last executing test programs: 21m33.930783798s ago: executing program 32 (id=89): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e24, @local}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000180)={0x0, 0x5, 0x18, 0x6, 0x200, &(0x7f0000000880)="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"}) fcntl$dupfd(r6, 0x0, r5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 21m27.297768641s ago: executing program 33 (id=113): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x8}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000380)) 21m23.010417411s ago: executing program 1 (id=130): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) openat$dsp1(0xffffffffffffff9c, 0x0, 0x20080, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 21m22.08810919s ago: executing program 1 (id=131): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xda) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2501000000060001004e24000006000a004e2000000500040002"], 0x2c}, 0x1, 0x0, 0x0, 0x40048021}, 0x40080) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x4c050) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c0007800800084000000072050005000a00000005000100060000006654102e9503345c0e031bfc233b83cb47b9f255f11e803f11bd4a3448bdea3fa512160ab61ccb3fb794727e58620b6d0d6fe4324adcad462e0f7c279208e50c06c5e69940f5d38e8bbda56e28a611857c635d7a58946f08de105b"], 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 21m20.934932515s ago: executing program 34 (id=134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4800) 21m20.42391895s ago: executing program 1 (id=138): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000d80)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000400)={0x0, 0x1, 0x0, &(0x7f0000000200)=""/107, 0x0, 0x25000}) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/100, 0x64, 0x0, 0x1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000080)=0x1) 21m20.11041458s ago: executing program 1 (id=140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 21m18.995053384s ago: executing program 1 (id=142): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCGRS485(r0, 0x542e, 0x0) 21m18.092688622s ago: executing program 1 (id=143): r0 = getpid() ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, 0x0) getpgrp(r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x400c081) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04040aff2b48107966cc9deeafff"], 0xd) socket$nl_generic(0x10, 0x3, 0x10) 21m17.698963093s ago: executing program 35 (id=143): r0 = getpid() ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, 0x0) getpgrp(r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x400c081) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04040aff2b48107966cc9deeafff"], 0xd) socket$nl_generic(0x10, 0x3, 0x10) 20m31.153880892s ago: executing program 8 (id=260): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xd000, 0x7000}) 20m30.631941459s ago: executing program 8 (id=266): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xda) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2501000000060001004e24000006000a004e2000000500040002"], 0x2c}, 0x1, 0x0, 0x0, 0x40048021}, 0x40080) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x4c050) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c0007800800084000000072050005000a00000005000100060000006654102e9503345c0e031bfc233b83cb47b9f255f11e803f11bd4a3448bdea3fa512160ab61ccb3fb794727e58620b6d0d6fe4324adcad462e0f7c279208e50c06c5e69940f5d38e8bbda56e28a611857c635d7a58946f08de105b"], 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 20m26.827444884s ago: executing program 8 (id=275): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}}, 0x800) 20m26.482331185s ago: executing program 8 (id=279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 20m23.291203482s ago: executing program 8 (id=281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)={0x2, 0x0, [{0x80000019, 0x5, 0x0, 0x5}, {0x80000019, 0x1, 0x186733, 0xec74, 0xfffff001}]}) ioctl$KVM_TDX_FINALIZE_VM(r1, 0xc004aeba, &(0x7f0000000000)) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x3) 20m23.268411093s ago: executing program 6 (id=282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x81}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) 20m23.05135123s ago: executing program 6 (id=284): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 20m22.292690563s ago: executing program 6 (id=287): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) read$FUSE(r0, &(0x7f0000006540)={0x2020}, 0xfffffce2) 20m22.292492143s ago: executing program 8 (id=288): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @loopback, 0xffffffff, 0xff000000, 'macvlan0\x00', 'caif0\x00', {}, {0xff}, 0x11, 0x1, 0x4}, 0x0, 0x94, 0xfc, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x7, 0x9, 0x8, 0x8, '\x00', 'syz0\x00', {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0xff, 'erspan0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0x3, 0x0, 0x3, 0x1], 0x1, 0x3}, {0x1, [0x1, 0x0, 0x0, 0x4, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2bc) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 20m20.590816705s ago: executing program 36 (id=288): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @loopback, 0xffffffff, 0xff000000, 'macvlan0\x00', 'caif0\x00', {}, {0xff}, 0x11, 0x1, 0x4}, 0x0, 0x94, 0xfc, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x7, 0x9, 0x8, 0x8, '\x00', 'syz0\x00', {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0xff, 'erspan0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0x3, 0x0, 0x3, 0x1], 0x1, 0x3}, {0x1, [0x1, 0x0, 0x0, 0x4, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2bc) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 20m20.583786625s ago: executing program 6 (id=291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 20m19.548789766s ago: executing program 6 (id=293): socket$netlink(0x10, 0x3, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) getpid() r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r2 = syz_usbip_server_init(0x5) writev(r2, &(0x7f0000000000), 0x0) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 20m19.168006448s ago: executing program 6 (id=295): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 20m18.722963222s ago: executing program 37 (id=295): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 20m5.287932891s ago: executing program 5 (id=323): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305829, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040)) getuid() socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x80805, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r3, 0x40305829, 0x0) socket(0xa, 0x3, 0xb) ioctl$PPPIOCGIDLE64(r1, 0x8010743f, &(0x7f0000000480)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000180)=0xc) 20m4.119934477s ago: executing program 5 (id=327): socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000440)=ANY=[@ANYBLOB="050000000000000003000000000000000300000000000000", @ANYRES32]) 20m3.832216336s ago: executing program 5 (id=328): read$FUSE(0xffffffffffffffff, &(0x7f0000006540)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffce2) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x1, 0x0) 20m3.68901276s ago: executing program 5 (id=329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x12f451, 0x0) 20m2.609116443s ago: executing program 5 (id=330): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 20m2.07660731s ago: executing program 5 (id=332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x81}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) 20m1.270809054s ago: executing program 38 (id=332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x81}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) 4m58.488208929s ago: executing program 2 (id=4722): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) 4m57.796596801s ago: executing program 2 (id=4726): r0 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x24143, 0x10) fcntl$setlease(r0, 0x400, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000240)={0x6, 0x0, 0x2}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r2, 0x8943, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000002c0)={0xf0f045, 0x800}) poll(&(0x7f00000000c0)=[{r6, 0xe7d4c009da6c1985}], 0x1, 0x6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000007d1f30071c1155eecd4ba8a53a97b5a3466909589db822111274e4831863ee8d0c3d9526ce9c9a9a059a1964c4b911c9e58b074f33d3f4e8d8485acc3dd25776600e3eab09265db0994cf7aec5818fb527d3640590c047e2c462f20879f21992beea672b47a35699e04f9ed0e23f56d13e8006414fc1ced7da8df556bba7eb7118630e5918ff1869ab8e5ddfbe17adc19c3863e2e12fb207a86d0b44ded78f656e2e57ff35f8122c8cbba90791ff9cbc4cb5cc7b5f9c9b718bd755eaa0f75018ab8b414d5ae3e160b874d94e245ddb3207d2f047c4cfa8b9c94948f7bdec3fb99fd9641825cfebed34de8e62a096de32fd2254", @ANYRES16=r5, @ANYBLOB="000200000000000008000100000004000180"], 0x18}}, 0x4002) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000001304"], 0x0, 0x26}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x4, 0x4, 0x4, 0xc416, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r7, 0x0, 0x3}, 0x50) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={0x0}}, 0xf39d08bc62cf38a5) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f0000000280)={0x0, 0x1, r1}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, 0x0, &(0x7f00000002c0)) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv2(r10, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x86a, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYBLOB="0d429fc0", @ANYRES16=r8, @ANYBLOB="b1312bbd7000fcdbdf258800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8016}, 0x8000004) 4m56.876084561s ago: executing program 2 (id=4731): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="130823bd7000fddbdf25170000006400068014000300ba0a6e9cc64a0aa63ae2e0c4263a72004c00040067636d0300000029000000000000000000000000000000000000002400000078d9"], 0x78}, 0x1, 0x0, 0x0, 0x20048044}, 0x20008000) 4m56.704178256s ago: executing program 2 (id=4733): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) 4m55.599972201s ago: executing program 2 (id=4737): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket(0x1, 0x2, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x8905, 0x1000000000000) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000c40)={0xa1, 0x0, 0x9, 0x101}, 0x8) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x8, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0xe, &(0x7f0000000180)=""/67, &(0x7f00000002c0)=0x43) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0xf010000}) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000300)=""/168) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x20040051}], 0x1, 0x20040004) fallocate(0xffffffffffffffff, 0x0, 0x7ff, 0x8800000) 4m54.879825554s ago: executing program 2 (id=4739): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x15}, @private=0xa010100}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000840)="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", 0x3c6}, {&(0x7f0000002b40)="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", 0x1bf}], 0x2}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="fb", 0x1}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000c40)=""/4096, 0x1000}], 0x1}, 0x0) 4m54.483656067s ago: executing program 39 (id=4739): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x15}, @private=0xa010100}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000840)="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", 0x3c6}, {&(0x7f0000002b40)="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", 0x1bf}], 0x2}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="fb", 0x1}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000c40)=""/4096, 0x1000}], 0x1}, 0x0) 9.343260381s ago: executing program 3 (id=5666): socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff8d) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@broadcast, @empty=0xff03, 0xffffff00, 0xff000000, 0xe, 0x2, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff]}}, 0x4, 0x4, 0x1, 0x4d3, 0x0, 0xf8db, 'veth1_virt_wifi\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x8}}}, {{@arp={@private=0xa010101, @empty, 0xffffffff, 0xffffff00, 0x9, 0x2, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x730e8ec89ff96e2d]}}, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x1, 0xb, 0x6, 0x4000, 0x4, 'virt_wifi0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x0, 0x397}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private=0xa010102, @multicast2, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x20000054) r7 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r7) 8.700155812s ago: executing program 0 (id=5672): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 7.954437446s ago: executing program 7 (id=5673): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3004009, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 7.528222219s ago: executing program 9 (id=5674): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8f, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) 7.300117286s ago: executing program 3 (id=5675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x82f49000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.297944867s ago: executing program 0 (id=5676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xffff}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.296626877s ago: executing program 7 (id=5677): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5.968847679s ago: executing program 3 (id=5679): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 5.722168287s ago: executing program 7 (id=5681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xd, 0xb}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x4890) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000440)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0x3}, 0x14) 5.694178658s ago: executing program 9 (id=5682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="800000", 0x3, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 4.908129983s ago: executing program 3 (id=5684): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x62040200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x7003, [0x80002, 0x40007, 0x1, 0x2, 0xa]}, &(0x7f0000000100)=0x54) 4.454320237s ago: executing program 4 (id=5685): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x24048010, &(0x7f0000000180)={0x11, 0x6, r2, 0x1, 0x12, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) 2.409526393s ago: executing program 9 (id=5686): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd3ee}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.328036655s ago: executing program 0 (id=5687): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3004009, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 2.311860906s ago: executing program 4 (id=5688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="c8130000", @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="a8137d80830002"], 0x13c8}, 0x1, 0x0, 0x0, 0x80d1}, 0x884) 2.262571697s ago: executing program 7 (id=5689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x82f49000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.16724106s ago: executing program 0 (id=5690): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x20000000, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback, 0x23}, 0x1c) accept4(r0, 0x0, 0x0, 0x80000) 2.103457942s ago: executing program 3 (id=5691): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.001873276s ago: executing program 9 (id=5692): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8f, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) 1.950486807s ago: executing program 4 (id=5693): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x34424752, 0x0, 0x0, 0x0, 0x0, 0x2, 0x779acd4f0ad4811f, 0x0, 0x2, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x6, 0x1, 0xc, "59bfd274a192ef8549532140593a4276ed9ddd58583d1391038a51fab4862340", 0x38303553}) 868.810062ms ago: executing program 7 (id=5694): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 773.109345ms ago: executing program 4 (id=5695): socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x28040) r2 = epoll_create(0x7) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') 490.680624ms ago: executing program 0 (id=5696): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000003c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x34, 0x3a, 0x1, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xfffffffc, {0x6, 0x6, "5fdfaf", 0xfff7, 0x32, 0xff, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [], "57f02c47"}}}}}}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix_mp={0x0, 0x0, 0x32314742}}) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1000000010, 0x80802, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 485.362974ms ago: executing program 3 (id=5697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xffff}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 387.597557ms ago: executing program 4 (id=5698): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="800000", 0x3, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 299.42591ms ago: executing program 7 (id=5699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x93}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 263.004151ms ago: executing program 9 (id=5700): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3004009, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 109.812256ms ago: executing program 0 (id=5701): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x62040200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x7003, [0x80002, 0x40007, 0x1, 0x2, 0xa]}, &(0x7f0000000100)=0x54) 74.852747ms ago: executing program 9 (id=5702): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x9, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3, 0x2, 0x40}, {0x9, 0x0, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8}, 0x8000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x7, r10, 0x2c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="7cb172", 0x3}], 0x1}, 0x4) 0s ago: executing program 4 (id=5703): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000050a05000000000000000000020000060c00024000000000000000020b00070066696c74657200000c000240000000000000000108000b40000000040900010073797a30000000000900010073797a30000000002000000008"], 0x1ce0}}, 0x40000) kernel console output (not intermixed with test programs): 8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 989.992069][ T6948] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 990.004185][ T6948] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 990.016281][ T6948] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 990.025576][ T6948] usb 4-1: media controller created [ 990.051485][ T6948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 990.202683][ T6948] zl10353_read_register: readreg error (reg=127, ret==0) [ 990.221484][ T6948] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 990.240426][ T6948] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 990.295913][ T6948] usb 4-1: USB disconnect, device number 30 [ 990.824915][ T6948] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 990.837043][T16422] udevd[16422]: setting mode of /dev/bus/usb/004/030 to 020664 failed: No such file or directory [ 991.500469][T19805] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 991.507033][T19805] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 991.515169][T19805] vhci_hcd vhci_hcd.0: Device attached [ 991.515353][T19806] vhci_hcd: connection closed [ 991.541612][T16422] udevd[16422]: setting owner of /dev/bus/usb/004/030 to uid=0, gid=0 failed: No such file or directory [ 991.672137][T17802] vhci_hcd: stop threads [ 991.676972][T17802] vhci_hcd: release socket [ 991.693289][T17802] vhci_hcd: disconnect device [ 992.052997][ T6948] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 992.292630][T19829] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4238'. [ 992.304930][ T6948] usb 3-1: Using ep0 maxpacket: 32 [ 992.320802][ T6948] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 992.355720][ T6948] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 992.372123][ T6948] usb 3-1: config 0 interface 0 has no altsetting 0 [ 992.391776][ T6948] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 992.412724][ T6948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.431549][ T6948] usb 3-1: Product: syz [ 992.533317][ T6948] usb 3-1: Manufacturer: syz [ 992.562954][ T6948] usb 3-1: SerialNumber: syz [ 993.020965][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.027637][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.110358][ T6948] usb 3-1: config 0 descriptor?? [ 993.455457][T17802] tipc: Left network mode [ 993.558580][ T6948] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 993.569422][ T6948] gs_usb: probe of 3-1:0.0 failed with error -121 [ 994.456244][T17802] bond1: (slave gretap1): Releasing active interface [ 994.565868][ T6948] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 994.846671][ T6948] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.874685][ T6948] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 994.907828][ T6948] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.964133][ T4326] usb 3-1: USB disconnect, device number 7 [ 995.092330][T19863] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 995.098944][T19863] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 995.324667][T19863] vhci_hcd vhci_hcd.0: Device attached [ 995.768072][T19864] vhci_hcd: connection closed [ 995.768827][ T4489] vhci_hcd: stop threads [ 995.839487][ T4489] vhci_hcd: release socket [ 995.905176][ T4326] usb 42-1: SetAddress Request (2) to port 0 [ 995.920570][ T4326] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 995.947455][ T4489] vhci_hcd: disconnect device [ 996.045024][ T4326] usb 42-1: enqueue for inactive port 0 [ 996.287883][ T6948] usb 8-1: config 0 descriptor?? [ 996.296915][ T6948] pwc: Askey VC010 type 2 USB webcam detected. [ 996.494005][T19878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4254'. [ 996.693886][T19865] netlink: 'syz.4.4250': attribute type 12 has an invalid length. [ 996.736216][ T4326] usb usb42-port1: attempt power cycle [ 996.907572][ T6948] pwc: recv_control_msg error -32 req 02 val 2b00 [ 996.928226][ T6948] pwc: recv_control_msg error -32 req 02 val 2700 [ 997.126840][ T6948] pwc: recv_control_msg error -32 req 02 val 2c00 [ 997.145070][ T6948] pwc: recv_control_msg error -32 req 04 val 1000 [ 997.162868][ T6948] pwc: recv_control_msg error -32 req 04 val 1300 [ 997.173314][ T6948] pwc: recv_control_msg error -32 req 04 val 1400 [ 997.191629][ T6948] pwc: recv_control_msg error -32 req 02 val 2000 [ 997.202939][ T6948] pwc: recv_control_msg error -32 req 02 val 2100 [ 997.231697][ T6948] pwc: recv_control_msg error -32 req 04 val 1500 [ 997.250338][ T6948] pwc: recv_control_msg error -32 req 02 val 2500 [ 997.261939][ T6948] pwc: recv_control_msg error -32 req 02 val 2400 [ 997.280168][ T6948] pwc: recv_control_msg error -32 req 02 val 2600 [ 997.697409][ T6948] pwc: recv_control_msg error -71 req 04 val 1100 [ 997.730375][ T6948] pwc: recv_control_msg error -71 req 04 val 1200 [ 997.745827][ T6948] pwc: Registered as video103. [ 997.767727][ T6948] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input23 [ 997.812526][ T6948] usb 8-1: USB disconnect, device number 31 [ 999.843581][T17802] device hsr_slave_0 left promiscuous mode [ 999.862642][T17802] device hsr_slave_1 left promiscuous mode [ 999.893783][T17802] device bridge_slave_1 left promiscuous mode [ 999.927190][ T4326] usb usb42-port1: unable to enumerate USB device [ 999.933929][T17802] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.964483][T17802] device bridge_slave_0 left promiscuous mode [ 999.980576][T17802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.885946][T17802] device veth1_macvtap left promiscuous mode [ 1000.917561][T17802] device veth0_macvtap left promiscuous mode [ 1001.747600][T17802] device veth1_vlan left promiscuous mode [ 1002.021134][T17802] device veth0_vlan left promiscuous mode [ 1002.028182][T19912] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4261'. [ 1002.155026][ T6948] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1002.331988][T17802] bond2 (unregistering): Released all slaves [ 1002.345772][ T6948] usb 10-1: Using ep0 maxpacket: 32 [ 1002.361819][ T6948] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1002.373975][ T6948] usb 10-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1002.415043][T17802] bond1 (unregistering): Released all slaves [ 1002.421923][T19927] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1002.428500][T19927] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1002.436697][T19927] vhci_hcd vhci_hcd.0: Device attached [ 1002.454276][ T6948] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1002.496266][ T6948] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1002.577769][ T6948] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.627524][ T6948] usb 10-1: Product: syz [ 1002.632234][ T6948] usb 10-1: Manufacturer: syz [ 1002.640802][ T6948] usb 10-1: SerialNumber: syz [ 1002.744454][ T6948] usb 10-1: config 0 descriptor?? [ 1002.935955][ T4335] usb 48-1: SetAddress Request (11) to port 0 [ 1002.944373][ T4335] usb 48-1: new SuperSpeed USB device number 11 using vhci_hcd [ 1003.203264][T19928] vhci_hcd: connection reset by peer [ 1003.211932][ T56] vhci_hcd: stop threads [ 1003.285200][ T6948] gs_usb 10-1:0.0: Couldn't get device config: (err=-121) [ 1003.297636][ T56] vhci_hcd: release socket [ 1003.302332][ T6948] gs_usb: probe of 10-1:0.0 failed with error -121 [ 1003.313626][ T56] vhci_hcd: disconnect device [ 1004.125159][T17802] team0 (unregistering): Port device team_slave_1 removed [ 1004.184197][T17802] team0 (unregistering): Port device team_slave_0 removed [ 1004.240863][T17802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1004.303165][T17802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1004.604211][ T6948] usb 10-1: USB disconnect, device number 15 [ 1004.712380][T17802] bond0 (unregistering): Released all slaves [ 1004.914646][T19927] netlink: 'syz.7.4266': attribute type 12 has an invalid length. [ 1005.272007][T19944] loop2: detected capacity change from 0 to 1024 [ 1005.280105][T19944] EXT4-fs: Ignoring removed bh option [ 1005.340692][T19944] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1005.512602][T19957] loop4: detected capacity change from 0 to 128 [ 1005.558418][T19957] EXT4-fs: Ignoring removed nobh option [ 1005.588007][T19957] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1005.637849][T19957] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1005.650259][T17802] tipc: Left network mode [ 1005.928957][T16861] EXT4-fs (loop2): unmounting filesystem. [ 1006.173949][T19966] loop7: detected capacity change from 0 to 256 [ 1006.614803][T17541] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1006.941484][T17541] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.084748][ T6948] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1007.174718][T17541] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1007.183798][T17541] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.240201][T17541] usb 4-1: config 0 descriptor?? [ 1007.265279][T16577] EXT4-fs (loop4): unmounting filesystem. [ 1007.306645][T17541] pwc: Askey VC010 type 2 USB webcam detected. [ 1007.386515][ T6948] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.405549][ T6948] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1007.418621][ T6948] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1007.429052][ T6948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1007.490341][ T6948] usb 3-1: SerialNumber: syz [ 1007.662478][T17541] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1007.674310][T17541] pwc: recv_control_msg error -32 req 02 val 2700 [ 1007.714097][T17541] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1007.731220][T17541] pwc: recv_control_msg error -32 req 04 val 1000 [ 1007.758811][ T6948] usb 3-1: 0:2 : does not exist [ 1008.054984][ T4335] usb 48-1: device descriptor read/8, error -110 [ 1008.122577][T17541] pwc: recv_control_msg error -32 req 04 val 1300 [ 1008.153666][T19982] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1008.160279][T19982] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1008.168280][T19982] vhci_hcd vhci_hcd.0: Device attached [ 1008.191863][T17541] pwc: recv_control_msg error -32 req 04 val 1400 [ 1008.596384][T19983] vhci_hcd: connection closed [ 1008.596685][T18114] vhci_hcd: stop threads [ 1009.114460][T18114] vhci_hcd: release socket [ 1009.119124][T18114] vhci_hcd: disconnect device [ 1009.144984][ T4335] usb usb48-port1: attempt power cycle [ 1009.164859][ T6948] usb 3-1: USB disconnect, device number 8 [ 1009.200318][T17541] pwc: recv_control_msg error -32 req 02 val 2000 [ 1009.377282][T17541] pwc: recv_control_msg error -71 req 02 val 2100 [ 1009.383963][T19984] netlink: 'syz.4.4282': attribute type 12 has an invalid length. [ 1009.426538][T17541] pwc: recv_control_msg error -71 req 04 val 1500 [ 1009.454985][T17541] pwc: recv_control_msg error -71 req 02 val 2500 [ 1009.494857][T17541] pwc: recv_control_msg error -71 req 02 val 2400 [ 1009.521770][T17541] pwc: recv_control_msg error -71 req 02 val 2600 [ 1009.572451][T17541] pwc: recv_control_msg error -71 req 02 val 2900 [ 1009.633267][T17541] pwc: recv_control_msg error -71 req 02 val 2800 [ 1009.655697][T17541] pwc: recv_control_msg error -71 req 04 val 1100 [ 1009.704776][T17541] pwc: recv_control_msg error -71 req 04 val 1200 [ 1009.731856][T17541] pwc: Registered as video103. [ 1009.741996][T17541] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24 [ 1009.757731][T19998] loop2: detected capacity change from 0 to 1024 [ 1009.777003][T17541] usb 4-1: USB disconnect, device number 31 [ 1009.804270][T19998] EXT4-fs: Ignoring removed bh option [ 1009.815296][ T4335] usb usb48-port1: unable to enumerate USB device [ 1009.946317][T19998] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1010.289397][T17802] bond1: (slave gretap1): Releasing active interface [ 1010.350595][T16861] EXT4-fs (loop2): unmounting filesystem. [ 1010.398530][T20017] device syzkaller0 entered promiscuous mode [ 1010.496907][T20019] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1010.519151][T20019] overlayfs: failed to set xattr on upper [ 1010.549181][T20019] overlayfs: ...falling back to index=off,metacopy=off. [ 1010.564663][ T26] audit: type=1804 audit(1778646257.005:71): pid=20022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4290" name="/newroot/173/file0/file0/file1" dev="ramfs" ino=85890 res=1 errno=0 [ 1011.224666][T19041] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1011.244672][T19038] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1012.498783][T20041] netlink: 'syz.2.4297': attribute type 12 has an invalid length. [ 1012.542935][T20045] siw: device registration error -23 [ 1012.652495][T19041] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.677122][T19038] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.715424][T19041] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1012.752793][T19038] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1012.812886][T19041] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.823498][T19038] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1012.844133][T19038] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1012.854442][T19041] usb 4-1: config 0 descriptor?? [ 1012.863070][T19038] usb 10-1: SerialNumber: syz [ 1012.873337][T19041] pwc: Askey VC010 type 2 USB webcam detected. [ 1012.915803][T17802] device hsr_slave_0 left promiscuous mode [ 1012.939089][T17802] device hsr_slave_1 left promiscuous mode [ 1012.955981][T17802] device bridge_slave_1 left promiscuous mode [ 1012.972694][T17802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.002709][T17802] device bridge_slave_0 left promiscuous mode [ 1013.022056][T17802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.050663][T17802] bond2 (unregistering): Released all slaves [ 1013.071579][T17802] bond1 (unregistering): Released all slaves [ 1013.116951][T19038] usb 10-1: 0:2 : does not exist [ 1013.183115][T19038] usb 10-1: USB disconnect, device number 16 [ 1013.282580][T19041] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1013.291444][T19041] pwc: recv_control_msg error -32 req 02 val 2700 [ 1013.306507][T19041] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1013.331694][T19041] pwc: recv_control_msg error -32 req 04 val 1000 [ 1013.355107][T19041] pwc: recv_control_msg error -32 req 04 val 1300 [ 1013.371167][T19041] pwc: recv_control_msg error -32 req 04 val 1400 [ 1013.380012][T19041] pwc: recv_control_msg error -32 req 02 val 2000 [ 1013.388880][T19041] pwc: recv_control_msg error -32 req 02 val 2100 [ 1013.396578][T19041] pwc: recv_control_msg error -32 req 04 val 1500 [ 1013.407729][T19041] pwc: recv_control_msg error -32 req 02 val 2500 [ 1013.431901][T19041] pwc: recv_control_msg error -32 req 02 val 2400 [ 1013.439380][T17548] udevd[17548]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1013.467434][T19041] pwc: recv_control_msg error -32 req 02 val 2600 [ 1013.924807][T19041] pwc: recv_control_msg error -71 req 04 val 1100 [ 1013.932717][T19041] pwc: recv_control_msg error -71 req 04 val 1200 [ 1013.964489][T19041] pwc: Registered as video103. [ 1013.970379][T19041] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 1013.989979][T17802] team0 (unregistering): Port device team_slave_1 removed [ 1013.999646][T19041] usb 4-1: USB disconnect, device number 32 [ 1014.088234][T17802] team0 (unregistering): Port device team_slave_0 removed [ 1014.149108][T17802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.204670][T17802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.750235][T17802] bond0 (unregistering): Released all slaves [ 1014.793033][T20084] siw: device registration error -23 [ 1015.821426][T20091] netlink: 'syz.2.4311': attribute type 12 has an invalid length. [ 1015.881640][T20089] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1015.888244][T20089] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1015.947603][T20089] vhci_hcd vhci_hcd.0: Device attached [ 1016.335578][T19041] usb 38-1: SetAddress Request (6) to port 0 [ 1016.362116][T19041] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1016.919089][T20090] vhci_hcd: connection reset by peer [ 1016.925766][ T33] vhci_hcd: stop threads [ 1016.983217][ T33] vhci_hcd: release socket [ 1017.133407][ T33] vhci_hcd: disconnect device [ 1017.904649][ T4335] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1017.912401][ T6946] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1018.107484][ T4335] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.118190][ T6946] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1018.127280][ T6946] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.138899][ T4335] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1018.148567][ T6946] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1018.165580][ T4335] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1018.179476][ T6946] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.192741][ T4335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1018.211122][ T4335] usb 4-1: SerialNumber: syz [ 1018.218342][ T6946] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1018.265086][ T6946] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1018.286621][ T6946] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1018.302415][ T6946] usb 8-1: Product: syz [ 1018.312386][ T6946] usb 8-1: Manufacturer: syz [ 1018.340448][ T6946] cdc_wdm 8-1:1.0: skipping garbage [ 1018.345980][ T6946] cdc_wdm 8-1:1.0: skipping garbage [ 1018.356437][ T6946] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1018.362557][ T6946] cdc_wdm 8-1:1.0: Unknown control protocol [ 1018.457690][ T4335] usb 4-1: 0:2 : does not exist [ 1018.473130][ T4335] usb 4-1: USB disconnect, device number 33 [ 1018.541115][T20103] cdc_wdm 8-1:1.0: Error submitting int urb - -90 [ 1018.555900][ T4326] usb 8-1: USB disconnect, device number 32 [ 1018.611865][T20131] x_tables: duplicate underflow at hook 1 [ 1019.416764][T17438] tipc: Disabling bearer [ 1019.422239][T17438] tipc: Left network mode [ 1019.485874][T17548] udevd[17548]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1019.984094][T20145] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1019.990700][T20145] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1020.001862][T20145] vhci_hcd vhci_hcd.0: Device attached [ 1020.335554][ T4335] usb 48-1: SetAddress Request (15) to port 0 [ 1020.351076][ T4335] usb 48-1: new SuperSpeed USB device number 15 using vhci_hcd [ 1020.543481][T20148] netlink: 'syz.7.4331': attribute type 12 has an invalid length. [ 1020.581413][T20146] vhci_hcd: connection closed [ 1020.591520][ T4303] vhci_hcd: stop threads [ 1020.782233][ T4303] vhci_hcd: release socket [ 1020.853178][ T4303] vhci_hcd: disconnect device [ 1021.592700][T15353] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1021.774663][T15353] usb 10-1: Using ep0 maxpacket: 32 [ 1021.789867][T15353] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1021.835768][T15353] usb 10-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1021.868294][T15353] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1021.894983][T19041] usb 38-1: device descriptor read/8, error -110 [ 1021.931089][T15353] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1021.974224][T15353] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.012348][T15353] usb 10-1: Product: syz [ 1022.041111][T15353] usb 10-1: Manufacturer: syz [ 1022.102865][T15353] usb 10-1: SerialNumber: syz [ 1022.141986][T15353] usb 10-1: config 0 descriptor?? [ 1022.317019][T19041] usb usb38-port1: attempt power cycle [ 1022.597386][T20200] netlink: 'syz.2.4348': attribute type 12 has an invalid length. [ 1022.639115][T15353] gs_usb 10-1:0.0: Couldn't get device config: (err=-121) [ 1022.680498][T15353] gs_usb: probe of 10-1:0.0 failed with error -121 [ 1022.718968][T20197] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1022.725577][T20197] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1022.735842][T20197] vhci_hcd vhci_hcd.0: Device attached [ 1022.815014][T19041] usb 38-1: SetAddress Request (9) to port 0 [ 1022.835409][T19041] usb 38-1: new SuperSpeed USB device number 9 using vhci_hcd [ 1023.332335][T20198] vhci_hcd: connection reset by peer [ 1023.338743][ T6532] vhci_hcd: stop threads [ 1023.343508][ T6532] vhci_hcd: release socket [ 1023.435327][ T6532] vhci_hcd: disconnect device [ 1024.443989][T15353] usb 10-1: USB disconnect, device number 17 [ 1025.575183][T17438] device hsr_slave_0 left promiscuous mode [ 1025.582949][T17438] device hsr_slave_1 left promiscuous mode [ 1025.613106][T17438] device bridge_slave_1 left promiscuous mode [ 1025.630667][T17438] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.654840][ T4335] usb 48-1: device descriptor read/8, error -110 [ 1025.670756][T17438] device bridge_slave_0 left promiscuous mode [ 1025.682985][T17438] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.096749][ T4335] usb usb48-port1: attempt power cycle [ 1026.148026][T17438] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1026.159161][T17438] bond6 (unregistering): Released all slaves [ 1026.181509][T17438] bond5 (unregistering): Released all slaves [ 1026.199299][T17438] bond4 (unregistering): Released all slaves [ 1026.214133][T17438] bond3 (unregistering): Released all slaves [ 1026.236107][T17438] bond2 (unregistering): Released all slaves [ 1026.251240][T17438] bond1 (unregistering): Released all slaves [ 1026.591538][T20255] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1026.598142][T20255] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1026.607880][T20255] vhci_hcd vhci_hcd.0: Device attached [ 1026.835356][ T4335] usb 48-1: SetAddress Request (18) to port 0 [ 1026.850161][ T4335] usb 48-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1027.327619][T20256] vhci_hcd: connection reset by peer [ 1027.340678][T17912] vhci_hcd: stop threads [ 1027.345412][T17912] vhci_hcd: release socket [ 1027.425876][T17912] vhci_hcd: disconnect device [ 1028.057055][T19041] usb 38-1: device descriptor read/8, error -110 [ 1028.174875][T19041] usb usb38-port1: unable to enumerate USB device [ 1028.436941][T17438] team0 (unregistering): Port device team_slave_1 removed [ 1028.495456][T17438] team0 (unregistering): Port device team_slave_0 removed [ 1028.559569][T17438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1028.616888][T17438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1028.970080][T17438] bond0 (unregistering): Released all slaves [ 1029.070438][T20222] tipc: Started in network mode [ 1029.075447][T20222] tipc: Node identity 2007ff, cluster identity 4711 [ 1029.082348][T20222] tipc: Node number set to 2099199 [ 1029.089688][T20255] netlink: 'syz.7.4361': attribute type 12 has an invalid length. [ 1029.594974][ T4324] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1029.696506][T19041] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1029.794751][ T4324] usb 5-1: Using ep0 maxpacket: 32 [ 1029.805410][ T4324] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1029.815642][ T4324] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1029.827173][ T4324] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1029.843383][ T4324] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1029.856017][ T4324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.868211][ T4324] usb 5-1: Product: syz [ 1029.874114][ T4324] usb 5-1: Manufacturer: syz [ 1029.885475][ T4324] usb 5-1: SerialNumber: syz [ 1029.912190][ T4324] usb 5-1: config 0 descriptor?? [ 1030.097568][T19041] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.393039][ T4324] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 1030.428101][ T4324] gs_usb: probe of 5-1:0.0 failed with error -121 [ 1030.730678][T19041] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1030.745515][T19041] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1030.756995][T19041] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1030.765180][T19041] usb 8-1: SerialNumber: syz [ 1030.981366][T19041] usb 8-1: 0:2 : does not exist [ 1031.000832][T19041] usb 8-1: USB disconnect, device number 33 [ 1032.058630][ T4335] usb 48-1: device descriptor read/8, error -110 [ 1032.246666][ T4335] usb usb48-port1: unable to enumerate USB device [ 1032.259073][T17548] udevd[17548]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1032.376104][T19041] usb 5-1: USB disconnect, device number 45 [ 1035.704081][T20371] netlink: 'syz.4.4389': attribute type 1 has an invalid length. [ 1035.807938][T20375] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1035.963628][T20375] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1036.012495][T20371] bond1: (slave gretap1): making interface the new active one [ 1036.064646][T15353] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1036.359207][T20371] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1036.496448][T15353] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.511955][T15353] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1036.542800][T15353] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1036.554691][T15353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1036.562969][T15353] usb 4-1: SerialNumber: syz [ 1036.788350][T15353] usb 4-1: 0:2 : does not exist [ 1036.811934][T15353] usb 4-1: USB disconnect, device number 34 [ 1036.935847][ T4335] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1037.025513][T16422] udevd[16422]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1037.154983][ T4335] usb 5-1: Using ep0 maxpacket: 32 [ 1037.163792][ T4335] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1037.184083][ T4335] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1037.204498][ T4335] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1037.237105][ T4335] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1037.266960][ T4335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.289606][ T4335] usb 5-1: Product: syz [ 1037.299388][ T4335] usb 5-1: Manufacturer: syz [ 1037.306553][ T4335] usb 5-1: SerialNumber: syz [ 1037.320505][T20395] loop9: detected capacity change from 0 to 512 [ 1037.380787][ T4335] usb 5-1: config 0 descriptor?? [ 1037.421873][T20395] EXT4-fs error (device loop9): ext4_orphan_get:1405: inode #15: comm syz.9.4398: inode has both inline data and extents flags [ 1038.092394][T20395] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.4398: couldn't read orphan inode 15 (err -117) [ 1038.121435][T20395] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1038.236263][ T4335] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 1038.243391][ T4335] gs_usb: probe of 5-1:0.0 failed with error -121 [ 1038.369822][T17205] EXT4-fs (loop9): unmounting filesystem. [ 1041.201672][T19041] usb 5-1: USB disconnect, device number 46 [ 1043.344639][ T4335] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1043.542834][ T4335] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.591845][ T4335] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1044.742650][ T4335] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1044.762517][ T4335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1044.772661][ T4335] usb 3-1: SerialNumber: syz [ 1044.984637][T19041] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1044.994280][ T4335] usb 3-1: 0:2 : does not exist [ 1045.014889][ T6946] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1045.034178][ T4335] usb 3-1: USB disconnect, device number 9 [ 1045.184797][T19041] usb 4-1: Using ep0 maxpacket: 32 [ 1045.191859][T19041] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1045.201773][T19041] usb 4-1: config 0 has no interface number 0 [ 1045.208546][T19041] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1045.223173][T19041] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1045.232919][T19041] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.241340][T19041] usb 4-1: Product: syz [ 1045.246329][T19041] usb 4-1: Manufacturer: syz [ 1045.251576][T19041] usb 4-1: SerialNumber: syz [ 1045.272502][T19041] usb 4-1: config 0 descriptor?? [ 1045.284419][T19041] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1045.296126][T19041] em28xx 4-1:0.132: Video interface 132 found: [ 1045.427531][ T6946] usb 10-1: Using ep0 maxpacket: 32 [ 1045.436241][ T6946] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1045.446199][ T6946] usb 10-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1045.456140][ T6946] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1045.465472][ T6946] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1045.474968][ T6946] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.483190][ T6946] usb 10-1: Product: syz [ 1045.487525][ T6946] usb 10-1: Manufacturer: syz [ 1045.492251][ T6946] usb 10-1: SerialNumber: syz [ 1045.517787][ T6946] usb 10-1: config 0 descriptor?? [ 1046.241186][T17548] udevd[17548]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1046.280640][T19041] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1046.586767][ T6946] gs_usb 10-1:0.0: Couldn't get device config: (err=-121) [ 1046.594182][ T6946] gs_usb: probe of 10-1:0.0 failed with error -121 [ 1046.702145][T19041] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 1046.734189][T19041] em28xx 4-1:0.132: board has no eeprom [ 1046.828699][ T4283] Bluetooth: hci3: unexpected event for opcode 0x0407 [ 1046.994769][T19041] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1047.004816][T19041] em28xx 4-1:0.132: analog set to bulk mode. [ 1047.031785][T19041] em28xx 4-1:0.132: Registering V4L2 extension [ 1047.105676][ T6946] usb 4-1: USB disconnect, device number 35 [ 1047.117272][ T6946] em28xx 4-1:0.132: Disconnecting em28xx [ 1047.506151][T19041] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1047.513897][T19041] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1047.522529][T19041] em28xx 4-1:0.132: No AC97 audio processor [ 1047.537491][T19041] usb 4-1: Decoder not found [ 1047.542569][T19041] em28xx 4-1:0.132: failed to create media graph [ 1047.549249][T19041] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1047.560139][T19041] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1047.574433][ T6946] em28xx 4-1:0.132: Closing input extension [ 1047.593666][ T6946] em28xx 4-1:0.132: Freeing device [ 1047.750710][T19041] usb 10-1: USB disconnect, device number 18 [ 1048.273429][T20512] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4435'. [ 1048.354784][T19041] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1048.554735][T15353] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1048.606568][T19041] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.626895][T19041] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1048.658656][T19041] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1048.714891][T19041] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1048.722966][T19041] usb 8-1: SerialNumber: syz [ 1048.759460][T15353] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.772668][T15353] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1048.782838][T15353] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.797671][T15353] usb 10-1: config 0 descriptor?? [ 1048.808541][T15353] pwc: Askey VC010 type 2 USB webcam detected. [ 1048.950623][T19041] usb 8-1: 0:2 : does not exist [ 1048.980245][T19041] usb 8-1: USB disconnect, device number 34 [ 1049.209900][T15353] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1049.444736][ T4335] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1049.664711][ T4335] usb 5-1: Using ep0 maxpacket: 32 [ 1049.683504][ T4335] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1049.790941][ T4335] usb 5-1: config 0 has no interface number 0 [ 1049.895199][ T4335] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1049.932538][ T4335] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1049.942119][ T4335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.952188][ T4335] usb 5-1: Product: syz [ 1049.956681][ T4335] usb 5-1: Manufacturer: syz [ 1049.961359][ T4335] usb 5-1: SerialNumber: syz [ 1050.016629][ T4335] usb 5-1: config 0 descriptor?? [ 1050.048556][ T4335] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1050.107082][ T4335] em28xx 5-1:0.132: Video interface 132 found: [ 1050.433516][ T4335] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1050.763780][T15353] pwc: recv_control_msg error -32 req 02 val 2700 [ 1050.770896][T15353] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1050.777990][T15353] pwc: recv_control_msg error -32 req 04 val 1000 [ 1050.785346][T15353] pwc: recv_control_msg error -32 req 04 val 1300 [ 1050.792339][T15353] pwc: recv_control_msg error -32 req 04 val 1400 [ 1050.855982][ T4283] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1050.864837][ T4283] Bluetooth: hci3: Injecting HCI hardware error event [ 1050.874640][T14849] Bluetooth: hci3: hardware error 0x00 [ 1051.065884][ T4335] em28xx 5-1:0.132: failed to read eeprom (err=-110) [ 1051.072764][ T4335] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1051.180874][T15353] pwc: recv_control_msg error -32 req 02 val 2000 [ 1051.188260][T15353] pwc: recv_control_msg error -32 req 02 val 2100 [ 1051.195639][T15353] pwc: recv_control_msg error -32 req 04 val 1500 [ 1051.202861][T15353] pwc: recv_control_msg error -32 req 02 val 2500 [ 1051.210055][T15353] pwc: recv_control_msg error -32 req 02 val 2400 [ 1051.217596][T15353] pwc: recv_control_msg error -32 req 02 val 2600 [ 1051.314763][ T4335] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1051.322877][ T4335] em28xx 5-1:0.132: analog set to bulk mode. [ 1051.343280][ T4335] usb 5-1: USB disconnect, device number 47 [ 1051.353256][ T4335] em28xx 5-1:0.132: Disconnecting em28xx [ 1051.359399][ T4324] em28xx 5-1:0.132: Registering V4L2 extension [ 1051.504746][T19041] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1051.551117][ T4324] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1051.558612][ T4324] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1051.568710][ T4324] em28xx 5-1:0.132: No AC97 audio processor [ 1051.576395][ T4324] usb 5-1: Decoder not found [ 1051.581360][ T4324] em28xx 5-1:0.132: failed to create media graph [ 1051.587982][ T4324] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1051.596045][ T4324] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1051.604850][ T4335] em28xx 5-1:0.132: Closing input extension [ 1051.614711][ T4335] em28xx 5-1:0.132: Freeing device [ 1051.636608][T15353] pwc: recv_control_msg error -71 req 04 val 1100 [ 1051.644485][T15353] pwc: recv_control_msg error -71 req 04 val 1200 [ 1051.652745][T15353] pwc: Registered as video103. [ 1051.659392][T15353] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input26 [ 1051.696373][T15353] usb 10-1: USB disconnect, device number 19 [ 1051.724783][T19041] usb 8-1: Using ep0 maxpacket: 32 [ 1051.733665][T19041] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1051.744143][T19041] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1051.755870][T19041] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1051.783453][T19041] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1051.793781][T19041] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.805758][T19041] usb 8-1: Product: syz [ 1051.810051][T19041] usb 8-1: Manufacturer: syz [ 1051.816447][T19041] usb 8-1: SerialNumber: syz [ 1051.831834][T19041] usb 8-1: config 0 descriptor?? [ 1051.937087][T20552] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4446'. [ 1052.243469][T19041] gs_usb 8-1:0.0: Couldn't get device config: (err=-121) [ 1052.264751][T19041] gs_usb: probe of 8-1:0.0 failed with error -121 [ 1052.278544][T17548] udevd[17548]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1052.934909][T14849] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1053.519027][ T4335] usb 8-1: USB disconnect, device number 35 [ 1053.586844][T20576] x_tables: duplicate underflow at hook 1 [ 1054.459373][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.465799][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.723461][T20588] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.4459'. [ 1054.831572][T20592] loop4: detected capacity change from 0 to 256 [ 1054.884813][T19041] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1055.624769][T19041] usb 4-1: Using ep0 maxpacket: 32 [ 1056.096363][T19041] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1056.126573][T19041] usb 4-1: config 0 has no interface number 0 [ 1056.132889][T19041] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1056.134925][ T4335] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1056.207393][T19041] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1056.225614][T19041] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.256206][T19041] usb 4-1: Product: syz [ 1056.263549][T19041] usb 4-1: Manufacturer: syz [ 1056.279574][T19041] usb 4-1: SerialNumber: syz [ 1056.299592][T19041] usb 4-1: config 0 descriptor?? [ 1056.304747][ T4335] usb 10-1: device descriptor read/64, error -71 [ 1056.327902][T19041] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1056.339153][T19041] em28xx 4-1:0.132: Video interface 132 found: [ 1056.384790][ T4324] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1056.574633][ T4324] usb 5-1: Using ep0 maxpacket: 32 [ 1056.579938][ T4335] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1056.589960][ T4324] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1056.613601][ T4324] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1056.630201][ T4324] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1056.641178][ T4324] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1056.667825][ T4324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.676565][ T4324] usb 5-1: Product: syz [ 1056.680790][ T4324] usb 5-1: Manufacturer: syz [ 1056.685526][ T4324] usb 5-1: SerialNumber: syz [ 1056.692444][ T4324] usb 5-1: config 0 descriptor?? [ 1056.722357][T19041] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1056.744746][ T4335] usb 10-1: device descriptor read/64, error -71 [ 1056.866541][ T4335] usb usb10-port1: attempt power cycle [ 1057.105880][ T4324] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 1057.113049][ T4324] gs_usb: probe of 5-1:0.0 failed with error -121 [ 1057.274625][ T4335] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1057.305453][ T4335] usb 10-1: device descriptor read/8, error -71 [ 1057.354715][T19041] em28xx 4-1:0.132: failed to read eeprom (err=-110) [ 1057.362624][T19041] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1057.576421][ T4335] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1057.594674][T19041] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1057.603215][T19041] em28xx 4-1:0.132: analog set to bulk mode. [ 1057.618333][ T4335] usb 10-1: device descriptor read/8, error -71 [ 1057.625249][T15353] em28xx 4-1:0.132: Registering V4L2 extension [ 1057.647534][T19041] usb 4-1: USB disconnect, device number 36 [ 1057.658235][T19041] em28xx 4-1:0.132: Disconnecting em28xx [ 1057.744778][ T4335] usb usb10-port1: unable to enumerate USB device [ 1057.783007][T20625] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4472'. [ 1058.264257][T15353] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1058.285719][T15353] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1058.292921][T15353] em28xx 4-1:0.132: No AC97 audio processor [ 1058.304302][T15353] usb 4-1: Decoder not found [ 1058.309189][T15353] em28xx 4-1:0.132: failed to create media graph [ 1058.316299][T15353] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1058.327265][T15353] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1058.336529][T19041] em28xx 4-1:0.132: Closing input extension [ 1058.352599][T19041] em28xx 4-1:0.132: Freeing device [ 1060.918373][T19041] usb 5-1: USB disconnect, device number 48 [ 1061.097261][T20659] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.4484'. [ 1061.628511][T20671] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input27 [ 1061.660893][ T6946] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1061.905323][ T6946] usb 10-1: device descriptor read/64, error -71 [ 1062.445618][T20679] loop7: detected capacity change from 0 to 512 [ 1062.464664][ T6946] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1062.601777][T20679] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1062.784965][ T6946] usb 10-1: device descriptor read/64, error -71 [ 1063.125507][ T6946] usb usb10-port1: attempt power cycle [ 1063.401174][T20679] EXT4-fs (loop7): 1 orphan inode deleted [ 1063.414748][T20679] EXT4-fs (loop7): 1 truncate cleaned up [ 1063.427125][T20679] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1063.465591][T20685] loop4: detected capacity change from 0 to 1024 [ 1063.544611][ T6946] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1063.554388][T20685] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1063.574623][T20685] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1063.600419][ T6946] usb 10-1: device descriptor read/8, error -71 [ 1063.713560][T16577] EXT4-fs (loop4): unmounting filesystem. [ 1063.904905][ T6946] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1064.210484][T16117] EXT4-fs (loop7): unmounting filesystem. [ 1064.245438][ T6946] usb 10-1: device descriptor read/8, error -71 [ 1064.364824][ T6946] usb usb10-port1: unable to enumerate USB device [ 1064.570640][T20704] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.4496'. [ 1064.764766][ T4335] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1064.964829][ T4335] usb 5-1: Using ep0 maxpacket: 32 [ 1064.979184][ T4335] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1064.989449][ T4335] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1065.001067][ T4335] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1065.010490][ T4335] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1065.021398][ T4335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.029769][ T4335] usb 5-1: Product: syz [ 1065.034269][ T4335] usb 5-1: Manufacturer: syz [ 1065.040563][ T4335] usb 5-1: SerialNumber: syz [ 1065.056735][ T4335] usb 5-1: config 0 descriptor?? [ 1065.470564][ T4335] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 1065.479362][ T4335] gs_usb: probe of 5-1:0.0 failed with error -121 [ 1065.753616][T20721] loop3: detected capacity change from 0 to 128 [ 1065.838382][T20721] UBIFS error (pid: 20721): cannot open "/dev/loop3", error -22 [ 1066.434616][ T4326] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1066.624839][ T4326] usb 10-1: device descriptor read/64, error -71 [ 1066.904602][ T4326] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1067.074728][ T4326] usb 10-1: device descriptor read/64, error -71 [ 1067.214806][ T4326] usb usb10-port1: attempt power cycle [ 1067.538607][T15353] usb 5-1: USB disconnect, device number 49 [ 1067.624660][ T4326] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1067.687140][ T4326] usb 10-1: device descriptor read/8, error -71 [ 1067.974639][ T4326] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1067.994643][ T6946] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1068.025351][T15353] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1068.033440][ T4326] usb 10-1: device descriptor read/8, error -71 [ 1068.164767][ T4326] usb usb10-port1: unable to enumerate USB device [ 1068.186216][ T6946] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.198056][ T6946] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1068.207757][ T6946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.226112][T15353] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.226385][ T6946] usb 4-1: config 0 descriptor?? [ 1068.244583][T15353] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1068.265853][T15353] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1068.284625][T15353] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1068.292779][T15353] usb 8-1: SerialNumber: syz [ 1068.523299][T15353] usb 8-1: 0:2 : does not exist [ 1068.550476][T15353] usb 8-1: USB disconnect, device number 36 [ 1068.664652][ T6946] ath6kl: Unsupported hardware version: 0x0 [ 1068.705626][ T6946] ath6kl: Failed to init ath6kl core: -22 [ 1068.762665][ T6946] ath6kl_usb: probe of 4-1:0.0 failed with error -22 [ 1068.827854][T17548] udevd[17548]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1068.855214][T20754] x_tables: duplicate underflow at hook 1 [ 1070.989577][ T4335] usb 4-1: USB disconnect, device number 37 [ 1071.615347][T15353] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1071.816339][T15353] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.844673][T15353] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1071.904607][T15353] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.936134][T15353] usb 10-1: config 0 descriptor?? [ 1071.960162][T15353] pwc: Askey VC010 type 2 USB webcam detected. [ 1072.179297][T20792] loop3: detected capacity change from 0 to 256 [ 1072.398800][ T4326] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1072.406966][T15353] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1072.421613][T15353] pwc: recv_control_msg error -32 req 02 val 2700 [ 1072.431791][T15353] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1072.438933][T15353] pwc: recv_control_msg error -32 req 04 val 1000 [ 1072.446652][T15353] pwc: recv_control_msg error -32 req 04 val 1300 [ 1072.467138][T15353] pwc: recv_control_msg error -32 req 04 val 1400 [ 1073.148980][T15353] pwc: recv_control_msg error -32 req 02 val 2000 [ 1073.156692][T15353] pwc: recv_control_msg error -32 req 02 val 2100 [ 1073.163838][T15353] pwc: recv_control_msg error -32 req 04 val 1500 [ 1073.175812][T15353] pwc: recv_control_msg error -32 req 02 val 2500 [ 1073.182880][T15353] pwc: recv_control_msg error -32 req 02 val 2400 [ 1073.191210][T15353] pwc: recv_control_msg error -32 req 02 val 2600 [ 1073.214662][ T4326] usb 8-1: device descriptor read/64, error -71 [ 1073.447176][T20799] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1073.484888][ T4326] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1073.600199][T15353] pwc: recv_control_msg error -71 req 04 val 1100 [ 1073.615030][T15353] pwc: recv_control_msg error -71 req 04 val 1200 [ 1073.629324][T15353] pwc: Registered as video103. [ 1073.642554][T20803] loop3: detected capacity change from 0 to 512 [ 1073.646587][T15353] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input28 [ 1073.664761][ T4326] usb 8-1: device descriptor read/64, error -71 [ 1073.672538][T20803] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1073.722864][T15353] usb 10-1: USB disconnect, device number 32 [ 1073.733044][T20803] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.4532: bad orphan inode 131083 [ 1073.745294][T20803] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1073.795688][ T4326] usb usb8-port1: attempt power cycle [ 1073.884944][T16433] EXT4-fs (loop3): unmounting filesystem. [ 1074.214880][ T4326] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1074.281384][ T4326] usb 8-1: device descriptor read/8, error -71 [ 1074.564605][ T4326] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1074.605911][ T4326] usb 8-1: device descriptor read/8, error -71 [ 1074.724977][ T4326] usb usb8-port1: unable to enumerate USB device [ 1075.434630][ T4326] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1075.449459][T20831] loop9: detected capacity change from 0 to 256 [ 1076.454665][ T4326] usb 4-1: Using ep0 maxpacket: 32 [ 1076.517762][ T4326] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1076.567642][ T4326] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1076.600362][ T4326] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1076.609587][ T4326] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1076.623981][ T4326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.632203][ T4326] usb 4-1: Product: syz [ 1076.636481][ T4326] usb 4-1: Manufacturer: syz [ 1076.641127][ T4326] usb 4-1: SerialNumber: syz [ 1076.647892][ T4326] usb 4-1: config 0 descriptor?? [ 1076.874787][T20840] loop4: detected capacity change from 0 to 512 [ 1077.066305][ T4326] gs_usb 4-1:0.0: Configuring for 55 interfaces [ 1077.276043][ T4326] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 1077.276298][ T4326] gs_usb: probe of 4-1:0.0 failed with error -32 [ 1077.332362][ T4326] usb 4-1: USB disconnect, device number 38 [ 1077.511737][T20840] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1077.555381][T20840] EXT4-fs (loop4): 1 orphan inode deleted [ 1077.555401][T20840] EXT4-fs (loop4): 1 truncate cleaned up [ 1077.555423][T20840] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1077.803728][T20843] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1078.213163][T16577] EXT4-fs (loop4): unmounting filesystem. [ 1078.681959][T19041] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1079.407076][T19041] usb 3-1: device descriptor read/64, error -71 [ 1079.596976][T20868] loop4: detected capacity change from 0 to 256 [ 1079.684727][T19041] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1079.996696][T19041] usb 3-1: device descriptor read/64, error -71 [ 1080.454028][T19041] usb usb3-port1: attempt power cycle [ 1080.476474][T20878] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input29 [ 1080.679306][T20884] loop7: detected capacity change from 0 to 256 [ 1080.746676][T20884] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1080.820613][T20884] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1080.849094][T20884] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1080.860125][T20884] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1080.875234][ T26] audit: type=1800 audit(1778646327.305:72): pid=20884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4559" name="file1" dev="loop7" ino=1048661 res=0 errno=0 [ 1080.885647][T20884] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000001) [ 1080.895996][T19041] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1080.952979][T19041] usb 3-1: device descriptor read/8, error -71 [ 1081.064629][T15353] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1081.224654][T19041] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1081.244664][T15353] usb 5-1: Using ep0 maxpacket: 32 [ 1081.252203][T15353] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1081.262694][T15353] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1081.292400][T15353] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1081.299364][T19041] usb 3-1: device descriptor read/8, error -71 [ 1081.311167][T15353] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1081.320423][T15353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.328514][T15353] usb 5-1: Product: syz [ 1081.332758][T15353] usb 5-1: Manufacturer: syz [ 1081.337511][T15353] usb 5-1: SerialNumber: syz [ 1081.345802][T15353] usb 5-1: config 0 descriptor?? [ 1081.427850][T19041] usb usb3-port1: unable to enumerate USB device [ 1081.454705][ T4326] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1081.705323][ T4326] usb 4-1: Using ep0 maxpacket: 8 [ 1081.722778][ T4326] usb 4-1: config 0 has no interfaces? [ 1081.790265][ T4326] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1081.820264][ T4326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.843367][T15353] gs_usb 5-1:0.0: Configuring for 55 interfaces [ 1081.856209][ T4326] usb 4-1: Product: syz [ 1081.860801][ T4326] usb 4-1: Manufacturer: syz [ 1081.888297][ T4326] usb 4-1: SerialNumber: syz [ 1082.022208][ T4326] usb 4-1: config 0 descriptor?? [ 1082.054246][T15353] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 1082.144388][T15353] gs_usb: probe of 5-1:0.0 failed with error -32 [ 1082.362043][T15353] usb 5-1: USB disconnect, device number 50 [ 1082.694798][ T4286] Bluetooth: hci0: command 0x1003 tx timeout [ 1082.703948][T14849] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1082.960760][T15353] usb 4-1: USB disconnect, device number 39 [ 1084.767061][T20915] loop3: detected capacity change from 0 to 256 [ 1086.324777][ T4335] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1086.674659][ T4335] usb 3-1: device descriptor read/64, error -71 [ 1087.024759][ T4335] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1087.947811][T17541] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1087.955578][ T4335] usb 3-1: device descriptor read/64, error -71 [ 1088.077400][ T4335] usb usb3-port1: attempt power cycle [ 1088.181793][T17541] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.285300][T17541] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1088.296694][T17541] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.314159][T17541] usb 5-1: config 0 descriptor?? [ 1088.326957][T17541] pwc: Askey VC010 type 2 USB webcam detected. [ 1088.694651][ T4335] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1090.626951][T17541] pwc: send_video_command error -71 [ 1090.632402][T17541] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1090.640348][T17541] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 1090.659094][T17541] usb 5-1: USB disconnect, device number 51 [ 1090.791236][ T4335] usb 3-1: device descriptor read/8, error -71 [ 1091.251153][T20961] loop9: detected capacity change from 0 to 256 [ 1092.350913][T20969] x_tables: duplicate underflow at hook 1 [ 1092.415683][T20974] JFS: discard option not supported on device [ 1092.475055][T20974] Mount JFS Failure: -22 [ 1092.479377][T20974] jfs_mount failed w/return code = -22 [ 1093.763866][ T4335] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1093.960328][ T4335] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.580782][ T4335] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1094.610864][ T4335] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.723995][ T4335] usb 8-1: config 0 descriptor?? [ 1096.056859][ T4335] pwc: Askey VC010 type 2 USB webcam detected. [ 1096.091281][ T4335] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1096.110514][ T4335] pwc: recv_control_msg error -32 req 02 val 2700 [ 1096.129911][ T4335] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1096.145998][ T4335] pwc: recv_control_msg error -32 req 04 val 1000 [ 1096.167314][ T4335] pwc: recv_control_msg error -32 req 04 val 1300 [ 1096.193728][ T4335] pwc: recv_control_msg error -32 req 04 val 1400 [ 1096.215209][ T4335] pwc: recv_control_msg error -32 req 02 val 2000 [ 1096.232653][ T4335] pwc: recv_control_msg error -32 req 02 val 2100 [ 1096.270208][ T4335] pwc: recv_control_msg error -32 req 04 val 1500 [ 1096.290979][ T4335] pwc: recv_control_msg error -32 req 02 val 2500 [ 1096.310104][ T4335] pwc: recv_control_msg error -32 req 02 val 2400 [ 1096.319398][ T4335] pwc: recv_control_msg error -32 req 02 val 2600 [ 1096.802814][ T4335] pwc: recv_control_msg error -71 req 04 val 1100 [ 1096.820930][ T4335] pwc: recv_control_msg error -71 req 04 val 1200 [ 1096.871638][ T4335] pwc: Registered as video103. [ 1096.924093][ T4335] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input30 [ 1096.962230][ T4335] usb 8-1: USB disconnect, device number 41 [ 1097.533182][T21001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.540593][T21001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.511224][T21001] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.520783][T21001] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.530060][T21001] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.544991][T21001] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.869004][T21013] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4601'. [ 1100.949984][T21025] x_tables: duplicate underflow at hook 1 [ 1102.056088][T21041] loop7: detected capacity change from 0 to 256 [ 1103.328573][T21059] JFS: discard option not supported on device [ 1103.335200][T21059] Mount JFS Failure: -22 [ 1103.555262][T21059] jfs_mount failed w/return code = -22 [ 1104.123588][T19036] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1104.324663][T19036] usb 3-1: Using ep0 maxpacket: 32 [ 1104.341624][T19036] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1104.352554][T19036] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1104.363275][T19036] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1104.396254][T19036] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1104.469805][T19036] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.508299][T19036] usb 3-1: Product: syz [ 1104.513065][T19036] usb 3-1: Manufacturer: syz [ 1104.518112][T19036] usb 3-1: SerialNumber: syz [ 1104.526640][T19036] usb 3-1: config 0 descriptor?? [ 1105.004935][T19036] gs_usb 3-1:0.0: Configuring for 55 interfaces [ 1105.206243][T19036] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 1105.233706][T19036] gs_usb: probe of 3-1:0.0 failed with error -32 [ 1105.281733][T19036] usb 3-1: USB disconnect, device number 18 [ 1108.657501][T21106] loop7: detected capacity change from 0 to 512 [ 1108.670013][T21106] EXT4-fs: inline encryption not supported [ 1109.290649][T21115] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4627'. [ 1109.300955][T21115] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4627'. [ 1109.670484][T21127] loop4: detected capacity change from 0 to 128 [ 1109.687747][T21127] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1111.170740][T21127] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1111.194615][T21106] EXT4-fs (loop7): failed to open journal device unknown-block(0,0) -6 [ 1114.421794][T21165] loop4: detected capacity change from 0 to 512 [ 1114.452134][T21165] EXT4-fs: Ignoring removed nobh option [ 1114.666043][T21165] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1114.676793][T21165] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1115.879196][T16577] EXT4-fs (loop4): unmounting filesystem. [ 1115.897396][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.904556][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.956516][T21187] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.4648'. [ 1117.455111][T20284] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1118.267314][T21222] netlink: 16162 bytes leftover after parsing attributes in process `syz.7.4660'. [ 1118.386312][T20284] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1118.404540][T20284] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.422572][T20284] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1118.456154][T20284] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1118.518022][T20284] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1118.569042][T20284] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1118.598859][T20284] usb 5-1: Product: syz [ 1118.603111][T20284] usb 5-1: Manufacturer: syz [ 1118.625876][T20284] cdc_wdm 5-1:1.0: skipping garbage [ 1118.641480][T20284] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1119.188011][T21237] loop7: detected capacity change from 0 to 256 [ 1120.132053][T20284] usb 5-1: USB disconnect, device number 52 [ 1120.618625][T21237] FAT-fs (loop7): Directory bread(block 64) failed [ 1120.625377][T21237] FAT-fs (loop7): Directory bread(block 65) failed [ 1120.631989][T21237] FAT-fs (loop7): Directory bread(block 66) failed [ 1120.638630][T21237] FAT-fs (loop7): Directory bread(block 67) failed [ 1120.645333][T21237] FAT-fs (loop7): Directory bread(block 68) failed [ 1120.651964][T21237] FAT-fs (loop7): Directory bread(block 69) failed [ 1120.658669][T21237] FAT-fs (loop7): Directory bread(block 70) failed [ 1120.665477][T21237] FAT-fs (loop7): Directory bread(block 71) failed [ 1120.672153][T21237] FAT-fs (loop7): Directory bread(block 72) failed [ 1120.678830][T21237] FAT-fs (loop7): Directory bread(block 73) failed [ 1121.796568][T21262] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4672'. [ 1121.869072][T21264] netlink: 16162 bytes leftover after parsing attributes in process `syz.7.4673'. [ 1124.204696][T19036] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1124.576418][T19036] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1124.607989][T19036] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.335709][T19036] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1125.345489][T19036] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1125.386589][T19036] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1125.444586][T19036] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1125.473169][T19036] usb 10-1: Product: syz [ 1125.488063][T19036] usb 10-1: Manufacturer: syz [ 1125.496431][T21323] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4685'. [ 1125.514444][T19036] cdc_wdm 10-1:1.0: skipping garbage [ 1125.540298][T19036] cdc_wdm: probe of 10-1:1.0 failed with error -22 [ 1125.734226][T19036] usb 10-1: USB disconnect, device number 33 [ 1126.515697][ T6945] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 1126.705797][ T6945] usb 4-1: no configurations [ 1126.710674][ T6945] usb 4-1: can't read configurations, error -22 [ 1126.795346][T20284] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1126.894640][ T6945] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1126.986177][T20284] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.006821][T20284] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1127.035622][T20284] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.095366][ T6945] usb 4-1: no configurations [ 1127.100634][ T6945] usb 4-1: can't read configurations, error -22 [ 1127.233551][T20284] usb 8-1: config 0 descriptor?? [ 1127.239214][ T6945] usb usb4-port1: attempt power cycle [ 1127.376263][T21357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4696'. [ 1128.177622][T20284] ath6kl: Unsupported hardware version: 0xff [ 1128.189743][T20284] ath6kl: Failed to init ath6kl core: -22 [ 1128.260744][ T6945] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 1128.286504][T20284] ath6kl_usb: probe of 8-1:0.0 failed with error -22 [ 1128.295935][ T6945] usb 4-1: no configurations [ 1128.300595][ T6945] usb 4-1: can't read configurations, error -22 [ 1128.484735][ T6945] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1128.526096][ T6945] usb 4-1: no configurations [ 1128.530777][ T6945] usb 4-1: can't read configurations, error -22 [ 1128.562860][ T6945] usb usb4-port1: unable to enumerate USB device [ 1130.278697][T19041] usb 8-1: USB disconnect, device number 42 [ 1133.534704][T21448] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4717'. [ 1136.606003][T21500] loop9: detected capacity change from 0 to 1024 [ 1136.643294][T21500] EXT4-fs: Ignoring removed orlov option [ 1136.659251][T21500] EXT4-fs: Ignoring removed bh option [ 1136.749305][T21500] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1137.673681][T17205] EXT4-fs (loop9): unmounting filesystem. [ 1138.598214][T21538] block device autoloading is deprecated and will be removed. [ 1139.017893][T14849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1139.029300][T14849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1139.041547][T14849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1139.051584][T14849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1139.060081][T14849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1139.067434][T14849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1140.670759][T21544] chnl_net:caif_netlink_parms(): no params data found [ 1141.104850][T14849] Bluetooth: hci0: command 0x0409 tx timeout [ 1141.138844][T21544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.162573][T21544] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.180247][T21544] device bridge_slave_0 entered promiscuous mode [ 1141.209448][T21544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.374905][T21544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.403798][T21544] device bridge_slave_1 entered promiscuous mode [ 1141.790788][T21544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1141.885699][T21544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1142.215705][T21544] team0: Port device team_slave_0 added [ 1142.254162][T21544] team0: Port device team_slave_1 added [ 1142.302383][T21544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1142.319689][T21544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1142.366247][T21544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1142.396559][T21544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1142.414635][T21544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1142.497885][T21544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1142.695989][T21544] device hsr_slave_0 entered promiscuous mode [ 1142.722888][T21544] device hsr_slave_1 entered promiscuous mode [ 1143.214669][T14849] Bluetooth: hci0: command 0x041b tx timeout [ 1143.941473][T21591] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4759'. [ 1144.237863][T21595] netlink: 'syz.4.4759': attribute type 1 has an invalid length. [ 1144.245954][T21595] netlink: 'syz.4.4759': attribute type 1 has an invalid length. [ 1145.324588][T14849] Bluetooth: hci0: command 0x040f tx timeout [ 1147.334617][T14849] Bluetooth: hci0: command 0x0419 tx timeout [ 1150.154692][T21544] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1150.191973][T21544] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1150.215560][T21544] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1150.245131][T21544] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1150.548197][T21544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1150.572238][T17212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1150.595195][T17212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1150.626918][T21544] 8021q: adding VLAN 0 to HW filter on device team0 [ 1150.710255][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1150.721057][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1150.730025][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.737269][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1150.746445][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1150.793543][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1150.809995][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1150.958992][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.966222][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1150.994938][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1151.068952][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1151.078538][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1151.093139][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1151.121789][T21544] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1151.132936][T21544] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1151.265654][T19038] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1151.461089][T19038] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1151.485516][T19038] usb 8-1: config 1 descriptor has 1 excess byte, ignoring [ 1151.519706][T19038] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1151.530575][T19038] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1151.552153][T19038] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1151.562997][T19038] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1151.572493][T19038] usb 8-1: Product: syz [ 1151.577879][T19038] usb 8-1: Manufacturer: syz [ 1151.642661][T19038] cdc_wdm 8-1:1.0: skipping garbage [ 1151.744695][T19038] cdc_wdm 8-1:1.0: skipping garbage [ 1151.760288][T19038] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 1151.814662][T14849] Bluetooth: hci0: command 0x0405 tx timeout [ 1151.918443][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1151.928060][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1151.936942][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1151.946347][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1151.955191][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1151.963723][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1151.972559][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1152.002166][T19038] usb 8-1: USB disconnect, device number 43 [ 1152.012283][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1152.930629][T21690] overlayfs: failed to resolve './file1': -2 [ 1156.207017][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1156.214611][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1156.281833][T21544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1156.381192][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1156.395716][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1156.456155][T18114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1156.498934][T18114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1156.545832][T18114] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1156.598961][T18114] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1156.792410][T21544] device veth0_vlan entered promiscuous mode [ 1156.808505][T21544] device veth1_vlan entered promiscuous mode [ 1157.647914][T17912] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1157.691794][T17912] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1157.745840][T21544] device veth0_macvtap entered promiscuous mode [ 1157.935505][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1158.718108][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1158.726789][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1158.748667][T21544] device veth1_macvtap entered promiscuous mode [ 1158.856125][T21544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1158.901741][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1158.915709][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1158.986883][T21544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1158.994356][T18087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1159.046339][T18087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1159.088076][T21544] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.104640][T19038] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1159.134923][T21544] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.174310][T21544] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.234926][T21544] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.306843][T19038] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1159.330741][T19038] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1159.371878][T19038] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1159.451387][T19038] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1159.543366][T19038] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1159.576848][T19038] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1159.593475][T19038] usb 5-1: Product: syz [ 1159.614679][T19038] usb 5-1: Manufacturer: syz [ 1159.677239][T19038] cdc_wdm 5-1:1.0: skipping garbage [ 1159.700819][T19038] cdc_wdm 5-1:1.0: skipping garbage [ 1159.764714][ T6948] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1159.840783][T19038] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1159.861279][T19038] usb 5-1: USB disconnect, device number 53 [ 1160.090695][ T6948] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.135728][ T6948] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1160.182571][ T6948] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.361229][ T6948] usb 10-1: config 0 descriptor?? [ 1160.468578][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.561511][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.602841][T17613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1160.702519][T18114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.711734][T18114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.723644][T17613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1160.999591][ T6948] ath6kl: mismatched byte count 0 vs. expected 12 [ 1161.026457][ T6948] ath6kl: Failed to init ath6kl core: -22 [ 1161.294280][ T6948] ath6kl_usb: probe of 10-1:0.0 failed with error -22 [ 1161.304159][T21780] autofs4:pid:21780:autofs_fill_super: called with bogus options [ 1162.054696][ T6948] usb 10-1: USB disconnect, device number 34 [ 1166.209150][T21837] autofs4:pid:21837:autofs_fill_super: called with bogus options [ 1166.404874][T19041] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1166.986980][T19041] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.027921][T19041] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1167.060821][T19041] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.087531][T19041] usb 1-1: config 0 descriptor?? [ 1167.243652][T21843] x_tables: duplicate underflow at hook 1 [ 1169.072080][T19041] ath6kl: mismatched byte count 0 vs. expected 12 [ 1169.104551][T19041] ath6kl: Failed to init ath6kl core: -22 [ 1169.400363][T19041] ath6kl_usb: probe of 1-1:0.0 failed with error -22 [ 1169.411475][T19041] usb 1-1: USB disconnect, device number 2 [ 1170.528268][T21871] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4820'. [ 1170.548727][T21871] netlink: 'syz.3.4820': attribute type 7 has an invalid length. [ 1170.594172][T21871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4820'. [ 1170.622153][T21875] JFS: discard option not supported on device [ 1170.645904][T21871] device team0 entered promiscuous mode [ 1170.654400][T21875] Mount JFS Failure: -22 [ 1170.667606][T21875] jfs_mount failed w/return code = -22 [ 1170.676227][T21871] device team_slave_0 entered promiscuous mode [ 1170.697113][T21871] device team_slave_1 entered promiscuous mode [ 1170.723210][T21871] device bond0 entered promiscuous mode [ 1170.739313][T21871] device bond_slave_0 entered promiscuous mode [ 1170.752843][T21871] device bond_slave_1 entered promiscuous mode [ 1170.807459][T21871] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 1170.844754][T19041] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1170.867132][T21871] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 1171.034770][T19041] usb 1-1: Using ep0 maxpacket: 32 [ 1171.042397][T19041] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1171.265774][T19041] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1171.289579][T19041] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1171.306924][T19041] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1171.644664][T19041] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.654683][T19041] usb 1-1: Product: syz [ 1171.658991][T19041] usb 1-1: Manufacturer: syz [ 1171.663709][T19041] usb 1-1: SerialNumber: syz [ 1171.677857][T19041] usb 1-1: config 0 descriptor?? [ 1172.259102][T19041] gs_usb 1-1:0.0: Configuring for 55 interfaces [ 1172.525141][T19041] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1172.577591][T19041] gs_usb: probe of 1-1:0.0 failed with error -121 [ 1172.737547][ T4326] usb 1-1: USB disconnect, device number 3 [ 1175.387377][ T4326] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1175.578672][ T4326] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.323883][ T4326] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1176.343701][ T4326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.479780][ T4326] usb 1-1: config 0 descriptor?? [ 1176.526892][T21939] netlink: 'syz.3.4836': attribute type 1 has an invalid length. [ 1176.616904][T21943] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1176.762315][T21943] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1177.131953][ T4326] ath6kl: Failed to read usb control message: -71 [ 1177.145137][ T4326] ath6kl: Unable to read the bmi data from the device: -71 [ 1177.154587][ T4326] ath6kl: unable to read target info byte count: -71 [ 1177.162384][ T4326] ath6kl: Failed to init ath6kl core: -71 [ 1177.212252][ T4326] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 1177.236645][ T4326] usb 1-1: USB disconnect, device number 4 [ 1177.347575][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.353977][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.690168][T21974] JFS: discard option not supported on device [ 1178.717351][T21974] Mount JFS Failure: -22 [ 1178.721674][T21974] jfs_mount failed w/return code = -22 [ 1180.044203][T21997] netlink: 'syz.4.4850': attribute type 1 has an invalid length. [ 1180.123023][T22000] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1180.272135][T22000] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1185.203178][T22057] loop9: detected capacity change from 0 to 256 [ 1185.341104][T22057] FAT-fs (loop9): Directory bread(block 64) failed [ 1185.385218][T22057] FAT-fs (loop9): Directory bread(block 65) failed [ 1185.391921][T22057] FAT-fs (loop9): Directory bread(block 66) failed [ 1185.450265][T22057] FAT-fs (loop9): Directory bread(block 67) failed [ 1185.466759][T22066] JFS: discard option not supported on device [ 1185.484883][T22057] FAT-fs (loop9): Directory bread(block 68) failed [ 1185.491574][T22057] FAT-fs (loop9): Directory bread(block 69) failed [ 1185.500876][T22066] Mount JFS Failure: -22 [ 1185.516286][T22066] jfs_mount failed w/return code = -22 [ 1185.554705][T22057] FAT-fs (loop9): Directory bread(block 70) failed [ 1185.561319][T22057] FAT-fs (loop9): Directory bread(block 71) failed [ 1185.629661][T22057] FAT-fs (loop9): Directory bread(block 72) failed [ 1185.659088][T22057] FAT-fs (loop9): Directory bread(block 73) failed [ 1188.441712][T22114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4878'. [ 1188.592267][T22118] device macvlan2 entered promiscuous mode [ 1188.604694][T22118] device bond3 entered promiscuous mode [ 1188.613034][T22118] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1188.626973][T22118] device bond3 left promiscuous mode [ 1189.736939][T22135] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1189.759904][T22135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1189.791091][T22135] 8021q: adding VLAN 0 to HW filter on device team0 [ 1189.838398][T22135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1189.902259][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4882'. [ 1192.203492][T22178] netlink: 'syz.4.4894': attribute type 1 has an invalid length. [ 1192.211506][T22178] netlink: 'syz.4.4894': attribute type 4 has an invalid length. [ 1192.221684][T22178] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.4894'. [ 1195.151776][T22224] netlink: 'syz.3.4908': attribute type 1 has an invalid length. [ 1195.196805][T22224] netlink: 'syz.3.4908': attribute type 4 has an invalid length. [ 1195.223015][T22224] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4908'. [ 1195.527762][T22231] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1198.473418][T22268] netlink: 'syz.0.4920': attribute type 1 has an invalid length. [ 1198.501800][T22268] netlink: 'syz.0.4920': attribute type 4 has an invalid length. [ 1198.531344][T22268] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4920'. [ 1202.137330][T22320] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1203.541371][T22333] netlink: 'syz.3.4934': attribute type 1 has an invalid length. [ 1203.564747][T22333] netlink: 'syz.3.4934': attribute type 4 has an invalid length. [ 1205.302529][T22333] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4934'. [ 1207.164630][T19041] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1207.386739][T19041] usb 5-1: Using ep0 maxpacket: 32 [ 1207.393896][T19041] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1207.421785][T19041] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1207.452218][T19041] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1207.491764][T19041] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1207.521354][T19041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.567350][T19041] usb 5-1: Product: syz [ 1207.571603][T19041] usb 5-1: Manufacturer: syz [ 1207.633010][T19041] usb 5-1: SerialNumber: syz [ 1207.675220][T19041] usb 5-1: config 0 descriptor?? [ 1208.089270][T19041] gs_usb 5-1:0.0: Configuring for 55 interfaces [ 1208.254162][T22380] netlink: 'syz.3.4949': attribute type 1 has an invalid length. [ 1208.274830][T22380] netlink: 'syz.3.4949': attribute type 4 has an invalid length. [ 1208.292862][T22380] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4949'. [ 1208.400841][T22386] loop9: detected capacity change from 0 to 128 [ 1208.468575][T19041] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1208.488621][T22386] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1208.501909][T19041] gs_usb: probe of 5-1:0.0 failed with error -121 [ 1208.607491][T20284] usb 5-1: USB disconnect, device number 54 [ 1209.992259][T22428] device syzkaller0 entered promiscuous mode [ 1214.804646][T19041] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1215.024700][T19041] usb 8-1: Using ep0 maxpacket: 32 [ 1215.049968][T19041] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1215.240065][T19041] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1215.521278][T19041] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1215.546226][T22497] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input31 [ 1215.590603][T19041] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1215.636666][T19041] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.645345][T19041] usb 8-1: Product: syz [ 1215.649565][T19041] usb 8-1: Manufacturer: syz [ 1215.654205][T19041] usb 8-1: SerialNumber: syz [ 1215.673516][T19041] usb 8-1: config 0 descriptor?? [ 1216.494301][T19041] gs_usb 8-1:0.0: Configuring for 55 interfaces [ 1216.708714][T19041] gs_usb 8-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1216.835197][T19041] gs_usb: probe of 8-1:0.0 failed with error -121 [ 1216.918946][ T4326] usb 8-1: USB disconnect, device number 44 [ 1220.311848][T22557] loop9: detected capacity change from 0 to 8192 [ 1220.514581][T22557] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1221.186348][T22570] autofs4:pid:22570:autofs_fill_super: called with bogus options [ 1222.158929][T22540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.166508][T22540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.268110][T22540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1224.347271][T22540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1224.909840][T22540] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.919132][T22540] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.928127][T22540] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.937175][T22540] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.544560][T19035] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1225.609834][T22617] netlink: 'syz.9.5011': attribute type 4 has an invalid length. [ 1226.294165][T19035] usb 1-1: Using ep0 maxpacket: 32 [ 1226.322549][T19035] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1226.495896][T19035] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1226.666523][T19035] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1226.679242][T19035] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1226.817075][T19035] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.854760][T19035] usb 1-1: Product: syz [ 1226.869250][T19035] usb 1-1: Manufacturer: syz [ 1226.880105][T19035] usb 1-1: SerialNumber: syz [ 1226.903330][T19035] usb 1-1: config 0 descriptor?? [ 1227.941926][ T4495] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 1227.950196][T19035] gs_usb 1-1:0.0: Configuring for 55 interfaces [ 1227.965282][T19035] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1227.973991][T19035] gs_usb: probe of 1-1:0.0 failed with error -121 [ 1228.163733][T17437] usb 1-1: USB disconnect, device number 5 [ 1228.630006][ T4495] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1228.645777][ T4495] usb 5-1: not running at top speed; connect to a high speed hub [ 1228.665243][ T4495] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1228.684522][ T4495] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1228.703827][ T4495] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1228.759896][ T4495] usb 5-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 1228.809838][ T4495] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.834562][ T4495] usb 5-1: Product: syz [ 1228.838811][ T4495] usb 5-1: Manufacturer: syz [ 1228.890264][ T4495] usb 5-1: SerialNumber: syz [ 1231.025767][ T4495] usb 5-1: unit 13 not found! [ 1231.034596][T22690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5028'. [ 1231.116138][T22690] lo speed is unknown, defaulting to 1000 [ 1231.142584][T22690] lo speed is unknown, defaulting to 1000 [ 1231.183324][T22690] lo speed is unknown, defaulting to 1000 [ 1231.230476][ T4495] usb 5-1: USB disconnect, device number 55 [ 1231.260271][T22690] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1231.383353][T22690] lo speed is unknown, defaulting to 1000 [ 1231.428338][T22690] lo speed is unknown, defaulting to 1000 [ 1231.459384][T22690] lo speed is unknown, defaulting to 1000 [ 1231.477710][T22690] lo speed is unknown, defaulting to 1000 [ 1231.503848][T22690] lo speed is unknown, defaulting to 1000 [ 1231.529813][T22690] lo speed is unknown, defaulting to 1000 [ 1231.539097][T22504] udevd[22504]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1232.991362][T22716] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5035'. [ 1233.020761][T22717] bond0: Device is already in use. [ 1233.497041][ T4495] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1233.707230][ T4495] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1233.831939][ T4495] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1234.132887][ T4495] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1234.218556][ T4495] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 1234.311754][ T4495] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 1234.386957][ T4495] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1234.416641][ T4495] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1234.443718][ T4495] usb 5-1: Product: syz [ 1234.464543][ T4495] usb 5-1: Manufacturer: syz [ 1234.508083][ T4495] cdc_wdm 5-1:1.0: skipping garbage [ 1234.564498][ T4495] cdc_wdm 5-1:1.0: skipping garbage [ 1234.594997][ T4495] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1234.600987][ T4495] cdc_wdm 5-1:1.0: Unknown control protocol [ 1235.372367][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1235.659405][ T4495] usb 5-1: USB disconnect, device number 56 [ 1236.420766][T22764] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5047'. [ 1236.457949][T22764] siw: device registration error -23 [ 1237.867399][T22786] x_tables: duplicate underflow at hook 1 [ 1238.778539][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.785225][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.396492][T22829] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5061'. [ 1241.411327][T22829] siw: device registration error -23 [ 1242.192547][T22828] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5062'. [ 1243.682505][T22854] netlink: 'syz.7.5070': attribute type 1 has an invalid length. [ 1243.726760][T22854] netlink: 'syz.7.5070': attribute type 4 has an invalid length. [ 1243.746974][T22854] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.5070'. [ 1245.657000][T22876] lo speed is unknown, defaulting to 1000 [ 1247.814097][T22885] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5075'. [ 1249.881703][T22921] netlink: 'syz.4.5086': attribute type 1 has an invalid length. [ 1250.049656][T22929] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1250.098398][T22929] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1250.168261][T22921] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5086'. [ 1251.070967][T22940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5088'. [ 1252.840682][T22966] fuse: Bad value for 'fd' [ 1253.143782][T22977] netlink: 'syz.0.5099': attribute type 1 has an invalid length. [ 1253.243652][T22980] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1253.292788][T22980] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1253.351240][T22977] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5099'. [ 1253.361564][T22987] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5102'. [ 1253.374312][T22987] netlink: 'syz.3.5102': attribute type 7 has an invalid length. [ 1253.392430][T22987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5102'. [ 1254.004644][T22549] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1254.036796][T23013] fuse: Bad value for 'fd' [ 1254.194634][T22549] usb 1-1: Using ep0 maxpacket: 32 [ 1254.202193][T22549] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1254.251591][T22549] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1254.308509][T22549] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1254.340633][T22549] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1254.358758][T22549] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.382614][T22549] usb 1-1: Product: syz [ 1254.394631][T22549] usb 1-1: Manufacturer: syz [ 1254.409250][T22549] usb 1-1: SerialNumber: syz [ 1254.438948][T22549] usb 1-1: config 0 descriptor?? [ 1256.008586][T22549] gs_usb 1-1:0.0: Configuring for 55 interfaces [ 1256.073820][T23031] netlink: 'syz.4.5113': attribute type 1 has an invalid length. [ 1256.200809][T23034] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1256.236109][T23034] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1257.061041][T23031] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5113'. [ 1257.229340][T23057] netlink: 'syz.7.5116': attribute type 1 has an invalid length. [ 1257.234810][T22549] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 1257.289110][T23057] netlink: 'syz.7.5116': attribute type 4 has an invalid length. [ 1257.423176][T23057] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.5116'. [ 1257.459920][T23066] fuse: Bad value for 'fd' [ 1257.678542][T22549] gs_usb: probe of 1-1:0.0 failed with error -71 [ 1257.724535][T22549] usb 1-1: USB disconnect, device number 6 [ 1258.296027][T23089] lo speed is unknown, defaulting to 1000 [ 1259.439552][T23101] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[16117] was attempted by ""[23101] [ 1259.967183][T23105] netlink: 'syz.9.5129': attribute type 1 has an invalid length. [ 1260.125803][T23107] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1260.182173][T23107] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1260.838837][T23110] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5129'. [ 1260.856971][T23115] netlink: 'syz.0.5130': attribute type 1 has an invalid length. [ 1260.871928][T23115] netlink: 'syz.0.5130': attribute type 4 has an invalid length. [ 1260.913388][T23115] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5130'. [ 1261.092386][T23123] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5133'. [ 1262.038016][T23138] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5135'. [ 1262.085533][T19035] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1263.184905][T19035] usb 1-1: Using ep0 maxpacket: 32 [ 1263.221466][T19035] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1263.249147][T19035] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1263.349603][T19035] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1263.516078][T19035] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1263.720353][T19035] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.857019][T19035] usb 1-1: Product: syz [ 1263.861270][T19035] usb 1-1: Manufacturer: syz [ 1263.946769][T19035] usb 1-1: SerialNumber: syz [ 1263.977869][T19035] usb 1-1: config 0 descriptor?? [ 1265.004215][T23161] netlink: 'syz.9.5142': attribute type 1 has an invalid length. [ 1265.151571][T23164] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1265.201670][T23164] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1265.295967][T23161] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5142'. [ 1265.326349][T23161] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5142'. [ 1265.681322][T19035] gs_usb 1-1:0.0: Couldn't send data format (err=-71) [ 1265.688313][T19035] gs_usb: probe of 1-1:0.0 failed with error -71 [ 1265.707920][T19035] usb 1-1: USB disconnect, device number 7 [ 1266.094719][T19035] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1266.340364][T19035] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1266.356731][T19035] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1266.403542][T19035] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1266.426456][T19035] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 1266.461242][T19035] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 1266.509129][T19035] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1266.544486][T19035] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1266.554757][T19035] usb 1-1: Product: syz [ 1266.558970][T19035] usb 1-1: Manufacturer: syz [ 1266.604123][T19035] cdc_wdm 1-1:1.0: skipping garbage [ 1266.626756][T19035] cdc_wdm 1-1:1.0: skipping garbage [ 1266.703833][T19035] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1266.737136][T23187] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5147'. [ 1266.744880][T19035] cdc_wdm 1-1:1.0: Unknown control protocol [ 1266.991743][T23196] netlink: 'syz.9.5148': attribute type 1 has an invalid length. [ 1267.009799][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 4 bytes [ 1267.017331][ T4322] usb 1-1: USB disconnect, device number 8 [ 1267.109118][T23196] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1267.152493][T23199] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1267.221944][T23202] device bond3 entered promiscuous mode [ 1267.252232][T23196] device macvlan2 entered promiscuous mode [ 1267.272511][T23196] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1267.383445][T23197] device syzkaller0 entered promiscuous mode [ 1268.830107][T23230] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5155'. [ 1268.839679][T19035] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1268.853033][T23230] siw: device registration error -23 [ 1269.064654][T19035] usb 1-1: Using ep0 maxpacket: 32 [ 1269.071842][T19035] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1269.140390][T19035] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1269.158547][T23234] netlink: 'syz.9.5156': attribute type 1 has an invalid length. [ 1269.210773][T23234] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1269.211958][T19035] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1269.265155][T23234] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1269.338146][T19035] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1269.371151][T19035] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.388468][T19035] usb 1-1: Product: syz [ 1269.403335][T19035] usb 1-1: Manufacturer: syz [ 1269.411463][T19035] usb 1-1: SerialNumber: syz [ 1269.435950][T19035] usb 1-1: config 0 descriptor?? [ 1269.509139][T23236] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5156'. [ 1269.528723][T23236] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5156'. [ 1269.584907][T23241] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5158'. [ 1269.859217][T19035] gs_usb 1-1:0.0: Configuring for 55 interfaces [ 1270.304886][T19035] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 1270.577896][T19035] gs_usb: probe of 1-1:0.0 failed with error -71 [ 1270.719718][T19035] usb 1-1: USB disconnect, device number 9 [ 1270.977330][T23263] device syzkaller0 entered promiscuous mode [ 1271.585861][T23284] siw: device registration error -23 [ 1271.754030][T23281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1271.824705][T23283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5167'. [ 1273.441037][T23305] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5171'. [ 1273.503771][T23310] netlink: 'syz.0.5174': attribute type 1 has an invalid length. [ 1273.553672][T23310] netlink: 'syz.0.5174': attribute type 4 has an invalid length. [ 1273.608783][T23310] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5174'. [ 1273.674229][T23311] netlink: 'syz.4.5173': attribute type 1 has an invalid length. [ 1273.918957][T23312] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1274.054336][T23312] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 1274.086431][T23316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5173'. [ 1274.102010][T23316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5173'. [ 1274.464948][T23335] device syzkaller0 entered promiscuous mode [ 1274.886798][T19039] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1275.099984][T19039] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1275.129329][T19039] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1275.194345][T19039] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1275.254377][T19039] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 1275.371928][T19039] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 1275.415972][T19039] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1275.450809][T19039] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1275.479605][T19039] usb 1-1: Product: syz [ 1275.497938][T19039] usb 1-1: Manufacturer: syz [ 1275.533699][T19039] cdc_wdm 1-1:1.0: skipping garbage [ 1275.564464][T19039] cdc_wdm 1-1:1.0: skipping garbage [ 1275.580255][T19039] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1275.594611][T19039] cdc_wdm 1-1:1.0: Unknown control protocol [ 1275.765032][T23361] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5185'. [ 1275.927937][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 6 bytes [ 1275.935859][T19039] usb 1-1: USB disconnect, device number 10 [ 1276.083174][T23373] tipc: Failed to remove unknown binding: 66,0,0/0:3603116394/3603116395 [ 1276.114372][T23373] tipc: Failed to remove unknown binding: 66,0,0/0:3603116394/3603116395 [ 1276.675833][T23394] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5198'. [ 1277.553132][T23422] device syzkaller0 entered promiscuous mode [ 1278.380099][T23431] device syzkaller0 entered promiscuous mode [ 1278.534323][T23439] JFS: discard option not supported on device [ 1278.543611][T23439] Mount JFS Failure: -22 [ 1278.548428][T23439] jfs_mount failed w/return code = -22 [ 1278.792273][T23449] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5213'. [ 1279.058664][T23456] device syzkaller0 entered promiscuous mode [ 1281.158324][T23485] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5225'. [ 1281.531350][T23492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5227'. [ 1281.540962][T23492] netlink: 'syz.3.5227': attribute type 7 has an invalid length. [ 1281.551188][T23492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5227'. [ 1282.688438][T23513] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5232'. [ 1282.703312][T23513] siw: device registration error -23 [ 1283.558569][T23522] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5236'. [ 1284.104834][T23541] x_tables: duplicate underflow at hook 1 [ 1285.450463][T23554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5245'. [ 1285.514563][ T4495] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1285.735656][ T4495] usb 1-1: no configurations [ 1285.740339][ T4495] usb 1-1: can't read configurations, error -22 [ 1285.904526][ T4495] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1286.085330][ T4495] usb 1-1: no configurations [ 1286.090158][ T4495] usb 1-1: can't read configurations, error -22 [ 1286.103430][ T4495] usb usb1-port1: attempt power cycle [ 1286.534565][ T4495] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1286.585706][ T4495] usb 1-1: no configurations [ 1286.590493][ T4495] usb 1-1: can't read configurations, error -22 [ 1286.777100][ T4495] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1286.985947][ T4495] usb 1-1: no configurations [ 1286.990645][ T4495] usb 1-1: can't read configurations, error -22 [ 1287.014639][ T4495] usb usb1-port1: unable to enumerate USB device [ 1287.063641][T23580] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5254'. [ 1290.248527][T23602] siw: device registration error -23 [ 1290.429306][T23600] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5257'. [ 1290.649182][T23609] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5261'. [ 1290.663549][T23609] netlink: 'syz.7.5261': attribute type 7 has an invalid length. [ 1290.674994][T23609] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5261'. [ 1290.688697][T23609] device bond0 entered promiscuous mode [ 1290.694364][T23609] device bond_slave_0 entered promiscuous mode [ 1290.705707][T23610] sock: sock_set_timeout: `syz.3.5262' (pid 23610) tries to set negative timeout [ 1290.730284][T23609] device bond_slave_1 entered promiscuous mode [ 1290.740889][T23609] device bond0 left promiscuous mode [ 1290.748009][T23609] device bond_slave_0 left promiscuous mode [ 1290.754274][T23609] device bond_slave_1 left promiscuous mode [ 1290.779775][T23615] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5265'. [ 1294.777116][T23649] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5275'. [ 1294.849620][T23657] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5278'. [ 1296.118234][T23675] JFS: discard option not supported on device [ 1296.126286][T23675] Mount JFS Failure: -22 [ 1296.130719][T23675] jfs_mount failed w/return code = -22 [ 1296.221444][T23681] x_tables: duplicate underflow at hook 1 [ 1298.090428][T23699] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5291'. [ 1298.677103][T23706] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5293'. [ 1300.225317][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.232129][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.394789][T19039] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1304.660747][T19039] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.114573][T19039] usb 5-1: config 0 has no interfaces? [ 1305.135199][T19039] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1305.146467][T23739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5303'. [ 1305.161799][T23743] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5304'. [ 1305.181158][T19039] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.215211][T19039] usb 5-1: config 0 descriptor?? [ 1306.315675][T23760] device syzkaller0 entered promiscuous mode [ 1306.600707][T23774] JFS: discard option not supported on device [ 1306.609536][T23774] Mount JFS Failure: -22 [ 1306.613864][T23774] jfs_mount failed w/return code = -22 [ 1307.561732][T23777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1307.619735][T23783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5313'. [ 1309.168532][T19039] usb 5-1: USB disconnect, device number 57 [ 1310.225197][T23802] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5319'. [ 1310.391161][T23806] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5318'. [ 1310.404918][T23806] siw: device registration error -23 [ 1311.312161][T23813] device syzkaller0 entered promiscuous mode [ 1312.397088][T23834] device syzkaller0 entered promiscuous mode [ 1313.391270][T23845] overlayfs: failed to resolve './file0': -2 [ 1313.588472][T23854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5331'. [ 1315.888479][T23879] device vlan2 entered promiscuous mode [ 1315.894105][T23879] device bridge0 entered promiscuous mode [ 1315.921479][T23876] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1316.985063][T23885] overlayfs: failed to resolve './file0': -2 [ 1319.621002][T23896] x_tables: duplicate underflow at hook 1 [ 1319.645476][T23897] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5347'. [ 1322.350282][T23919] netlink: 'syz.4.5351': attribute type 1 has an invalid length. [ 1322.463394][T23923] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1322.560482][T23923] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 1322.698735][T23919] bond7: (slave bridge1): Enslaving as an active interface with a down link [ 1324.906699][T23950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5360'. [ 1328.865339][T23985] JFS: discard option not supported on device [ 1328.877396][T23985] Mount JFS Failure: -22 [ 1328.894785][T23985] jfs_mount failed w/return code = -22 [ 1329.236651][T23990] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5373'. [ 1334.137717][T24039] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5386'. [ 1336.604056][T24085] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input32 [ 1339.913285][T24127] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input33 [ 1348.401774][T24246] fuse: Bad value for 'group_id' [ 1357.131188][T24365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5486'. [ 1359.145529][T24366] IPVS: set_ctl: invalid protocol: 9889 0.0.0.0:20002 [ 1361.671702][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.678135][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.902574][T24398] device syzkaller0 entered promiscuous mode [ 1362.923806][T24398] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5496'. [ 1362.943583][T24398] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5496'. [ 1363.175378][T24403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5498'. [ 1364.395888][T24404] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1368.877238][T24446] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5510'. [ 1370.464594][ T4495] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1370.559584][T24473] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input34 [ 1370.658959][ T4495] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1370.676227][ T4495] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1370.714360][ T4495] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.756371][ T4495] usb 10-1: config 0 descriptor?? [ 1370.776191][ T4495] pwc: Askey VC010 type 2 USB webcam detected. [ 1370.799188][T24476] fuse: Bad value for 'fd' [ 1372.508176][ T4495] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1372.525234][ T4495] pwc: recv_control_msg error -32 req 02 val 2700 [ 1372.542781][ T4495] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1372.556268][T24487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1372.567172][ T4495] pwc: recv_control_msg error -32 req 04 val 1000 [ 1372.574363][ T4495] pwc: recv_control_msg error -32 req 04 val 1300 [ 1372.582782][ T4495] pwc: recv_control_msg error -32 req 04 val 1400 [ 1372.593098][T24495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5524'. [ 1372.601557][T24494] fuse: Unknown parameter 'grou00000000000000000000' [ 1372.614976][ T4495] pwc: recv_control_msg error -32 req 02 val 2000 [ 1372.641935][ T4495] pwc: recv_control_msg error -32 req 02 val 2100 [ 1372.649346][ T4495] pwc: recv_control_msg error -32 req 04 val 1500 [ 1372.664726][ T4495] pwc: recv_control_msg error -32 req 02 val 2500 [ 1372.687237][ T4495] pwc: recv_control_msg error -32 req 02 val 2400 [ 1372.707274][ T4495] pwc: recv_control_msg error -32 req 02 val 2600 [ 1372.729536][ T4495] pwc: recv_control_msg error -32 req 02 val 2900 [ 1372.743613][ T4495] pwc: recv_control_msg error -32 req 02 val 2800 [ 1372.988094][ T4495] pwc: recv_control_msg error -71 req 04 val 1200 [ 1373.044726][ T4495] pwc: Registered as video103. [ 1373.059309][ T4495] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input35 [ 1373.149811][ T4495] usb 10-1: USB disconnect, device number 35 [ 1374.311317][T24527] fuse: Unknown parameter 'group_id00000000000000000000' [ 1374.616667][T24536] device syzkaller0 entered promiscuous mode [ 1375.061631][T24549] fuse: Unknown parameter 'grou00000000000000000000' [ 1376.244020][T24568] x_tables: duplicate underflow at hook 1 [ 1377.678786][T24574] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5545'. [ 1377.771737][T24574] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5545'. [ 1378.025251][T18114] bond1: (slave gretap1): Releasing active interface [ 1378.073253][T24581] device bridge2 entered promiscuous mode [ 1378.100657][T24581] team0: Port device bridge2 added [ 1378.121370][T24585] bridge0: port 3(team0) entered blocking state [ 1378.149252][T24585] bridge0: port 3(team0) entered disabled state [ 1378.151646][T24588] fuse: Unknown parameter 'group_id00000000000000000000' [ 1378.190252][T24585] device team0 entered promiscuous mode [ 1378.216477][T24585] device team_slave_0 entered promiscuous mode [ 1378.254606][T24585] device team_slave_1 entered promiscuous mode [ 1378.680273][T24597] fuse: Unknown parameter 'grou00000000000000000000' [ 1379.970807][T24617] x_tables: duplicate underflow at hook 1 [ 1380.480007][T24619] fuse: Unknown parameter 'group_id00000000000000000000' [ 1380.496721][T24612] device syzkaller0 entered promiscuous mode [ 1384.546981][T24627] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5560'. [ 1384.571129][T24627] device bond0 left promiscuous mode [ 1384.576549][T24627] device bond_slave_0 left promiscuous mode [ 1384.582607][T24627] device bond_slave_1 left promiscuous mode [ 1384.591190][T24627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1384.602130][T24627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1384.612209][T24627] bond0 (unregistering): Released all slaves [ 1384.706880][T18114] device hsr_slave_0 left promiscuous mode [ 1384.735109][T18114] device hsr_slave_1 left promiscuous mode [ 1384.805719][T18114] device bridge_slave_1 left promiscuous mode [ 1384.812066][T18114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.850601][T18114] device bridge_slave_0 left promiscuous mode [ 1384.857323][T18114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.876297][T18114] bond1 (unregistering): Released all slaves [ 1385.657817][T18114] team0 (unregistering): Port device team_slave_1 removed [ 1385.715178][T18114] team0 (unregistering): Port device team_slave_0 removed [ 1385.762435][T18114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1385.821145][T18114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1386.161651][T18114] bond0 (unregistering): Released all slaves [ 1387.498822][T24717] x_tables: duplicate underflow at hook 1 [ 1390.798739][T24712] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5574'. [ 1391.055403][T24759] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1391.084444][T24759] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1395.665159][T24839] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1395.706351][T24839] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1395.966694][T24848] device syzkaller0 entered promiscuous mode [ 1396.419748][T24865] x_tables: duplicate underflow at hook 1 [ 1399.114029][T24905] overlayfs: missing 'lowerdir' [ 1399.233658][T24911] device syzkaller0 entered promiscuous mode [ 1403.065770][T24986] overlayfs: missing 'lowerdir' [ 1403.505599][T25001] x_tables: duplicate underflow at hook 1 [ 1403.536836][T24994] device syzkaller0 entered promiscuous mode [ 1403.597556][T25000] device syzkaller0 entered promiscuous mode [ 1407.598531][T25022] device bridge3 entered promiscuous mode [ 1407.630351][T25022] team0: Port device bridge3 added [ 1407.768685][T25040] fuse: Bad value for 'fd' [ 1410.344064][T25053] overlayfs: missing 'lowerdir' [ 1410.843332][T25070] x_tables: duplicate underflow at hook 1 [ 1411.718010][T25080] device syzkaller0 entered promiscuous mode [ 1415.365843][T25129] fuse: Bad value for 'fd' [ 1417.039673][T25131] device bridge4 entered promiscuous mode [ 1417.092422][T25131] team0: Port device bridge4 added [ 1417.519160][T25144] overlayfs: missing 'workdir' [ 1418.468146][T25157] veth: renamed from veth0_vlan [ 1418.562728][T25162] tipc: Started in network mode [ 1418.574571][T25162] tipc: Node identity 16e5eb17dc2a, cluster identity 4711 [ 1418.622657][T25162] tipc: Enabled bearer , priority 0 [ 1418.680909][T25166] fuse: Invalid rootmode [ 1418.717408][T25163] device syzkaller0 entered promiscuous mode [ 1418.736721][T25163] tipc: Resetting bearer [ 1418.746606][T25159] tipc: Resetting bearer [ 1420.633630][T25220] fuse: Bad value for 'group_id' [ 1420.797955][T25222] overlayfs: missing 'workdir' [ 1422.798393][T25159] tipc: Disabling bearer [ 1422.837014][T17437] tipc: Node number set to 3402623767 [ 1422.887049][T25232] netlink: 'syz.7.5665': attribute type 2 has an invalid length. [ 1423.002985][T25238] fuse: Invalid rootmode [ 1423.077345][T25242] x_tables: duplicate underflow at hook 1 [ 1423.107250][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.113781][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.901188][T25259] overlayfs: missing 'workdir' [ 1426.853688][T25296] device syzkaller0 entered promiscuous mode [ 1429.808796][T25315] lo speed is unknown, defaulting to 1000 [ 1429.948415][T25336] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5686'. [ 1429.988682][T25336] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5686'. [ 1430.031791][T25336] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1430.041442][T25336] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1430.050309][T25336] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1430.059272][T25336] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1430.078325][T25339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5688'. [ 1430.125256][T25336] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5686'. [ 1430.134661][T25336] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5686'. [ 1431.648259][T25358] device bridge5 entered promiscuous mode [ 1431.676438][T25358] team0: Port device bridge5 added [ 1431.757055][T25363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5696'. [ 1431.788554][T25363] netlink: 'syz.0.5696': attribute type 7 has an invalid length. [ 1431.810857][T25363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5696'. [ 1431.856429][T25363] device team0 entered promiscuous mode [ 1431.868753][T25363] device team_slave_0 entered promiscuous mode [ 1431.881889][T25363] device team_slave_1 entered promiscuous mode [ 1431.898822][T25363] device bond0 entered promiscuous mode [ 1431.910668][T25363] device bond_slave_0 entered promiscuous mode [ 1431.920589][T25363] device bond_slave_1 entered promiscuous mode [ 1431.935418][T25363] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1431.943224][T25363] Cannot create hsr debugfs directory [ 1431.952300][T25363] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 1431.962692][T25363] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 1431.995404][T25363] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1432.052011][T25369] device syzkaller0 entered promiscuous mode [ 1432.255116][T25380] device syzkaller0 entered promiscuous mode [ 1432.287679][T25380] ------------[ cut here ]------------ [ 1432.293937][T25380] WARNING: CPU: 0 PID: 25380 at include/linux/skbuff.h:2876 em_nbyte_match+0x2cc/0x3e0 [ 1432.303741][T25380] Modules linked in: [ 1432.307741][T25380] CPU: 0 PID: 25380 Comm: syz.9.5702 Not tainted syzkaller #0 [ 1432.315287][T25380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1432.325436][T25380] RIP: 0010:em_nbyte_match+0x2cc/0x3e0 [ 1432.330964][T25380] Code: c0 eb 07 e8 86 44 1a f9 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 70 44 1a f9 0f 0b e9 e5 fe ff ff e8 64 44 1a f9 <0f> 0b e9 00 fe ff ff 89 d1 80 e1 07 fe c1 38 c1 0f 8c 7a fd ff ff [ 1432.350883][T25380] RSP: 0018:ffffc90003a27118 EFLAGS: 00010283 [ 1432.357065][T25380] RAX: ffffffff886830ec RBX: ffff888058cf8000 RCX: 0000000000080000 [ 1432.365169][T25380] RDX: ffffc9001d719000 RSI: 00000000000002e5 RDI: 00000000000002e6 [ 1432.373197][T25380] RBP: 000000000000ffff R08: ffff888066299dc0 R09: 0000000000000003 [ 1432.381279][T25380] R10: 0000000000000002 R11: 0000000000000002 R12: dffffc0000000000 [ 1432.389355][T25380] R13: 1ffff1100b19f016 R14: ffff888065ee6820 R15: 1ffff1100cbdcd04 [ 1432.397421][T25380] FS: 00007f6e7fbcf6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1432.406440][T25380] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1432.413082][T25380] CR2: 0000001b2ed20000 CR3: 0000000056e0a000 CR4: 00000000003506f0 [ 1432.421162][T25380] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1432.429230][T25380] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1432.437333][T25380] Call Trace: [ 1432.440656][T25380] [ 1432.443640][T25380] __tcf_em_tree_match+0x1cb/0x7a0 [ 1432.449093][T25380] ? tcf_em_tree_dump+0x900/0x900 [ 1432.454216][T25380] ? rcu_read_lock_held+0x40/0x40 [ 1432.459361][T25380] ? __lock_acquire+0x12f4/0x7d10 [ 1432.464530][T25380] basic_classify+0x111/0x2c0 [ 1432.469289][T25380] tcf_classify+0x331/0xbf0 [ 1432.473864][T25380] multiq_enqueue+0xfb/0x4b0 [ 1432.478585][T25380] ? sch_tree_unlock+0x1b0/0x1b0 [ 1432.483585][T25380] ? do_raw_spin_lock+0x128/0x2f0 [ 1432.488999][T25380] ? __rwlock_init+0x140/0x140 [ 1432.493836][T25380] dev_qdisc_enqueue+0x4c/0x2b0 [ 1432.498803][T25380] __dev_queue_xmit+0xfdc/0x37c0 [ 1432.503815][T25380] ? __dev_queue_xmit+0x26b/0x37c0 [ 1432.509035][T25380] ? netdev_core_pick_tx+0x340/0x340 [ 1432.514421][T25380] ? packet_parse_headers+0x7b8/0xab0 [ 1432.519846][T25380] ? packet_parse_headers+0x84b/0xab0 [ 1432.525309][T25380] ? __virt_addr_valid+0x188/0x540 [ 1432.530490][T25380] ? __check_object_size+0x500/0xa40 [ 1432.535878][T25380] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 1432.541481][T25380] ? skb_copy_datagram_from_iter+0x5a8/0x690 [ 1432.547573][T25380] ? skb_put+0x117/0x210 [ 1432.551869][T25380] packet_sendmsg+0x3bc3/0x4e60 [ 1432.556843][T25380] ? __schedule+0x119d/0x40e0 [ 1432.561595][T25380] ? __might_sleep+0xd0/0xd0 [ 1432.566279][T25380] ? verify_lock_unused+0x140/0x140 [ 1432.571554][T25380] ? aa_sk_perm+0x81f/0x950 [ 1432.576166][T25380] ? packet_getsockopt+0x9a0/0x9a0 [ 1432.581352][T25380] ? aa_sock_msg_perm+0x94/0x150 [ 1432.586390][T25380] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1432.591722][T25380] ? security_socket_sendmsg+0x7c/0xa0 [ 1432.597338][T25380] ? packet_getsockopt+0x9a0/0x9a0 [ 1432.602510][T25380] ____sys_sendmsg+0x5be/0x970 [ 1432.607388][T25380] ? __sys_sendmsg_sock+0x30/0x30 [ 1432.612478][T25380] ? __import_iovec+0x315/0x500 [ 1432.617461][T25380] ? import_iovec+0x6f/0xa0 [ 1432.622024][T25380] ___sys_sendmsg+0x2a2/0x360 [ 1432.626820][T25380] ? try_to_wake_up+0x6ae/0x1080 [ 1432.631824][T25380] ? __sys_sendmsg+0x290/0x290 [ 1432.636720][T25380] ? put_user_ifreq+0x81/0xb0 [ 1432.641473][T25380] __se_sys_sendmsg+0x1bb/0x2a0 [ 1432.646424][T25380] ? __x64_sys_sendmsg+0x80/0x80 [ 1432.651474][T25380] ? lockdep_hardirqs_on+0x94/0x140 [ 1432.656782][T25380] do_syscall_64+0x4c/0xa0 [ 1432.661255][T25380] ? clear_bhb_loop+0x60/0xb0 [ 1432.666049][T25380] ? clear_bhb_loop+0x60/0xb0 [ 1432.670821][T25380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1432.676822][T25380] RIP: 0033:0x7f6e7ed9ce59 [ 1432.681321][T25380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1432.701043][T25380] RSP: 002b:00007f6e7fbcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1432.709571][T25380] RAX: ffffffffffffffda RBX: 00007f6e7f015fa0 RCX: 00007f6e7ed9ce59 [ 1432.717648][T25380] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 1432.725724][T25380] RBP: 00007f6e7ee32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1432.733753][T25380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1432.741829][T25380] R13: 00007f6e7f016038 R14: 00007f6e7f015fa0 R15: 00007ffe58460418 [ 1432.749933][T25380] [ 1432.753014][T25380] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1432.760340][T25380] CPU: 0 PID: 25380 Comm: syz.9.5702 Not tainted syzkaller #0 [ 1432.767938][T25380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1432.778057][T25380] Call Trace: [ 1432.781378][T25380] [ 1432.784353][T25380] dump_stack_lvl+0x188/0x24e [ 1432.789090][T25380] ? memcpy+0x3c/0x60 [ 1432.793130][T25380] ? show_regs_print_info+0x12/0x12 [ 1432.798405][T25380] ? load_image+0x400/0x400 [ 1432.802987][T25380] panic+0x2e5/0x730 [ 1432.806942][T25380] ? bpf_jit_dump+0xd0/0xd0 [ 1432.811549][T25380] __warn+0x2f8/0x4f0 [ 1432.815587][T25380] ? em_nbyte_match+0x2cc/0x3e0 [ 1432.820494][T25380] ? em_nbyte_match+0x2cc/0x3e0 [ 1432.825407][T25380] report_bug+0x2ba/0x4f0 [ 1432.829813][T25380] ? em_nbyte_match+0x2cc/0x3e0 [ 1432.834729][T25380] handle_bug+0x3a/0x70 [ 1432.838968][T25380] exc_invalid_op+0x16/0x40 [ 1432.843535][T25380] asm_exc_invalid_op+0x16/0x20 [ 1432.848558][T25380] RIP: 0010:em_nbyte_match+0x2cc/0x3e0 [ 1432.854070][T25380] Code: c0 eb 07 e8 86 44 1a f9 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 70 44 1a f9 0f 0b e9 e5 fe ff ff e8 64 44 1a f9 <0f> 0b e9 00 fe ff ff 89 d1 80 e1 07 fe c1 38 c1 0f 8c 7a fd ff ff [ 1432.873734][T25380] RSP: 0018:ffffc90003a27118 EFLAGS: 00010283 [ 1432.879884][T25380] RAX: ffffffff886830ec RBX: ffff888058cf8000 RCX: 0000000000080000 [ 1432.887912][T25380] RDX: ffffc9001d719000 RSI: 00000000000002e5 RDI: 00000000000002e6 [ 1432.895931][T25380] RBP: 000000000000ffff R08: ffff888066299dc0 R09: 0000000000000003 [ 1432.903969][T25380] R10: 0000000000000002 R11: 0000000000000002 R12: dffffc0000000000 [ 1432.912009][T25380] R13: 1ffff1100b19f016 R14: ffff888065ee6820 R15: 1ffff1100cbdcd04 [ 1432.920043][T25380] ? em_nbyte_match+0x2cc/0x3e0 [ 1432.924963][T25380] ? em_nbyte_match+0x2cc/0x3e0 [ 1432.929874][T25380] __tcf_em_tree_match+0x1cb/0x7a0 [ 1432.935056][T25380] ? tcf_em_tree_dump+0x900/0x900 [ 1432.940158][T25380] ? rcu_read_lock_held+0x40/0x40 [ 1432.945236][T25380] ? __lock_acquire+0x12f4/0x7d10 [ 1432.950331][T25380] basic_classify+0x111/0x2c0 [ 1432.955077][T25380] tcf_classify+0x331/0xbf0 [ 1432.959660][T25380] multiq_enqueue+0xfb/0x4b0 [ 1432.964326][T25380] ? sch_tree_unlock+0x1b0/0x1b0 [ 1432.969322][T25380] ? do_raw_spin_lock+0x128/0x2f0 [ 1432.974402][T25380] ? __rwlock_init+0x140/0x140 [ 1432.979220][T25380] dev_qdisc_enqueue+0x4c/0x2b0 [ 1432.984141][T25380] __dev_queue_xmit+0xfdc/0x37c0 [ 1432.989143][T25380] ? __dev_queue_xmit+0x26b/0x37c0 [ 1432.994334][T25380] ? netdev_core_pick_tx+0x340/0x340 [ 1432.999691][T25380] ? packet_parse_headers+0x7b8/0xab0 [ 1433.005138][T25380] ? packet_parse_headers+0x84b/0xab0 [ 1433.010583][T25380] ? __virt_addr_valid+0x188/0x540 [ 1433.015765][T25380] ? __check_object_size+0x500/0xa40 [ 1433.021106][T25380] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 1433.026720][T25380] ? skb_copy_datagram_from_iter+0x5a8/0x690 [ 1433.032770][T25380] ? skb_put+0x117/0x210 [ 1433.037074][T25380] packet_sendmsg+0x3bc3/0x4e60 [ 1433.041997][T25380] ? __schedule+0x119d/0x40e0 [ 1433.046736][T25380] ? __might_sleep+0xd0/0xd0 [ 1433.051408][T25380] ? verify_lock_unused+0x140/0x140 [ 1433.056681][T25380] ? aa_sk_perm+0x81f/0x950 [ 1433.061244][T25380] ? packet_getsockopt+0x9a0/0x9a0 [ 1433.066516][T25380] ? aa_sock_msg_perm+0x94/0x150 [ 1433.071516][T25380] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1433.076936][T25380] ? security_socket_sendmsg+0x7c/0xa0 [ 1433.082466][T25380] ? packet_getsockopt+0x9a0/0x9a0 [ 1433.087634][T25380] ____sys_sendmsg+0x5be/0x970 [ 1433.092471][T25380] ? __sys_sendmsg_sock+0x30/0x30 [ 1433.097557][T25380] ? __import_iovec+0x315/0x500 [ 1433.102463][T25380] ? import_iovec+0x6f/0xa0 [ 1433.107030][T25380] ___sys_sendmsg+0x2a2/0x360 [ 1433.111774][T25380] ? try_to_wake_up+0x6ae/0x1080 [ 1433.116777][T25380] ? __sys_sendmsg+0x290/0x290 [ 1433.121619][T25380] ? put_user_ifreq+0x81/0xb0 [ 1433.126367][T25380] __se_sys_sendmsg+0x1bb/0x2a0 [ 1433.131279][T25380] ? __x64_sys_sendmsg+0x80/0x80 [ 1433.136293][T25380] ? lockdep_hardirqs_on+0x94/0x140 [ 1433.141548][T25380] do_syscall_64+0x4c/0xa0 [ 1433.146031][T25380] ? clear_bhb_loop+0x60/0xb0 [ 1433.150764][T25380] ? clear_bhb_loop+0x60/0xb0 [ 1433.155506][T25380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1433.161457][T25380] RIP: 0033:0x7f6e7ed9ce59 [ 1433.165921][T25380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1433.185583][T25380] RSP: 002b:00007f6e7fbcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1433.194052][T25380] RAX: ffffffffffffffda RBX: 00007f6e7f015fa0 RCX: 00007f6e7ed9ce59 [ 1433.202076][T25380] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 1433.210105][T25380] RBP: 00007f6e7ee32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1433.218217][T25380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1433.226255][T25380] R13: 00007f6e7f016038 R14: 00007f6e7f015fa0 R15: 00007ffe58460418 [ 1433.234308][T25380] [ 1433.237939][T25380] Kernel Offset: disabled [ 1433.242366][T25380] Rebooting in 86400 seconds..