last executing test programs: 53.424755693s ago: executing program 1 (id=782): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00'}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 53.019936176s ago: executing program 1 (id=783): syz_open_dev$video(&(0x7f0000000600), 0x7, 0x200040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffff9, 0x10100, 0x0, 0xd3, 0x0, r2}, &(0x7f0000000080)=0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x8230}, 0x3}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/158, 0x9e, 0x21, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r6, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r7 = openat$pfkey(0xffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000000580)=""/88) lseek(r6, 0x0, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000800) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000e9ee92bc6b272291a8f9e56800", @ANYBLOB="01002bbd7000fcdbdf250800000008000400ac14142b050001000100000008000500ac14143314000600776c616e3100"/58], 0x40}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008084) umount2(&(0x7f0000000340)='./file0\x00', 0x9) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000004c0)={0x2, 0xd9, &(0x7f0000000640)="d0b59dfbea6ea7a7479840ac214effe05cfacdf5526ae8c7243bddae6faba8b1dd70a8c88950a0a1827608430d6605e8ffc05f48f7fe6934048313c635c2fd279b9e4c0e78a22dc5f5283e4b6ff18159f12c2b000e1fe512b5584ad5619df9e0f9f12aef86225a8ca041537174937c1fa85422fab39aecc41c74e5574f285404ab1a91aa1f9f3666087e0495b8af97ca76842f795f297917713dc976e5ddc196f0f478f0dfafd8c4d99fcdbcbabc564f581d97a27df6a610e3e947fe60b3c2b5311841231c7f4c7617d7938e112c2bb9b812957227b2c80078"}) syz_usb_disconnect(r5) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x88fb, @gre={{0x5, 0x4, 0x2, 0x1, 0x58, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x81, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x6, 0x2, 0x1, 0x1, 0x6, 0x4}, 0x1, {0x500c}}}, {0x8, 0x22eb, 0x4, {{0xe, 0x2, 0xf8, 0x3, 0x1, 0x2, 0x4, 0xf9}, 0x2, {0x1, 0x9, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) 48.266651379s ago: executing program 4 (id=789): socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000240), &(0x7f0000000280)={'U-', 0x1}, 0x16, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) syz_io_uring_setup(0x34b7, 0x0, 0x0, &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048014) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) 48.08874784s ago: executing program 1 (id=791): socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000240), &(0x7f0000000280)={'U-', 0x1}, 0x16, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) syz_io_uring_setup(0x34b7, 0x0, 0x0, &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048014) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) 45.791804516s ago: executing program 4 (id=793): socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee", 0xe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000240), &(0x7f0000000280)={'U-', 0x1}, 0x16, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) syz_io_uring_setup(0x34b7, 0x0, 0x0, &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048014) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) 45.350758849s ago: executing program 1 (id=794): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="00220f000000540b4550182195f5758483"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0) 44.837080552s ago: executing program 4 (id=795): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bfa2f5fee778bb", 0x17}], 0x2) 44.172864737s ago: executing program 4 (id=796): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c8, 0x12) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) migrate_pages(r0, 0x4, &(0x7f0000000300)=0x7, &(0x7f0000000340)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffd}, [@alu={0x4, 0x0, 0xd, 0xa, 0x0, 0x0, 0x20}]}, &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4000}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) getrlimit(0x8, &(0x7f0000000380)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x762}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) 40.961541309s ago: executing program 1 (id=803): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000280)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x2, 0x2, 0x8c86, 0x3}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x1d, 0x2, 0x6) r2 = add_key$keyring(&(0x7f0000001080), &(0x7f00000010c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r2) pipe2$watch_queue(0x0, 0x80) r3 = syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x5, 0x2, 0x10, 0xc, 0x7a, 0x2}, {0x9, 0x5, 0x2, 0x2, 0x3ff, 0x3, 0x3, 0x7}, {0x9, 0x5, 0x6, 0x3, 0x3ff, 0x7, 0xda, 0x1a}}}}}}]}}, 0x0) syz_usb_control_io(r3, &(0x7f0000001640)={0x18, &(0x7f00000003c0)={0x10, 0xc, 0x8a, {0xab, 0x22, "00126ae242478b3ec31d306a97ade4c67d9500e99842cfe5a37be02c513bf020f4d860a4e79e48c964763f7b173afec30ba02315590fc4c2f3c874d76a41d8f83c3b78f0a85744a10d8fdfc84099a8613e27a9d8308fa590418e502eddd9bcd3a07702fb7daa278868ea30c0031c5284b9f3156fd6d8a16ad1fc2d891d2baba3a3803233da8f12f5"}}, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}, &(0x7f00000014c0)={0x0, 0xf, 0xed, {0x5, 0xf, 0xed, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x63, 0x4, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x79, 0x2, 0x0, 0xf000, 0x7, [0xfff0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0xf8, 0x82, 0x1000, 0x2}, @generic={0xbf, 0x10, 0xa, "3374a67634db05e80162bd786332591af89089a289ea5ad2757ada9fc9beb80a269d4a7c3cc0aac6ea2e52ae8306c1df56b72a2c519d37f054d295c2a0739530c895ad023fb5c32dbc3384999446046bcd918ceaf3a8205d82295d48663d0a845bd769390b27300154f8ab75eeb71f3b08fcf0dd156a0098cb7ebb63225cf5f82f76aa6e027b4e216f8746feea463a4aa028d632430cbf35977063cc43d9430fb1ffb81aedcaadd4ea9b3dd81f4369ecc93a86f414b6b5059effdacf"}]}}, &(0x7f00000015c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x60, 0x2, 0x81, "f20915e0", "b6ddc6e7"}}, &(0x7f0000001600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfc, 0x10, 0x1, 0x9, 0xff, 0x4, 0x7}}}, &(0x7f0000001b40)={0x44, &(0x7f0000001680)={0x40, 0x16, 0xe2, "8a4b2b9f65a691a3b9a69c278b32934fe890ec087e7e57b2773139e8dc134ba41154383bc58243d35ff7f7235e578b3a7fad29bfe10afb15bb49e3395570ad15aa980575477147b7c4b09c19b257097ff492b8a0510e00c4476a5bc04cf85d116ccb189f9cc210ec2e33367507bffc7d397f59a89041af2c96335f3a076ee7aa7b6bf779b428538dca0f7ae448891459ece5f0c43d01a45b940721e96ed35892efc62a7e1124a5c34f036c091bbe3fe82a268cde3f69abcc095ef470ffccf5f25a400c7066600a352057eafa56d75c3a319e6e0fb16947a5b1a75526de4e686262a4"}, &(0x7f0000001780)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000017c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001800)={0x20, 0x0, 0x4, {0x3, 0x7}}, &(0x7f0000001840)={0x20, 0x0, 0x4, {0x30, 0x4}}, &(0x7f0000001880)={0x40, 0x7, 0x2, 0xb}, &(0x7f00000018c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000001900)={0x40, 0xb, 0x2, "2fa4"}, &(0x7f0000001940)={0x40, 0xf, 0x2, 0xa}, &(0x7f0000001980)={0x40, 0x13, 0x6, @local}, &(0x7f00000019c0)={0x40, 0x17, 0x6}, &(0x7f0000001a00)={0x40, 0x19, 0x2, "ad6c"}, &(0x7f0000001a40)={0x40, 0x1a, 0x2, 0xb}, &(0x7f0000001a80)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001ac0)={0x40, 0x1e, 0x1, 0xac}, &(0x7f0000001b00)={0x40, 0x21, 0x1, 0x4}}) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xc2) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'b', ' *:* ', 'rwm\x00'}, 0xa) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) timer_create(0x4, &(0x7f0000000140)={0x0, 0x20, 0x1, @tid=r4}, &(0x7f0000000180)) close_range(r0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) 36.909690697s ago: executing program 1 (id=804): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="bad3", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x86dd, r5, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 36.258316661s ago: executing program 4 (id=805): io_setup(0x8, &(0x7f0000004200)=0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x4008815}, 0x810) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) io_submit(r0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 33.921902307s ago: executing program 4 (id=810): socket$nl_route(0x10, 0x3, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000280)={{0xfffe, 0x60}, 'syz0\x00', 0x19}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000028c0)={0x2020}, 0x2020) r1 = socket(0x10, 0x803, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r2, 0x208) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r5}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r5, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0xa0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x5c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x2c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x10000, 0x8, 0x5, 0x10, 0x1, 0xa, 0x3}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x5, 0x8, 0xb4f, 0x15, 0x1f, 0x18, 0x4}}]}}]}, 0x5c}}, 0x0) 21.247081014s ago: executing program 32 (id=804): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="bad3", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x86dd, r5, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 18.336006254s ago: executing program 33 (id=810): socket$nl_route(0x10, 0x3, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000280)={{0xfffe, 0x60}, 'syz0\x00', 0x19}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000028c0)={0x2020}, 0x2020) r1 = socket(0x10, 0x803, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r2, 0x208) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r5}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r5, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0xa0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x5c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x2c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x10000, 0x8, 0x5, 0x10, 0x1, 0xa, 0x3}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x5, 0x8, 0xb4f, 0x15, 0x1f, 0x18, 0x4}}]}}]}, 0x5c}}, 0x0) 15.98523859s ago: executing program 3 (id=833): syz_open_dev$video(&(0x7f0000000600), 0x7, 0x200040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffff9, 0x10100, 0x0, 0xd3, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x8230}, 0x3}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/158, 0x9e, 0x21, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r7, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r8 = openat$pfkey(0xffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$EVIOCGABS2F(r8, 0x8018456f, &(0x7f0000000580)=""/88) lseek(r7, 0x0, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000800) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000e9ee92bc6b272291a8f9e56800", @ANYBLOB="01002bbd7000fcdbdf250800000008000400ac14142b050001000100000008000500ac14143314000600776c616e3100"/58], 0x40}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008084) umount2(&(0x7f0000000340)='./file0\x00', 0x9) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000004c0)={0x2, 0xd9, &(0x7f0000000640)="d0b59dfbea6ea7a7479840ac214effe05cfacdf5526ae8c7243bddae6faba8b1dd70a8c88950a0a1827608430d6605e8ffc05f48f7fe6934048313c635c2fd279b9e4c0e78a22dc5f5283e4b6ff18159f12c2b000e1fe512b5584ad5619df9e0f9f12aef86225a8ca041537174937c1fa85422fab39aecc41c74e5574f285404ab1a91aa1f9f3666087e0495b8af97ca76842f795f297917713dc976e5ddc196f0f478f0dfafd8c4d99fcdbcbabc564f581d97a27df6a610e3e947fe60b3c2b5311841231c7f4c7617d7938e112c2bb9b812957227b2c80078"}) syz_usb_disconnect(r6) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x88fb, @gre={{0x5, 0x4, 0x2, 0x1, 0x58, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x81, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x6, 0x2, 0x1, 0x1, 0x6, 0x4}, 0x1, {0x500c}}}, {0x8, 0x22eb, 0x4, {{0xe, 0x2, 0xf8, 0x3, 0x1, 0x2, 0x4, 0xf9}, 0x2, {0x1, 0x9, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) 14.221975632s ago: executing program 0 (id=836): socket$nl_route(0x10, 0x3, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000280)={{0xfffe, 0x60}, 'syz0\x00', 0x19}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000028c0)={0x2020}, 0x2020) r1 = socket(0x10, 0x803, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r2, 0x208) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r5}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r5, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0xa0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x5c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x2c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x10000, 0x8, 0x5, 0x10, 0x1, 0xa, 0x3}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x5, 0x8, 0xb4f, 0x15, 0x1f, 0x18, 0x4}}]}}]}, 0x5c}}, 0x0) 11.992267137s ago: executing program 0 (id=838): openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020601040000000000000000000000000c00078008000640000000010500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000bffb2648c216955eadf2594f9a8b282112759761b8fbd6cd305a1b3bfee9337edf84371ab0475b8ec7c4416bd2d503c975aaed22ca96f54d7d7cc8"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f00000009c0), 0x7, 0x0) ioctl$VIDIOC_S_FBUF(r3, 0x4030560b, &(0x7f0000000100)={0x0, 0x0, 0x0}) r4 = dup(r2) io_setup(0x19, &(0x7f00000009c0)) write$UHID_INPUT(r4, &(0x7f0000000880)={0x8, {"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", 0x1000}}, 0x1006) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffc, 0x200, 0x3, 0x332}, &(0x7f0000000100), &(0x7f0000ff4000)) 10.481165058s ago: executing program 2 (id=839): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000012001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000400000000"], 0x20}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40004801}, 0x24004880) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, 0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)=""/95, 0x5f}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'pimreg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r4, &(0x7f0000000300)="989f850dd518", &(0x7f00000005c0)=""/104}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x90000, 0x0) pipe2$9p(0x0, 0x0) 10.402579008s ago: executing program 0 (id=840): socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54", 0xf) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000240), &(0x7f0000000280)={'U-', 0x1}, 0x16, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) syz_io_uring_setup(0x34b7, 0x0, 0x0, &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048014) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) 10.27843898s ago: executing program 3 (id=841): socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54", 0xf) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000240), &(0x7f0000000280)={'U-', 0x1}, 0x16, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) syz_io_uring_setup(0x34b7, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048014) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) 9.801038772s ago: executing program 2 (id=842): socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54", 0xf) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000240), &(0x7f0000000280)={'U-', 0x1}, 0x16, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) syz_io_uring_setup(0x34b7, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048014) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) 8.204180254s ago: executing program 0 (id=843): syz_open_dev$video(&(0x7f0000000600), 0x7, 0x200040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffff9, 0x10100, 0x0, 0xd3, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x8230}, 0x3}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/158, 0x9e, 0x21, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r7, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r8 = openat$pfkey(0xffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$EVIOCGABS2F(r8, 0x8018456f, &(0x7f0000000580)=""/88) lseek(r7, 0x0, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000800) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000e9ee92bc6b272291a8f9e56800", @ANYBLOB="01002bbd7000fcdbdf250800000008000400ac14142b050001000100000008000500ac14143314000600776c616e3100"/58], 0x40}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008084) umount2(&(0x7f0000000340)='./file0\x00', 0x9) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000004c0)={0x2, 0xd9, &(0x7f0000000640)="d0b59dfbea6ea7a7479840ac214effe05cfacdf5526ae8c7243bddae6faba8b1dd70a8c88950a0a1827608430d6605e8ffc05f48f7fe6934048313c635c2fd279b9e4c0e78a22dc5f5283e4b6ff18159f12c2b000e1fe512b5584ad5619df9e0f9f12aef86225a8ca041537174937c1fa85422fab39aecc41c74e5574f285404ab1a91aa1f9f3666087e0495b8af97ca76842f795f297917713dc976e5ddc196f0f478f0dfafd8c4d99fcdbcbabc564f581d97a27df6a610e3e947fe60b3c2b5311841231c7f4c7617d7938e112c2bb9b812957227b2c80078"}) syz_usb_disconnect(r6) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x88fb, @gre={{0x5, 0x4, 0x2, 0x1, 0x58, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x81, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x6, 0x2, 0x1, 0x1, 0x6, 0x4}, 0x1, {0x500c}}}, {0x8, 0x22eb, 0x4, {{0xe, 0x2, 0xf8, 0x3, 0x1, 0x2, 0x4, 0xf9}, 0x2, {0x1, 0x9, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) 8.108473004s ago: executing program 3 (id=844): io_setup(0x8, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x4008815}, 0x810) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) io_submit(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 8.047190075s ago: executing program 2 (id=845): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 6.986955992s ago: executing program 2 (id=846): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001340)="0e9849f1332c3a4f7cd80c990e6bb6b5979749a4fbaef24bc5bcc03ac73ad01da6441277f5ac3b4d0ab075522859b01dff8f24e16cd420439da93470adbb7411843f018e01848aec434d0395f241ae92"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 6.913686242s ago: executing program 3 (id=847): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000280)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x2, 0x2, 0x8c86, 0x3}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x1d, 0x2, 0x6) r2 = add_key$keyring(&(0x7f0000001080), &(0x7f00000010c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r2) pipe2$watch_queue(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x5, 0x2, 0x10, 0xc, 0x7a, 0x2}, {0x9, 0x5, 0x2, 0x2, 0x3ff, 0x3, 0x3, 0x7}, {0x9, 0x5, 0x6, 0x3, 0x3ff, 0x7, 0xda, 0x1a}}}}}}]}}, 0x0) syz_usb_control_io(r4, &(0x7f0000001640)={0x2c, &(0x7f00000003c0)={0x10, 0xc, 0x79, {0x79, 0x22, "00126ae242478b3ec31d306a97ade4c67d9500e99842cfe5a37be02c513bf020f4d860a4e79e48c964763f7b173afec30ba02315590fc4c2f3c874d76a41d8f83c3b78f0a85744a10d8fdfc84099a8613e27a9d8308fa590418e502eddd9bcd3a07702fb7daa278868ea30c0031c5284b9f3156fd6d8a1"}}, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}, &(0x7f00000014c0)={0x0, 0xf, 0xed, {0x5, 0xf, 0xed, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x63, 0x4, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x79, 0x2, 0x0, 0xf000, 0x7, [0xfff0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0xf8, 0x82, 0x1000, 0x2}, @generic={0xbf, 0x10, 0xa, "3374a67634db05e80162bd786332591af89089a289ea5ad2757ada9fc9beb80a269d4a7c3cc0aac6ea2e52ae8306c1df56b72a2c519d37f054d295c2a0739530c895ad023fb5c32dbc3384999446046bcd918ceaf3a8205d82295d48663d0a845bd769390b27300154f8ab75eeb71f3b08fcf0dd156a0098cb7ebb63225cf5f82f76aa6e027b4e216f8746feea463a4aa028d632430cbf35977063cc43d9430fb1ffb81aedcaadd4ea9b3dd81f4369ecc93a86f414b6b5059effdacf"}]}}, &(0x7f00000015c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x60, 0x2, 0x81, "f20915e0", "b6ddc6e7"}}, &(0x7f0000001600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfc, 0x10, 0x1, 0x9, 0xff, 0x4, 0x7}}}, &(0x7f0000001b40)={0x84, &(0x7f0000001680)={0x40, 0x16, 0xe2, "8a4b2b9f65a691a3b9a69c278b32934fe890ec087e7e57b2773139e8dc134ba41154383bc58243d35ff7f7235e578b3a7fad29bfe10afb15bb49e3395570ad15aa980575477147b7c4b09c19b257097ff492b8a0510e00c4476a5bc04cf85d116ccb189f9cc210ec2e33367507bffc7d397f59a89041af2c96335f3a076ee7aa7b6bf779b428538dca0f7ae448891459ece5f0c43d01a45b940721e96ed35892efc62a7e1124a5c34f036c091bbe3fe82a268cde3f69abcc095ef470ffccf5f25a400c7066600a352057eafa56d75c3a319e6e0fb16947a5b1a75526de4e686262a4"}, &(0x7f0000001780)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000017c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001800)={0x20, 0x0, 0x4, {0x3, 0x7}}, &(0x7f0000001840)={0x20, 0x0, 0x4, {0x30, 0x4}}, &(0x7f0000001880)={0x40, 0x7, 0x2, 0xb}, &(0x7f00000018c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000001900)={0x40, 0xb, 0x2, "2fa4"}, &(0x7f0000001940)={0x40, 0xf, 0x2, 0xa}, &(0x7f0000001980)={0x40, 0x13, 0x6, @local}, &(0x7f00000019c0)={0x40, 0x17, 0x6}, &(0x7f0000001a00)={0x40, 0x19, 0x2, "ad6c"}, &(0x7f0000001a40)={0x40, 0x1a, 0x2, 0xb}, &(0x7f0000001a80)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001ac0)={0x40, 0x1e, 0x1, 0xac}, &(0x7f0000001b00)={0x40, 0x21, 0x1, 0x4}}) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xc2) write$cgroup_devices(r3, &(0x7f0000000000)={'b', ' *:* ', 'rwm\x00'}, 0xa) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) timer_create(0x4, &(0x7f0000000140)={0x0, 0x20, 0x1, @tid=r5}, &(0x7f0000000180)) close_range(r0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) 5.326404153s ago: executing program 2 (id=848): io_setup(0x8, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x4008815}, 0x810) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) io_submit(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 4.571719248s ago: executing program 0 (id=849): socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54", 0xf) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000240), &(0x7f0000000280)={'U-', 0x1}, 0x16, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) syz_io_uring_setup(0x34b7, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048014) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) 1.43514537s ago: executing program 3 (id=850): socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54", 0xf) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000240), &(0x7f0000000280)={'U-', 0x1}, 0x16, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) syz_io_uring_setup(0x34b7, 0x0, 0x0, &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048014) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) 144.927649ms ago: executing program 3 (id=851): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 137.515749ms ago: executing program 2 (id=852): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 0s ago: executing program 0 (id=853): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0, 0xffc0}], 0x2, &(0x7f0000000280)=[{&(0x7f0000000400)=""/95, 0x5f}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) mkdir(0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r4, &(0x7f0000000300)="989f850dd518", &(0x7f00000005c0)=""/104}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000100)=0x1, 0x12) kernel console output (not intermixed with test programs): es ready [ 87.215328][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.225916][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.237739][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.247859][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.266866][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.284756][ T4270] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.356887][ T4270] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.392687][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.407998][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.523481][ T4279] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.558986][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.570388][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.587125][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.598698][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.614178][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.624641][ T4279] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.631945][ T4275] Bluetooth: hci1: command 0x041b tx timeout [ 87.641407][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 87.641677][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 87.668073][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.690061][ T4279] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.711363][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 87.720606][ T4279] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.728136][ T4284] Bluetooth: hci4: command 0x041b tx timeout [ 87.738235][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.755417][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.766802][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.774193][ T4317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.823552][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.832093][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.844270][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.854587][ T4317] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.862671][ T4317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.873685][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.882666][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.891880][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.899153][ T4317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.908334][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.917398][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.926320][ T4317] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.934003][ T4317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.942445][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.979101][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.988091][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.999409][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.017520][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.025974][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.054462][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.064818][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.075515][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.084983][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.094660][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.123297][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.137577][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.148192][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.158318][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.167022][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.176256][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.212127][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.224016][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.234788][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.247501][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.257394][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.266685][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.276278][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.285340][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.294682][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.323629][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.335840][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.359018][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.369194][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.393327][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.434640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.455982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.482386][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.504244][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.515139][ T4265] device veth0_vlan entered promiscuous mode [ 88.525581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.535221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.544962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.554144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.589454][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.611408][ T4265] device veth1_vlan entered promiscuous mode [ 88.620386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.633671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.646336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.658480][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.666681][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.684178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.699693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.710541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.725894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.735615][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.742791][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.750814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.764426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.833183][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.842884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.861971][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.891762][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.899970][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.918020][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.936823][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.962588][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.982383][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.002492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.012270][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.022752][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.043159][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.050644][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.059634][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.069278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.088788][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.098251][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.135127][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.145079][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.154814][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.166621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.176048][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.185339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.194647][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.203958][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.213963][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.222607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.231538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.241395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.249828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.260911][ T4265] device veth0_macvtap entered promiscuous mode [ 89.273842][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.284175][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.292841][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.305064][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.324327][ T4265] device veth1_macvtap entered promiscuous mode [ 89.340955][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.351986][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.362763][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.373569][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.382043][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.420641][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.443926][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.539716][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.550617][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.560734][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.572541][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.587503][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.623517][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.637104][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.648704][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.660354][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.670216][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.680306][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.693562][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.708651][ T4272] device veth0_vlan entered promiscuous mode [ 89.715809][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 89.723518][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 89.723981][ T4275] Bluetooth: hci2: command 0x040f tx timeout [ 89.735416][ T4273] device veth0_vlan entered promiscuous mode [ 89.766056][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.782791][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.793482][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 89.794227][ T4275] Bluetooth: hci3: command 0x040f tx timeout [ 89.816017][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.830574][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.842617][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.852857][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.878191][ T4265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.897098][ T4265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.906599][ T4265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.915601][ T4265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.937514][ T4273] device veth1_vlan entered promiscuous mode [ 89.962430][ T4272] device veth1_vlan entered promiscuous mode [ 89.991221][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.000066][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.013079][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.022922][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.033245][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.086765][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.110079][ T4273] device veth0_macvtap entered promiscuous mode [ 90.154957][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.169957][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.187612][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.199719][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.215537][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.226976][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.239980][ T4272] device veth0_macvtap entered promiscuous mode [ 90.278977][ T4273] device veth1_macvtap entered promiscuous mode [ 90.295279][ T4272] device veth1_macvtap entered promiscuous mode [ 90.315042][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.326097][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.339446][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.364900][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.400164][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.419101][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.440867][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.461765][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.470631][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.487626][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.499516][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.516055][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.528713][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.543536][ T4279] device veth0_vlan entered promiscuous mode [ 90.570438][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.583709][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.599931][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.615680][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.631841][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.646026][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.664679][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.678919][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.698394][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.707441][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.716616][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.729672][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.732012][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.739920][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.765498][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.780460][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.789744][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.809535][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.825194][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.838281][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.850439][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.866734][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.885358][ T4279] device veth1_vlan entered promiscuous mode [ 90.903123][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.913961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.924729][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.938737][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.952327][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.961590][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.970858][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.988593][ T4272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.006531][ T4272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.016932][ T4272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.032518][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.084848][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.095731][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.118586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.130982][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.235808][ T4279] device veth0_macvtap entered promiscuous mode [ 91.247894][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.259217][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.269761][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.279581][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.289429][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.308344][ T4279] device veth1_macvtap entered promiscuous mode [ 91.396010][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.417223][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.429101][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.440704][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.451599][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.463623][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.476848][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.513024][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.522745][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.538825][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.554286][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.560112][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.578631][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.589581][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.592892][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.602584][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.619661][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.630292][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.644391][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.656146][ T4279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.664993][ T4279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.677522][ T4279] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.686767][ T4279] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.705619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.718139][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.728301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.738282][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.749110][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.759131][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.767598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.776163][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.782295][ T4270] device veth0_vlan entered promiscuous mode [ 91.791784][ T4275] Bluetooth: hci2: command 0x0419 tx timeout [ 91.792179][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.805543][ T4275] Bluetooth: hci0: command 0x0419 tx timeout [ 91.805584][ T4275] Bluetooth: hci1: command 0x0419 tx timeout [ 91.831442][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.871251][ T4277] Bluetooth: hci3: command 0x0419 tx timeout [ 91.879637][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.887886][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 91.895671][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.906401][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.917314][ T4270] device veth1_vlan entered promiscuous mode [ 91.941601][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.950425][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.974888][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.993269][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.002742][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.102212][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.124503][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.178037][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.200296][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.212811][ T4270] device veth0_macvtap entered promiscuous mode [ 92.240144][ T4389] device bridge1 entered promiscuous mode [ 92.273263][ T4389] team0: Port device bridge1 added [ 92.289106][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.334218][ T4392] bridge0: port 3(team0) entered blocking state [ 92.347997][ T4392] bridge0: port 3(team0) entered disabled state [ 92.366095][ T4392] device team0 entered promiscuous mode [ 92.379030][ T4392] device team_slave_0 entered promiscuous mode [ 92.387407][ T4392] device team_slave_1 entered promiscuous mode [ 92.396838][ T4392] bridge0: port 3(team0) entered blocking state [ 92.403874][ T4392] bridge0: port 3(team0) entered forwarding state [ 92.416377][ T4270] device veth1_macvtap entered promiscuous mode [ 92.437434][ T4395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 92.470042][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.494763][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.520773][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.542507][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.559304][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.621095][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.652218][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.680272][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.693847][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.713721][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.751379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.762284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 92.772618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 92.781303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 92.791088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 92.801098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 92.812021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 92.822204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 92.832274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 92.841116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 92.968291][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.995014][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.006090][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.076299][ T4401] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 93.221705][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.275154][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.306626][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.362912][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.375095][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.390106][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.474646][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.635660][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.892385][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.901698][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.912381][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.942162][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.967766][ T4391] loop0: detected capacity change from 0 to 32768 [ 94.028755][ T4391] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (4391) [ 94.213744][ T4270] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.886072][ T4391] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 94.974820][ T4270] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.985304][ T4270] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.997074][ T4391] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 95.018689][ T4270] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.031283][ T4391] BTRFS info (device loop0): using free space tree [ 95.465023][ T4391] BTRFS error (device loop0): open_ctree failed: -12 [ 95.615320][ T4408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.687979][ T4408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.711716][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.726543][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.747636][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.755841][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.799258][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.917624][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 96.092254][ T4453] loop0: detected capacity change from 0 to 512 [ 96.754830][ T4453] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 96.876140][ T4460] loop4: detected capacity change from 0 to 64 [ 97.826467][ T26] audit: type=1326 audit(1761944241.265:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3098f8efc9 code=0x7ffc0000 [ 98.011323][ T26] audit: type=1326 audit(1761944241.275:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3098f8efc9 code=0x7ffc0000 [ 98.068702][ T26] audit: type=1326 audit(1761944241.275:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f3098f8efc9 code=0x7ffc0000 [ 98.131238][ T26] audit: type=1326 audit(1761944241.275:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3098f8efc9 code=0x7ffc0000 [ 98.166494][ T26] audit: type=1326 audit(1761944241.275:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3098f8efc9 code=0x7ffc0000 [ 98.216556][ T26] audit: type=1326 audit(1761944241.275:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f3098f8efc9 code=0x7ffc0000 [ 98.244951][ T26] audit: type=1326 audit(1761944241.275:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3098f8efc9 code=0x7ffc0000 [ 98.274359][ T26] audit: type=1326 audit(1761944241.275:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3098f8efc9 code=0x7ffc0000 [ 98.540846][ T14] usb 3-1: unable to get BOS descriptor or descriptor too short [ 98.560383][ T14] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 98.572693][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 98.606459][ T14] usb 3-1: can't read configurations, error -71 [ 99.068527][ T4473] loop2: detected capacity change from 0 to 512 [ 99.576346][ T4473] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.18: inode has both inline data and extents flags [ 99.647306][ T4473] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.18: couldn't read orphan inode 15 (err -117) [ 99.747533][ T4473] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 99.987777][ T4490] binder_alloc: 4484: binder_alloc_buf, no vma [ 100.056027][ T4488] loop4: detected capacity change from 0 to 32768 [ 100.145256][ T4488] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.21 (4488) [ 100.182202][ T4488] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 100.195855][ T4488] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 100.205220][ T4488] BTRFS info (device loop4): turning on flush-on-commit [ 100.213118][ T4488] BTRFS info (device loop4): max_inline at 0 [ 100.219326][ T4488] BTRFS info (device loop4): enabling disk space caching [ 100.226896][ T4488] BTRFS info (device loop4): setting nodatasum [ 100.227079][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 100.236493][ T4488] BTRFS info (device loop4): turning off barriers [ 100.250425][ T4488] BTRFS info (device loop4): disabling tree log [ 100.258842][ T4488] BTRFS info (device loop4): enabling ssd optimizations [ 100.267878][ T4488] BTRFS info (device loop4): force clearing of disk cache [ 100.279521][ T4488] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 100.292135][ T4488] BTRFS info (device loop4): use zstd compression, level 3 [ 100.301173][ T4488] BTRFS info (device loop4): max_inline at 0 [ 100.307989][ T4488] BTRFS info (device loop4): disk space caching is enabled [ 101.659177][ T4502] sched: RT throttling activated [ 102.407572][ T4493] loop1: detected capacity change from 0 to 32768 [ 102.604004][ T4493] ======================================================= [ 102.604004][ T4493] WARNING: The mand mount option has been deprecated and [ 102.604004][ T4493] and is ignored by this kernel. Remove the mand [ 102.604004][ T4493] option from the mount to silence this warning. [ 102.604004][ T4493] ======================================================= [ 102.717515][ T4488] BTRFS info (device loop4): rebuilding free space tree [ 102.756467][ T4488] BTRFS info (device loop4): disabling free space tree [ 102.763851][ T4488] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 102.777671][ T4488] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 102.801470][ T4488] BTRFS info (device loop4): checking UUID tree [ 102.809663][ T4488] BTRFS warning (device loop4): failed to start uuid_rescan task [ 102.821265][ T4488] BTRFS warning (device loop4): failed to check the UUID tree: -4 [ 102.901650][ T4488] BTRFS error (device loop4): open_ctree failed: -4 [ 103.141830][ T4530] input: syz1 as /devices/virtual/input/input6 [ 103.186551][ T4266] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop4 scanned by udevd (4266) [ 103.603912][ T125] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.512850][ T4493] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 104.512850][ T4493] [ 104.618137][ T4493] ERROR: (device loop1): remounting filesystem as read-only [ 104.631350][ T4382] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.671306][ T125] usb 5-1: Using ep0 maxpacket: 16 [ 104.679901][ T4493] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 104.679901][ T4493] [ 104.680502][ T125] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 104.743299][ T125] usb 5-1: config 0 has no interface number 0 [ 104.752533][ T4547] loop2: detected capacity change from 0 to 2048 [ 104.758631][ T125] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 104.784359][ T125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.804381][ T125] usb 5-1: Product: syz [ 104.808774][ T125] usb 5-1: Manufacturer: syz [ 104.828682][ T125] usb 5-1: SerialNumber: syz [ 104.834394][ T4382] usb 1-1: Using ep0 maxpacket: 8 [ 104.854342][ T4382] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 104.887697][ T4382] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 104.901219][ T4382] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.914398][ T125] usb 5-1: config 0 descriptor?? [ 104.942509][ T4547] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 104.952847][ T125] hub 5-1:0.132: bad descriptor, ignoring hub [ 104.967341][ T4382] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.989034][ T125] hub: probe of 5-1:0.132 failed with error -5 [ 105.016353][ T4547] UDF-fs: Scanning with blocksize 512 failed [ 105.016468][ T4382] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.041875][ T125] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input7 [ 105.104291][ T4382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.142225][ T4547] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.208695][ T125] usb 5-1: USB disconnect, device number 2 [ 105.372930][ T4382] usb 1-1: usb_control_msg returned -71 [ 105.393034][ T4382] usbtmc 1-1:16.0: can't read capabilities [ 105.496234][ T4382] usb 1-1: USB disconnect, device number 2 [ 105.639131][ T4551] fuse: Bad value for 'fd' [ 108.483506][ T4571] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.982417][ T4587] loop0: detected capacity change from 0 to 2048 [ 111.003926][ T4587] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 111.013167][ T4587] UDF-fs: Scanning with blocksize 512 failed [ 111.045238][ T4587] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.071187][ T125] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 111.261328][ T125] usb 5-1: Using ep0 maxpacket: 32 [ 111.297172][ T4585] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 111.841351][ T125] usb 5-1: unable to read config index 0 descriptor/all [ 111.861695][ T4599] loop1: detected capacity change from 0 to 256 [ 111.870398][ T125] usb 5-1: can't read configurations, error -71 [ 111.916257][ T4599] exfat: Deprecated parameter 'utf8' [ 111.996427][ T4599] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 114.717775][ T4623] Zero length message leads to an empty skb [ 114.904932][ T4621] loop0: detected capacity change from 0 to 4096 [ 115.595554][ T4630] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 116.093050][ T4634] loop3: detected capacity change from 0 to 2048 [ 116.330957][ T4634] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 116.391292][ T4634] UDF-fs: Scanning with blocksize 512 failed [ 116.483829][ T4634] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.352294][ T4438] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.561348][ T4438] usb 1-1: Using ep0 maxpacket: 8 [ 122.575070][ T4438] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 122.600860][ T4438] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 122.621159][ T4438] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 122.636373][ T4438] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.659508][ T4438] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 122.690348][ T4438] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.932842][ T4438] usb 1-1: usb_control_msg returned -71 [ 122.943399][ T4438] usbtmc 1-1:16.0: can't read capabilities [ 123.071497][ T4438] usb 1-1: USB disconnect, device number 3 [ 123.887981][ T4690] loop0: detected capacity change from 0 to 128 [ 123.946348][ T4690] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 124.001266][ T4690] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 124.316676][ T4277] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 124.457028][ T4697] loop2: detected capacity change from 0 to 2048 [ 124.512847][ T4697] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 124.536800][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 124.566356][ T4697] UDF-fs: Scanning with blocksize 512 failed [ 124.595109][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 124.652317][ T4697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.688816][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.726128][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.881522][ T4438] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 125.115664][ T4438] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 125.137018][ T4438] usb 5-1: can't read configurations, error -61 [ 125.301911][ T4694] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 125.341419][ T4438] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 125.554052][ T4438] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 125.657012][ T4438] usb 5-1: can't read configurations, error -61 [ 125.671250][ T4438] usb usb5-port1: attempt power cycle [ 126.239749][ T4438] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 126.303846][ T4438] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 126.341132][ T4438] usb 5-1: can't read configurations, error -61 [ 126.367164][ T4711] loop3: detected capacity change from 0 to 4096 [ 126.522417][ T4438] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 126.564297][ T4438] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 126.593513][ T4438] usb 5-1: can't read configurations, error -61 [ 126.705173][ T4438] usb usb5-port1: unable to enumerate USB device [ 128.731336][ T14] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 128.967533][ T4727] loop1: detected capacity change from 0 to 2048 [ 128.994181][ T14] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 129.024576][ T14] usb 3-1: config 1 has an invalid descriptor of length 119, skipping remainder of the config [ 129.062827][ T4727] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 129.090520][ T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 129.152585][ T4727] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.171180][ T14] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.217390][ T14] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 129.783091][ T14] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 129.783505][ T14] usb 3-1: Product: syz [ 129.784019][ T14] usb 3-1: Manufacturer: syz [ 130.163164][ T14] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 130.556825][ T4729] tty tty3: ldisc open failed (-12), clearing slot 2 [ 130.571821][ T14] usb 3-1: USB disconnect, device number 4 [ 131.129188][ T4736] loop1: detected capacity change from 0 to 128 [ 131.221946][ T4736] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 131.292312][ T4736] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 131.583850][ T4277] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 131.860392][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 132.915044][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.921826][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.495094][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 133.621876][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.661616][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.471185][ T4448] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 134.681411][ T4448] usb 4-1: Using ep0 maxpacket: 16 [ 134.688616][ T4448] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 134.731240][ T4448] usb 4-1: config 0 has no interface number 0 [ 134.753508][ T4448] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 134.793483][ T4448] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.821121][ T4448] usb 4-1: Product: syz [ 134.825608][ T4448] usb 4-1: Manufacturer: syz [ 134.835096][ T4448] usb 4-1: SerialNumber: syz [ 134.849166][ T4448] usb 4-1: config 0 descriptor?? [ 134.865361][ T4448] hub 4-1:0.132: bad descriptor, ignoring hub [ 134.875960][ T4774] binder_alloc: 4773: binder_alloc_buf, no vma [ 134.882372][ T4448] hub: probe of 4-1:0.132 failed with error -5 [ 134.889710][ T4774] binder: 4773:4774 ioctl c0306201 200000001440 returned -11 [ 134.903637][ T4448] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input8 [ 135.122757][ T4448] usb 4-1: USB disconnect, device number 2 [ 135.237454][ T4778] fuse: Bad value for 'fd' [ 135.510822][ T4782] loop2: detected capacity change from 0 to 128 [ 135.588116][ T4782] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 135.664102][ T4782] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.830178][ T4277] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 135.886294][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 136.520852][ T4804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.106'. [ 137.138217][ T4794] loop2: detected capacity change from 0 to 40427 [ 137.188595][ T4794] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 137.214913][ T4794] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 137.278406][ T4794] F2FS-fs (loop2): invalid crc value [ 137.301152][ T4382] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 137.368745][ T4794] F2FS-fs (loop2): Found nat_bits in checkpoint [ 137.501121][ T4382] usb 4-1: Using ep0 maxpacket: 8 [ 138.616016][ T4382] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 138.817634][ T4382] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 138.828369][ T4382] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 138.839354][ T4382] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.858449][ T4382] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 138.869299][ T4382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.043844][ T4794] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 139.061588][ T4794] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 139.095540][ T4382] usb 4-1: GET_CAPABILITIES returned 0 [ 139.101475][ T4382] usbtmc 4-1:16.0: can't read capabilities [ 139.126186][ T4806] infiniband syz1: set active [ 139.211196][ T4806] infiniband syz1: added syz_tun [ 139.218809][ T4823] fuse: Bad value for 'fd' [ 139.631896][ T4382] usb 4-1: USB disconnect, device number 3 [ 139.684375][ T4806] RDS/IB: syz1: added [ 139.714674][ T4806] smc: adding ib device syz1 with port count 1 [ 139.733920][ T4806] smc: ib device syz1 port 1 has pnetid [ 139.759485][ T4828] loop0: detected capacity change from 0 to 128 [ 139.835828][ T4828] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 139.891639][ T4828] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 139.975368][ T4277] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 140.067176][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 140.269821][ T4836] binder_alloc: 4835: binder_alloc_buf, no vma [ 140.332083][ T4836] binder: 4835:4836 ioctl c0306201 200000001440 returned -11 [ 140.504000][ T4838] loop3: detected capacity change from 0 to 2048 [ 140.564750][ T4838] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 140.622850][ T4838] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.377026][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 141.514549][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.708521][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.657884][ T4277] Bluetooth: hci4: link tx timeout [ 142.663839][ T4277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.673100][ T4277] Bluetooth: hci4: link tx timeout [ 142.678292][ T4277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 143.516900][ T4862] fuse: Bad value for 'fd' [ 144.353555][ T4451] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 144.551166][ T4451] usb 5-1: Using ep0 maxpacket: 16 [ 144.654246][ T4448] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 144.751263][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 145.216904][ T4451] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 145.236834][ T4864] loop3: detected capacity change from 0 to 40427 [ 145.250803][ T4864] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 145.259054][ T4864] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 145.269652][ T4864] F2FS-fs (loop3): invalid crc value [ 145.332173][ T4451] usb 5-1: config 0 has no interface number 0 [ 145.339148][ T4864] F2FS-fs (loop3): Found nat_bits in checkpoint [ 145.349360][ T4451] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 145.360926][ T4451] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.371470][ T4451] usb 5-1: Product: syz [ 145.375873][ T4451] usb 5-1: Manufacturer: syz [ 145.381710][ T4451] usb 5-1: SerialNumber: syz [ 145.388689][ T4451] usb 5-1: config 0 descriptor?? [ 145.405676][ T4451] hub 5-1:0.132: bad descriptor, ignoring hub [ 145.421105][ T4451] hub: probe of 5-1:0.132 failed with error -5 [ 145.434968][ T4448] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.465793][ T4448] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.482670][ T4451] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input9 [ 145.531304][ T4448] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.571240][ T4448] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.628873][ T4448] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.645830][ T4864] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 145.671239][ T4864] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 145.680190][ T4448] usb 2-1: config 0 descriptor?? [ 145.732341][ T4451] usb 5-1: USB disconnect, device number 9 [ 146.118621][ T4448] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 146.183445][ T4448] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 146.664044][ T4883] fido_id (4883) used greatest stack depth: 20296 bytes left [ 147.311382][ T4382] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 147.503064][ T4382] usb 1-1: Using ep0 maxpacket: 8 [ 147.545645][ T4896] fuse: Bad value for 'fd' [ 147.681231][ T4382] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 148.084470][ T4382] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 148.197702][ T4382] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.216922][ T4441] usb 2-1: USB disconnect, device number 2 [ 148.220879][ T4382] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.487227][ T4382] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 148.497647][ T4905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.136'. [ 148.524974][ T4908] loop1: detected capacity change from 0 to 128 [ 148.531198][ T4382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.559537][ T4905] rdma_rxe: rxe_register_device failed with error -23 [ 148.587991][ T4905] rdma_rxe: failed to add syz_tun [ 148.625277][ T4908] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 148.637164][ T4908] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 148.700298][ T4275] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 148.774668][ T4382] usb 1-1: GET_CAPABILITIES returned 0 [ 148.789931][ T4382] usbtmc 1-1:16.0: can't read capabilities [ 148.928212][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 149.056855][ T4441] usb 1-1: USB disconnect, device number 4 [ 150.648799][ T4920] binder: 4919:4920 ioctl c0306201 200000001440 returned -11 [ 150.931186][ T4325] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 151.163249][ T4325] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 151.206498][ T4325] usb 1-1: config 1 has an invalid descriptor of length 119, skipping remainder of the config [ 151.249257][ T4325] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 151.297983][ T4325] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.346760][ T4325] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 151.379153][ T4325] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 151.422911][ T4325] usb 1-1: Product: syz [ 151.423181][ T4935] fuse: Bad value for 'fd' [ 151.432540][ T4325] usb 1-1: Manufacturer: syz [ 151.480157][ T4325] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 151.706276][ T4325] usb 1-1: USB disconnect, device number 5 [ 151.961217][ T125] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 153.332968][ T125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.373561][ T125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.387968][ T4932] block device autoloading is deprecated and will be removed. [ 153.415007][ T125] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.490410][ T125] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.542444][ T125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.563684][ T125] usb 4-1: config 0 descriptor?? [ 153.758680][ T4946] loop2: detected capacity change from 0 to 128 [ 153.863354][ T4946] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 153.907355][ T4946] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 153.978499][ T125] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 153.987705][ T4275] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 154.007604][ T125] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 154.065023][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 154.511320][ T125] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 154.701243][ T125] usb 1-1: Using ep0 maxpacket: 32 [ 156.103270][ T125] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.225259][ T125] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.475774][ T4342] usb 4-1: USB disconnect, device number 4 [ 156.808507][ T125] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 156.987404][ T125] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 157.029470][ T125] usb 1-1: Product: syz [ 157.060803][ T125] usb 1-1: Manufacturer: syz [ 157.070320][ T125] usb 1-1: SerialNumber: syz [ 157.109062][ T125] usb 1-1: config 0 descriptor?? [ 157.360509][ T125] usb 1-1: can't set config #0, error -71 [ 157.398689][ T125] usb 1-1: USB disconnect, device number 6 [ 157.437200][ T4974] fuse: Bad value for 'fd' [ 159.428237][ T4987] loop0: detected capacity change from 0 to 128 [ 159.671526][ T4987] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 160.278157][ T4987] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 160.560818][ T4275] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 161.165252][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 162.191314][ T4342] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 162.538352][ T4342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.631089][ T4342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.642941][ T4342] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.660040][ T4342] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.670906][ T4342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.710159][ T4342] usb 5-1: config 0 descriptor?? [ 163.929316][ T4342] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 164.752475][ T4342] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 164.773199][ T4342] usb 5-1: USB disconnect, device number 10 [ 167.531744][ T5021] fido_id[5021]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 167.998513][ T5031] device syzkaller0 entered promiscuous mode [ 168.520004][ T5039] loop4: detected capacity change from 0 to 128 [ 168.622217][ T5039] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 168.698707][ T5039] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 168.821485][ T4275] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 169.225461][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 172.034786][ T4275] Bluetooth: hci4: link tx timeout [ 172.043363][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.052910][ T4275] Bluetooth: hci4: link tx timeout [ 172.060144][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.072760][ T4275] Bluetooth: hci4: link tx timeout [ 172.080093][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.089425][ T4275] Bluetooth: hci4: link tx timeout [ 172.095374][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.106680][ T4275] Bluetooth: hci4: link tx timeout [ 172.112742][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.131215][ T4342] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 172.152844][ T4275] Bluetooth: hci4: link tx timeout [ 172.158286][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.166402][ T4275] Bluetooth: hci4: link tx timeout [ 172.172160][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.199354][ T5081] loop0: detected capacity change from 0 to 128 [ 172.302720][ T5081] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 172.341128][ T4342] usb 2-1: Using ep0 maxpacket: 8 [ 172.350404][ T4342] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 172.361723][ T5081] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 172.425735][ T4342] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 172.439047][ T4342] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.452557][ T4342] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.478286][ T4342] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.487801][ T4342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.599163][ T4275] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 172.765601][ T4342] usb 2-1: GET_CAPABILITIES returned 0 [ 172.771613][ T4342] usbtmc 2-1:16.0: can't read capabilities [ 172.874343][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 173.227686][ T125] usb 2-1: USB disconnect, device number 3 [ 181.031340][ T5133] loop3: detected capacity change from 0 to 4096 [ 183.969563][ T5157] fuse: Bad value for 'fd' [ 185.271181][ T4382] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 185.521133][ T4382] usb 2-1: Using ep0 maxpacket: 8 [ 185.528371][ T4382] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 185.750787][ T4382] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 186.199221][ T4382] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 186.215701][ T4382] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.245522][ T4382] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 186.268620][ T4382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.502198][ T4382] usb 2-1: GET_CAPABILITIES returned 0 [ 186.507822][ T4382] usbtmc 2-1:16.0: can't read capabilities [ 186.803682][ T4382] usb 2-1: USB disconnect, device number 4 [ 187.764353][ T5180] loop3: detected capacity change from 0 to 4096 [ 191.263294][ T5202] fuse: Bad value for 'fd' [ 192.834734][ T5218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 192.905651][ T5218] rdma_rxe: already configured on syz_tun [ 193.817483][ T4275] Bluetooth: hci4: link tx timeout [ 193.824165][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 193.834010][ T4275] Bluetooth: hci4: link tx timeout [ 193.839524][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.848583][ T4275] Bluetooth: hci4: link tx timeout [ 193.855639][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 193.865917][ T4275] Bluetooth: hci4: link tx timeout [ 193.873245][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.883030][ T4275] Bluetooth: hci4: link tx timeout [ 193.888423][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 193.900718][ T4275] Bluetooth: hci4: link tx timeout [ 193.906283][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.914760][ T4275] Bluetooth: hci4: link tx timeout [ 193.920207][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 193.928883][ T4275] Bluetooth: hci4: link tx timeout [ 193.934673][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.943807][ T4275] Bluetooth: hci4: link tx timeout [ 193.949472][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 193.962325][ T4275] Bluetooth: hci4: link tx timeout [ 193.967829][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.976123][ T4275] Bluetooth: hci4: link tx timeout [ 193.982435][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 193.990750][ T4275] Bluetooth: hci4: link tx timeout [ 193.998491][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.009822][ T4275] Bluetooth: hci4: link tx timeout [ 194.015695][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 194.024211][ T4275] Bluetooth: hci4: link tx timeout [ 194.029855][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.038115][ T4275] Bluetooth: hci4: link tx timeout [ 194.045236][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 194.053793][ T4275] Bluetooth: hci4: link tx timeout [ 194.065068][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.074390][ T4275] Bluetooth: hci4: link tx timeout [ 194.080405][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 194.089199][ T4275] Bluetooth: hci4: link tx timeout [ 194.095029][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.103642][ T4275] Bluetooth: hci4: link tx timeout [ 194.109363][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 194.118397][ T4275] Bluetooth: hci4: link tx timeout [ 194.124849][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.133638][ T4275] Bluetooth: hci4: link tx timeout [ 194.139618][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 194.148090][ T4275] Bluetooth: hci4: link tx timeout [ 194.154220][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.166367][ T4275] Bluetooth: hci4: link tx timeout [ 194.172083][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 194.179989][ T4275] Bluetooth: hci4: link tx timeout [ 194.185617][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.194345][ T4275] Bluetooth: hci4: link tx timeout [ 194.199697][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 194.208109][ T4275] Bluetooth: hci4: link tx timeout [ 194.214112][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.222783][ T4275] Bluetooth: hci4: link tx timeout [ 194.228240][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 194.238399][ T4275] Bluetooth: hci4: link tx timeout [ 194.245899][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.254434][ T4275] Bluetooth: hci4: link tx timeout [ 194.264436][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 194.272543][ T4275] Bluetooth: hci4: link tx timeout [ 194.278588][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.286759][ T4275] Bluetooth: hci4: link tx timeout [ 194.293370][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 194.302090][ T4275] Bluetooth: hci4: link tx timeout [ 194.307614][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.315855][ T4275] Bluetooth: hci4: link tx timeout [ 194.321867][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 194.329833][ T4275] Bluetooth: hci4: link tx timeout [ 194.335287][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.344657][ T4275] Bluetooth: hci4: link tx timeout [ 194.350223][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 194.360816][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.365224][ T4275] Bluetooth: hci4: link tx timeout [ 194.368769][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.372389][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.386827][ T4275] Bluetooth: hci4: link tx timeout [ 194.395875][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 194.405237][ T4275] Bluetooth: hci4: link tx timeout [ 194.410743][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.419903][ T4275] Bluetooth: hci4: link tx timeout [ 194.428319][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 194.439082][ T4275] Bluetooth: hci4: link tx timeout [ 194.448823][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.473509][ T4275] Bluetooth: hci4: link tx timeout [ 194.479624][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 194.488378][ T4275] Bluetooth: hci4: link tx timeout [ 194.504782][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.650232][ T4275] Bluetooth: hci4: link tx timeout [ 194.655563][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 194.663384][ T4275] Bluetooth: hci4: link tx timeout [ 194.668497][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.880378][ T4275] Bluetooth: hci4: link tx timeout [ 194.886029][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 194.895244][ T4275] Bluetooth: hci4: link tx timeout [ 194.900502][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.912040][ T4275] Bluetooth: hci4: link tx timeout [ 194.917465][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 194.926466][ T4275] Bluetooth: hci4: link tx timeout [ 194.931758][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.940198][ T4275] Bluetooth: hci4: link tx timeout [ 194.945964][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 194.954643][ T4275] Bluetooth: hci4: link tx timeout [ 194.960949][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.970336][ T4275] Bluetooth: hci4: link tx timeout [ 194.975581][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 194.984259][ T4275] Bluetooth: hci4: link tx timeout [ 194.989461][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.999017][ T4275] Bluetooth: hci4: link tx timeout [ 195.004462][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 195.012391][ T4275] Bluetooth: hci4: link tx timeout [ 195.017899][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.029620][ T4275] Bluetooth: hci4: link tx timeout [ 195.035222][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 195.044512][ T4275] Bluetooth: hci4: link tx timeout [ 195.049742][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.058725][ T4275] Bluetooth: hci4: link tx timeout [ 195.064507][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 195.073476][ T4275] Bluetooth: hci4: link tx timeout [ 195.079810][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.088698][ T4275] Bluetooth: hci4: link tx timeout [ 195.095708][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 195.103874][ T4275] Bluetooth: hci4: link tx timeout [ 195.109716][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.119084][ T4275] Bluetooth: hci4: link tx timeout [ 195.125011][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 195.134050][ T4275] Bluetooth: hci4: link tx timeout [ 195.139745][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.148294][ T4275] Bluetooth: hci4: link tx timeout [ 195.153685][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 195.161741][ T4275] Bluetooth: hci4: link tx timeout [ 195.167143][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.175412][ T4275] Bluetooth: hci4: link tx timeout [ 195.180627][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 195.188941][ T4275] Bluetooth: hci4: link tx timeout [ 195.194319][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.212775][ T4275] Bluetooth: hci4: link tx timeout [ 195.218004][ T4275] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 195.226636][ T4275] Bluetooth: hci4: link tx timeout [ 195.232198][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.951230][ T4275] Bluetooth: hci4: command 0x0406 tx timeout [ 196.158214][ T5231] loop4: detected capacity change from 0 to 4096 [ 197.355559][ T5242] binder: 5241:5242 ioctl c0306201 0 returned -14 [ 197.406812][ T5242] binder: 5241:5242 ioctl c0306201 200000001440 returned -11 [ 197.489389][ T5244] fuse: Bad value for 'fd' [ 206.671463][ T4277] Bluetooth: hci1: command 0x0406 tx timeout [ 206.671482][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 206.671516][ T4280] Bluetooth: hci2: command 0x0406 tx timeout [ 206.677567][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 206.936713][ T5292] binder: BINDER_SET_CONTEXT_MGR already set [ 206.953212][ T5292] binder: 5289:5292 ioctl 4018620d 200000000040 returned -16 [ 207.005403][ T5292] binder: 5289:5292 ioctl c0306201 200000001440 returned -11 [ 211.231435][ T5316] netlink: 24 bytes leftover after parsing attributes in process `syz.0.254'. [ 212.956172][ T5337] binder: 5329:5337 ioctl 4018620d 0 returned -22 [ 213.690802][ T5343] loop2: detected capacity change from 0 to 2048 [ 213.785214][ T5343] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 214.739395][ T5343] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.544110][ T5354] binder: 5353:5354 ioctl 4018620d 0 returned -22 [ 215.982663][ T5361] netlink: 48 bytes leftover after parsing attributes in process `syz.0.268'. [ 216.060790][ T5363] netlink: 48 bytes leftover after parsing attributes in process `syz.1.269'. [ 217.630939][ T5371] device syzkaller0 entered promiscuous mode [ 218.991473][ T4524] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 219.221231][ T4524] usb 2-1: Using ep0 maxpacket: 8 [ 219.290294][ T4524] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 219.335207][ T4524] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 219.391030][ T4524] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.431641][ T4524] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.486002][ T4524] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 219.521117][ T4524] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.846029][ T4524] usb 2-1: GET_CAPABILITIES returned 0 [ 219.851870][ T4524] usbtmc 2-1:16.0: can't read capabilities [ 220.093717][ T4438] usb 2-1: USB disconnect, device number 5 [ 222.761136][ T4524] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 223.431718][ T4524] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.461091][ T4524] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.515561][ T4524] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.559212][ T4524] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.604322][ T4524] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.639012][ T4524] usb 5-1: config 0 descriptor?? [ 224.072598][ T4524] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 224.144198][ T4524] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 224.278930][ T5427] loop1: detected capacity change from 0 to 2048 [ 224.305832][ T5427] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 224.402365][ T5427] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.431098][ T4341] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 225.591070][ T4341] usb 5-1: device descriptor read/64, error -32 [ 225.664126][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 225.752968][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.764602][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.553854][ T4451] usb 5-1: USB disconnect, device number 11 [ 228.566021][ T5465] binder: 5464:5465 ioctl 4018620d 0 returned -22 [ 229.528881][ T5472] binder: 5471:5472 ioctl c0306201 200000001440 returned -11 [ 231.151321][ T4382] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 232.061691][ T5494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.306'. [ 232.146763][ T4382] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.216117][ T5494] rdma_rxe: rxe_register_device failed with error -23 [ 232.229731][ T5494] rdma_rxe: failed to add syz_tun [ 232.403023][ T4382] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.735298][ T4382] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.065701][ T4382] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.142219][ T4382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.167704][ T4382] usb 5-1: config 0 descriptor?? [ 233.598781][ T4382] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 233.645937][ T4382] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 234.497735][ T5515] binder: 5514:5515 ioctl c0306201 200000001440 returned -11 [ 235.051120][ T4524] usb 5-1: reset high-speed USB device number 12 using dummy_hcd [ 235.909463][ T4382] usb 5-1: USB disconnect, device number 12 [ 237.931345][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 238.011147][ T5548] binder: 5547:5548 ioctl c0306201 200000001440 returned -11 [ 238.161240][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 238.950913][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.970770][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.993275][ T7] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 239.013048][ T7] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 239.031195][ T7] usb 1-1: Product: syz [ 239.041096][ T7] usb 1-1: Manufacturer: syz [ 239.051130][ T7] usb 1-1: SerialNumber: syz [ 239.057900][ T7] usb 1-1: config 0 descriptor?? [ 239.068105][ T7] hub 1-1:0.0: bad descriptor, ignoring hub [ 239.074228][ T7] hub: probe of 1-1:0.0 failed with error -5 [ 239.305697][ T5558] netlink: 48 bytes leftover after parsing attributes in process `syz.1.324'. [ 239.411091][ T7] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 239.644590][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.671273][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.685472][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 239.699867][ T7] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 239.713612][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.734085][ T7] usb 5-1: config 0 descriptor?? [ 240.072792][ T4438] usb 1-1: USB disconnect, device number 7 [ 240.148100][ T7] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 240.221349][ T7] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 240.391823][ T5568] netlink: 48 bytes leftover after parsing attributes in process `syz.2.328'. [ 242.272540][ T7] usb 5-1: USB disconnect, device number 13 [ 244.110785][ T5600] input: syz0 as /devices/virtual/input/input16 [ 245.454438][ T5600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 250.641141][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 250.843676][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.901128][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.931464][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 250.992211][ T7] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.337284][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.930819][ T7] usb 4-1: config 0 descriptor?? [ 252.072517][ T5645] binder: 5644:5645 ioctl c0306201 0 returned -14 [ 252.439515][ T7] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 253.115484][ T7] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 253.195998][ T5652] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.233625][ T5652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.253663][ T5652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.270386][ T7] usb 4-1: USB disconnect, device number 5 [ 253.514120][ T5655] fido_id[5655]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 255.793900][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.800525][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.345928][ T5675] netlink: 48 bytes leftover after parsing attributes in process `syz.1.358'. [ 257.376616][ T5680] loop0: detected capacity change from 0 to 128 [ 257.677799][ T5680] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 257.746368][ T5680] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 258.086124][ T5692] netlink: 48 bytes leftover after parsing attributes in process `syz.1.363'. [ 258.273369][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 258.469395][ T5700] binder: 5696:5700 ioctl c0306201 200000001440 returned -11 [ 260.618882][ T5713] binder: 5710:5713 ioctl 4018620d 0 returned -22 [ 261.126434][ T5713] binder: 5710:5713 ioctl c0306201 200000001440 returned -11 [ 261.146946][ T5714] netlink: 48 bytes leftover after parsing attributes in process `syz.1.372'. [ 262.434522][ T5723] loop2: detected capacity change from 0 to 128 [ 262.451427][ T5723] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 262.462102][ T5723] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 263.430439][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 266.064509][ T5744] loop3: detected capacity change from 0 to 2048 [ 266.107324][ T5744] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 266.130896][ T5744] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.116406][ T5795] loop4: detected capacity change from 0 to 2048 [ 276.297415][ T5795] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 276.343762][ T5795] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 279.681196][ T4440] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 279.906721][ T4440] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 279.959726][ T4440] usb 3-1: config 1 has an invalid descriptor of length 119, skipping remainder of the config [ 280.076227][ T4440] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 280.160486][ T4440] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 280.330654][ T4440] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 280.424943][ T4440] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 280.577532][ T4440] usb 3-1: Product: syz [ 280.639660][ T4440] usb 3-1: Manufacturer: syz [ 281.395253][ T4440] usb 3-1: can't set config #1, error -71 [ 281.429428][ T4440] usb 3-1: USB disconnect, device number 5 [ 281.991087][ T4440] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 282.192511][ T5833] binder: 5832:5833 ioctl c0306201 200000001440 returned -11 [ 282.262991][ T4440] usb 3-1: config 0 has no interfaces? [ 282.308421][ T4440] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 282.351257][ T4440] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.401356][ T4440] usb 3-1: Product: syz [ 282.407571][ T4440] usb 3-1: Manufacturer: syz [ 282.905254][ T4440] usb 3-1: SerialNumber: syz [ 282.973752][ T4440] usb 3-1: config 0 descriptor?? [ 286.202225][ T4449] usb 3-1: USB disconnect, device number 6 [ 289.409386][ T5850] loop2: detected capacity change from 0 to 2048 [ 289.639772][ T5850] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 290.148175][ T5850] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.798432][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 300.971316][ T7] usb 1-1: device descriptor read/64, error -71 [ 301.261306][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 302.091111][ T7] usb 1-1: device descriptor read/64, error -71 [ 302.211570][ T7] usb usb1-port1: attempt power cycle [ 302.402705][ T5920] loop4: detected capacity change from 0 to 2048 [ 302.451822][ T5920] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 302.905270][ T5920] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.941597][ T7] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 302.992332][ T7] usb 1-1: device descriptor read/8, error -71 [ 303.261081][ T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 303.501291][ T7] usb 1-1: device not accepting address 11, error -71 [ 303.561439][ T7] usb usb1-port1: unable to enumerate USB device [ 303.649590][ T5929] netlink: 48 bytes leftover after parsing attributes in process `syz.4.431'. [ 311.981131][ T4325] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 312.191311][ T4325] usb 1-1: Using ep0 maxpacket: 32 [ 312.310572][ T4325] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.333968][ T4325] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.422308][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 312.563929][ T4325] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 312.573755][ T4325] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 312.582896][ T4325] usb 1-1: Product: syz [ 312.587774][ T4325] usb 1-1: Manufacturer: syz [ 312.593580][ T4325] usb 1-1: SerialNumber: syz [ 312.600441][ T4325] usb 1-1: config 0 descriptor?? [ 312.687298][ T4325] hub 1-1:0.0: bad descriptor, ignoring hub [ 312.693943][ T4325] hub: probe of 1-1:0.0 failed with error -5 [ 312.920287][ T5977] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 315.571298][ T4449] usb 1-1: USB disconnect, device number 12 [ 317.235371][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.245795][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.826233][ T6029] loop3: detected capacity change from 0 to 2048 [ 318.906586][ T6029] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 319.072731][ T6029] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.171886][ T6043] netlink: 48 bytes leftover after parsing attributes in process `syz.3.461'. [ 324.372245][ T6057] input: syz0 as /devices/virtual/input/input18 [ 324.503086][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.466'. [ 326.897147][ T6077] loop1: detected capacity change from 0 to 2048 [ 326.958400][ T6077] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 327.022541][ T6077] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 327.903937][ T6086] netlink: 48 bytes leftover after parsing attributes in process `syz.4.474'. [ 333.961478][ T6125] input: syz0 as /devices/virtual/input/input19 [ 334.085925][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.484'. [ 340.148793][ T6165] input: syz0 as /devices/virtual/input/input20 [ 340.276892][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'. [ 340.330054][ T6168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.495'. [ 342.359772][ T6180] binder: 6178:6180 ioctl c0306201 0 returned -14 [ 342.414172][ T6180] binder: 6178:6180 ioctl c0306201 200000001440 returned -11 [ 343.623103][ T6186] binder: 6185:6186 ioctl 4018620d 0 returned -22 [ 343.729747][ T6186] binder: 6185:6186 ioctl c0306201 200000001440 returned -11 [ 344.525992][ T6205] input: syz0 as /devices/virtual/input/input21 [ 344.572732][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.508'. [ 344.792896][ T6205] netlink: 28 bytes leftover after parsing attributes in process `syz.4.508'. [ 347.871158][ T6214] binder: 6213:6214 ioctl c0306201 0 returned -14 [ 347.943926][ T6216] netlink: 48 bytes leftover after parsing attributes in process `syz.3.510'. [ 350.136102][ T6224] netlink: 48 bytes leftover after parsing attributes in process `syz.1.513'. [ 353.675939][ T6250] infiniband syz1: set active [ 353.719050][ T6250] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 353.754402][ T6250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 353.855812][ T6250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 354.007488][ T6250] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 354.345896][ T6261] binder: 6260:6261 ioctl c0306201 0 returned -14 [ 354.732042][ T6264] netlink: 48 bytes leftover after parsing attributes in process `syz.2.524'. [ 357.586552][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 357.903773][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 358.208958][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 358.390882][ T6273] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 362.412613][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.533'. [ 362.981052][ T4440] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 363.221188][ T4440] usb 3-1: Using ep0 maxpacket: 32 [ 363.256943][ T4440] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.423698][ T4440] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 363.534760][ T4440] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 363.576596][ T4440] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 363.621234][ T4440] usb 3-1: Product: syz [ 363.626027][ T4440] usb 3-1: Manufacturer: syz [ 363.668282][ T4440] usb 3-1: SerialNumber: syz [ 363.693920][ T4440] usb 3-1: config 0 descriptor?? [ 363.729779][ T4440] hub 3-1:0.0: bad descriptor, ignoring hub [ 363.780639][ T4440] hub: probe of 3-1:0.0 failed with error -5 [ 363.783463][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.537'. [ 365.621304][ T4440] usb 3-1: USB disconnect, device number 7 [ 365.728315][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.540'. [ 368.751664][ T4382] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 368.933187][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 368.981158][ T4382] usb 1-1: Using ep0 maxpacket: 8 [ 368.988990][ T4382] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 369.195256][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 369.211167][ T4382] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 369.253342][ T7] usb 4-1: config 0 has no interfaces? [ 369.266413][ T7] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 369.281192][ T4382] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 369.301118][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.317958][ T4382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.331170][ T7] usb 4-1: Product: syz [ 369.343192][ T7] usb 4-1: Manufacturer: syz [ 369.349554][ T4382] usbtmc 1-1:16.0: bulk endpoints not found [ 369.361048][ T7] usb 4-1: SerialNumber: syz [ 369.385017][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 369.402354][ T7] usb 4-1: config 0 descriptor?? [ 369.449237][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 369.612964][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.547'. [ 369.673461][ T7] usb 4-1: USB disconnect, device number 6 [ 370.511869][ T4449] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 370.671041][ T4449] usb 5-1: device descriptor read/64, error -71 [ 370.941121][ T4449] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 372.317796][ T4440] usb 1-1: USB disconnect, device number 13 [ 372.410987][ T4449] usb 5-1: device descriptor read/64, error -71 [ 372.553915][ T4449] usb usb5-port1: attempt power cycle [ 372.821673][ T6376] loop0: detected capacity change from 0 to 128 [ 372.903543][ T6376] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 372.991016][ T4449] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 373.033113][ T4449] usb 5-1: device descriptor read/8, error -71 [ 373.892013][ T6376] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 373.969516][ T4277] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 374.041017][ T4449] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 374.721033][ T4449] usb 5-1: device not accepting address 17, error -71 [ 374.743533][ T4449] usb usb5-port1: unable to enumerate USB device [ 374.830902][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 378.673465][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.679974][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.941062][ T4382] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 379.019243][ T6442] infiniband syz1: set active [ 379.203360][ T6444] loop0: detected capacity change from 0 to 128 [ 379.222522][ T4382] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.252420][ T6442] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 379.311118][ T4382] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 379.330274][ T6444] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 379.340983][ T4382] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 379.350317][ T6444] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 379.389066][ T4382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.406535][ T4382] usb 4-1: config 0 descriptor?? [ 379.451395][ T4277] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 379.473253][ T6442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 379.541921][ T6442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 379.597833][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 381.715192][ T4382] usb 4-1: USB disconnect, device number 7 [ 385.611615][ T6481] loop4: detected capacity change from 0 to 128 [ 385.753620][ T6481] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 385.803985][ T6481] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 385.921287][ T4277] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 386.180264][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 387.154961][ T4342] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 387.373455][ T4342] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.413355][ T4342] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 387.454181][ T4342] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 387.505583][ T4342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.556824][ T4342] usb 3-1: config 0 descriptor?? [ 388.697728][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 389.014713][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 389.032220][ T7] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 389.083664][ T7] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.177750][ T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 389.206035][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.278736][ T7] usbtmc 4-1:16.0: bulk endpoints not found [ 390.327196][ T7] usb 3-1: USB disconnect, device number 8 [ 394.295648][ T4449] usb 4-1: USB disconnect, device number 8 [ 395.140405][ T6537] loop4: detected capacity change from 0 to 128 [ 395.220635][ T6537] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 395.273616][ T6537] ext4 filesystem being mounted at /126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 395.351823][ T6541] fuse: Unknown parameter ';K9"»ü§¾0°RF‰N¸® ­ Rý+–ÊfÃ4võP]°r‹d(C2“7W¥ì‹ŽHxJ÷Á¸âÖ¯8€YÊ, priority 0 [ 432.080740][ T6770] fuse: Bad value for 'fd' [ 432.879220][ T6764] tipc: Disabling bearer [ 437.755066][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'. [ 437.787764][ T6803] binder: 6800:6803 ioctl c0306201 200000001440 returned -11 [ 440.113426][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.120923][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.840994][ T4440] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 449.051326][ T4440] usb 4-1: Using ep0 maxpacket: 32 [ 449.059309][ T4440] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.215761][ T4440] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 449.291104][ T4440] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 449.349579][ T4440] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 449.372481][ T4440] usb 4-1: Product: syz [ 449.376816][ T4440] usb 4-1: Manufacturer: syz [ 449.436028][ T4440] usb 4-1: SerialNumber: syz [ 449.489960][ T4440] usb 4-1: config 0 descriptor?? [ 449.656714][ T4440] hub 4-1:0.0: bad descriptor, ignoring hub [ 449.689236][ T4440] hub: probe of 4-1:0.0 failed with error -5 [ 449.815204][ T6866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.686'. [ 451.471250][ T7] usb 4-1: USB disconnect, device number 9 [ 451.812245][ T6872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.687'. [ 453.301213][ T7] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 453.571117][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 453.578498][ T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 453.629706][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 453.655873][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 453.677007][ T7] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.752499][ T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 453.864806][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.123110][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.692'. [ 454.269089][ T7] usb 4-1: GET_CAPABILITIES returned 0 [ 454.274945][ T7] usbtmc 4-1:16.0: can't read capabilities [ 454.526200][ T4528] usb 4-1: USB disconnect, device number 10 [ 459.081087][ T4325] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 459.518210][ T4325] usb 2-1: config 0 has no interfaces? [ 460.741158][ T4325] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 460.750503][ T4325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.759463][ T4325] usb 2-1: Product: syz [ 460.768018][ T4325] usb 2-1: Manufacturer: syz [ 460.773225][ T4325] usb 2-1: SerialNumber: syz [ 460.773890][ T6927] loop4: detected capacity change from 0 to 128 [ 460.781148][ T4325] usb 2-1: config 0 descriptor?? [ 460.895078][ T6927] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 460.961583][ T6927] ext4 filesystem being mounted at /149/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 461.027742][ T4528] usb 2-1: USB disconnect, device number 6 [ 461.171059][ T4277] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 461.200735][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 461.207579][ T4325] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 461.401129][ T4325] usb 3-1: Using ep0 maxpacket: 8 [ 461.408215][ T4325] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 461.429250][ T6934] netlink: 16 bytes leftover after parsing attributes in process `syz.3.702'. [ 462.375339][ T4325] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 462.386872][ T4325] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 462.398492][ T4325] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 462.418146][ T4325] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 462.428372][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.689215][ T4325] usb 3-1: GET_CAPABILITIES returned 0 [ 462.708199][ T4325] usbtmc 3-1:16.0: can't read capabilities [ 463.581210][ T4325] usb 3-1: USB disconnect, device number 11 [ 467.051062][ T4325] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 467.530997][ T4325] usb 3-1: Using ep0 maxpacket: 32 [ 467.962082][ T4325] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.021820][ T6967] netlink: 'syz.3.715': attribute type 10 has an invalid length. [ 468.029793][ T6967] netlink: 40 bytes leftover after parsing attributes in process `syz.3.715'. [ 468.123485][ T4325] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 468.332121][ T6967] device batadv0 entered promiscuous mode [ 468.338748][ T6967] bridge0: port 3(batadv0) entered blocking state [ 468.518939][ T4325] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 468.550598][ T4325] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 468.558964][ T4325] usb 3-1: Product: syz [ 468.563368][ T4325] usb 3-1: Manufacturer: syz [ 468.568071][ T4325] usb 3-1: SerialNumber: syz [ 468.574989][ T4325] usb 3-1: config 0 descriptor?? [ 468.580445][ T6967] bridge0: port 3(batadv0) entered disabled state [ 468.615125][ T4325] hub 3-1:0.0: bad descriptor, ignoring hub [ 468.632750][ T4325] hub: probe of 3-1:0.0 failed with error -5 [ 468.806965][ T6967] bridge0: port 3(batadv0) entered blocking state [ 468.814189][ T6967] bridge0: port 3(batadv0) entered forwarding state [ 469.307715][ T4579] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 469.317797][ T4579] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 471.871363][ T4529] usb 3-1: USB disconnect, device number 12 [ 471.896994][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.723'. [ 472.021322][ T4528] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 473.111116][ T4528] usb 4-1: Using ep0 maxpacket: 32 [ 473.123728][ T4528] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.993785][ T7005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.725'. [ 475.528702][ T4528] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 475.850299][ T4528] usb 4-1: string descriptor 0 read error: -71 [ 475.860540][ T4528] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 475.870967][ T4528] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 476.002402][ T4528] usb 4-1: config 0 descriptor?? [ 476.031052][ T4528] usb 4-1: can't set config #0, error -71 [ 476.055643][ T4528] usb 4-1: USB disconnect, device number 11 [ 482.372828][ T7058] loop2: detected capacity change from 0 to 2048 [ 482.541346][ T7058] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 482.659342][ T26] audit: type=1800 audit(1761944626.105:10): pid=7058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.737" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 482.843599][ T7070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.736'. [ 482.871246][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 484.271205][ T4524] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 484.496200][ T4524] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.557191][ T4524] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.659104][ T4524] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 484.788360][ T4524] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 485.610996][ T4524] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.631962][ T4524] usb 3-1: config 0 descriptor?? [ 486.326012][ T4524] usbhid 3-1:0.0: can't add hid device: -71 [ 487.641389][ T4524] usbhid: probe of 3-1:0.0 failed with error -71 [ 487.903680][ T4524] usb 3-1: USB disconnect, device number 13 [ 492.515997][ T7113] loop0: detected capacity change from 0 to 2048 [ 492.729938][ T7113] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 493.766461][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 500.551021][ T14] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 501.212760][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.277181][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.338021][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 501.544887][ T14] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 501.556021][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.564011][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.602535][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.646210][ T7167] netlink: 96 bytes leftover after parsing attributes in process `syz.1.766'. [ 501.660115][ T14] usb 1-1: config 0 descriptor?? [ 502.352653][ T14] usbhid 1-1:0.0: can't add hid device: -71 [ 502.870318][ T14] usbhid: probe of 1-1:0.0 failed with error -71 [ 503.252168][ T14] usb 1-1: USB disconnect, device number 16 [ 505.884053][ T7198] tipc: Started in network mode [ 505.888968][ T7198] tipc: Node identity 42df33a2e9db, cluster identity 4711 [ 505.901064][ T7198] tipc: Enabled bearer , priority 0 [ 505.973835][ T7197] tipc: Disabling bearer [ 506.363434][ T7208] netlink: 'syz.3.778': attribute type 10 has an invalid length. [ 506.401042][ T7208] netlink: 40 bytes leftover after parsing attributes in process `syz.3.778'. [ 506.691119][ T4451] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 507.071039][ T4451] usb 1-1: Using ep0 maxpacket: 32 [ 507.301671][ T4451] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.300647][ T4451] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 508.337435][ T4451] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 508.458910][ T4451] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 508.503980][ T4451] usb 1-1: Product: syz [ 508.545748][ T4451] usb 1-1: Manufacturer: syz [ 508.562817][ T4451] usb 1-1: SerialNumber: syz [ 508.611722][ T4451] usb 1-1: config 0 descriptor?? [ 508.652809][ T4451] hub 1-1:0.0: bad descriptor, ignoring hub [ 508.793736][ T4451] hub: probe of 1-1:0.0 failed with error -5 [ 508.794378][ T7227] netlink: 96 bytes leftover after parsing attributes in process `syz.1.782'. [ 509.591089][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 509.780998][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 509.788569][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.819846][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 509.860694][ T7] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 509.886216][ T7235] loop3: detected capacity change from 0 to 2048 [ 509.941288][ T7] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 509.979092][ T7] usb 2-1: Product: syz [ 509.994057][ T7] usb 2-1: Manufacturer: syz [ 509.998699][ T7] usb 2-1: SerialNumber: syz [ 510.173417][ T7235] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 510.241998][ T7235] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 510.296059][ T7] usb 2-1: config 0 descriptor?? [ 510.421267][ T4449] usb 1-1: USB disconnect, device number 17 [ 510.759648][ T7] hub 2-1:0.0: bad descriptor, ignoring hub [ 511.454908][ T7] hub: probe of 2-1:0.0 failed with error -5 [ 514.091687][ T7] usb 2-1: USB disconnect, device number 7 [ 517.570977][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 517.793334][ T7282] tipc: Enabling of bearer rejected, failed to enable media [ 517.902549][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.915548][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 517.949217][ T7] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 517.997382][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.031732][ T7] usb 2-1: config 0 descriptor?? [ 518.122086][ T7] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 519.517663][ T7293] loop3: detected capacity change from 0 to 2048 [ 519.634148][ T7293] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 520.022433][ T7293] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 521.102159][ T14] usb 2-1: USB disconnect, device number 8 [ 524.591238][ T4438] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 524.834310][ T4438] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.877147][ T4438] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.941395][ T4438] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 524.968895][ T4438] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 524.978609][ T4438] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.016110][ T4438] usb 4-1: config 0 descriptor?? [ 525.620744][ T7319] device syzkaller0 entered promiscuous mode [ 525.632840][ T4438] usbhid 4-1:0.0: can't add hid device: -71 [ 525.675510][ T4438] usbhid: probe of 4-1:0.0 failed with error -71 [ 525.747464][ T4438] usb 4-1: USB disconnect, device number 12 [ 527.139149][ T7327] Driver unsupported XDP return value 0 on prog (id 57) dev N/A, expect packet loss! [ 531.581825][ T7354] loop3: detected capacity change from 0 to 2048 [ 532.534885][ T7354] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 532.636966][ T7354] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 537.915519][ T7385] loop2: detected capacity change from 0 to 2048 [ 538.257205][ T7385] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 539.102233][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 543.243551][ T4275] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 543.256496][ T4275] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 543.267837][ T4275] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 543.277023][ T4275] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 543.293930][ T4275] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 543.303402][ T4275] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 545.391008][ T4275] Bluetooth: hci5: command 0x0409 tx timeout [ 545.753497][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.810'. [ 547.471288][ T4275] Bluetooth: hci5: command 0x041b tx timeout [ 547.689496][ T4277] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 547.704946][ T4277] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 547.716702][ T7410] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 547.727071][ T7410] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 547.740448][ T7410] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 547.756820][ T7410] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 549.208067][ T7344] infiniband syz1: set down [ 549.273711][ T4382] infiniband syz1: ib_query_port failed (-19) [ 549.390344][ T7049] smc: removing ib device syz1 [ 549.551131][ T7410] Bluetooth: hci5: command 0x040f tx timeout [ 549.591131][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.836'. [ 549.802259][ T7410] Bluetooth: hci6: command 0x0409 tx timeout [ 549.878682][ T7073] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.965413][ T7442] loop2: detected capacity change from 0 to 2048 [ 550.149941][ T7442] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 550.204740][ T7073] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.605228][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 551.631036][ T7410] Bluetooth: hci5: command 0x0419 tx timeout [ 551.706308][ T7073] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.849262][ T7408] chnl_net:caif_netlink_parms(): no params data found [ 551.871113][ T7410] Bluetooth: hci6: command 0x041b tx timeout [ 553.304735][ T7073] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.951058][ T7410] Bluetooth: hci6: command 0x040f tx timeout [ 555.267427][ T7408] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.352643][ T7408] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.381273][ T14] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 555.465317][ T7408] device bridge_slave_0 entered promiscuous mode [ 555.562172][ T14] usb 1-1: device descriptor read/64, error -71 [ 555.931187][ T14] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 555.962678][ T7408] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.998840][ T7408] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.042429][ T7410] Bluetooth: hci6: command 0x0419 tx timeout [ 556.141086][ T14] usb 1-1: device descriptor read/64, error -71 [ 556.173632][ T7408] device bridge_slave_1 entered promiscuous mode [ 556.253160][ T7427] chnl_net:caif_netlink_parms(): no params data found [ 556.282465][ T14] usb usb1-port1: attempt power cycle [ 556.731125][ T14] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 556.872563][ T14] usb 1-1: device descriptor read/8, error -71 [ 557.351725][ T14] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 557.659491][ T7408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.681513][ T14] usb 1-1: device not accepting address 21, error -71 [ 557.717600][ T14] usb usb1-port1: unable to enumerate USB device [ 558.392733][ T7408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.134167][ T7408] team0: Port device team_slave_0 added [ 562.220209][ T7408] team0: Port device team_slave_1 added [ 562.250299][ T7073] tipc: Left network mode [ 562.408519][ T7408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.449107][ T7408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.536569][ T7049] ------------[ cut here ]------------ [ 562.547190][ T7049] GID entry ref leak for dev syz1 index 2 ref=1 [ 562.569799][ T7049] WARNING: CPU: 0 PID: 7049 at drivers/infiniband/core/cache.c:809 gid_table_release_one+0x30f/0x490 [ 562.582847][ T7049] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 562.587236][ T7049] CPU: 0 PID: 7049 Comm: kworker/u4:34 Not tainted syzkaller #0 [ 562.596241][ T7049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 562.607309][ T7049] Workqueue: ib-unreg-wq ib_unregister_work [ 562.613494][ T7408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.613856][ T7049] RIP: 0010:gid_table_release_one+0x30f/0x490 [ 562.632530][ T7049] Code: 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 3c 41 8b 0e 48 c7 c7 00 89 6c 8b 48 8b 74 24 20 44 89 fa e8 c1 4a e9 f9 <0f> 0b e9 14 ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1a ff [ 562.655224][ T7049] RSP: 0018:ffffc90004237ae8 EFLAGS: 00010246 [ 562.662140][ T7049] RAX: 53adb886f1ac1a00 RBX: ffff88807ea5ded8 RCX: ffff888078193b80 [ 562.674488][ T7049] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 562.684599][ T7049] RBP: 1ffff1100fd4bbc0 R08: dffffc0000000000 R09: fffff52000846eed [ 562.694846][ T7049] R10: fffff52000846eed R11: 1ffff92000846eec R12: 1ffff1100fd4bbdb [ 562.705810][ T7049] R13: ffff88807ea5de00 R14: ffff888026f37d00 R15: 0000000000000002 [ 562.717403][ T7049] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 562.724209][ T7408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.730153][ T7049] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 562.730178][ T7049] CR2: 0000001b2f61cff8 CR3: 000000001e3f4000 CR4: 00000000003506f0 [ 562.730201][ T7049] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 562.768558][ T7049] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 562.778136][ T7049] Call Trace: [ 562.782147][ T7049] [ 562.785444][ T7049] ib_device_release+0xce/0x1b0 [ 562.792225][ T7049] ? ib_device_uevent+0xa0/0xa0 [ 562.798481][ T7049] device_release+0x92/0x1c0 [ 562.805277][ T7049] kobject_put+0x21d/0x460 [ 562.811989][ T7049] ? process_one_work+0x7a1/0x1160 [ 562.818119][ T7049] process_one_work+0x898/0x1160 [ 562.824374][ T7049] ? worker_detach_from_pool+0x240/0x240 [ 562.830114][ T7408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.831164][ T7049] ? _raw_spin_lock_irq+0xab/0xe0 [ 562.831205][ T7049] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 562.831239][ T7049] ? kthread_data+0x4b/0xc0 [ 562.831275][ T7049] worker_thread+0xaa2/0x1250 [ 562.831311][ T7049] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 562.831349][ T7049] ? __kthread_parkme+0x162/0x1c0 [ 562.831385][ T7049] kthread+0x29d/0x330 [ 562.831413][ T7049] ? worker_clr_flags+0x1a0/0x1a0 [ 562.831436][ T7049] ? kthread_blkcg+0xd0/0xd0 [ 562.831469][ T7049] ret_from_fork+0x1f/0x30 [ 562.831513][ T7049] [ 562.831536][ T7049] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 562.831547][ T7049] CPU: 0 PID: 7049 Comm: kworker/u4:34 Not tainted syzkaller #0 [ 562.831566][ T7049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 562.831579][ T7049] Workqueue: ib-unreg-wq ib_unregister_work [ 562.831612][ T7049] Call Trace: [ 562.831618][ T7049] [ 562.831625][ T7049] dump_stack_lvl+0x168/0x22e [ 562.831649][ T7049] ? memcpy+0x3c/0x60 [ 562.831677][ T7049] ? show_regs_print_info+0x12/0x12 [ 562.831703][ T7049] ? load_image+0x3b0/0x3b0 [ 562.831770][ T7049] panic+0x2c9/0x710 [ 562.831808][ T7049] ? bpf_jit_dump+0xd0/0xd0 [ 562.831842][ T7049] ? ret_from_fork+0x1f/0x30 [ 562.831880][ T7049] __warn+0x2f8/0x4f0 [ 562.831911][ T7049] ? gid_table_release_one+0x30f/0x490 [ 562.831942][ T7049] ? gid_table_release_one+0x30f/0x490 [ 562.831966][ T7049] report_bug+0x2ba/0x4f0 [ 562.831993][ T7049] ? gid_table_release_one+0x30f/0x490 [ 562.832027][ T7049] handle_bug+0x3a/0x70 [ 562.832054][ T7049] exc_invalid_op+0x16/0x40 [ 562.832081][ T7049] asm_exc_invalid_op+0x16/0x20 [ 562.832105][ T7049] RIP: 0010:gid_table_release_one+0x30f/0x490 [ 562.832134][ T7049] Code: 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 3c 41 8b 0e 48 c7 c7 00 89 6c 8b 48 8b 74 24 20 44 89 fa e8 c1 4a e9 f9 <0f> 0b e9 14 ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1a ff [ 562.832154][ T7049] RSP: 0018:ffffc90004237ae8 EFLAGS: 00010246 [ 562.832177][ T7049] RAX: 53adb886f1ac1a00 RBX: ffff88807ea5ded8 RCX: ffff888078193b80 [ 562.832195][ T7049] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 562.832209][ T7049] RBP: 1ffff1100fd4bbc0 R08: dffffc0000000000 R09: fffff52000846eed [ 562.832227][ T7049] R10: fffff52000846eed R11: 1ffff92000846eec R12: 1ffff1100fd4bbdb [ 562.832245][ T7049] R13: ffff88807ea5de00 R14: ffff888026f37d00 R15: 0000000000000002 [ 562.832281][ T7049] ? gid_table_release_one+0x30f/0x490 [ 562.832323][ T7049] ib_device_release+0xce/0x1b0 [ 562.832349][ T7049] ? ib_device_uevent+0xa0/0xa0 [ 562.832371][ T7049] device_release+0x92/0x1c0 [ 562.832402][ T7049] kobject_put+0x21d/0x460 [ 562.832443][ T7049] ? process_one_work+0x7a1/0x1160 [ 562.832467][ T7049] process_one_work+0x898/0x1160 [ 562.832513][ T7049] ? worker_detach_from_pool+0x240/0x240 [ 562.832544][ T7049] ? _raw_spin_lock_irq+0xab/0xe0 [ 562.832580][ T7049] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 562.832617][ T7049] ? kthread_data+0x4b/0xc0 [ 562.832656][ T7049] worker_thread+0xaa2/0x1250 [ 562.832693][ T7049] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 562.832745][ T7049] ? __kthread_parkme+0x162/0x1c0 [ 562.832784][ T7049] kthread+0x29d/0x330 [ 562.832815][ T7049] ? worker_clr_flags+0x1a0/0x1a0 [ 562.832840][ T7049] ? kthread_blkcg+0xd0/0xd0 [ 562.832877][ T7049] ret_from_fork+0x1f/0x30 [ 562.832924][ T7049] [ 562.864251][ T7049] Kernel Offset: disabled [ 563.296800][ T7049] Rebooting in 86400 seconds..