last executing test programs: 11.026256501s ago: executing program 3 (id=32): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=ANY=[@ANYBLOB="180000000b1411012cbd7000fddbdf25080001"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) 10.837800191s ago: executing program 3 (id=35): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0xffffffffffffffac, &(0x7f0000000280)="9001000000000000") syz_open_dev$char_usb(0xc, 0xb4, 0x0) 7.532097503s ago: executing program 3 (id=41): setns(0xc9, 0x0) r0 = socket(0x1f, 0x5, 0x8) write(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000000c0)) 7.280509038s ago: executing program 3 (id=44): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000200), 0x318, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) pipe2(0x0, 0x8c000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_buf(r1, 0x29, 0x41, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000840)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4084010) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40684a5}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x2c0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000e00)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x40004}}, 0x10) bind$tipc(r5, &(0x7f0000000e40)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r5, &(0x7f0000000e80)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000ec0)={0x42}, 0x10) bind$tipc(r4, 0x0, 0x0) close(r4) syz_io_uring_setup(0x643e, &(0x7f0000000940)={0x0, 0x2, 0x80, 0x3, 0xb5}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) 5.731668628s ago: executing program 3 (id=51): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./cifs\x00', 0x80) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r1 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r1, 0xee01, 0x0) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000400), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000440)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={'sha224\x00'}}) r3 = add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r1, 0x1) timer_create(0x6, &(0x7f0000000600)={0x0, 0x24, 0x4}, &(0x7f0000000640)) pipe(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r4 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000001c0)) write$dsp(r4, &(0x7f0000000280)="a52876d758f38a5a7c0100400a4c8bc2", 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 5.491186313s ago: executing program 2 (id=54): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.665511605s ago: executing program 0 (id=56): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000240)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000002c0)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 2.62179218s ago: executing program 3 (id=57): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000200000008000000ebd0000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000000000000000000000000000000000000000d23cf13b97836be3d48c70b56001550b99f860c88112b77335cd1dda31068d1e3128510fa4034e64d3e4c703ee6657692b3801b17ea86e3f872f1d672b5375004e2be271315e8d4bc536d26c63a1a6528f17b7146a94a96febf1cbf2a3057f86f916e29643a6a3d56258c1b6c33678029bfeca58b818fe7ef9692351e8479f9fcdc5fa5b1ee1a8b16c577fbf4ad4c0fdd3895b53d23281fdec17c815b436565664193900cf8fbb8447185159e5080c"], 0x50) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000540), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x2d) keyctl$read(0xb, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000580)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f00000005c0)={0x6, 0x7, 0xfff7fff7, 0x8, 0x12, "c63bf9e2f100", 0xef3, 0x3}) ioctl$VT_ACTIVATE(r6, 0x5606, 0x10001) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000600)) syz_usb_connect(0x3, 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007050102000200070581020002"], 0x0) setns(0xc9, 0x0) r7 = socket(0x8, 0x5, 0x7fff) ioctl$sock_SIOCOUTQNSD(r7, 0x40106150, &(0x7f0000000800)) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000380)={{0xa, 0x0, 0x8, @local, 0x3}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x74, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000400)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x4, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 2.409736562s ago: executing program 1 (id=58): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) bind$inet(r0, &(0x7f0000000580)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 2.360090937s ago: executing program 0 (id=59): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@error={0x0, 0x440, 0x0, 0x30}]}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x168, 0x138, 0x0, 0x0, 0x8d010, 0x0, 0x0, @by_dev={r1}, {0x1000, @thin_create={'create_snap 2 ', 0x1}}}) 1.671701118s ago: executing program 0 (id=60): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'pcl818\x00', [0x100, 0xa, 0x13600, 0xf61c691, 0x2, 0x10005, 0x201, 0x3, 0x80006, 0x15, 0xd, 0x7, 0x7, 0x1, 0x6, 0x101, 0xc7, 0x9, 0x20003, 0x7fffffff, 0xb740, 0x7ffc, 0x7, 0x20001e58, 0x8, 0x37f93241, 0x3, 0x0, 0x9, 0x1, 0xd1]}) 1.664024708s ago: executing program 2 (id=61): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58) 1.518308254s ago: executing program 0 (id=62): 1.518107514s ago: executing program 1 (id=63): socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000040)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r0, &(0x7f0000000680), &(0x7f00000006c0)=@udp6=r4, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000740)=ANY=[], 0x0) 1.407609655s ago: executing program 0 (id=64): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x44, r0, 0x1, 0x70bd2b, 0xffffffdd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x800}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) 1.35606735s ago: executing program 1 (id=65): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001acffef0000000000000300000a600000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000340003800c00008008000340000000022400008008000340000000020c00054000000000000000050c0004400000000000000f"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.301808306s ago: executing program 0 (id=66): syz_mount_image$jfs(&(0x7f0000000bc0), &(0x7f0000000c00)='./file0\x00', 0x2, &(0x7f00000006c0)=ANY=[], 0x1, 0x633e, &(0x7f0000000dc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000010c40)='./tracing\x00', 0x1ff) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000010700)='\x00', 0x89901) r1 = fspick(r0, &(0x7f0000010740)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 1.197364317s ago: executing program 1 (id=67): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000240)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000002c0)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 1.046185152s ago: executing program 2 (id=68): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000380)={0x1, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x1e, 0x101, 0x70bd28, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x404c000}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40080c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x7, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000600)=""/102400, 0x19000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000019e00)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000019e80), 0xffffffffffffff94, 0x0, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_INIT(r4, &(0x7f000001c000)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat(0xffffffffffffffff, &(0x7f000001c080)='./file0\x00', 0x422440, 0x1c) add_key(&(0x7f000001c0c0)='asymmetric\x00', 0x0, &(0x7f000001c100)="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"/276, 0x114, 0xfffffffffffffffe) 1.009911396s ago: executing program 1 (id=69): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000400), 0x12) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000008050000010b007e"], 0x97) 702.067698ms ago: executing program 1 (id=70): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 118.358598ms ago: executing program 2 (id=71): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'pcl818\x00', [0x100, 0xa, 0x13600, 0xf61c691, 0x2, 0x10005, 0x201, 0x3, 0x80006, 0x15, 0xd, 0x7, 0x7, 0x1, 0x6, 0x101, 0xc7, 0x9, 0x20003, 0x7fffffff, 0xb740, 0x7ffc, 0x7, 0x20001e58, 0x8, 0x37f93241, 0x3, 0x0, 0x9, 0x1, 0xd1]}) 63.202204ms ago: executing program 2 (id=72): 0s ago: executing program 2 (id=73): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000002c0)=0x9, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. [ 67.830403][ T5770] cgroup: Unknown subsys name 'net' [ 67.929701][ T5770] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.299047][ T5770] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.807789][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.816493][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.825038][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.832997][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.840900][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.844865][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.848295][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.863109][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.865036][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.874206][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.883571][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.886240][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.891253][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.901552][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.913719][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.914043][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.921648][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.928434][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.942779][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.954501][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.961771][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.970299][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.980839][ T5098] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.988798][ T5098] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.046925][ T5784] (null): rxe_set_mtu: Set mtu to 1024 [ 71.059775][ T5781] (null): rxe_set_mtu: Set mtu to 1024 [ 71.065428][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.081069][ T5781] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 71.088430][ T5783] (null): rxe_set_mtu: Set mtu to 1024 [ 71.094124][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.105543][ T5783] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 71.125312][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.132189][ T5782] (null): rxe_set_mtu: Set mtu to 1024 [ 71.153598][ T5782] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 71.468908][ T5784] infiniband rxe0: set active [ 71.477844][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.485152][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.491518][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.498139][ T5784] infiniband rxe0: added rxe_eth0 [ 71.624547][ T5784] RDS/IB: rxe0: added [ 71.629221][ T5784] smc: adding ib device rxe0 with port count 1 [ 71.639878][ T5784] smc: ib device rxe0 port 1 has pnetid [ 71.659619][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.667311][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.684704][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 71.810641][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 71.901018][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 71.937752][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.014987][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.022697][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.031438][ T5781] bridge_slave_0: entered allmulticast mode [ 72.039084][ T5781] bridge_slave_0: entered promiscuous mode [ 72.084938][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.092144][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.116964][ T5781] bridge_slave_1: entered allmulticast mode [ 72.125962][ T5781] bridge_slave_1: entered promiscuous mode [ 72.156619][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.164621][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.171837][ T5782] bridge_slave_0: entered allmulticast mode [ 72.183145][ T5782] bridge_slave_0: entered promiscuous mode [ 72.192201][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.202735][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.210257][ T5782] bridge_slave_1: entered allmulticast mode [ 72.221675][ T5782] bridge_slave_1: entered promiscuous mode [ 72.239796][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.277753][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.357581][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.406041][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.413216][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.447047][ T5783] bridge_slave_0: entered allmulticast mode [ 72.457238][ T5783] bridge_slave_0: entered promiscuous mode [ 72.467275][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.474516][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.481716][ T5783] bridge_slave_1: entered allmulticast mode [ 72.504737][ T5783] bridge_slave_1: entered promiscuous mode [ 72.516009][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.536201][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.593181][ T5781] team0: Port device team_slave_0 added [ 72.650380][ T5782] team0: Port device team_slave_0 added [ 72.656935][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.666106][ T5781] team0: Port device team_slave_1 added [ 72.686929][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.706689][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.725419][ T5782] team0: Port device team_slave_1 added [ 72.819091][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.828655][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.854804][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.869415][ T5783] team0: Port device team_slave_0 added [ 72.878488][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.885689][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.915100][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.930695][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.938021][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.965914][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.977591][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.985057][ T5788] Bluetooth: hci0: command tx timeout [ 72.987170][ T5098] Bluetooth: hci2: command tx timeout [ 72.990745][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.022070][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.051282][ T5783] team0: Port device team_slave_1 added [ 73.063563][ T5098] Bluetooth: hci1: command tx timeout [ 73.066323][ T5788] Bluetooth: hci3: command tx timeout [ 73.110602][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.117715][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.144657][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.161954][ T5781] hsr_slave_0: entered promiscuous mode [ 73.168831][ T5781] hsr_slave_1: entered promiscuous mode [ 73.190751][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.198142][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.224304][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.235864][ T5448] infiniband rxe0: set active [ 73.299398][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.330920][ T5782] hsr_slave_0: entered promiscuous mode [ 73.337897][ T5782] hsr_slave_1: entered promiscuous mode [ 73.344054][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.351778][ T5782] Cannot create hsr debugfs directory [ 73.441327][ T5783] hsr_slave_0: entered promiscuous mode [ 73.447616][ T5783] hsr_slave_1: entered promiscuous mode [ 73.455298][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.462896][ T5783] Cannot create hsr debugfs directory [ 73.708585][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 73.828329][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.849099][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.858611][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.896134][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.911465][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.920603][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.927942][ T5784] bridge_slave_0: entered allmulticast mode [ 73.935507][ T5784] bridge_slave_0: entered promiscuous mode [ 73.951190][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.958673][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.965944][ T5784] bridge_slave_1: entered allmulticast mode [ 73.972652][ T5784] bridge_slave_1: entered promiscuous mode [ 74.016210][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.039881][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.058501][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.070059][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.079499][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.098862][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.150136][ T5784] team0: Port device team_slave_0 added [ 74.173913][ T5784] team0: Port device team_slave_1 added [ 74.191237][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.217151][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.227532][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.238416][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.273147][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.280312][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.309399][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.322700][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.329946][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.356638][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.449698][ T5784] hsr_slave_0: entered promiscuous mode [ 74.456996][ T5784] hsr_slave_1: entered promiscuous mode [ 74.463114][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.471689][ T5784] Cannot create hsr debugfs directory [ 74.547804][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.631347][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.649896][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.681385][ T2936] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.688711][ T2936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.709827][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.754970][ T2907] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.762135][ T2907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.782875][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.820037][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.848066][ T2936] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.855191][ T2936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.870621][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.877796][ T2907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.906747][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.918278][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.931048][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.940848][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.966476][ T2907] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.973619][ T2907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.982124][ T2907] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.989277][ T2907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.064850][ T5788] Bluetooth: hci0: command tx timeout [ 75.070294][ T5788] Bluetooth: hci2: command tx timeout [ 75.144075][ T5788] Bluetooth: hci1: command tx timeout [ 75.147399][ T5098] Bluetooth: hci3: command tx timeout [ 75.221093][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.325004][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.381623][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.442039][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.458580][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.465813][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.478184][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.485373][ T2966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.634714][ T5781] veth0_vlan: entered promiscuous mode [ 75.656763][ T5781] veth1_vlan: entered promiscuous mode [ 75.677798][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.730580][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.801621][ T5781] veth0_macvtap: entered promiscuous mode [ 75.830035][ T5781] veth1_macvtap: entered promiscuous mode [ 75.876562][ T5783] veth0_vlan: entered promiscuous mode [ 75.887810][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.901817][ T5782] veth0_vlan: entered promiscuous mode [ 75.918180][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.930304][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.939957][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.949647][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.958686][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.992604][ T5783] veth1_vlan: entered promiscuous mode [ 76.030749][ T5782] veth1_vlan: entered promiscuous mode [ 76.058390][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.125840][ T5783] veth0_macvtap: entered promiscuous mode [ 76.146108][ T2966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.159242][ T2966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.176927][ T5783] veth1_macvtap: entered promiscuous mode [ 76.206508][ T5784] veth0_vlan: entered promiscuous mode [ 76.220308][ T5782] veth0_macvtap: entered promiscuous mode [ 76.245140][ T5784] veth1_vlan: entered promiscuous mode [ 76.262975][ T5782] veth1_macvtap: entered promiscuous mode [ 76.281430][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.288104][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.299940][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.299968][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.320049][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.331316][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.343491][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.354290][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.364925][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.379122][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.399157][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.409862][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.422539][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.433225][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.445053][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.454960][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.465528][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.476819][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.501048][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.510220][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.522062][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.531613][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.568652][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.568878][ T5781] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.579512][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.608702][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.618397][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.710250][ T5784] veth0_macvtap: entered promiscuous mode [ 76.744009][ T5784] veth1_macvtap: entered promiscuous mode [ 76.811528][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.831375][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.841540][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.852303][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.862657][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.873847][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.886258][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.902553][ T2936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.913007][ T2936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.921016][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.937406][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.947766][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.961587][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.971677][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.979272][ T5098] Bluetooth: hci2: unexpected subevent 0x1a length: 12 > 6 [ 76.990398][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.002094][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.022248][ T2914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.030605][ T2914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.045883][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.055415][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.073331][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.082064][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.125552][ T2936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.139371][ T2936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.148316][ T5098] Bluetooth: hci0: command tx timeout [ 77.155031][ T5098] Bluetooth: hci2: command tx timeout [ 77.177637][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.213463][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.226647][ T5098] Bluetooth: hci3: command tx timeout [ 77.226660][ T5788] Bluetooth: hci1: command tx timeout [ 77.291006][ T2936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.333809][ T2936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.388823][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.393777][ T5883] syz.3.4[5883]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 77.398479][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.769326][ T5888] loop2: detected capacity change from 0 to 4096 [ 77.839426][ T5888] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 77.926935][ T5888] ntfs3: loop2: Failed to load $Extend (-22). [ 77.951697][ T5888] ntfs3: loop2: Failed to initialize $Extend. [ 78.220160][ T5883] loop3: detected capacity change from 0 to 32768 [ 78.284218][ T5883] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.4 (5883) [ 78.376553][ T5884] loop0: detected capacity change from 0 to 32768 [ 78.458028][ T5884] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 78.466290][ T5883] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 78.485617][ T5883] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 78.559950][ T5883] BTRFS info (device loop3): disabling tree log [ 78.593987][ T5883] BTRFS info (device loop3): using free space tree [ 78.690602][ T5884] XFS (loop0): Ending clean mount [ 78.831203][ T5883] BTRFS info (device loop3): enabling ssd optimizations [ 78.867410][ T5883] BTRFS info (device loop3): auto enabling async discard [ 78.875760][ T5855] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.996621][ T5884] ======================================================= [ 78.996621][ T5884] WARNING: The mand mount option has been deprecated and [ 78.996621][ T5884] and is ignored by this kernel. Remove the mand [ 78.996621][ T5884] option from the mount to silence this warning. [ 78.996621][ T5884] ======================================================= [ 79.133730][ T5855] usb 2-1: Using ep0 maxpacket: 32 [ 79.144375][ T5855] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 79.173770][ T5855] usb 2-1: config 0 has no interface number 0 [ 79.273915][ T5788] Bluetooth: hci0: command tx timeout [ 79.279732][ T5098] Bluetooth: hci2: command tx timeout [ 79.304656][ T5788] Bluetooth: hci3: command tx timeout [ 79.313482][ T5788] Bluetooth: hci1: command tx timeout [ 79.323562][ T5855] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 79.421571][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.610118][ T5855] usb 2-1: Product: syz [ 79.834515][ T5783] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 79.841069][ T5855] usb 2-1: Manufacturer: syz [ 79.849923][ T5855] usb 2-1: SerialNumber: syz [ 79.878496][ T5855] usb 2-1: config 0 descriptor?? [ 79.928628][ T5855] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 79.942002][ T5855] usb 2-1: selecting invalid altsetting 1 [ 79.968133][ T5855] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 79.997064][ T2936] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 80.059734][ T5855] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 80.094098][ T5855] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 80.104862][ T5855] usb 2-1: media controller created [ 80.196514][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 80.216367][ T5936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12'. [ 80.299713][ T5936] block device autoloading is deprecated and will be removed. [ 80.321573][ T5936] syz.2.12: attempt to access beyond end of device [ 80.321573][ T5936] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 80.495014][ T5855] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 80.591159][ T5940] NILFS (nullb0): couldn't find nilfs on the device [ 81.302896][ T5855] usb 2-1: USB disconnect, device number 2 [ 81.309969][ T5788] Bluetooth: hci2: command tx timeout [ 81.562448][ T5782] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 81.775560][ T174] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.988975][ T174] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 82.008049][ T174] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.040672][ T174] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 82.063366][ T174] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.085908][ T174] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 82.143545][ T174] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 82.151601][ T174] usb 3-1: Product: syz [ 82.173328][ T174] usb 3-1: Manufacturer: syz [ 82.214017][ T174] cdc_wdm 3-1:1.0: skipping garbage [ 82.219258][ T174] cdc_wdm 3-1:1.0: skipping garbage [ 82.268002][ T174] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 82.293371][ T174] cdc_wdm 3-1:1.0: Unknown control protocol [ 82.360065][ T5956] syz_tun: entered allmulticast mode [ 82.401391][ T5955] syz_tun: left allmulticast mode [ 82.559390][ T174] usb 3-1: USB disconnect, device number 2 [ 82.908013][ T5962] lo speed is unknown, defaulting to 1000 [ 82.968651][ T5962] lo speed is unknown, defaulting to 1000 [ 82.982418][ T5962] lo speed is unknown, defaulting to 1000 [ 83.007580][ T5962] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 83.051744][ T5962] lo speed is unknown, defaulting to 1000 [ 83.072510][ T5962] lo speed is unknown, defaulting to 1000 [ 83.091918][ T5962] lo speed is unknown, defaulting to 1000 [ 83.106705][ T5962] lo speed is unknown, defaulting to 1000 [ 83.124219][ T5962] Zero length message leads to an empty skb [ 83.153376][ T174] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.277769][ T5855] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.355685][ T174] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 83.393338][ T174] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.423663][ T174] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 83.438323][ T174] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.484677][ T174] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 83.513464][ T174] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 83.531758][ T174] usb 3-1: Product: syz [ 83.544557][ T174] usb 3-1: Manufacturer: syz [ 83.638882][ T174] cdc_wdm 3-1:1.0: skipping garbage [ 83.653552][ T174] cdc_wdm 3-1:1.0: skipping garbage [ 83.674581][ T174] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 83.683402][ T174] cdc_wdm 3-1:1.0: Unknown control protocol [ 84.703374][ T174] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 84.890994][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 84.929323][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 84.966516][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.976684][ T174] usb 1-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 84.986241][ T174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.005586][ T174] usb 1-1: config 0 descriptor?? [ 85.108106][ T5974] loop3: detected capacity change from 0 to 32768 [ 85.144906][ T5974] [ 85.144906][ T5974] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.144906][ T5974] [ 85.161477][ T5875] usb 3-1: USB disconnect, device number 3 [ 85.406080][ T5974] ERROR: (device loop3): diWrite: ixpxd invalid [ 85.406080][ T5974] [ 85.435142][ T5974] ERROR: (device loop3): remounting filesystem as read-only [ 85.489029][ T5974] ERROR: (device loop3): txCommit: [ 85.489029][ T5974] [ 85.507719][ T174] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 85.520208][ T174] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 85.533414][ T174] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 85.551345][ T174] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 85.577224][ T174] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 85.599279][ T174] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 85.609488][ T174] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 85.619853][ T174] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 85.632886][ T174] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 85.644709][ T174] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 85.687244][ T174] wacom 0003:056A:5012.0001: Unknown device_type for 'HID 056a:5012'. Ignoring. [ 85.723432][ T9] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 85.775184][ T174] usb 1-1: USB disconnect, device number 2 [ 85.960156][ T9] usb 2-1: config 0 has an invalid interface number: 244 but max is 0 [ 85.987863][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.022131][ T9] usb 2-1: config 0 has no interface number 0 [ 86.047067][ T9] usb 2-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 86.052727][ T6002] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.095258][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.157524][ T9] usb 2-1: config 0 descriptor?? [ 86.489114][ T9] usb 2-1: string descriptor 0 read error: -71 [ 86.521232][ T9] cypress_m8 2-1:0.244: DeLorme Earthmate USB converter detected [ 86.530659][ T6010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.26'. [ 86.561625][ T9] earthmate ttyUSB0: required endpoint is missing [ 86.604424][ T6010] syz.0.26: attempt to access beyond end of device [ 86.604424][ T6010] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 86.628127][ T9] usb 2-1: USB disconnect, device number 3 [ 86.665389][ T9] cypress_m8 2-1:0.244: device disconnected [ 86.797599][ T6015] NILFS (nullb0): couldn't find nilfs on the device [ 86.828706][ T27] cfg80211: failed to load regulatory.db [ 87.461596][ T6017] loop2: detected capacity change from 0 to 128 [ 87.469017][ C0] net_ratelimit: 44 callbacks suppressed [ 87.723369][ T6017] CacheFiles: Failed to register: -95 [ 88.114878][ T6033] loop0: detected capacity change from 0 to 256 [ 88.603656][ T28] audit: type=1800 audit(1793416299.121:2): pid=6033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.33" name="file1" dev="loop0" ino=1048621 res=0 errno=0 [ 89.803275][ C0] sched: RT throttling activated [ 90.187107][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.399053][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 90.413473][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.471163][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 90.504560][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.569659][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 90.595905][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 90.619369][ T9] usb 4-1: Product: syz [ 90.631775][ T9] usb 4-1: Manufacturer: syz [ 90.735888][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 90.741424][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 91.029635][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 91.077531][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 91.143322][ T23] usb 4-1: USB disconnect, device number 2 [ 91.543804][ T9] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 91.620240][ T6053] svc: failed to register nfsdv3 RPC service (errno 111). [ 91.651462][ T6053] svc: failed to register nfsaclv3 RPC service (errno 111). [ 91.777513][ T9] usb 3-1: config 0 has an invalid interface number: 244 but max is 0 [ 91.823505][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.850022][ T9] usb 3-1: config 0 has no interface number 0 [ 91.872781][ T9] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 91.882099][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.896192][ T9] usb 3-1: config 0 descriptor?? [ 92.091642][ T6066] syzkaller0: entered promiscuous mode [ 92.098089][ T6066] syzkaller0: entered allmulticast mode [ 92.139508][ T9] usb 3-1: string descriptor 0 read error: -71 [ 92.155361][ T9] cypress_m8 3-1:0.244: DeLorme Earthmate USB converter detected [ 92.169569][ T9] earthmate ttyUSB0: required endpoint is missing [ 92.200521][ T9] usb 3-1: USB disconnect, device number 4 [ 92.216605][ T9] cypress_m8 3-1:0.244: device disconnected [ 92.823349][ C0] net_ratelimit: 44 callbacks suppressed [ 93.344848][ T6080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.52'. [ 94.673434][ T5855] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 94.994028][ T5855] usb 3-1: Using ep0 maxpacket: 8 [ 95.095998][ T5855] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.237280][ T5855] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 95.356054][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.605069][ T5855] usb 3-1: config 0 descriptor?? [ 95.812201][ T5855] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 96.054738][ T5855] gspca_vc032x: reg_r err -32 [ 96.059488][ T5855] vc032x: probe of 3-1:0.0 failed with error -32 [ 96.125863][ T5855] usb 3-1: USB disconnect, device number 5 [ 96.279180][ T6090] syz_tun: entered allmulticast mode [ 96.304102][ T6089] syz_tun: left allmulticast mode [ 97.283416][ T5852] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.485831][ T5852] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.506991][ T5852] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 97.537939][ T5852] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 97.552406][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.624358][ T6122] syz_tun: entered allmulticast mode [ 97.645871][ T6121] syz_tun: left allmulticast mode [ 98.423364][ C1] net_ratelimit: 44 callbacks suppressed [ 98.629055][ T6119] loop0: detected capacity change from 0 to 32768 [ 98.674234][ T6119] [ 98.674234][ T6119] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.674234][ T6119] [ 98.729682][ T6119] ERROR: (device loop0): diWrite: ixpxd invalid [ 98.729682][ T6119] [ 98.744560][ T6119] ERROR: (device loop0): remounting filesystem as read-only [ 98.753481][ T6119] ERROR: (device loop0): txCommit: [ 98.753481][ T6119] [ 98.765796][ T6119] BUG: Bad page state in process syz.0.66 pfn:24e9a [ 98.773373][ T5855] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.773589][ T6119] page:ffffea000093a680 refcount:0 mapcount:0 mapping:0000000000000000 index:0x43 pfn:0x24e9a [ 98.798600][ T6119] flags: 0xfff0000000800c(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 98.823662][ T6119] page_type: 0xffffffff() [ 98.829121][ T6119] raw: 00fff0000000800c ffffea0000889c08 ffffc90005017960 0000000000000000 [ 98.852808][ T6119] raw: 0000000000000043 ffff88803249a9b0 00000000ffffffff 0000000000000000 [ 98.863039][ T6119] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 98.877198][ T6119] page_owner tracks the page as allocated [ 98.886526][ T6119] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 6119, tgid 6117 (syz.0.66), ts 98729522058, free_ts 98711076913 [ 98.904795][ T6119] post_alloc_hook+0x1c1/0x200 [ 98.914150][ T6119] get_page_from_freelist+0x2181/0x22a0 [ 98.919887][ T6119] __alloc_pages+0x1f0/0x460 [ 98.931165][ T6119] folio_alloc+0x1e/0x30 [ 98.935836][ T6119] filemap_alloc_folio+0xdf/0x490 [ 98.940925][ T6119] __filemap_get_folio+0x3fb/0xbe0 [ 98.946693][ T6119] pagecache_get_page+0x2a/0x250 [ 98.951702][ T6119] __get_metapage+0x2ab/0xfa0 [ 98.961181][ T6119] diNewExt+0xa4b/0x3000 [ 98.965894][ T6119] diAllocAG+0xbe2/0x1dd0 [ 98.970320][ T6119] diAlloc+0x1df/0x1680 [ 98.974985][ T6119] ialloc+0x8c/0x940 [ 98.978944][ T6119] jfs_mkdir+0x1e5/0xae0 [ 98.983354][ T5855] usb 2-1: Using ep0 maxpacket: 8 [ 98.991044][ T5855] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.993354][ T6119] vfs_mkdir+0x2a5/0x470 [ 99.005420][ T5855] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 99.006552][ T6119] do_mkdirat+0x1dc/0x450 [ 99.018321][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.019059][ T6119] __x64_sys_mkdirat+0x89/0xa0 [ 99.032677][ T6119] page last free stack trace: [ 99.038029][ T6119] free_unref_page_prepare+0x7d7/0x8f0 [ 99.043969][ T6119] free_unref_page+0x32/0x2e0 [ 99.048719][ T6119] tlb_finish_mmu+0x13e/0x220 [ 99.048742][ T6119] exit_mmap+0x428/0xb90 [ 99.048766][ T6119] __mmput+0x118/0x3a0 [ 99.048784][ T6119] exit_mm+0x23f/0x340 [ 99.064602][ T6119] do_exit+0x909/0x2530 [ 99.071189][ T5855] usb 2-1: config 0 descriptor?? [ 99.071682][ T6119] do_group_exit+0x22d/0x2f0 [ 99.084401][ T6119] __x64_sys_exit_group+0x3f/0x40 [ 99.089520][ T6119] do_syscall_64+0x55/0xb0 [ 99.097545][ T5855] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 99.098326][ T6119] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.111746][ T6119] Modules linked in: [ 99.117460][ T6119] CPU: 0 PID: 6119 Comm: syz.0.66 Not tainted syzkaller #0 [ 99.124695][ T6119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 99.134783][ T6119] Call Trace: [ 99.138074][ T6119] [ 99.141006][ T6119] dump_stack_lvl+0x18c/0x250 [ 99.145722][ T6119] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.151901][ T6119] ? show_regs_print_info+0x20/0x20 [ 99.157102][ T6119] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.163267][ T6119] bad_page+0x14b/0x170 [ 99.167432][ T6119] free_unref_page_prepare+0x884/0x8f0 [ 99.172908][ T6119] free_unref_page_list+0xbe/0x860 [ 99.178015][ T6119] ? __folio_memcg+0x63/0x170 [ 99.182701][ T6119] ? folio_memcg+0x127/0x4a0 [ 99.187292][ T6119] release_pages+0x208a/0x2300 [ 99.192066][ T6119] ? lru_cache_disable+0x30/0x30 [ 99.197006][ T6119] ? mlock_drain_local+0x79/0x490 [ 99.202031][ T6119] ? mlock_drain_local+0x79/0x490 [ 99.207085][ T6119] ? mlock_drain_local+0x28d/0x490 [ 99.212194][ T6119] __folio_batch_release+0x71/0xe0 [ 99.217305][ T6119] truncate_inode_pages_range+0x381/0xea0 [ 99.223035][ T6119] ? mapping_evict_folio+0x530/0x530 [ 99.228344][ T6119] ? __static_call_return0+0x9/0x10 [ 99.233538][ T6119] ? shrink_dentry_list+0x68c/0x6b0 [ 99.238734][ T6119] ? sync_filesystem+0x107/0x220 [ 99.243678][ T6119] jfs_remount+0x34c/0x5c0 [ 99.248093][ T6119] ? jfs_statfs+0x560/0x560 [ 99.252606][ T6119] ? hook_sb_remount+0x1b/0xc0 [ 99.257368][ T6119] ? bpf_lsm_sb_remount+0x9/0x10 [ 99.262298][ T6119] reconfigure_super+0x229/0x8e0 [ 99.267249][ T6119] vfs_fsconfig_locked+0x16c/0x320 [ 99.272362][ T6119] __se_sys_fsconfig+0x70a/0x850 [ 99.277308][ T6119] ? __x64_sys_fsconfig+0xc0/0xc0 [ 99.282350][ T6119] ? lockdep_hardirqs_on+0x98/0x150 [ 99.287545][ T6119] ? __x64_sys_fsconfig+0x20/0xc0 [ 99.292573][ T6119] do_syscall_64+0x55/0xb0 [ 99.296986][ T6119] ? clear_bhb_loop+0x40/0x90 [ 99.301665][ T6119] ? clear_bhb_loop+0x40/0x90 [ 99.306339][ T6119] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.312243][ T6119] RIP: 0033:0x7f499539f559 [ 99.316665][ T6119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.336263][ T6119] RSP: 002b:00007f49961cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 99.344683][ T6119] RAX: ffffffffffffffda RBX: 00007f4995625fa0 RCX: 00007f499539f559 [ 99.352646][ T6119] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000005 [ 99.360614][ T6119] RBP: 00007f4995436b20 R08: 0000000000000000 R09: 0000000000000000 [ 99.368582][ T6119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.376549][ T6119] R13: 00007f4995626038 R14: 00007f4995625fa0 R15: 00007ffefd9213d8 [ 99.384532][ T6119] [ 99.418272][ T6119] Disabling lock debugging due to kernel taint [ 99.425300][ T6119] BUG: Bad page state in process syz.0.66 pfn:22270 [ 99.432031][ T6119] page:ffffea0000889c00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x42 pfn:0x22270 [ 99.443920][ T5852] cxacru 4-1:1.0: send of cm 0x90 failed (-71) [ 99.450197][ T5852] cxacru 4-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 99.457829][ T5852] cxacru: probe of 4-1:1.0 failed with error -22 [ 99.471173][ T5852] usb 4-1: USB disconnect, device number 3 [ 99.494454][ T5855] gspca_vc032x: reg_r err -32 [ 99.499216][ T5855] vc032x: probe of 2-1:0.0 failed with error -32 [ 99.511434][ T5855] usb 2-1: USB disconnect, device number 4 [ 99.531570][ T6119] flags: 0xfff0000000800c(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 99.547992][ T6119] page_type: 0xffffffff() [ 99.556065][ T6119] raw: 00fff0000000800c ffffea0000bc6a08 ffffc90005017960 0000000000000000 [ 99.570430][ T6119] raw: 0000000000000042 ffff88803249a8b8 00000000ffffffff 0000000000000000 [ 99.580008][ T6119] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 99.588958][ T6119] page_owner tracks the page as allocated [ 99.594882][ T6119] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 6119, tgid 6117 (syz.0.66), ts 98729460695, free_ts 98711095990 [ 99.613605][ T6119] post_alloc_hook+0x1c1/0x200 [ 99.618381][ T6119] get_page_from_freelist+0x2181/0x22a0 [ 99.626038][ T6119] __alloc_pages+0x1f0/0x460 [ 99.630650][ T6119] folio_alloc+0x1e/0x30 [ 99.634961][ T6119] filemap_alloc_folio+0xdf/0x490 [ 99.639993][ T6119] __filemap_get_folio+0x3fb/0xbe0 [ 99.645463][ T6119] pagecache_get_page+0x2a/0x250 [ 99.650398][ T6119] __get_metapage+0x2ab/0xfa0 [ 99.655733][ T6119] diNewExt+0xa4b/0x3000 [ 99.659987][ T6119] diAllocAG+0xbe2/0x1dd0 [ 99.664626][ T6119] diAlloc+0x1df/0x1680 [ 99.668776][ T6119] ialloc+0x8c/0x940 [ 99.673095][ T6119] jfs_mkdir+0x1e5/0xae0 [ 99.677657][ T6119] vfs_mkdir+0x2a5/0x470 [ 99.681910][ T6119] do_mkdirat+0x1dc/0x450 [ 99.686306][ T6119] __x64_sys_mkdirat+0x89/0xa0 [ 99.691077][ T6119] page last free stack trace: [ 99.695766][ T6119] free_unref_page_prepare+0x7d7/0x8f0 [ 99.701253][ T6119] free_unref_page+0x32/0x2e0 [ 99.705990][ T6119] tlb_finish_mmu+0x13e/0x220 [ 99.710681][ T6119] exit_mmap+0x428/0xb90 [ 99.714961][ T6119] __mmput+0x118/0x3a0 [ 99.719033][ T6119] exit_mm+0x23f/0x340 [ 99.723091][ T6119] do_exit+0x909/0x2530 [ 99.727507][ T6119] do_group_exit+0x22d/0x2f0 [ 99.732118][ T6119] __x64_sys_exit_group+0x3f/0x40 [ 99.737192][ T6119] do_syscall_64+0x55/0xb0 [ 99.741623][ T6119] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.747675][ T6119] Modules linked in: [ 99.751567][ T6119] CPU: 0 PID: 6119 Comm: syz.0.66 Tainted: G B syzkaller #0 [ 99.760232][ T6119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 99.760245][ T6119] Call Trace: [ 99.760254][ T6119] [ 99.773545][ T6119] dump_stack_lvl+0x18c/0x250 [ 99.781136][ T6119] ? show_regs_print_info+0x20/0x20 [ 99.781163][ T6119] ? swiotlb_print_info+0x70/0x70 [ 99.791344][ T6119] bad_page+0x14b/0x170 [ 99.791372][ T6119] free_unref_page_prepare+0x884/0x8f0 [ 99.800949][ T6119] free_unref_page_list+0xbe/0x860 [ 99.800974][ T6119] ? __folio_memcg+0x63/0x170 [ 99.810719][ T6119] ? folio_memcg+0x127/0x4a0 [ 99.810743][ T6119] release_pages+0x208a/0x2300 [ 99.820048][ T6119] ? lru_cache_disable+0x30/0x30 [ 99.820072][ T6119] ? mlock_drain_local+0x79/0x490 [ 99.829975][ T6119] ? mlock_drain_local+0x79/0x490 [ 99.834994][ T6119] ? mlock_drain_local+0x28d/0x490 [ 99.835016][ T6119] __folio_batch_release+0x71/0xe0 [ 99.835037][ T6119] truncate_inode_pages_range+0x381/0xea0 [ 99.850930][ T6119] ? mapping_evict_folio+0x530/0x530 [ 99.856223][ T6119] ? __static_call_return0+0x9/0x10 [ 99.861407][ T6119] ? shrink_dentry_list+0x68c/0x6b0 [ 99.866594][ T6119] ? sync_filesystem+0x107/0x220 [ 99.871530][ T6119] jfs_remount+0x34c/0x5c0 [ 99.875939][ T6119] ? jfs_statfs+0x560/0x560 [ 99.880461][ T6119] ? hook_sb_remount+0x1b/0xc0 [ 99.885228][ T6119] ? bpf_lsm_sb_remount+0x9/0x10 [ 99.890156][ T6119] reconfigure_super+0x229/0x8e0 [ 99.895087][ T6119] vfs_fsconfig_locked+0x16c/0x320 [ 99.900194][ T6119] __se_sys_fsconfig+0x70a/0x850 [ 99.905128][ T6119] ? __x64_sys_fsconfig+0xc0/0xc0 [ 99.910148][ T6119] ? lockdep_hardirqs_on+0x98/0x150 [ 99.915353][ T6119] ? __x64_sys_fsconfig+0x20/0xc0 [ 99.920372][ T6119] do_syscall_64+0x55/0xb0 [ 99.924782][ T6119] ? clear_bhb_loop+0x40/0x90 [ 99.929452][ T6119] ? clear_bhb_loop+0x40/0x90 [ 99.934119][ T6119] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.940009][ T6119] RIP: 0033:0x7f499539f559 [ 99.944416][ T6119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.964025][ T6119] RSP: 002b:00007f49961cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 99.972428][ T6119] RAX: ffffffffffffffda RBX: 00007f4995625fa0 RCX: 00007f499539f559 [ 99.980389][ T6119] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000005 [ 99.988350][ T6119] RBP: 00007f4995436b20 R08: 0000000000000000 R09: 0000000000000000 [ 99.996308][ T6119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.004267][ T6119] R13: 00007f4995626038 R14: 00007f4995625fa0 R15: 00007ffefd9213d8 [ 100.012234][ T6119] [ 100.023445][ T6119] BUG: Bad page state in process syz.0.66 pfn:2f1a8 [ 100.030214][ T6119] page:ffffea0000bc6a00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x41 pfn:0x2f1a8 [ 100.040858][ T6119] flags: 0xfff0000000800c(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 100.055127][ T6119] page_type: 0xffffffff() [ 100.059518][ T6119] raw: 00fff0000000800c ffffea00009fe788 ffffc90005017960 0000000000000000 [ 100.069540][ T6119] raw: 0000000000000041 ffff88803249a7c0 00000000ffffffff 0000000000000000 [ 100.078231][ T6119] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 100.086648][ T6119] page_owner tracks the page as allocated [ 100.092372][ T6119] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 6119, tgid 6117 (syz.0.66), ts 98729407313, free_ts 98711109969 [ 100.110715][ T6119] post_alloc_hook+0x1c1/0x200 [ 100.115515][ T6119] get_page_from_freelist+0x2181/0x22a0 [ 100.121090][ T6119] __alloc_pages+0x1f0/0x460 [ 100.125867][ T6119] folio_alloc+0x1e/0x30 [ 100.130129][ T6119] filemap_alloc_folio+0xdf/0x490 [ 100.135209][ T6119] __filemap_get_folio+0x3fb/0xbe0 [ 100.140333][ T6119] pagecache_get_page+0x2a/0x250 [ 100.145321][ T6119] __get_metapage+0x2ab/0xfa0 [ 100.150033][ T6119] diNewExt+0xa4b/0x3000 [ 100.154308][ T6119] diAllocAG+0xbe2/0x1dd0 [ 100.158627][ T6119] diAlloc+0x1df/0x1680 [ 100.162771][ T6119] ialloc+0x8c/0x940 [ 100.166802][ T6119] jfs_mkdir+0x1e5/0xae0 [ 100.171057][ T6119] vfs_mkdir+0x2a5/0x470 [ 100.175332][ T6119] do_mkdirat+0x1dc/0x450 [ 100.179663][ T6119] __x64_sys_mkdirat+0x89/0xa0 [ 100.185217][ T6119] page last free stack trace: [ 100.189900][ T6119] free_unref_page_prepare+0x7d7/0x8f0 [ 100.195393][ T6119] free_unref_page+0x32/0x2e0 [ 100.200086][ T6119] tlb_finish_mmu+0x13e/0x220 [ 100.204849][ T6119] exit_mmap+0x428/0xb90 [ 100.209098][ T6119] __mmput+0x118/0x3a0 [ 100.213152][ T6119] exit_mm+0x23f/0x340 [ 100.217251][ T6119] do_exit+0x909/0x2530 [ 100.221419][ T6119] do_group_exit+0x22d/0x2f0 [ 100.226052][ T6119] __x64_sys_exit_group+0x3f/0x40 [ 100.231107][ T6119] do_syscall_64+0x55/0xb0 [ 100.235597][ T6119] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.241515][ T6119] Modules linked in: [ 100.245747][ T6119] CPU: 0 PID: 6119 Comm: syz.0.66 Tainted: G B syzkaller #0 [ 100.254416][ T6119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 100.264463][ T6119] Call Trace: [ 100.267734][ T6119] [ 100.270654][ T6119] dump_stack_lvl+0x18c/0x250 [ 100.275329][ T6119] ? show_regs_print_info+0x20/0x20 [ 100.280522][ T6119] ? swiotlb_print_info+0x70/0x70 [ 100.285542][ T6119] bad_page+0x14b/0x170 [ 100.289696][ T6119] free_unref_page_prepare+0x884/0x8f0 [ 100.295148][ T6119] free_unref_page_list+0xbe/0x860 [ 100.300251][ T6119] ? __folio_memcg+0x63/0x170 [ 100.304921][ T6119] ? folio_memcg+0x127/0x4a0 [ 100.309508][ T6119] release_pages+0x208a/0x2300 [ 100.314265][ T6119] ? lru_cache_disable+0x30/0x30 [ 100.319193][ T6119] ? mlock_drain_local+0x79/0x490 [ 100.324206][ T6119] ? mlock_drain_local+0x79/0x490 [ 100.329222][ T6119] ? mlock_drain_local+0x28d/0x490 [ 100.334321][ T6119] __folio_batch_release+0x71/0xe0 [ 100.339422][ T6119] truncate_inode_pages_range+0x381/0xea0 [ 100.345150][ T6119] ? mapping_evict_folio+0x530/0x530 [ 100.350444][ T6119] ? __static_call_return0+0x9/0x10 [ 100.355629][ T6119] ? shrink_dentry_list+0x68c/0x6b0 [ 100.360815][ T6119] ? sync_filesystem+0x107/0x220 [ 100.365746][ T6119] jfs_remount+0x34c/0x5c0 [ 100.370159][ T6119] ? jfs_statfs+0x560/0x560 [ 100.374651][ T6119] ? hook_sb_remount+0x1b/0xc0 [ 100.379414][ T6119] ? bpf_lsm_sb_remount+0x9/0x10 [ 100.384342][ T6119] reconfigure_super+0x229/0x8e0 [ 100.389271][ T6119] vfs_fsconfig_locked+0x16c/0x320 [ 100.394383][ T6119] __se_sys_fsconfig+0x70a/0x850 [ 100.399320][ T6119] ? __x64_sys_fsconfig+0xc0/0xc0 [ 100.404342][ T6119] ? lockdep_hardirqs_on+0x98/0x150 [ 100.409537][ T6119] ? __x64_sys_fsconfig+0x20/0xc0 [ 100.414559][ T6119] do_syscall_64+0x55/0xb0 [ 100.418968][ T6119] ? clear_bhb_loop+0x40/0x90 [ 100.423643][ T6119] ? clear_bhb_loop+0x40/0x90 [ 100.428315][ T6119] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.434198][ T6119] RIP: 0033:0x7f499539f559 [ 100.438603][ T6119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.458199][ T6119] RSP: 002b:00007f49961cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 100.466604][ T6119] RAX: ffffffffffffffda RBX: 00007f4995625fa0 RCX: 00007f499539f559 [ 100.474565][ T6119] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000005 [ 100.482524][ T6119] RBP: 00007f4995436b20 R08: 0000000000000000 R09: 0000000000000000 [ 100.490490][ T6119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.498474][ T6119] R13: 00007f4995626038 R14: 00007f4995625fa0 R15: 00007ffefd9213d8 [ 100.506443][ T6119] [ 100.528800][ T5783] [ 100.528800][ T5783] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.528800][ T5783] [ 100.539378][ T5783] [ 100.539378][ T5783] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.539378][ T5783] [ 103.543320][ C1] net_ratelimit: 60 callbacks suppressed