last executing test programs: 2m49.887495232s ago: executing program 3 (id=646): socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 2m48.784496111s ago: executing program 3 (id=653): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000019080)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000040)='syscall\x00') socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000a40)={0x8, 0x4000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 2m43.366999161s ago: executing program 2 (id=678): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) eventfd(0x3ff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1000000000000000, 0x0, 0x0, 0x8000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2m42.499243951s ago: executing program 4 (id=679): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000001000)=ANY=[@ANYBLOB="440f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000340)={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2m42.257351148s ago: executing program 2 (id=682): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setreuid(0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioprio_get$uid(0x3, 0xee01) 2m41.916158791s ago: executing program 3 (id=684): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x9a, &(0x7f00000002c0), &(0x7f0000000280)=0x4) 2m41.681202371s ago: executing program 3 (id=686): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000001340)={[{@lazytime}, {@uqnoenforce}, {@swalloc}, {@filestreams}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@gquota}], [{@flag='nomand'}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$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") r0 = fanotify_init(0x8, 0x40000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fanotify_mark(r0, 0x1, 0x8100011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m41.62543734s ago: executing program 5 (id=687): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000000f60004110004"], 0x7a) 2m40.001866349s ago: executing program 0 (id=691): openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) fanotify_init(0x0, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1, 0x8, 0x3, 0x10001, 0x5d}, &(0x7f0000000040)=0x98) close_range(r1, 0xffffffffffffffff, 0x0) pwrite64(r0, 0x0, 0x0, 0x8000c71) r4 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) sendfile(r4, r4, 0x0, 0xfffe80) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x800140, 0x0) syz_open_procfs$userns(0x0, 0x0) gettid() pselect6(0x40, &(0x7f0000000040)={0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) 2m39.960100071s ago: executing program 5 (id=692): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) 2m38.749433636s ago: executing program 0 (id=694): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x78f, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x6, 0x10001) 2m38.596581936s ago: executing program 5 (id=696): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000019080)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000040)='syscall\x00') socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000a40)={0x8, 0x4000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 2m38.053192849s ago: executing program 0 (id=697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003bc0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40850}, 0x810) recvmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0}, 0x45}], 0x1, 0x10020, 0x0) 2m38.05212809s ago: executing program 4 (id=699): unshare(0x8000400) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) 2m37.329409977s ago: executing program 3 (id=700): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) 2m37.153993004s ago: executing program 2 (id=701): rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x8c000003, 0x0, {[0x3]}}, 0x0, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r1, 0x0, 0x0) write$6lowpan_control(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 2m34.433818461s ago: executing program 5 (id=702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) 2m34.20524645s ago: executing program 0 (id=703): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{}, 0x0, &(0x7f00000006c0)='%-010d \x00'}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)={[{0x2b, 'perf_event'}]}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e00)={'wlan0\x00', 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000001a40), 0x1003}, 0x38) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4c000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m34.204891311s ago: executing program 4 (id=705): recvmsg(0xffffffffffffffff, 0x0, 0x2020) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x14, r2, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) r3 = socket(0x2, 0x2, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r3) ioctl$NBD_DO_IT(r4, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x200000a) 2m33.635674462s ago: executing program 3 (id=706): openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0), 0x40280, 0x0) fanotify_init(0x0, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1, 0x8, 0x3, 0x10001, 0x5d}, &(0x7f0000000040)=0x98) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r0, 0x0, 0x0, 0x8000c71) r3 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) sendfile(r3, r3, 0x0, 0xfffe80) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x800140, 0x0) syz_open_procfs$userns(0x0, 0x0) gettid() pselect6(0x40, &(0x7f0000000040)={0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) 2m27.22196108s ago: executing program 2 (id=707): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2000000, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="b800000000000000"], 0xb8}}], 0x1, 0x20000000) 2m15.046629261s ago: executing program 5 (id=708): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x10, 0x4000000, @void}, 0x10) 2m15.04648963s ago: executing program 1 (id=709): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000003c0)={0x54, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044040) socket$inet6_mptcp(0xa, 0x1, 0x106) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x31]}}}}]}) 2m15.046393696s ago: executing program 0 (id=710): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="b000", @ANYRES16, @ANYBLOB="010000000000000000000c0000009c00058008000100756470001c00028008000300000000000800020000000000080002000000000008000100657468000800010075647000080003006574680014000280"], 0xb0}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a95c55bcc7cb4a9362a5ce533229c8ee", 0x20) 2m15.046227343s ago: executing program 4 (id=711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40850}, 0x810) 2m15.045813756s ago: executing program 2 (id=712): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x21, &(0x7f0000001d80)=""/3, 0x0) 2m15.045553737s ago: executing program 0 (id=713): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setreuid(0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioprio_get$uid(0x3, 0xee01) 2m15.045150549s ago: executing program 5 (id=714): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000019080)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000040)='syscall\x00') socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000a40)={0x8, 0x4000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 2m15.044909262s ago: executing program 2 (id=715): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003bc0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40850}, 0x810) recvmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0}, 0x45}], 0x1, 0x10020, 0x0) 2m15.044674231s ago: executing program 32 (id=706): openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0), 0x40280, 0x0) fanotify_init(0x0, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1, 0x8, 0x3, 0x10001, 0x5d}, &(0x7f0000000040)=0x98) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r0, 0x0, 0x0, 0x8000c71) r3 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) sendfile(r3, r3, 0x0, 0xfffe80) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x800140, 0x0) syz_open_procfs$userns(0x0, 0x0) gettid() pselect6(0x40, &(0x7f0000000040)={0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) 2m3.792577265s ago: executing program 1 (id=717): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002140)={0x10, 0xffffffffffffffda, r2}, 0x10) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) open_by_handle_at(r1, 0x0, 0x0) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00') 2m3.791556312s ago: executing program 4 (id=718): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x40c89}}, 0x20}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) 1m59.877679563s ago: executing program 33 (id=713): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setreuid(0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioprio_get$uid(0x3, 0xee01) 1m55.934419427s ago: executing program 34 (id=715): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003bc0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40850}, 0x810) recvmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0}, 0x45}], 0x1, 0x10020, 0x0) 1m55.584474452s ago: executing program 35 (id=714): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000019080)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000040)='syscall\x00') socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000a40)={0x8, 0x4000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 1m54.424978645s ago: executing program 1 (id=722): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0x18}, 0x4000) 1m54.42444497s ago: executing program 4 (id=723): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{}, 0x0, &(0x7f00000006c0)='%-010d \x00'}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)={[{0x2b, 'perf_event'}]}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e00)={'wlan0\x00', 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000001a40), 0x1003}, 0x38) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4c000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m47.194055271s ago: executing program 1 (id=724): recvmsg(0xffffffffffffffff, 0x0, 0x2020) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x14, r2, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) r3 = socket(0x2, 0x2, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r3) ioctl$NBD_DO_IT(r4, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x200000a) 1m45.191130902s ago: executing program 1 (id=725): r0 = syz_io_uring_setup(0x145b, &(0x7f00000004c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000240)=0x0, &(0x7f00000002c0)=0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={&(0x7f0000000180), 0xc, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 1m45.110667006s ago: executing program 1 (id=726): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2000000, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="b8000000000000000d"], 0xb8}}], 0x1, 0x20000000) 1m35.713221417s ago: executing program 36 (id=723): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{}, 0x0, &(0x7f00000006c0)='%-010d \x00'}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)={[{0x2b, 'perf_event'}]}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e00)={'wlan0\x00', 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000001a40), 0x1003}, 0x38) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4c000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m19.114496487s ago: executing program 37 (id=726): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2000000, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="b8000000000000000d"], 0xb8}}], 0x1, 0x20000000) 1m6.081574505s ago: executing program 9 (id=721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) 0s ago: executing program 6 (id=716): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.158' (ED25519) to the list of known hosts. [ 69.693966][ T5823] cgroup: Unknown subsys name 'net' [ 69.854298][ T5823] cgroup: Unknown subsys name 'cpuset' [ 69.862733][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.954132][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.960626][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.280924][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.764194][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.793699][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.793881][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.801218][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.816495][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.824251][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.832609][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.842519][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.850695][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.859426][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.866986][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.875040][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.882513][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.890345][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.900540][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.908368][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.908629][ T5852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.916824][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.922971][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.931064][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.951475][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.958629][ T5852] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.966337][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.991043][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.997069][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.007997][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.015716][ T5856] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.023345][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.026750][ T5852] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.034288][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 76.045508][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.046185][ T5856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 76.061158][ T5856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 76.080071][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 76.092615][ T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 76.099928][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 76.535665][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 76.587254][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 76.776541][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 76.826837][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.836962][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.845998][ T5835] bridge_slave_0: entered allmulticast mode [ 76.853601][ T5835] bridge_slave_0: entered promiscuous mode [ 76.865687][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 76.913775][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.921383][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.928517][ T5835] bridge_slave_1: entered allmulticast mode [ 76.935915][ T5835] bridge_slave_1: entered promiscuous mode [ 76.959126][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.966305][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.973585][ T5834] bridge_slave_0: entered allmulticast mode [ 76.980695][ T5834] bridge_slave_0: entered promiscuous mode [ 76.993290][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 77.043264][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 77.053867][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.061846][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.068980][ T5834] bridge_slave_1: entered allmulticast mode [ 77.077076][ T5834] bridge_slave_1: entered promiscuous mode [ 77.104899][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.117178][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.181975][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.198208][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.288888][ T5835] team0: Port device team_slave_0 added [ 77.331270][ T5835] team0: Port device team_slave_1 added [ 77.357549][ T5834] team0: Port device team_slave_0 added [ 77.363666][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.371723][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.378872][ T5849] bridge_slave_0: entered allmulticast mode [ 77.386851][ T5849] bridge_slave_0: entered promiscuous mode [ 77.395260][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.402822][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.409963][ T5849] bridge_slave_1: entered allmulticast mode [ 77.416949][ T5849] bridge_slave_1: entered promiscuous mode [ 77.438549][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.445729][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.453240][ T5843] bridge_slave_0: entered allmulticast mode [ 77.460023][ T5843] bridge_slave_0: entered promiscuous mode [ 77.473743][ T5834] team0: Port device team_slave_1 added [ 77.522963][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.530125][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.540807][ T5843] bridge_slave_1: entered allmulticast mode [ 77.547647][ T5843] bridge_slave_1: entered promiscuous mode [ 77.614295][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.624782][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.632720][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.658683][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.672399][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.679350][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.705430][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.728899][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.747254][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.754515][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.762433][ T5845] bridge_slave_0: entered allmulticast mode [ 77.769377][ T5845] bridge_slave_0: entered promiscuous mode [ 77.798600][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.824809][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.845217][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.852505][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.859640][ T5845] bridge_slave_1: entered allmulticast mode [ 77.867085][ T5845] bridge_slave_1: entered promiscuous mode [ 77.883956][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.894100][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.920301][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.931596][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.938716][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.946293][ T5850] bridge_slave_0: entered allmulticast mode [ 77.954097][ T5850] bridge_slave_0: entered promiscuous mode [ 77.973408][ T5849] team0: Port device team_slave_0 added [ 77.982020][ T5849] team0: Port device team_slave_1 added [ 77.991019][ T55] Bluetooth: hci2: command tx timeout [ 77.991025][ T5839] Bluetooth: hci1: command tx timeout [ 77.991298][ T5839] Bluetooth: hci0: command tx timeout [ 78.021092][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.028196][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.059853][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.078645][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.086931][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.094749][ T5850] bridge_slave_1: entered allmulticast mode [ 78.102098][ T5850] bridge_slave_1: entered promiscuous mode [ 78.140109][ T5843] team0: Port device team_slave_0 added [ 78.148663][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.158289][ T5839] Bluetooth: hci5: command tx timeout [ 78.158313][ T5856] Bluetooth: hci3: command tx timeout [ 78.158531][ T5856] Bluetooth: hci4: command tx timeout [ 78.166983][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.206286][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.214658][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.241059][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.265205][ T5843] team0: Port device team_slave_1 added [ 78.326101][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.339513][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.346563][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.372864][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.393195][ T5835] hsr_slave_0: entered promiscuous mode [ 78.400445][ T5835] hsr_slave_1: entered promiscuous mode [ 78.416037][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.423050][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.449097][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.463444][ T5845] team0: Port device team_slave_0 added [ 78.472875][ T5834] hsr_slave_0: entered promiscuous mode [ 78.479137][ T5834] hsr_slave_1: entered promiscuous mode [ 78.486147][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.494027][ T5834] Cannot create hsr debugfs directory [ 78.502069][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.527636][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.535115][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.561339][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.580036][ T5845] team0: Port device team_slave_1 added [ 78.599389][ T5850] team0: Port device team_slave_0 added [ 78.608416][ T5850] team0: Port device team_slave_1 added [ 78.704548][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.719892][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.746303][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.808855][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.816805][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.843114][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.866935][ T5849] hsr_slave_0: entered promiscuous mode [ 78.873367][ T5849] hsr_slave_1: entered promiscuous mode [ 78.879332][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.887012][ T5849] Cannot create hsr debugfs directory [ 78.905393][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.912436][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.938571][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.963708][ T5843] hsr_slave_0: entered promiscuous mode [ 78.970065][ T5843] hsr_slave_1: entered promiscuous mode [ 78.976215][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.983829][ T5843] Cannot create hsr debugfs directory [ 79.027310][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.035753][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.062469][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.107327][ T5845] hsr_slave_0: entered promiscuous mode [ 79.113913][ T5845] hsr_slave_1: entered promiscuous mode [ 79.119950][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.128490][ T5845] Cannot create hsr debugfs directory [ 79.322658][ T5850] hsr_slave_0: entered promiscuous mode [ 79.328986][ T5850] hsr_slave_1: entered promiscuous mode [ 79.335553][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.343560][ T5850] Cannot create hsr debugfs directory [ 79.618757][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.633543][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.648374][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.658507][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.732095][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.747152][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.762414][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.781157][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.860615][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.882135][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.897070][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.906964][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.955375][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.998500][ T5845] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 80.008985][ T5845] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 80.044347][ T5845] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 80.058229][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.070396][ T5856] Bluetooth: hci2: command tx timeout [ 80.075825][ T5856] Bluetooth: hci1: command tx timeout [ 80.082938][ T55] Bluetooth: hci0: command tx timeout [ 80.096250][ T5845] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 80.107649][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.115078][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.125218][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.132350][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.178460][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.206689][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.217273][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.227350][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.234314][ T5856] Bluetooth: hci4: command tx timeout [ 80.240496][ T55] Bluetooth: hci3: command tx timeout [ 80.246045][ T5856] Bluetooth: hci5: command tx timeout [ 80.344071][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.412836][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.429840][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.469117][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.504090][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.537643][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.623693][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.649840][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.657025][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.668426][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.675604][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.697805][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.719106][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.756848][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.803039][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.838793][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.866712][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.873915][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.898656][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.905887][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.928481][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.939803][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.965282][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.972631][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.034897][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.042073][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.052822][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.059957][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.118848][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.126037][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.166249][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.220361][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.355813][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.362999][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.379452][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.386586][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.414172][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.529215][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.568314][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.593241][ T5835] veth0_vlan: entered promiscuous mode [ 81.666622][ T5835] veth1_vlan: entered promiscuous mode [ 81.793630][ T5834] veth0_vlan: entered promiscuous mode [ 81.863118][ T5835] veth0_macvtap: entered promiscuous mode [ 81.898978][ T5834] veth1_vlan: entered promiscuous mode [ 81.949646][ T5835] veth1_macvtap: entered promiscuous mode [ 81.974242][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.041295][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.105057][ T5834] veth0_macvtap: entered promiscuous mode [ 82.133837][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.160479][ T5856] Bluetooth: hci1: command tx timeout [ 82.160638][ T55] Bluetooth: hci0: command tx timeout [ 82.165914][ T5839] Bluetooth: hci2: command tx timeout [ 82.175917][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.247892][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.312196][ T5856] Bluetooth: hci5: command tx timeout [ 82.317670][ T5856] Bluetooth: hci3: command tx timeout [ 82.324160][ T5839] Bluetooth: hci4: command tx timeout [ 82.342534][ T5849] veth0_vlan: entered promiscuous mode [ 82.361329][ T5834] veth1_macvtap: entered promiscuous mode [ 82.374265][ T5843] veth0_vlan: entered promiscuous mode [ 82.384394][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.393802][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.406101][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.416133][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.425168][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.444603][ T5849] veth1_vlan: entered promiscuous mode [ 82.483609][ T5843] veth1_vlan: entered promiscuous mode [ 82.549492][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.561923][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.573809][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.603720][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.614847][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.627049][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.639132][ T5843] veth0_macvtap: entered promiscuous mode [ 82.682691][ T5843] veth1_macvtap: entered promiscuous mode [ 82.705221][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.716631][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.725763][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.735151][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.791653][ T5849] veth0_macvtap: entered promiscuous mode [ 82.807300][ T5845] veth0_vlan: entered promiscuous mode [ 82.819000][ T5849] veth1_macvtap: entered promiscuous mode [ 82.827313][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.842039][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.859234][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.873691][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.883777][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.894442][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.905969][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.920138][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.932130][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.942511][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.953343][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.963381][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.974198][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.985694][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.004387][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.014948][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.025008][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.035562][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.046508][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.076165][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.086411][ T5849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.095365][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.097111][ T5849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.112010][ T5849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.121762][ T5849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.136121][ T5845] veth1_vlan: entered promiscuous mode [ 83.171246][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.190762][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.201190][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.211732][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.221860][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.232389][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.244070][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.291400][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.300154][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.313221][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.320169][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.322424][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.358285][ T5850] veth0_vlan: entered promiscuous mode [ 83.426982][ T5850] veth1_vlan: entered promiscuous mode [ 83.476250][ T5845] veth0_macvtap: entered promiscuous mode [ 83.551456][ T5845] veth1_macvtap: entered promiscuous mode [ 83.593452][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.611671][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.718030][ T5850] veth0_macvtap: entered promiscuous mode [ 83.759164][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.782492][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.800102][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.818367][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.829975][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.857878][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.867802][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.878457][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.889980][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.978629][ T5948] loop4: detected capacity change from 0 to 16 [ 84.004460][ T5948] erofs (device loop4): mounted with root inode @ nid 36. [ 84.230487][ T5856] Bluetooth: hci0: command tx timeout [ 84.241221][ T5839] Bluetooth: hci2: command tx timeout [ 84.247069][ T5856] Bluetooth: hci1: command tx timeout [ 84.391710][ T5839] Bluetooth: hci3: command tx timeout [ 84.397308][ T5856] Bluetooth: hci5: command tx timeout [ 84.403287][ T5839] Bluetooth: hci4: command tx timeout [ 84.552640][ T5850] veth1_macvtap: entered promiscuous mode [ 84.589751][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.599409][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.622397][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.655684][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.672890][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.688815][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.700031][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.712771][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.724084][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.735295][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.747226][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.776298][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.800204][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.829798][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.848619][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.858785][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.870740][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.888118][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.898861][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.909068][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.920839][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.939847][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.021936][ T5845] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.038816][ T5845] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.048127][ T5845] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.060545][ T5845] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.100657][ T2971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.123955][ T2971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.124545][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.149369][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.159838][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.178134][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.188274][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.212492][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.228773][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.247142][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.257710][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.275808][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.288593][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.369878][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.377976][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.389505][ T5850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.399365][ T5850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.408447][ T5850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.417408][ T5850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.021920][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.057979][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.202150][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.210023][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.327719][ T26] cfg80211: failed to load regulatory.db [ 86.479866][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.498118][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.520783][ T5962] loop2: detected capacity change from 0 to 512 [ 86.604099][ T5965] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.905638][ T5962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.956119][ T5968] misc userio: Invalid payload size [ 87.018863][ T5962] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.341151][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.348679][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.516571][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.565683][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.653436][ T2971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.672145][ T2971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.956819][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.931612][ T6003] loop2: detected capacity change from 0 to 128 [ 91.185841][ T6003] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.382858][ T6003] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.400670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.590629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 91.750843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.252672][ T5834] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.513027][ T6033] syz.1.27 uses obsolete (PF_INET,SOCK_PACKET) [ 93.227650][ T6039] loop2: detected capacity change from 0 to 64 [ 93.520826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 93.725855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.828119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 93.930791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 94.343327][ T6050] loop3: detected capacity change from 0 to 256 [ 94.510520][ T6050] FAT-fs (loop3): Directory bread(block 64) failed [ 94.517249][ T6050] FAT-fs (loop3): Directory bread(block 65) failed [ 94.578443][ T6050] FAT-fs (loop3): Directory bread(block 66) failed [ 94.600376][ T6050] FAT-fs (loop3): Directory bread(block 67) failed [ 94.607995][ T6050] FAT-fs (loop3): Directory bread(block 68) failed [ 94.635491][ T6050] FAT-fs (loop3): Directory bread(block 69) failed [ 94.643830][ T6050] FAT-fs (loop3): Directory bread(block 70) failed [ 94.662686][ T6050] FAT-fs (loop3): Directory bread(block 71) failed [ 94.738184][ T6050] FAT-fs (loop3): Directory bread(block 72) failed [ 94.782595][ T6050] FAT-fs (loop3): Directory bread(block 73) failed [ 94.916477][ T6065] loop4: detected capacity change from 0 to 512 [ 96.510458][ T30] audit: type=1326 audit(1742387142.574:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.0.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0505f8d169 code=0x7ffc0000 [ 97.179332][ T30] audit: type=1326 audit(1742387142.574:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.0.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0505f8d169 code=0x7ffc0000 [ 97.197633][ T6065] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 97.237121][ T6065] System zones: 1-12 [ 97.253091][ T30] audit: type=1326 audit(1742387142.674:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.0.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0505f8d169 code=0x7ffc0000 [ 97.275207][ T30] audit: type=1326 audit(1742387142.674:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.0.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0505f8d169 code=0x7ffc0000 [ 97.297672][ T30] audit: type=1326 audit(1742387142.674:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.0.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0505f8d169 code=0x7ffc0000 [ 97.322296][ T30] audit: type=1326 audit(1742387142.774:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.0.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0505f8d169 code=0x7ffc0000 [ 97.345800][ T6065] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.38: invalid indirect mapped block 1819239214 (level 1) [ 97.361522][ T30] audit: type=1326 audit(1742387142.774:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.0.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0505f8d169 code=0x7ffc0000 [ 97.406041][ T6065] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.38: bg 0: block 361: padding at end of block bitmap is not set [ 97.423682][ T30] audit: type=1326 audit(1742387142.774:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.0.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0505f8d169 code=0x7ffc0000 [ 97.548797][ T6065] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 97.622457][ T6065] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.38: attempt to clear invalid blocks 33619980 len 1 [ 97.674033][ T30] audit: type=1326 audit(1742387142.874:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.0.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0505f8d169 code=0x7ffc0000 [ 97.697748][ T30] audit: type=1326 audit(1742387142.874:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.0.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0505f8d169 code=0x7ffc0000 [ 97.737361][ T6065] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.38: invalid indirect mapped block 1819239214 (level 0) [ 98.128999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.191592][ T6065] EXT4-fs (loop4): 1 truncate cleaned up [ 98.391088][ T6065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.603456][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.777474][ T6089] capability: warning: `syz.5.46' uses deprecated v2 capabilities in a way that may be insecure [ 98.802288][ T6087] loop2: detected capacity change from 0 to 2048 [ 98.892824][ T6087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.954131][ T6087] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.074709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 100.150605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.406855][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.783437][ T5895] udevd[5895]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 100.819856][ T6110] tipc: Started in network mode [ 100.887610][ T6110] tipc: Node identity 4, cluster identity 4711 [ 100.930410][ T6110] tipc: Node number set to 4 [ 101.539917][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.59'. [ 102.494943][ T6135] misc userio: Invalid payload size [ 105.861958][ T6165] tipc: Started in network mode [ 105.866889][ T6165] tipc: Node identity 4, cluster identity 4711 [ 105.941120][ T6165] tipc: Node number set to 4 [ 106.698622][ T6180] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.76'. [ 107.126225][ T6190] nfs4: Unknown parameter 'tcpile0' [ 107.208683][ T6192] misc userio: Invalid payload size [ 111.267226][ T6240] nfs4: Unknown parameter 'tcpile0' [ 112.557604][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 112.821980][ T6261] Zero length message leads to an empty skb [ 113.772266][ T6271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.105'. [ 114.474753][ T6276] netlink: 16 bytes leftover after parsing attributes in process `syz.1.105'. [ 117.308485][ T6296] loop5: detected capacity change from 0 to 128 [ 117.621468][ T6296] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.741620][ T6296] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.995108][ T5845] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.137589][ T6315] netlink: 16 bytes leftover after parsing attributes in process `syz.3.122'. [ 118.836493][ T6320] netlink: 16 bytes leftover after parsing attributes in process `syz.3.122'. [ 119.003867][ T6325] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.333215][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.130'. [ 123.592556][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'. [ 123.714501][ T6362] bridge_slave_1: left allmulticast mode [ 123.720614][ T6362] bridge_slave_1: left promiscuous mode [ 123.728537][ T6362] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.747112][ T6362] bridge_slave_0: left allmulticast mode [ 124.008025][ T6362] bridge_slave_0: left promiscuous mode [ 124.020209][ T6362] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.661585][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 127.735893][ T6412] ======================================================= [ 127.735893][ T6412] WARNING: The mand mount option has been deprecated and [ 127.735893][ T6412] and is ignored by this kernel. Remove the mand [ 127.735893][ T6412] option from the mount to silence this warning. [ 127.735893][ T6412] ======================================================= [ 128.265157][ T6413] netlink: 'syz.3.153': attribute type 10 has an invalid length. [ 128.301704][ T6413] batman_adv: batadv0: Adding interface: team0 [ 128.308130][ T6413] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.341331][ T6413] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 131.916719][ T6448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.940734][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'. [ 131.996427][ T6448] bond0: (slave rose0): Enslaving as an active interface with an up link [ 132.094598][ T6459] mmap: syz.3.168 (6459) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 132.276832][ T6446] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 132.284272][ T6446] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 132.312934][ T6446] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 132.340825][ T6470] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.171'. [ 132.361646][ T6446] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 132.367602][ T6446] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 132.394662][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.401776][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.428742][ T6446] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 132.473105][ T6446] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 132.479130][ T6446] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 132.558440][ T6446] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 132.676655][ T6481] netlink: 'syz.3.173': attribute type 10 has an invalid length. [ 132.722570][ T6446] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 132.731854][ T6446] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 133.428460][ T6446] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 133.941001][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.061391][ T6446] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 134.067575][ T6446] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 134.110003][ T6446] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 134.154020][ T6446] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 134.173893][ T6446] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 134.175457][ T6490] Invalid source name [ 134.194789][ T6490] UBIFS error (pid: 6490): cannot open "/dev/sg0", error -22 [ 134.202859][ T6446] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 134.398751][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 134.551333][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.649050][ T5902] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 134.830459][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 134.880332][ T5902] usb 6-1: Using ep0 maxpacket: 8 [ 134.893282][ T5902] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.905025][ T6497] loop3: detected capacity change from 0 to 512 [ 134.920463][ T5902] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.941941][ T5902] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.957253][ T5902] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.014555][ T6497] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 135.030448][ T5902] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.084231][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.120365][ T6497] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 135.154727][ T5902] usb 6-1: can't set config #16, error -71 [ 135.222349][ T5902] usb 6-1: USB disconnect, device number 2 [ 136.020366][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.070873][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 136.211316][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.182'. [ 136.230662][ T5839] Bluetooth: hci5: command 0x0c1a tx timeout [ 136.480885][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.650126][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.871051][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.516716][ T6540] loop5: detected capacity change from 0 to 64 [ 137.524699][ T6537] @: renamed from vlan0 (while UP) [ 137.641778][ T6545] netlink: 'syz.0.187': attribute type 10 has an invalid length. [ 137.675892][ T6545] batman_adv: batadv0: Adding interface: team0 [ 137.682333][ T6545] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.707800][ T6545] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 138.072573][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.151658][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 138.333788][ T5839] Bluetooth: hci5: command 0x0c1a tx timeout [ 138.610572][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.750447][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.961582][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 140.231769][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 140.392836][ T5839] Bluetooth: hci5: command 0x0c1a tx timeout [ 141.782259][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 143.155327][ T6596] Invalid source name [ 143.160350][ T6596] UBIFS error (pid: 6596): cannot open "/dev/sg0", error -22 [ 143.378739][ T6606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.204'. [ 143.483853][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.204'. [ 146.369274][ T6644] loop5: detected capacity change from 0 to 32768 [ 146.377017][ T6644] btrfs: Deprecated parameter 'usebackuproot' [ 146.383404][ T6644] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 147.092992][ T6644] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.218 (6644) [ 147.146412][ T6644] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.156970][ T6644] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm [ 147.165932][ T6644] BTRFS info (device loop5): using free-space-tree [ 147.562934][ T6644] BTRFS info (device loop5): rebuilding free space tree [ 147.605124][ T6672] netlink: 20 bytes leftover after parsing attributes in process `syz.3.223'. [ 147.699165][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'. [ 148.906491][ T5845] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 149.479028][ T6699] netlink: 'syz.4.234': attribute type 1 has an invalid length. [ 150.344042][ T6699] netlink: 'syz.4.234': attribute type 2 has an invalid length. [ 150.506822][ T6703] netlink: 'syz.4.234': attribute type 1 has an invalid length. [ 150.710507][ T6703] netlink: 'syz.4.234': attribute type 2 has an invalid length. [ 150.718340][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.906704][ T6712] misc userio: Invalid payload size [ 151.353219][ T6719] netlink: 116 bytes leftover after parsing attributes in process `syz.4.240'. [ 151.963389][ T6738] loop4: detected capacity change from 0 to 64 [ 151.989513][ T6736] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 153.238627][ T6763] misc userio: Invalid payload size [ 158.427047][ T6827] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.417966][ T6827] bond1 (unregistering): Released all slaves [ 159.687262][ T6841] netlink: 'syz.2.275': attribute type 1 has an invalid length. [ 159.770421][ T6841] netlink: 'syz.2.275': attribute type 2 has an invalid length. [ 159.918434][ T6850] netlink: 'syz.2.275': attribute type 1 has an invalid length. [ 160.030773][ T6850] netlink: 'syz.2.275': attribute type 2 has an invalid length. [ 160.850443][ T5918] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 161.220353][ T5918] usb 1-1: Using ep0 maxpacket: 8 [ 161.251651][ T5918] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 161.281166][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.316291][ T5918] usb 1-1: Product: syz [ 161.340648][ T5918] usb 1-1: Manufacturer: syz [ 161.356910][ T5918] usb 1-1: SerialNumber: syz [ 161.416351][ T5918] usb 1-1: config 0 descriptor?? [ 161.519778][ T5918] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 162.576117][ T5918] usb 1-1: USB disconnect, device number 2 [ 164.615677][ T6886] loop5: detected capacity change from 0 to 64 [ 166.667393][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'. [ 168.943994][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.302'. [ 172.382765][ T6960] overlayfs: failed to clone upperpath [ 172.937828][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.314'. [ 175.514486][ T5839] block nbd2: Receive control failed (result -107) [ 175.930392][ T6999] nbd2: detected capacity change from 0 to 72456 [ 175.940088][ T6995] block nbd2: shutting down sockets [ 175.990687][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'. [ 176.093834][ T7002] netlink: 44 bytes leftover after parsing attributes in process `syz.4.326'. [ 180.652748][ T5902] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 180.880611][ T5902] usb 6-1: Using ep0 maxpacket: 8 [ 181.421905][ T5902] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 181.503487][ T5902] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 181.560337][ T5902] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 181.636713][ T5902] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.741153][ T5902] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 181.800320][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.050927][ T5902] usb 6-1: GET_CAPABILITIES returned 0 [ 182.069698][ T5902] usbtmc 6-1:16.0: can't read capabilities [ 182.303198][ T5902] usb 6-1: USB disconnect, device number 3 [ 182.832636][ T7083] netlink: 'syz.4.352': attribute type 1 has an invalid length. [ 182.860756][ T7083] netlink: 'syz.4.352': attribute type 2 has an invalid length. [ 182.889303][ T7081] tipc: Started in network mode [ 182.895823][ T7083] netlink: 'syz.4.352': attribute type 1 has an invalid length. [ 182.920643][ T7081] tipc: Node identity 4, cluster identity 4711 [ 182.926945][ T7081] tipc: Node number set to 4 [ 182.945909][ T7083] netlink: 'syz.4.352': attribute type 2 has an invalid length. [ 182.975578][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 182.975597][ T30] audit: type=1326 audit(1742387229.434:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958f58d169 code=0x7ffc0000 [ 184.183555][ T7108] loop4: detected capacity change from 0 to 128 [ 184.597501][ T7108] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.727082][ T7108] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 184.930870][ T5835] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.671027][ T7147] loop4: detected capacity change from 0 to 512 [ 186.707110][ T7147] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 186.725068][ T7147] System zones: 1-12 [ 186.768612][ T7147] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 33619980: comm syz.4.376: invalid block [ 186.789441][ T7152] syz.1.374: attempt to access beyond end of device [ 186.789441][ T7152] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 186.850557][ T7151] nbd1: detected capacity change from 0 to 67108884 [ 186.902155][ T5896] block nbd1: Send control failed (result -89) [ 186.918685][ T5896] block nbd1: Request send failed, requeueing [ 186.921016][ T7147] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.376: invalid indirect mapped block 1819239214 (level 1) [ 186.947260][ T5839] block nbd1: Receive control failed (result -32) [ 186.957842][ T41] block nbd1: Dead connection, failed to find a fallback [ 186.965250][ T41] block nbd1: shutting down sockets [ 186.966759][ T7152] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.970712][ T41] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.970934][ T41] Buffer I/O error on dev nbd1, logical block 0, async page read [ 186.971209][ T5896] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.983880][ T7147] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.376: bg 0: block 361: padding at end of block bitmap is not set [ 186.990096][ T5896] Buffer I/O error on dev nbd1, logical block 1, async page read [ 187.031247][ T5896] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.040392][ T5896] Buffer I/O error on dev nbd1, logical block 2, async page read [ 187.049460][ T5896] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.059808][ T5896] Buffer I/O error on dev nbd1, logical block 3, async page read [ 187.074318][ T5896] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.074839][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 187.095046][ T5896] Buffer I/O error on dev nbd1, logical block 0, async page read [ 187.105695][ T5896] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.127681][ T5896] Buffer I/O error on dev nbd1, logical block 1, async page read [ 187.129202][ T7147] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 187.160984][ T7152] I/O error, dev nbd1, sector 67108882 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.200548][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554441, location=33554441 [ 187.232926][ T7147] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.376: attempt to clear invalid blocks 33619980 len 1 [ 187.250166][ T7152] I/O error, dev nbd1, sector 67108370 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.261281][ T7147] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.376: invalid indirect mapped block 1819239214 (level 0) [ 187.276193][ T7147] EXT4-fs (loop4): 1 truncate cleaned up [ 187.282429][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554185, location=33554185 [ 187.294050][ T7147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.310068][ T7152] I/O error, dev nbd1, sector 67108880 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.329554][ T5896] Buffer I/O error on dev nbd1, logical block 2, async page read [ 187.337778][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554440, location=33554440 [ 187.367496][ T5896] Buffer I/O error on dev nbd1, logical block 3, async page read [ 187.487246][ T5896] Buffer I/O error on dev nbd1, logical block 0, async page read [ 187.526000][ T5896] Buffer I/O error on dev nbd1, logical block 1, async page read [ 187.560509][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554184, location=33554184 [ 187.596400][ T5896] ldm_validate_partition_table(): Disk read failed. [ 187.622844][ T5896] Dev nbd1: unable to read RDB block 0 [ 187.687586][ T5896] nbd1: unable to read partition table [ 187.747022][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554439, location=33554439 [ 187.913025][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554183, location=33554183 [ 187.990815][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554291, location=33554291 [ 188.068371][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554035, location=33554035 [ 188.160467][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554289, location=33554289 [ 188.219544][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554033, location=33554033 [ 188.282902][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 188.299128][ T5896] ldm_validate_partition_table(): Disk read failed. [ 188.331422][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.365732][ T5896] Dev nbd1: unable to read RDB block 0 [ 188.366096][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 188.389738][ T5896] nbd1: unable to read partition table [ 188.421947][ T7162] trusted_key: encrypted_key: key user:syz not found [ 188.428253][ T7162] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 188.491578][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777220, location=16777220 [ 188.560910][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776964, location=16776964 [ 188.595504][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777219, location=16777219 [ 188.651214][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776963, location=16776963 [ 188.713676][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777218, location=16777218 [ 188.759168][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776962, location=16776962 [ 188.773005][ T7166] loop4: detected capacity change from 0 to 128 [ 188.789948][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777070, location=16777070 [ 188.820772][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776814, location=16776814 [ 188.846410][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777068, location=16777068 [ 188.884838][ T7166] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.897232][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776812, location=16776812 [ 188.962200][ T7166] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.973223][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 189.022139][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 189.050785][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388609, location=8388609 [ 189.116078][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388353, location=8388353 [ 189.131185][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388608, location=8388608 [ 189.149998][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388352, location=8388352 [ 189.180804][ T5835] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.200032][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388607, location=8388607 [ 189.240541][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388351, location=8388351 [ 189.322879][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388459, location=8388459 [ 189.426330][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388203, location=8388203 [ 189.506599][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388457, location=8388457 [ 189.561991][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388201, location=8388201 [ 189.573737][ T7152] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 189.610595][ T7152] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 190.528344][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'. [ 193.875279][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.882065][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.790395][ T5897] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 196.972600][ T5897] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 196.992809][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.050767][ T5897] usb 5-1: config 0 descriptor?? [ 197.092724][ T5897] cp210x 5-1:0.0: cp210x converter detected [ 197.505249][ T5897] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 197.592850][ T5897] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 197.629175][ T5897] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 197.688716][ T5897] usb 5-1: cp210x converter now attached to ttyUSB0 [ 197.908595][ T5897] usb 5-1: USB disconnect, device number 2 [ 197.933493][ T5897] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 197.963373][ T5897] cp210x 5-1:0.0: device disconnected [ 198.477016][ T7272] Invalid source name [ 198.609132][ T7272] UBIFS error (pid: 7272): cannot open "/dev/sg0", error -22 [ 199.089382][ T7274] netlink: 'syz.3.418': attribute type 1 has an invalid length. [ 199.135549][ T7274] netlink: 'syz.3.418': attribute type 2 has an invalid length. [ 199.182139][ T7274] netlink: 'syz.3.418': attribute type 1 has an invalid length. [ 199.189843][ T7274] netlink: 'syz.3.418': attribute type 2 has an invalid length. [ 200.691541][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 200.780535][ T7295] netlink: 32 bytes leftover after parsing attributes in process `syz.0.426'. [ 202.239224][ T7310] loop5: detected capacity change from 0 to 256 [ 202.249933][ T7310] exfat: Deprecated parameter 'namecase' [ 202.256034][ T7310] exfat: Deprecated parameter 'namecase' [ 202.262222][ T7310] exfat: Deprecated parameter 'namecase' [ 202.369050][ T7310] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x079995a4, utbl_chksum : 0xe619d30d) [ 203.370658][ T26] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 203.572997][ T26] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 203.599733][ T7322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.435'. [ 203.609578][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.651846][ T26] usb 6-1: config 0 descriptor?? [ 203.660734][ T7322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.435'. [ 203.686765][ T26] cp210x 6-1:0.0: cp210x converter detected [ 203.818049][ T7326] netlink: 'syz.3.436': attribute type 1 has an invalid length. [ 203.860709][ T7326] netlink: 'syz.3.436': attribute type 2 has an invalid length. [ 203.919053][ T7326] netlink: 'syz.3.436': attribute type 1 has an invalid length. [ 203.947736][ T7326] netlink: 'syz.3.436': attribute type 2 has an invalid length. [ 204.331617][ T26] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 204.342212][ T26] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 204.438549][ T26] usb 6-1: cp210x converter now attached to ttyUSB0 [ 204.497410][ T26] usb 6-1: USB disconnect, device number 4 [ 204.547432][ T26] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 204.580761][ T26] cp210x 6-1:0.0: device disconnected [ 204.629869][ T7336] mkiss: ax0: crc mode is auto. [ 205.348297][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.441'. [ 205.446358][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.441'. [ 205.520899][ T5918] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 206.250311][ T7348] syz.3.441 (7348) used greatest stack depth: 19536 bytes left [ 206.464244][ T5918] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.522827][ T5918] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.709168][ T5918] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.725426][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.735157][ T5918] usb 5-1: Product: syz [ 206.739331][ T5918] usb 5-1: Manufacturer: syz [ 206.751264][ T5918] usb 5-1: SerialNumber: syz [ 206.980682][ T5918] usb 5-1: 0:2 : does not exist [ 207.001191][ T5918] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 207.053787][ T5918] usb 5-1: USB disconnect, device number 3 [ 207.316656][ T7213] udevd[7213]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.023835][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.447'. [ 208.676057][ T7364] Cannot find del_set index 0 as target [ 209.381872][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.447'. [ 209.696732][ T7369] bond1 (unregistering): Released all slaves [ 210.459176][ T7381] Invalid source name [ 210.476756][ T7381] UBIFS error (pid: 7381): cannot open "/dev/sg0", error -22 [ 210.790337][ T5918] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 211.210811][ T5918] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 211.262549][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.299030][ T5918] usb 3-1: config 0 descriptor?? [ 211.646208][ T5918] cp210x 3-1:0.0: cp210x converter detected [ 212.735300][ T5918] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 212.758311][ T5918] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 212.840003][ T5918] usb 3-1: cp210x converter now attached to ttyUSB0 [ 212.897791][ T5918] usb 3-1: USB disconnect, device number 2 [ 212.962756][ T5918] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 212.997635][ T5918] cp210x 3-1:0.0: device disconnected [ 214.644393][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.463'. [ 214.712568][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.5.463'. [ 216.787597][ T7434] netlink: 'syz.2.470': attribute type 10 has an invalid length. [ 216.813764][ T7434] batman_adv: batadv0: Adding interface: team0 [ 216.820071][ T7434] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.845746][ T7434] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 217.034464][ T7436] Invalid source name [ 217.038516][ T7436] UBIFS error (pid: 7436): cannot open "/dev/sg0", error -22 [ 218.862235][ T7449] loop4: detected capacity change from 0 to 512 [ 218.980500][ T7449] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 218.997281][ T7449] System zones: 1-12 [ 219.041057][ T7449] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.477: invalid indirect mapped block 1819239214 (level 1) [ 219.069604][ T7461] tipc: Started in network mode [ 219.074599][ T7461] tipc: Node identity 4, cluster identity 4711 [ 219.081056][ T7461] tipc: Node number set to 4 [ 219.108332][ T7449] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.477: bg 0: block 361: padding at end of block bitmap is not set [ 219.130324][ T30] audit: type=1326 audit(1742387265.594:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7460 comm="syz.1.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae65f8d169 code=0x7ffc0000 [ 219.365555][ T7449] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 219.400296][ T30] audit: type=1326 audit(1742387265.594:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7460 comm="syz.1.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae65f8d169 code=0x7ffc0000 [ 219.425519][ T7449] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.477: attempt to clear invalid blocks 33619980 len 1 [ 219.480719][ T7449] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.477: invalid indirect mapped block 1819239214 (level 0) [ 219.518688][ T7449] EXT4-fs (loop4): 1 truncate cleaned up [ 219.542834][ T7449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.561014][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.482'. [ 220.613715][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.482'. [ 221.095416][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.364507][ T7493] netlink: 'syz.5.492': attribute type 10 has an invalid length. [ 221.445646][ T7493] batman_adv: batadv0: Adding interface: team0 [ 221.453059][ T7493] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.676306][ T7493] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 223.002001][ T7491] loop2: detected capacity change from 0 to 4096 [ 223.127610][ T7502] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.494'. [ 223.206221][ T7491] ntfs3(loop2): try to read out of volume at offset 0x3fffffc7000 [ 223.854852][ T7516] tipc: Started in network mode [ 223.859827][ T7516] tipc: Node identity 4, cluster identity 4711 [ 223.921175][ T7516] tipc: Node number set to 4 [ 223.966997][ T30] audit: type=1326 audit(1742387270.414:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7515 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d678d169 code=0x7ffc0000 [ 224.098460][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.501'. [ 224.265772][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz.5.501'. [ 226.190879][ T7546] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.509'. [ 226.748556][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.508'. [ 227.134145][ T7556] netlink: 'syz.0.511': attribute type 10 has an invalid length. [ 227.697806][ T30] audit: type=1326 audit(1742387274.144:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b298d169 code=0x7ffc0000 [ 228.967203][ T7587] loop5: detected capacity change from 0 to 512 [ 229.044812][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 229.055645][ T7587] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 229.090437][ T7587] System zones: 1-12 [ 229.105178][ T7587] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.521: invalid indirect mapped block 1819239214 (level 1) [ 229.144373][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 229.149996][ T7587] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.521: bg 0: block 361: padding at end of block bitmap is not set [ 229.181495][ T7587] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 229.210779][ T7587] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.521: attempt to clear invalid blocks 33619980 len 1 [ 229.237360][ T7587] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.521: invalid indirect mapped block 1819239214 (level 0) [ 229.310667][ T7587] EXT4-fs (loop5): 1 truncate cleaned up [ 229.317699][ T7587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.774486][ T7603] overlayfs: failed to clone upperpath [ 231.596184][ T5845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.596377][ T7612] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.528'. [ 231.806951][ T30] audit: type=1326 audit(1742387278.264:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.1.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae65f8d169 code=0x7ffc0000 [ 232.866559][ T7626] netlink: 'syz.3.532': attribute type 10 has an invalid length. [ 233.602719][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'. [ 233.700383][ T5902] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 233.876613][ T7648] loop5: detected capacity change from 0 to 4096 [ 233.949251][ T7647] loop2: detected capacity change from 0 to 4096 [ 234.074065][ T5902] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.089908][ T5902] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.101508][ T5902] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.116360][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.850336][ T5902] usb 5-1: Product: syz [ 234.888386][ T5902] usb 5-1: Manufacturer: syz [ 234.909912][ T5902] usb 5-1: SerialNumber: syz [ 235.038217][ T7648] ntfs3(loop5): failed to convert name for inode 1e. [ 235.079581][ T7648] ntfs3(loop5): ino=1f, mi_enum_attr [ 235.107367][ T7648] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 235.135989][ T7648] ntfs3(loop5): ino=1f, mi_enum_attr [ 235.193317][ T7647] overlayfs: upper fs does not support tmpfile. [ 235.222689][ T5902] usb 5-1: 0:2 : does not exist [ 235.236551][ T7647] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 235.253120][ T5902] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 235.304355][ T5902] usb 5-1: USB disconnect, device number 4 [ 235.664167][ T7213] udevd[7213]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.008557][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.551'. [ 238.081463][ T7686] netlink: 20 bytes leftover after parsing attributes in process `syz.2.551'. [ 238.982172][ T7708] loop5: detected capacity change from 0 to 2048 [ 239.357643][ T7717] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 239.601003][ T7717] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 239.627063][ T7717] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 239.692464][ T7717] Remounting filesystem read-only [ 239.806877][ T5845] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 241.706182][ T7741] loop5: detected capacity change from 0 to 40427 [ 241.765681][ T7741] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 241.811784][ T7741] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 241.883346][ T7741] F2FS-fs (loop5): invalid crc value [ 241.943840][ T7741] F2FS-fs (loop5): Found nat_bits in checkpoint [ 242.239552][ T7741] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 242.272329][ T7741] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 242.462647][ T7741] syz.5.568: attempt to access beyond end of device [ 242.462647][ T7741] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 242.560482][ T7741] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 242.567591][ T7741] syz.5.568: attempt to access beyond end of device [ 242.567591][ T7741] loop5: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 242.655114][ T7741] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 243.953413][ T30] audit: type=1326 audit(1742387290.374:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.0.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0505f8d169 code=0x7ffc0000 [ 244.304172][ T7785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.583'. [ 244.506108][ T7786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.583'. [ 245.279889][ T7797] loop2: detected capacity change from 0 to 4096 [ 245.369418][ T7800] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 245.400358][ T5985] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 245.580780][ T5985] usb 1-1: Using ep0 maxpacket: 16 [ 245.613582][ T5985] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 245.740396][ T5985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 245.762287][ T5985] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 245.781283][ T5985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.797678][ T5985] usb 1-1: Product: syz [ 245.801932][ T5985] usb 1-1: Manufacturer: syz [ 245.806548][ T5985] usb 1-1: SerialNumber: syz [ 245.814091][ T5985] usb 1-1: config 0 descriptor?? [ 245.824039][ T5985] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 245.836271][ T5985] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 247.554199][ T5985] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 247.582611][ T5985] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 247.804131][ T30] audit: type=1326 audit(1742387294.264:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7815 comm="syz.5.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80698d169 code=0x7ffc0000 [ 247.938003][ T5985] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 247.940463][ T30] audit: type=1326 audit(1742387294.264:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7815 comm="syz.5.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80698d169 code=0x7ffc0000 [ 247.970837][ T5985] em28xx 1-1:0.0: No AC97 audio processor [ 248.613529][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.5.603'. [ 248.776057][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.5.603'. [ 249.021894][ T5985] usb 1-1: USB disconnect, device number 3 [ 249.056856][ T5985] em28xx 1-1:0.0: Disconnecting em28xx [ 249.098164][ T5985] em28xx 1-1:0.0: Freeing device [ 249.243434][ T30] audit: type=1326 audit(1742387295.704:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7854 comm="syz.4.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b298d169 code=0x7ffc0000 [ 249.307160][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.5.612'. [ 249.340703][ T7858] bridge_slave_1: left allmulticast mode [ 249.346407][ T7858] bridge_slave_1: left promiscuous mode [ 249.357198][ T30] audit: type=1326 audit(1742387295.704:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7854 comm="syz.4.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b298d169 code=0x7ffc0000 [ 249.417088][ T7858] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.468804][ T7858] bridge_slave_0: left allmulticast mode [ 249.475041][ T7858] bridge_slave_0: left promiscuous mode [ 249.481923][ T7858] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.401840][ T5902] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 251.590387][ T5902] usb 1-1: Using ep0 maxpacket: 16 [ 251.604900][ T5902] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 251.660285][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 251.695559][ T5902] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 251.725184][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.767400][ T5902] usb 1-1: Product: syz [ 251.777522][ T5902] usb 1-1: Manufacturer: syz [ 251.794973][ T5902] usb 1-1: SerialNumber: syz [ 251.824786][ T5902] usb 1-1: config 0 descriptor?? [ 251.862375][ T5902] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 251.913573][ T5902] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 253.034508][ T5902] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 253.049345][ T5902] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 253.274112][ T5902] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 253.291970][ T5902] em28xx 1-1:0.0: No AC97 audio processor [ 254.605068][ T5985] usb 1-1: USB disconnect, device number 4 [ 254.641154][ T5985] em28xx 1-1:0.0: Disconnecting em28xx [ 254.657700][ T5985] em28xx 1-1:0.0: Freeing device [ 255.282445][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.288862][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.093494][ T47] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 258.283325][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 258.341946][ T47] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 258.415030][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 258.695110][ T47] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 258.711348][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.719363][ T47] usb 5-1: Product: syz [ 258.735126][ T47] usb 5-1: Manufacturer: syz [ 258.739753][ T47] usb 5-1: SerialNumber: syz [ 259.132035][ T47] usb 5-1: config 0 descriptor?? [ 259.314739][ T47] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 259.388101][ T47] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 259.938870][ T47] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 259.956040][ T47] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 260.186804][ T47] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 260.830337][ T47] em28xx 5-1:0.0: No AC97 audio processor [ 261.682148][ T5902] usb 5-1: USB disconnect, device number 5 [ 261.688629][ T5902] em28xx 5-1:0.0: Disconnecting em28xx [ 261.776273][ T5902] em28xx 5-1:0.0: Freeing device [ 261.820090][ T8005] 9pnet: p9_errstr2errno: server reported unknown error @ÿ W=!êY{@¯¢S¾´¤îr˜4, [ 263.257456][ T8019] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 263.609571][ T8020] loop5: detected capacity change from 0 to 2048 [ 263.778464][ T8020] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 265.463241][ T5844] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 265.473119][ T8030] syz.5.671 (8030): drop_caches: 2 [ 265.650326][ T5844] usb 5-1: Using ep0 maxpacket: 16 [ 265.669884][ T5844] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 265.892572][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 265.957648][ T5844] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 265.990479][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.030310][ T5844] usb 5-1: Product: syz [ 266.034516][ T5844] usb 5-1: Manufacturer: syz [ 266.039134][ T5844] usb 5-1: SerialNumber: syz [ 266.094081][ T5844] usb 5-1: config 0 descriptor?? [ 266.126984][ T5844] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 266.183395][ T5844] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 266.399236][ T8062] input: syz0 as /devices/virtual/input/input5 [ 267.351244][ T5844] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 267.368267][ T5844] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 267.813336][ T5844] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 268.358472][ T5844] em28xx 5-1:0.0: No AC97 audio processor [ 272.577445][ T5844] usb 5-1: USB disconnect, device number 6 [ 272.584892][ T5844] em28xx 5-1:0.0: Disconnecting em28xx [ 272.592166][ T5844] em28xx 5-1:0.0: Freeing device [ 294.943381][ T5856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 294.977085][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 294.997135][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 295.026676][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 295.041604][ T55] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 295.049986][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 301.615683][ T8149] chnl_net:caif_netlink_parms(): no params data found [ 301.830441][ T5839] Bluetooth: hci6: command tx timeout [ 307.195368][ T5839] Bluetooth: hci6: command tx timeout [ 310.850241][ T5839] Bluetooth: hci6: command tx timeout [ 311.730895][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.788633][ T5838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 311.796801][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.819979][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 311.827493][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.844677][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 311.857407][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.870502][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 311.887273][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 311.897072][ T5838] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 311.904275][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.936218][ T5838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 316.490344][ T55] Bluetooth: hci6: command tx timeout [ 316.495877][ T55] Bluetooth: hci2: command tx timeout [ 316.500184][ C1] sched: DL replenish lagged too much [ 316.507683][ T55] Bluetooth: hci7: command tx timeout [ 317.001400][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.007789][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.999806][ T5856] Bluetooth: hci7: command tx timeout [ 322.005509][ T5856] Bluetooth: hci2: command tx timeout [ 322.102538][ T5839] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 322.199415][ T55] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 335.201999][ T55] Bluetooth: hci2: command tx timeout [ 335.207459][ T55] Bluetooth: hci7: command tx timeout [ 335.234814][ T5839] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 342.348627][ T8184] dccp_sample_rtt: RTT sample 20104550 too large, using max [ 352.016015][ T5856] Bluetooth: hci8: Opcode 0x1009 failed: -110 [ 352.022670][ T5856] Bluetooth: hci7: command tx timeout [ 352.028080][ T5856] Bluetooth: hci2: command tx timeout [ 357.210076][ T5856] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 360.445681][ T8176] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 360.761118][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 360.830673][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 360.854011][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 360.867267][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.878589][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 360.902530][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.381611][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.388003][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.560260][ T5839] Bluetooth: hci0: command tx timeout [ 384.415609][ T5856] Bluetooth: hci0: command tx timeout [ 384.421195][ T5839] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 389.492381][ T8198] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 389.521021][ T5856] Bluetooth: hci0: command tx timeout [ 389.526875][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 393.224617][ T5856] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 393.231289][ T55] Bluetooth: hci0: command tx timeout [ 393.237237][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 395.030798][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 411.589702][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 418.441316][ T8199] Bluetooth: hci4: Opcode 0x1001 failed: -110 [ 418.471236][ T5839] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 426.974939][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 427.521411][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 428.703383][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 428.762777][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 428.780095][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 430.487644][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 430.501340][ T8210] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 430.560439][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 430.720850][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 430.980232][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 430.987342][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 431.090477][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 431.123893][ T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 431.150033][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 432.502041][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 432.520258][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 432.529356][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 432.552576][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 432.561677][ T5856] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 432.570500][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 434.710318][ T5856] Bluetooth: hci4: command tx timeout [ 434.718990][ T5856] Bluetooth: hci5: command tx timeout [ 434.725121][ T5856] Bluetooth: hci3: command tx timeout [ 436.340514][ T55] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 436.510069][ T5839] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 436.557200][ T55] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 436.573567][ T55] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 436.588372][ T55] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 436.600089][ T55] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 436.608841][ T55] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 436.620824][ T55] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 436.627902][ T55] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 436.648391][ T55] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 436.656355][ T55] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 436.665695][ T55] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 438.045988][ T5839] Bluetooth: hci3: command tx timeout [ 438.051488][ T5839] Bluetooth: hci5: command tx timeout [ 438.056886][ T5839] Bluetooth: hci4: command tx timeout [ 443.640743][ T5839] Bluetooth: hci9: command tx timeout [ 443.646684][ T5839] Bluetooth: hci4: command tx timeout [ 443.652133][ T5839] Bluetooth: hci5: command tx timeout [ 443.657533][ T5839] Bluetooth: hci3: command tx timeout [ 443.948312][ T5838] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 448.949402][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.956822][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 482.628919][ T31] INFO: task syz-executor:8165 blocked for more than 165 seconds. [ 482.921115][ T31] Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 482.928820][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 482.970174][ T31] task:syz-executor state:D stack:25952 pid:8165 tgid:8165 ppid:1 task_flags:0x400140 flags:0x00000004 [ 483.000199][ T31] Call Trace: [ 483.003541][ T31] [ 483.006482][ T31] __schedule+0x190e/0x4c90 [ 483.020286][ T31] ? __pfx___schedule+0x10/0x10 [ 483.025199][ T31] ? __pfx_lock_release+0x10/0x10 [ 483.035090][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 483.041080][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 483.046750][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 483.053042][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 483.058970][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 483.065931][ T31] ? schedule+0x90/0x320 [ 483.070237][ T31] schedule+0x14b/0x320 [ 483.074423][ T31] schedule_preempt_disabled+0x13/0x30 [ 483.079902][ T31] __mutex_lock+0x817/0x1010 [ 483.084579][ T31] ? __mutex_lock+0x602/0x1010 [ 483.089389][ T31] ? inet_rtm_newaddr+0x47e/0x1bc0 [ 483.094582][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 483.099634][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 483.105402][ T31] ? __lock_acquire+0x1397/0x2100 [ 483.110628][ T31] ? __nla_parse+0x40/0x60 [ 483.115071][ T31] inet_rtm_newaddr+0x47e/0x1bc0 [ 483.120041][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 483.125780][ T31] ? rcu_read_unlock+0x87/0xa0 [ 483.130700][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 483.136102][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 483.141946][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 483.147351][ T31] rtnetlink_rcv_msg+0x793/0xcf0 [ 483.152911][ T31] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 483.158071][ T31] ? __lock_acquire+0x1397/0x2100 [ 483.163628][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 483.169131][ T31] netlink_rcv_skb+0x208/0x480 [ 483.173980][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 483.179467][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 483.184830][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 483.190065][ T31] netlink_unicast+0x7f8/0x990 [ 483.194946][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 483.200342][ T31] ? __virt_addr_valid+0x45f/0x530 [ 483.205470][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 483.211198][ T31] ? __phys_addr_symbol+0x2f/0x70 [ 483.216241][ T31] ? __check_object_size+0x47a/0x730 [ 483.221632][ T31] netlink_sendmsg+0x8de/0xcb0 [ 483.226434][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.231798][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 483.237461][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 483.242489][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 483.248157][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.253541][ T31] __sock_sendmsg+0x223/0x270 [ 483.259111][ T31] __sys_sendto+0x363/0x4c0 [ 483.270231][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 483.275324][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 483.292295][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 483.298330][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 483.305062][ T31] ? exc_page_fault+0x590/0x8b0 [ 483.309967][ T31] __x64_sys_sendto+0xde/0x100 [ 483.314867][ T31] do_syscall_64+0xf3/0x230 [ 483.319411][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.325404][ T31] RIP: 0033:0x7f6b9dd8effc [ 483.329830][ T31] RSP: 002b:00007fff504122d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 483.338385][ T31] RAX: ffffffffffffffda RBX: 00007f6b9ead4620 RCX: 00007f6b9dd8effc [ 483.346421][ T31] RDX: 0000000000000028 RSI: 00007f6b9ead4670 RDI: 0000000000000003 [ 483.354504][ T31] RBP: 0000000000000000 R08: 00007fff50412324 R09: 000000000000000c [ 483.363060][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 483.371705][ T31] R13: 0000000000000000 R14: 00007f6b9ead4670 R15: 0000000000000000 [ 483.379715][ T31]