T8706] ERROR: Out of memory at tomoyo_realpath_from_path. [ 604.781965][ T13] hsr_slave_0: left promiscuous mode [ 604.789452][ T13] hsr_slave_1: left promiscuous mode [ 604.790478][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.799112][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.856548][ T13] hsr_slave_0: left promiscuous mode [ 604.862261][ T13] hsr_slave_1: left promiscuous mode [ 604.863682][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.870119][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.208288][ T8722] loop7: detected capacity change from 0 to 128 [ 609.209601][ T8722] vfat: Unknown parameter 'd' [ 609.261404][ T5653] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 610.613180][ T13] team0 (unregistering): Port device team_slave_1 removed [ 610.640692][ T13] team0 (unregistering): Port device team_slave_0 removed [ 611.021569][ T13] team0 (unregistering): Port device team_slave_1 removed [ 611.045972][ T13] team0 (unregistering): Port device team_slave_0 removed [ 611.292680][ T5653] Bluetooth: hci4: command 0x0406 tx timeout [ 611.820411][ T8422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.994165][ T8451] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 612.008118][ T8451] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 612.010831][ T8451] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 612.037024][ T8451] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 612.049251][ T8422] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.069959][ T8451] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 612.112328][ T8451] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 612.118500][ T8451] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 612.142628][ T8451] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 612.154355][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.154476][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.158887][ T8735] loop7: detected capacity change from 0 to 32768 [ 612.387699][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.387829][ T5913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.695214][ T8735] ------------[ cut here ]------------ [ 612.695240][ T8735] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dtree.c:1598:21 [ 612.695272][ T8735] index 26 is out of range for type 'lv [20]' [ 612.695296][ T8735] CPU: 1 UID: 0 PID: 8735 Comm: syz.7.432 Not tainted syzkaller #0 PREEMPT(full) [ 612.695342][ T8735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 612.695366][ T8735] Call Trace: [ 612.695378][ ** replaying previous printk message ** [ 612.695378][ T8735] [ 612.695392][ T8735] dump_stack_lvl+0x100/0x190 [ 612.695454][ T8735] ubsan_epilogue+0xa/0x30 [ 612.695502][ T8735] __ubsan_handle_out_of_bounds+0xcc/0xf0 [ 612.695566][ T8735] dtSplitPage+0x2fb1/0x3660 [ 612.695683][ T8735] ? __pfx_dtSplitPage+0x10/0x10 [ 612.695738][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.695793][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.695840][ T8735] ? up_write+0x2dc/0x5b0 [ 612.695897][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.695942][ T8735] ? dbAlloc+0x4c8/0xb10 [ 612.696005][ T8735] dtSplitUp+0x7b8/0x56a0 [ 612.696074][ T8735] ? stack_trace_save+0x8e/0xc0 [ 612.696119][ T8735] ? __pfx_stack_trace_save+0x10/0x10 [ 612.696165][ T8735] ? stack_depot_save_flags+0x27/0x9f0 [ 612.696211][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.696265][ T8735] ? __lock_acquire+0x5c0/0x1f40 [ 612.696317][ T8735] ? __pfx_dtSplitUp+0x10/0x10 [ 612.696371][ T8735] ? kasan_save_stack+0x3f/0x50 [ 612.696408][ T8735] ? kasan_save_stack+0x30/0x50 [ 612.696444][ T8735] ? kasan_save_track+0x14/0x30 [ 612.696482][ T8735] ? __kasan_slab_free+0x5f/0x80 [ 612.696519][ T8735] ? kfree+0x22b/0x6d0 [ 612.696568][ T8735] ? dtSearch+0x16d8/0x20c0 [ 612.696621][ T8735] ? lookup_open+0xd60/0x1940 [ 612.696681][ T8735] ? path_openat+0xe75/0x23f0 [ 612.696725][ T8735] ? do_file_open+0x20e/0x430 [ 612.696772][ T8735] ? __x64_sys_creat+0xcc/0x120 [ 612.696826][ T8735] ? do_syscall_64+0x123/0x790 [ 612.696869][ T8735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.696935][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.696983][ T8735] ? __lock_acquire+0x5c0/0x1f40 [ 612.697053][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.697099][ T8735] ? do_raw_spin_lock+0x128/0x260 [ 612.697152][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.697199][ T8735] ? find_held_lock+0x2b/0x80 [ 612.697264][ T8735] ? txLock+0x7e6/0x1b50 [ 612.697312][ T8735] dtInsert+0x8dd/0xb40 [ 612.697374][ T8735] ? __pfx_dtInsert+0x10/0x10 [ 612.697431][ T8735] ? dtSplitPage+0x35b0/0x3660 [ 612.697521][ T8735] jfs_create+0x604/0xb10 [ 612.697593][ T8735] ? __pfx_jfs_create+0x10/0x10 [ 612.697662][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.697708][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.697757][ T8735] ? make_vfsuid+0xec/0x140 [ 612.697827][ T8735] ? inode_permission+0x377/0x630 [ 612.697885][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.697932][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.697979][ T8735] ? security_inode_create+0xc9/0x2b0 [ 612.698021][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.698068][ T8735] ? may_o_create+0x46/0x3a0 [ 612.698132][ T8735] ? __pfx_jfs_create+0x10/0x10 [ 612.698193][ T8735] lookup_open+0xd60/0x1940 [ 612.698282][ T8735] path_openat+0xe75/0x23f0 [ 612.698339][ T8735] ? __pfx_path_openat+0x10/0x10 [ 612.698403][ T8735] do_file_open+0x20e/0x430 [ 612.698457][ T8735] ? __pfx_do_file_open+0x10/0x10 [ 612.698541][ T8735] ? _raw_spin_unlock+0x28/0x50 [ 612.698601][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.698647][ T8735] ? alloc_fd+0x471/0x7a0 [ 612.698712][ T8735] do_sys_openat2+0x163/0x1d0 [ 612.698766][ T8735] ? __pfx_do_sys_openat2+0x10/0x10 [ 612.698827][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.698873][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.698920][ T8735] ? __x64_sys_futex+0x358/0x4d0 [ 612.698962][ T8735] __x64_sys_creat+0xcc/0x120 [ 612.699017][ T8735] ? __pfx___x64_sys_creat+0x10/0x10 [ 612.699078][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.699128][ T8735] ? do_syscall_64+0xae/0x790 [ 612.699174][ T8735] do_syscall_64+0x123/0x790 [ 612.699221][ T8735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.699271][ T8735] RIP: 0033:0x7fe48c19f559 [ 612.699305][ T8735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.699344][ T8735] RSP: 002b:00007fe48d06e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 612.699382][ T8735] RAX: ffffffffffffffda RBX: 00007fe48c425fa0 RCX: 00007fe48c19f559 [ 612.699408][ T8735] RDX: 0000000000000000 RSI: 0000000000000071 RDI: 0000200000006f40 [ 612.699432][ T8735] RBP: 00007fe48c236b20 R08: 0000000000000000 R09: 0000000000000000 [ 612.699457][ T8735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.699480][ T8735] R13: 00007fe48c426038 R14: 00007fe48c425fa0 R15: 00007ffc245399b8 [ 612.699533][ T8735] [ 612.749057][ T8735] ---[ end trace ]--- [ 612.749078][ T8735] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 613.189391][ T8735] CPU: 1 UID: 0 PID: 8735 Comm: syz.7.432 Not tainted syzkaller #0 PREEMPT(full) [ 613.198615][ T8735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 613.208694][ T8735] Call Trace: [ 613.211986][ T8735] [ 613.214928][ T8735] dump_stack_lvl+0x100/0x190 [ 613.219658][ T8735] vpanic+0x553/0x970 [ 613.223673][ T8735] ? __pfx_vpanic+0x10/0x10 [ 613.228210][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.233891][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.239563][ T8735] ? irqentry_exit+0x202/0xab0 [ 613.244357][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.250034][ T8735] panic+0xd1/0xe0 [ 613.253780][ T8735] ? __pfx_panic+0x10/0x10 [ 613.258238][ T8735] ? dump_stack_lvl+0x176/0x190 [ 613.263135][ T8735] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 613.269266][ T8735] check_panic_on_warn.cold+0x19/0x34 [ 613.274671][ T8735] __ubsan_handle_out_of_bounds+0xcc/0xf0 [ 613.280447][ T8735] dtSplitPage+0x2fb1/0x3660 [ 613.285146][ T8735] ? __pfx_dtSplitPage+0x10/0x10 [ 613.290131][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.295801][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.301467][ T8735] ? up_write+0x2dc/0x5b0 [ 613.305845][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.311512][ T8735] ? dbAlloc+0x4c8/0xb10 [ 613.315805][ T8735] dtSplitUp+0x7b8/0x56a0 [ 613.320194][ T8735] ? stack_trace_save+0x8e/0xc0 [ 613.325088][ T8735] ? __pfx_stack_trace_save+0x10/0x10 [ 613.330490][ T8735] ? stack_depot_save_flags+0x27/0x9f0 [ 613.335978][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.341635][ T8735] ? __lock_acquire+0x5c0/0x1f40 [ 613.346610][ T8735] ? __pfx_dtSplitUp+0x10/0x10 [ 613.351414][ T8735] ? kasan_save_stack+0x3f/0x50 [ 613.356282][ T8735] ? kasan_save_stack+0x30/0x50 [ 613.361156][ T8735] ? kasan_save_track+0x14/0x30 [ 613.366026][ T8735] ? __kasan_slab_free+0x5f/0x80 [ 613.370981][ T8735] ? kfree+0x22b/0x6d0 [ 613.375085][ T8735] ? dtSearch+0x16d8/0x20c0 [ 613.379622][ T8735] ? lookup_open+0xd60/0x1940 [ 613.384348][ T8735] ? path_openat+0xe75/0x23f0 [ 613.389058][ T8735] ? do_file_open+0x20e/0x430 [ 613.393761][ T8735] ? __x64_sys_creat+0xcc/0x120 [ 613.398645][ T8735] ? do_syscall_64+0x123/0x790 [ 613.403465][ T8735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.409577][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.415249][ T8735] ? __lock_acquire+0x5c0/0x1f40 [ 613.420249][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.425919][ T8735] ? do_raw_spin_lock+0x128/0x260 [ 613.431016][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.436660][ T8735] ? find_held_lock+0x2b/0x80 [ 613.441373][ T8735] ? txLock+0x7e6/0x1b50 [ 613.445625][ T8735] dtInsert+0x8dd/0xb40 [ 613.449811][ T8735] ? __pfx_dtInsert+0x10/0x10 [ 613.454521][ T8735] ? dtSplitPage+0x35b0/0x3660 [ 613.459322][ T8735] jfs_create+0x604/0xb10 [ 613.463676][ T8735] ? __pfx_jfs_create+0x10/0x10 [ 613.468548][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.474185][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.479851][ T8735] ? make_vfsuid+0xec/0x140 [ 613.484375][ T8735] ? inode_permission+0x377/0x630 [ 613.489413][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.495047][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.500700][ T8735] ? security_inode_create+0xc9/0x2b0 [ 613.506093][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.511748][ T8735] ? may_o_create+0x46/0x3a0 [ 613.516384][ T8735] ? __pfx_jfs_create+0x10/0x10 [ 613.521274][ T8735] lookup_open+0xd60/0x1940 [ 613.525811][ T8735] path_openat+0xe75/0x23f0 [ 613.530329][ T8735] ? __pfx_path_openat+0x10/0x10 [ 613.535283][ T8735] do_file_open+0x20e/0x430 [ 613.539794][ T8735] ? __pfx_do_file_open+0x10/0x10 [ 613.544850][ T8735] ? _raw_spin_unlock+0x28/0x50 [ 613.549721][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.555385][ T8735] ? alloc_fd+0x471/0x7a0 [ 613.559736][ T8735] do_sys_openat2+0x163/0x1d0 [ 613.564428][ T8735] ? __pfx_do_sys_openat2+0x10/0x10 [ 613.569646][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.575284][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.580926][ T8735] ? __x64_sys_futex+0x358/0x4d0 [ 613.585896][ T8735] __x64_sys_creat+0xcc/0x120 [ 613.590588][ T8735] ? __pfx___x64_sys_creat+0x10/0x10 [ 613.595892][ T8735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.601533][ T8735] ? do_syscall_64+0xae/0x790 [ 613.606217][ T8735] do_syscall_64+0x123/0x790 [ 613.610823][ T8735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.616718][ T8735] RIP: 0033:0x7fe48c19f559 [ 613.621132][ T8735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.640772][ T8735] RSP: 002b:00007fe48d06e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 613.649193][ T8735] RAX: ffffffffffffffda RBX: 00007fe48c425fa0 RCX: 00007fe48c19f559 [ 613.657167][ T8735] RDX: 0000000000000000 RSI: 0000000000000071 RDI: 0000200000006f40 [ 613.665159][ T8735] RBP: 00007fe48c236b20 R08: 0000000000000000 R09: 0000000000000000 [ 613.673156][ T8735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 613.681121][ T8735] R13: 00007fe48c426038 R14: 00007fe48c425fa0 R15: 00007ffc245399b8 [ 613.689110][ T8735] [ 613.692403][ T8735] Kernel Offset: disabled [ 613.696725][ T8735] Rebooting in 86400 seconds..