last executing test programs: 13m39.733683187s ago: executing program 2 (id=3212): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r5, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x60, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 13m39.388086166s ago: executing program 3 (id=3213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 13m37.605838625s ago: executing program 2 (id=3214): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000e00)=[{&(0x7f0000000dc0)="3f2a6a1bc4", 0x5}], 0x1) recvfrom(r0, &(0x7f00000015c0)=""/4059, 0xfdb, 0x17, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12, r2, 0x7a656000) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50006fcb5d15966b46ca64f7e76268cd64007095adfef77465b69ec03139854d6f07d5f9bd01000046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a085852456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf", 0x841}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 13m37.522893557s ago: executing program 3 (id=3216): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1/file0\x00', 0x181201, 0x0) write(r3, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='1234567890\n', 0xb) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cec", 0x39) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000480)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) write(r7, &(0x7f00000004c0)='\n', 0x1) socket(0x10, 0x803, 0x0) 13m33.563217294s ago: executing program 3 (id=3220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000000)="fc0000004800071fab092504090007000aab60000a0000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6", 0xf5) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x110000) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r8, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000000280)=@udp=r0}, 0x20) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12102) 13m28.849963469s ago: executing program 3 (id=3224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 13m27.228406165s ago: executing program 3 (id=3225): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r4, 0x400, 0x1) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x60, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 13m25.394355386s ago: executing program 3 (id=3226): r0 = socket$inet6(0xa, 0x800, 0x2000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4e01c3, 0xe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) prlimit64(0x0, 0xd, &(0x7f00000000c0)={0x6, 0x9}, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, 0x0, 0x40440d0) getsockname$packet(r1, 0x0, &(0x7f0000000580)) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRES32], 0x4c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r4, r4, 0x0, 0x1002000ff) 13m25.267756999s ago: executing program 2 (id=3227): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount$overlay(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, 'lower'}}, {@upperdir={'upperdir', 0x3d, 'upper'}}, {@workdir={'workdir', 0x3d, 'work'}}, {@nfs_export_on}, {@uuid_off}, {@redirect_dir_on}]}) 13m23.294156432s ago: executing program 2 (id=3228): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678-', 0x9, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0x1e8000) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 13m14.031653137s ago: executing program 2 (id=3236): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount$overlay(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, 'lower'}}, {@upperdir={'upperdir', 0x3d, 'upper'}}, {@workdir={'workdir', 0x3d, 'work'}}, {@nfs_export_on}, {@uuid_off}, {@redirect_dir_on}]}) 13m9.923030109s ago: executing program 32 (id=3226): r0 = socket$inet6(0xa, 0x800, 0x2000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4e01c3, 0xe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) prlimit64(0x0, 0xd, &(0x7f00000000c0)={0x6, 0x9}, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, 0x0, 0x40440d0) getsockname$packet(r1, 0x0, &(0x7f0000000580)) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRES32], 0x4c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r4, r4, 0x0, 0x1002000ff) 13m9.8826867s ago: executing program 2 (id=3238): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x24000800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000002380)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2988a80c0081004c0086dd6d00200810082fff"], 0x104a) 12m54.601265208s ago: executing program 33 (id=3238): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x24000800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000002380)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2988a80c0081004c0086dd6d00200810082fff"], 0x104a) 3m2.560868588s ago: executing program 4 (id=4179): r0 = socket$kcm(0x2b, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) 3m2.188689667s ago: executing program 4 (id=4180): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r5, &(0x7f0000000300), 0x0) 2m58.28137516s ago: executing program 4 (id=4181): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/62, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a2"], 0x120}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x40047452, &(0x7f0000000100)) 2m52.285120372s ago: executing program 4 (id=4190): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1eb42d00000000000109022400010000002209040000010300020009210000000122040009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m45.690037358s ago: executing program 4 (id=4195): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount$overlay(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, 'lower'}}, {@upperdir={'upperdir', 0x3d, 'upper'}}, {@workdir={'workdir', 0x3d, 'work'}}, {@nfs_export_on}, {@uuid_off}, {@redirect_dir_on}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./mnt/dir2\x00', 0x1) 2m44.34955162s ago: executing program 4 (id=4196): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x1) syz_emit_ethernet(0x82, &(0x7f0000000240)={@random="a5050f0000b5", @random="0000009000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @empty, {[@rr={0x7, 0x3}, @lsrr={0x83, 0x3, 0x1}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@empty}, {@remote}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) linkat(r1, &(0x7f00000000c0)='./gadget/dummy_udc\x00', r1, &(0x7f0000000100)='./gadget/dummy_udc\x00', 0x1000) write(r0, &(0x7f0000000380)="08000000091703000101d4d63b1b04000001ff0000002a3d6fcee7c39b42058102400000cee8ea1200000000005fc841900037b6c507fcba1d6fb6afd1d9cee6162e79305c7d15c36a9777b368", 0x4d) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f0000000100)={"ec47b1b0b95a9b05dd3bbbbd19b3fd4b4ac1f6472818378bbff59d569fbe", 0xf745, 0x0, 0x0, 0xffff8001, 0x1, 0x6b7, 0x5, 0x0, [0x3, 0x6, 0x2, 0x10, 0x6, 0x6, 0x0, 0x2, 0x3, 0x5, 0x3, 0xff, 0x4, 0xffffffff, 0xffff, 0x3ff, 0x2, 0xd, 0x5]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x47, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x8000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fffff", 0x10, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0x80, 0xaf07, 0x10001}}}}}}, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x45, 0x0, &(0x7f0000000b80)) r6 = timerfd_create(0x9, 0x80800) close(r6) mmap$xdp(&(0x7f0000264000/0x3000)=nil, 0x3000, 0x3000008, 0x100010, r1, 0x80000000) 2m28.293673541s ago: executing program 34 (id=4196): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x1) syz_emit_ethernet(0x82, &(0x7f0000000240)={@random="a5050f0000b5", @random="0000009000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @empty, {[@rr={0x7, 0x3}, @lsrr={0x83, 0x3, 0x1}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@empty}, {@remote}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) linkat(r1, &(0x7f00000000c0)='./gadget/dummy_udc\x00', r1, &(0x7f0000000100)='./gadget/dummy_udc\x00', 0x1000) write(r0, &(0x7f0000000380)="08000000091703000101d4d63b1b04000001ff0000002a3d6fcee7c39b42058102400000cee8ea1200000000005fc841900037b6c507fcba1d6fb6afd1d9cee6162e79305c7d15c36a9777b368", 0x4d) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f0000000100)={"ec47b1b0b95a9b05dd3bbbbd19b3fd4b4ac1f6472818378bbff59d569fbe", 0xf745, 0x0, 0x0, 0xffff8001, 0x1, 0x6b7, 0x5, 0x0, [0x3, 0x6, 0x2, 0x10, 0x6, 0x6, 0x0, 0x2, 0x3, 0x5, 0x3, 0xff, 0x4, 0xffffffff, 0xffff, 0x3ff, 0x2, 0xd, 0x5]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x47, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x8000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fffff", 0x10, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0x80, 0xaf07, 0x10001}}}}}}, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x45, 0x0, &(0x7f0000000b80)) r6 = timerfd_create(0x9, 0x80800) close(r6) mmap$xdp(&(0x7f0000264000/0x3000)=nil, 0x3000, 0x3000008, 0x100010, r1, 0x80000000) 28.709915389s ago: executing program 5 (id=4324): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r5, &(0x7f0000000300)='p:test/event1 ./file0:0x0', 0x19) 26.9612548s ago: executing program 5 (id=4325): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./lower/dir1\x00', 0x1ff) mount$overlay(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, 'lower'}}, {@upperdir={'upperdir', 0x3d, 'upper'}}, {@workdir={'workdir', 0x3d, 'work'}}, {@nfs_export_on}, {@redirect_dir_on}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./mnt/dir2\x00', 0x1) 26.55588805s ago: executing program 6 (id=4327): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r5, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x20, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 24.372196481s ago: executing program 6 (id=4329): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) syz_open_dev$loop(0x0, 0x2, 0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200076a0ec20749380000000a0304004e234e2202000100ffff00000000000100"/56, @ANYRES32=0x0, @ANYBLOB="05000000130600000800000100000000080003"], 0x54}}, 0x20004010) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) 17.851675027s ago: executing program 5 (id=4336): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) 16.724470103s ago: executing program 1 (id=4337): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r3, 0x0, 0x0) 15.643808779s ago: executing program 0 (id=4338): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000019680), 0x0, 0x20004855) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, 0x0) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) 15.639659529s ago: executing program 1 (id=4339): r0 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10) listen(r2, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10) ppoll(&(0x7f0000000240)=[{r2, 0x5400}], 0x1, &(0x7f00000002c0), 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) pipe2$watch_queue(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4111, 0x100f}], 0x5a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}, 0x20) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r4, 0xcd) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000000)={0x10000, 0x5, 0x8001, 0x8000, 0x507, 0x4, 0x4}) add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, r0) 14.534510855s ago: executing program 0 (id=4340): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 14.355476559s ago: executing program 1 (id=4341): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd50, 0x0, &(0x7f0000000000)="aaf3a4cd08258cebe46db996738b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 12.703587089s ago: executing program 1 (id=4342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 12.6240079s ago: executing program 0 (id=4343): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) clock_settime(0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) 10.821745233s ago: executing program 6 (id=4344): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r0 = socket(0x400000000010, 0x3, 0x2) r1 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000080)={0x8, 0x0, 0xfffffffd, 0xc, 0x0, 0x1000, &(0x7f0000002240)=""/4096, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0x5, 0x9, 0x0, 0x80000001, 0xc}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) timer_create(0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r7 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r7, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x11, 0xf1, {0xd, 0x0, 0x105, 0xfffffff8, 0x3d}}, 0x0) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}}], 0x1, 0x20008000) shutdown(r6, 0x1) close(0x3) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 7.467957863s ago: executing program 0 (id=4345): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x7c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d06, 0x0, 0x10040000000008}]}) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r7, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) 5.262288685s ago: executing program 5 (id=4346): r0 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x3, 0x10000051}, &(0x7f0000000200), &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd589, 0x80, 0x2, 0x1e1}, &(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000180)) syz_io_uring_submit(r3, r1, r2, &(0x7f0000000280)=@IORING_OP_FUTEX_WAITV={0x35, 0x4, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0x100000001, 0x0, 0x82}], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x64ec, 0xfffffffd, 0x6a, 0x0, 0x0) 4.992907592s ago: executing program 5 (id=4347): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000002200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2], 0x30}, 0x1, 0xff07, 0x0, 0x40000}, 0x2000000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4001af84, &(0x7f0000000080)) r3 = syz_usbip_server_init(0x1) syz_usb_connect(0x1, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) write$usbip_server(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x35) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40046201, &(0x7f0000000100)='mptcp_pm\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) 4.992157252s ago: executing program 0 (id=4348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1000060) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) 4.64175282s ago: executing program 6 (id=4349): r0 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10) listen(r2, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10) r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmctl$SHM_UNLOCK(r4, 0xc) pipe2$watch_queue(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4111, 0x100f}], 0x5a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}, 0x20) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r5, 0xcd) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000000)={0x10000, 0x5, 0x8001, 0x8000, 0x507, 0x4, 0x4}) add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, r0) 2.304298565s ago: executing program 1 (id=4350): sched_setattr(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x10000, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x0, 0x38, 0x6, 0x1}, 0x28) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='v2to_da_alloc', 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtaction={0x44, 0x30, 0x20, 0x5, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48c5}, 0x40) ioprio_set$uid(0x3, 0x0, 0x2004) 1.943504164s ago: executing program 6 (id=4351): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 279.883764ms ago: executing program 0 (id=4352): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) syz_open_dev$loop(0x0, 0x2, 0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) 152.562997ms ago: executing program 1 (id=4353): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) recvmmsg(r3, &(0x7f0000000900), 0x0, 0x40, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x810, 0xffffffffffffffff, 0x173e000) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYRES16], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000400)={0x4, 0x0, [{0x8da, 0x0, 0xfffffffffffffff8}, {0x9af, 0x0, 0x4}, {0x484, 0x0, 0x4}, {0x400000b0, 0x0, 0x6}]}) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='\a\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r4], 0x5c}}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 147.686077ms ago: executing program 6 (id=4354): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000004c0)={0xc}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x9, 0x1ff, 0x5c, 0x4}}}, 0xa) ioctl(r1, 0x3b8e, &(0x7f0000000580)="10") r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='stat\x00') sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x2000001}, 0x4048001) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) r5 = syz_ublk_setup_io_uring(0x6573, &(0x7f0000000080)={0x0, 0x1c40, 0x10000, 0x2, 0xf3}, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240)) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000540)) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r5, 0x8000000) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r6, 0x118, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) preadv(r3, &(0x7f0000000780)=[{&(0x7f0000000080)=""/116, 0x74}], 0x1, 0x8, 0xfffffffe) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000000000090000000006001500020000001400058006"], 0x38}}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r7, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="130000001400000000000000", @ANYRES32=r3, @ANYBLOB="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", @ANYRES64=0x0], 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=4355): socket$nl_rdma(0x10, 0x3, 0x14) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1000000) recvmmsg(r2, 0x0, 0x0, 0x45833af92e4b38ff, 0x0) kernel console output (not intermixed with test programs): ibutes in process `syz.1.3231'. [ 755.207279][T15454] loop0: detected capacity change from 0 to 3904 [ 757.245413][T15457] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 757.431900][T15457] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 757.502449][T15457] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 757.578372][T15457] loop0: [ 760.798668][T15463] overlayfs: failed to resolve 'lower': -2 [ 762.867457][T15471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.892373][T15471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.566223][T13821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 763.578446][T13821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 763.591537][T13821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 763.605448][T13821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 763.624596][T13821] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 763.642552][T13821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 764.673638][T15481] chnl_net:caif_netlink_parms(): no params data found [ 764.954218][T15481] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.975515][T15481] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.011678][T15481] bridge_slave_0: entered allmulticast mode [ 765.180034][T15481] bridge_slave_0: entered promiscuous mode [ 765.259803][T15481] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.304274][T15481] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.349566][T15481] bridge_slave_1: entered allmulticast mode [ 765.402171][T15481] bridge_slave_1: entered promiscuous mode [ 765.566101][T15481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.639590][T15481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.721770][ T5777] Bluetooth: hci4: command tx timeout [ 765.923592][T15509] FAULT_INJECTION: forcing a failure. [ 765.923592][T15509] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 765.953918][T15509] CPU: 0 PID: 15509 Comm: syz.0.3241 Not tainted syzkaller #0 [ 765.961590][T15509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 765.971705][T15509] Call Trace: [ 765.975045][T15509] [ 765.978026][T15509] dump_stack_lvl+0x18c/0x250 [ 765.982775][T15509] ? show_regs_print_info+0x20/0x20 [ 765.988032][T15509] ? load_image+0x420/0x420 [ 765.992602][T15509] ? __lock_acquire+0x7d80/0x7d80 [ 765.997678][T15509] should_fail_ex+0x394/0x4c0 [ 766.002413][T15509] prepare_alloc_pages+0x1e1/0x5b0 [ 766.007569][T15509] __alloc_pages+0x134/0x460 [ 766.012190][T15509] ? zone_statistics+0x170/0x170 [ 766.017170][T15509] ? alloc_pages+0x4e1/0x740 [ 766.021797][T15509] kimage_alloc_pages+0xc5/0x330 [ 766.026771][T15509] ? __might_sleep+0xe0/0xe0 [ 766.031402][T15509] kimage_alloc_page+0x87/0x790 [ 766.036304][T15509] ? __might_fault+0xaa/0x120 [ 766.041014][T15509] ? __might_fault+0xc6/0x120 [ 766.045725][T15509] ? __might_fault+0xaa/0x120 [ 766.050446][T15509] kimage_load_segment+0x5f1/0xa00 [ 766.055604][T15509] do_kexec_load+0x4e6/0x6d0 [ 766.060239][T15509] __se_sys_kexec_load+0x134/0x160 [ 766.065401][T15509] do_syscall_64+0x55/0xb0 [ 766.069852][T15509] ? clear_bhb_loop+0x40/0x90 [ 766.074566][T15509] ? clear_bhb_loop+0x40/0x90 [ 766.079284][T15509] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 766.085214][T15509] RIP: 0033:0x7efdfe19e159 [ 766.089663][T15509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.109311][T15509] RSP: 002b:00007efdff01e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 766.117764][T15509] RAX: ffffffffffffffda RBX: 00007efdfe425fa0 RCX: 00007efdfe19e159 [ 766.125786][T15509] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 766.133788][T15509] RBP: 00007efdfe235024 R08: 0000000000000000 R09: 0000000000000000 [ 766.141802][T15509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.149805][T15509] R13: 00007efdfe426038 R14: 00007efdfe425fa0 R15: 00007ffc681c18d8 [ 766.157824][T15509] [ 766.222122][T15481] team0: Port device team_slave_0 added [ 766.267482][T15481] team0: Port device team_slave_1 added [ 766.668635][T15518] syzkaller0: entered promiscuous mode [ 766.709178][T15518] syzkaller0: entered allmulticast mode [ 766.727143][T15481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.751679][T15481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.832347][T15481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.854332][T15481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.885703][T15481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.923175][T15481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.218232][ T654] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.845498][ T5777] Bluetooth: hci4: command tx timeout [ 769.911548][ T5777] Bluetooth: hci4: command tx timeout [ 772.893830][ T5777] Bluetooth: hci4: command tx timeout [ 777.667630][ T654] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.148594][ T654] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.237651][T15481] hsr_slave_0: entered promiscuous mode [ 778.310821][T15481] hsr_slave_1: entered promiscuous mode [ 778.544261][ T654] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.587239][ T5825] usb 1-1: USB disconnect, device number 5 [ 778.622765][ T5825] cdc_ether 1-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 778.651785][ T7300] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 778.841619][ T7300] usb 2-1: device descriptor read/64, error -71 [ 778.975305][T13821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 778.986315][T13821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 778.999240][T13821] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 779.020792][T13821] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 779.030558][T13821] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 779.041654][T13821] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 779.131479][ T7300] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 779.306205][ T7300] usb 2-1: device descriptor read/64, error -71 [ 779.556365][ T7300] usb usb2-port1: attempt power cycle [ 780.002253][ T7300] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 780.141767][ T654] tipc: Disabling bearer [ 780.148043][ T7300] usb 2-1: device descriptor read/8, error -71 [ 780.159102][ T654] tipc: Left network mode [ 780.251303][ T654] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 780.466274][ T7300] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 780.524014][ T654] batman_adv: batadv0: Removing interface: ip6gretap1 [ 780.541999][ T7300] usb 2-1: device descriptor read/8, error -71 [ 780.670456][ T7300] usb usb2-port1: unable to enumerate USB device [ 781.161965][T13821] Bluetooth: hci3: command tx timeout [ 781.326445][T15559] chnl_net:caif_netlink_parms(): no params data found [ 781.360045][T15481] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 781.948736][T15481] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 781.973878][T15481] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 781.994794][T15596] netlink: 'syz.1.3252': attribute type 12 has an invalid length. [ 782.180882][T15481] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 782.892264][T15559] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.899578][T15559] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.931631][T15559] bridge_slave_0: entered allmulticast mode [ 782.951492][T15559] bridge_slave_0: entered promiscuous mode [ 782.973177][T15559] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.980992][T15559] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.001855][T15559] bridge_slave_1: entered allmulticast mode [ 783.021974][T15559] bridge_slave_1: entered promiscuous mode [ 783.076209][T15481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.252206][T13821] Bluetooth: hci3: command tx timeout [ 783.305701][T15559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.360544][T15559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.386340][T15481] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.421735][ T654] hsr_slave_0: left promiscuous mode [ 783.435255][ T654] hsr_slave_1: left promiscuous mode [ 783.449103][ T654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.456699][ T654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.471307][ T654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.479594][ T654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.501614][ T654] bridge_slave_1: left allmulticast mode [ 783.507935][ T654] bridge_slave_1: left promiscuous mode [ 783.514577][ T654] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.525608][ T654] bridge_slave_0: left allmulticast mode [ 783.537017][ T654] bridge_slave_0: left promiscuous mode [ 783.543539][ T654] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.598682][ T654] veth1_macvtap: left promiscuous mode [ 783.606990][ T654] veth0_macvtap: left promiscuous mode [ 783.613255][ T654] veth1_vlan: left promiscuous mode [ 783.618970][ T654] veth0_vlan: left promiscuous mode [ 783.641693][ T6249] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 783.843884][ T6249] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 783.876732][ T6249] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 783.912811][ T6249] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 783.924994][ T6249] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.262491][ T6249] usb 1-1: usb_control_msg returned -32 [ 784.299895][ T6249] usbtmc 1-1:16.0: can't read capabilities [ 785.329151][T13821] Bluetooth: hci3: command tx timeout [ 785.445807][ T7300] usb 1-1: USB disconnect, device number 6 [ 786.059256][ T654] team0 (unregistering): Port device team_slave_1 removed [ 786.126650][ T654] team0 (unregistering): Port device team_slave_0 removed [ 786.200754][ T654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.269583][ T654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.676253][ T654] bond0 (unregistering): Released all slaves [ 786.818337][T15559] team0: Port device team_slave_0 added [ 786.853324][T15559] team0: Port device team_slave_1 added [ 786.909496][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.916855][ T5980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.955520][T15559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.969589][T15559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.031851][T15559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.064387][T15559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.081802][T15559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.143298][T15559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.175669][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.182957][ T5980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.416823][T15559] hsr_slave_0: entered promiscuous mode [ 787.422643][T13821] Bluetooth: hci3: command tx timeout [ 787.455639][T15559] hsr_slave_1: entered promiscuous mode [ 787.473083][T15559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 787.480732][T15559] Cannot create hsr debugfs directory [ 787.791688][ T6248] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 788.028770][ T654] IPVS: stop unused estimator thread 0... [ 788.044558][ T6248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.100565][ T6248] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 788.159617][ T6248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.225337][ T6248] usb 1-1: config 0 descriptor?? [ 788.509261][ T654] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.520957][ T6248] usbhid 1-1:0.0: can't add hid device: -71 [ 788.538856][ T6248] usbhid: probe of 1-1:0.0 failed with error -71 [ 788.582115][ T6248] usb 1-1: USB disconnect, device number 7 [ 788.984865][ T654] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.109444][ T654] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.126598][ T6248] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 789.187216][T15559] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 789.256879][ T654] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.296537][T15559] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 789.316557][T15559] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 789.341901][ T6248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.365488][T15559] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 789.372420][ T6248] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 789.411410][ T6248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.430513][T15481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.442966][ T6248] usb 1-1: config 0 descriptor?? [ 789.471779][ T6248] hub 1-1:0.0: USB hub found [ 789.668480][ T6248] hub 1-1:0.0: 1 port detected [ 789.779290][ T654] tipc: Disabling bearer [ 789.798197][ T654] tipc: Left network mode [ 789.809826][T15559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.835682][T15559] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.106298][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.113627][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.226718][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.233981][ T5980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.081075][T15481] veth0_vlan: entered promiscuous mode [ 791.330316][ T6248] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 791.342146][ T6248] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 791.516900][T15481] veth1_vlan: entered promiscuous mode [ 791.900610][ T6252] usb 1-1: USB disconnect, device number 8 [ 791.929702][T15559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.993495][T15481] veth0_macvtap: entered promiscuous mode [ 792.055076][ T654] hsr_slave_0: left promiscuous mode [ 792.075589][ T654] hsr_slave_1: left promiscuous mode [ 792.117783][ T654] bridge_slave_1: left allmulticast mode [ 792.169394][ T654] bridge_slave_1: left promiscuous mode [ 792.251189][ T654] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.410542][ T6252] IPVS: starting estimator thread 0... [ 792.436699][ T654] bridge_slave_0: left allmulticast mode [ 792.524768][ T654] bridge_slave_0: left promiscuous mode [ 792.591811][T15709] IPVS: using max 17 ests per chain, 40800 per kthread [ 792.605990][ T654] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.119102][ T654] veth1_macvtap: left promiscuous mode [ 793.128212][ T654] veth0_macvtap: left promiscuous mode [ 793.138472][ T654] veth1_vlan: left promiscuous mode [ 793.169245][ T654] veth0_vlan: left promiscuous mode [ 794.404710][ T654] team0 (unregistering): Port device team_slave_1 removed [ 795.103257][ T654] team0 (unregistering): Port device team_slave_0 removed [ 795.210036][ T654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.268267][ T654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.634921][ T654] bond0 (unregistering): Released all slaves [ 795.734735][T15706] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 795.751811][T15706] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 795.760479][T15706] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 795.887851][T15481] veth1_macvtap: entered promiscuous mode [ 795.987453][T15481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.043168][T15481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.074859][T15481] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.101780][T15481] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.110573][T15481] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.138498][T15481] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.028117][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.051935][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.110938][T15559] veth0_vlan: entered promiscuous mode [ 798.193528][T15559] veth1_vlan: entered promiscuous mode [ 798.205354][T14085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.242569][T14085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.315209][T15559] veth0_macvtap: entered promiscuous mode [ 798.375489][T15559] veth1_macvtap: entered promiscuous mode [ 798.428680][T15559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.440982][T15559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.457058][T15559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.594853][T15559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.632909][T15559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.680179][T15559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.726011][T15559] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.735166][T15559] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.744135][T15559] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.753050][T15559] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.744215][ T654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.808351][ T654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.820486][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.886818][ T6252] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 799.902336][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.182490][ T6252] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 801.546320][T15767] fido_id[15767]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 805.775132][T15808] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3274'. [ 809.005169][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.013888][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.809432][T15846] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3284'. [ 814.258406][T13821] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 814.944272][T15887] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3294'. [ 815.302019][ T6233] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 815.524292][ T6233] usb 1-1: Dual-Role OTG device on HNP port [ 815.636639][ T6252] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 815.902372][ T6252] usb 5-1: Using ep0 maxpacket: 16 [ 815.988221][ T6252] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.108551][ T6252] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.220140][ T6252] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 816.330343][ T6252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.526703][ T6252] usb 5-1: config 0 descriptor?? [ 816.529254][ T6233] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 818.241657][ T6252] konepure 0003:1E7D:2DB4.000A: unknown main item tag 0x0 [ 818.281779][T13821] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 818.290627][T13821] Bluetooth: hci3: Injecting HCI hardware error event [ 818.315780][T13821] Bluetooth: hci3: hardware error 0x00 [ 818.319229][ T6252] konepure 0003:1E7D:2DB4.000A: unknown main item tag 0x0 [ 818.384502][ T6233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.395297][ T6233] usb 1-1: SerialNumber: 1234567890 [ 818.419320][ T6233] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 8a:ad:3f:c1:cc:76 [ 818.466056][ T6252] konepure 0003:1E7D:2DB4.000A: unknown main item tag 0x0 [ 818.521608][ T6252] konepure 0003:1E7D:2DB4.000A: unknown main item tag 0x0 [ 818.613258][ T6252] konepure 0003:1E7D:2DB4.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.4-1/input0 [ 820.261507][ T6252] usb 5-1: USB disconnect, device number 2 [ 820.474246][T15925] fido_id[15925]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 820.538301][T13821] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 820.643806][T15934] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3303'. [ 824.334505][T15986] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3312'. [ 827.269113][T16013] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 829.748839][T16035] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3322'. [ 831.206414][ T6248] usb 1-1: USB disconnect, device number 9 [ 831.222975][ T6248] cdc_ether 1-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 833.117389][ T6233] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 833.425993][ T6233] usb 1-1: Using ep0 maxpacket: 16 [ 833.521541][ T6233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.562179][ T6233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.766518][ T6233] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 833.904384][ T6233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.090330][T16083] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3332'. [ 834.144204][ T6233] usb 1-1: config 0 descriptor?? [ 836.487699][ T6233] usbhid 1-1:0.0: can't add hid device: -71 [ 836.521495][ T6233] usbhid: probe of 1-1:0.0 failed with error -71 [ 836.530579][ T6233] usb 1-1: USB disconnect, device number 10 [ 838.965602][T16129] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 838.974432][T16129] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 838.983054][T16129] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 839.651438][ T5825] IPVS: starting estimator thread 0... [ 839.761615][T16133] IPVS: using max 19 ests per chain, 45600 per kthread [ 839.941603][ T5825] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 840.124169][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.222242][ T5825] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 840.298795][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.376560][ T5825] usb 5-1: config 0 descriptor?? [ 840.568003][T16149] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3342'. [ 840.633086][ T5825] usbhid 5-1:0.0: can't add hid device: -71 [ 840.639163][ T5825] usbhid: probe of 5-1:0.0 failed with error -71 [ 840.691120][ T5825] usb 5-1: USB disconnect, device number 3 [ 841.261472][ T5825] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 841.556774][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.217328][ T5825] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 842.257578][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.310767][ T5825] usb 5-1: config 0 descriptor?? [ 843.448839][ T5825] usb 5-1: can't set config #0, error -71 [ 843.582388][ T5825] usb 5-1: USB disconnect, device number 4 [ 844.911580][ T7300] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 846.171453][ T7300] usb 2-1: config 1 has an invalid interface number: 27 but max is 1 [ 846.194220][ T7300] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 846.241428][ T7300] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 846.278231][ T7300] usb 2-1: config 1 has no interface number 2 [ 846.331663][ T7300] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 846.387881][ T7300] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 846.459033][ T7300] usb 2-1: config 1 interface 1 has no altsetting 0 [ 846.509756][ T7300] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 846.550278][ T7300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.590759][ T7300] usb 2-1: Product: syz [ 846.600887][ T7300] usb 2-1: Manufacturer: syz [ 846.624743][ T7300] usb 2-1: SerialNumber: syz [ 847.129538][ T7300] speedtch 2-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 847.185451][ T7300] usb 2-1: selecting invalid altsetting 0 [ 847.206555][ T7300] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -71! [ 847.236956][ T7300] speedtch: probe of 2-1:1.0 failed with error -71 [ 847.322982][ T7300] speedtch 2-1:1.27: speedtch_bind: setting interface to 1 failed (-71)! [ 847.370889][ T7300] usb 2-1: selecting invalid altsetting 0 [ 847.380706][ T7300] speedtch 2-1:1.27: usbatm_usb_probe: bind failed: -71! [ 847.452740][ T7300] speedtch: probe of 2-1:1.27 failed with error -71 [ 847.466869][ T7300] usb 2-1: selecting invalid altsetting 0 [ 847.474836][ T7300] usbtest: probe of 2-1:1.1 failed with error -22 [ 847.491673][ T7300] usb 2-1: selecting invalid altsetting 0 [ 847.497648][ T7300] speedtch: probe of 2-1:1.1 failed with error -22 [ 847.542004][ T7300] usb 2-1: USB disconnect, device number 13 [ 850.801440][T15675] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 850.971505][T15675] usb 5-1: device descriptor read/64, error -71 [ 851.242197][T15675] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 852.191849][T15675] usb 5-1: device descriptor read/64, error -71 [ 852.312993][T15675] usb usb5-port1: attempt power cycle [ 852.425575][T16232] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3351'. [ 852.731440][T15675] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 852.812286][T15675] usb 5-1: device descriptor read/8, error -71 [ 854.516621][T15675] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 855.171600][T15675] usb 5-1: device not accepting address 8, error -71 [ 855.221868][T15675] usb usb5-port1: unable to enumerate USB device [ 858.902446][T16291] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3367'. [ 859.551579][ T7300] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 859.751624][ T7300] usb 5-1: device descriptor read/64, error -71 [ 860.071714][ T7300] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 860.322013][ T7300] usb 5-1: device descriptor read/64, error -71 [ 860.441892][ T7300] usb usb5-port1: attempt power cycle [ 861.711410][ T7300] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 861.762843][ T7300] usb 5-1: device descriptor read/8, error -71 [ 863.551633][ T7300] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 863.611581][ T7300] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 863.649377][ T7300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.712791][ T7300] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 863.751569][ T7300] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 863.759860][ T7300] usb 5-1: Manufacturer: syz [ 863.768263][ T7300] usb 5-1: config 0 descriptor?? [ 863.953128][ T7300] rc_core: IR keymap rc-hauppauge not found [ 863.959084][ T7300] Registered IR keymap rc-empty [ 864.031932][ T7300] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 864.068747][ T7300] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 864.723213][ C1] igorplugusb 5-1:0.0: receive overflow invalid: 255 [ 864.960050][ T5825] usb 5-1: USB disconnect, device number 12 [ 865.415862][T16346] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3377'. [ 867.131586][ T7300] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 868.171440][ T7300] usb 2-1: Using ep0 maxpacket: 16 [ 868.178826][ T7300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.221560][ T6252] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 868.261408][ T7300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.287687][ T7300] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 868.324373][ T7300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.373602][ T7300] usb 2-1: config 0 descriptor?? [ 868.421841][ T6252] usb 5-1: device descriptor read/64, error -71 [ 868.691521][ T6252] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 868.847750][ T7300] konepure 0003:1E7D:2DB4.000B: unknown main item tag 0x0 [ 868.883778][ T6252] usb 5-1: device descriptor read/64, error -71 [ 868.905767][ T7300] konepure 0003:1E7D:2DB4.000B: unknown main item tag 0x0 [ 868.959200][ T7300] konepure 0003:1E7D:2DB4.000B: unknown main item tag 0x0 [ 868.998492][ T7300] konepure 0003:1E7D:2DB4.000B: unknown main item tag 0x0 [ 869.050155][ T7300] konepure 0003:1E7D:2DB4.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.1-1/input0 [ 869.073709][ T6252] usb usb5-port1: attempt power cycle [ 869.135852][ T7300] usb 2-1: USB disconnect, device number 14 [ 869.177686][T16384] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3388'. [ 869.306057][T16386] fido_id[16386]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 869.531602][ T6252] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 869.614299][ T6252] usb 5-1: device descriptor read/8, error -71 [ 869.901893][ T6252] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 870.494006][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.500403][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.570284][ T6252] usb 5-1: device descriptor read/8, error -71 [ 870.697112][ T6252] usb usb5-port1: unable to enumerate USB device [ 873.313559][T16421] overlayfs: failed to resolve '//tcp_congestion_control': -2 [ 873.642837][ T6252] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 873.933602][ T6252] usb 6-1: unable to get BOS descriptor or descriptor too short [ 873.954611][ T6252] usb 6-1: config 255 has an invalid interface number: 97 but max is 0 [ 873.965415][ T6252] usb 6-1: config 255 has no interface number 0 [ 873.975743][ T6252] usb 6-1: config 255 interface 97 has no altsetting 0 [ 873.996013][ T6252] usb 6-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 874.194465][ T6252] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.230238][ T6252] usb 6-1: Product: syz [ 874.248225][ T6252] usb 6-1: Manufacturer: syz [ 874.280533][ T6252] usb 6-1: SerialNumber: syz [ 874.737973][ T6252] usb 6-1: bad CDC descriptors [ 874.800531][ T6252] usb 6-1: bad CDC descriptors [ 874.841049][ T6252] usb 6-1: USB disconnect, device number 2 [ 875.021685][ T7300] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 875.941766][ T7300] usb 5-1: device descriptor read/64, error -71 [ 877.762731][ T7300] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 881.904883][T16515] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 881.913886][T16515] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 881.922572][T16515] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 882.121037][T16514] workqueue: Failed to create a rescuer kthread for wq "kdmflush/248:0": -EINTR [ 882.839602][T16527] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3420'. [ 883.091507][ T6252] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 883.250522][ T6252] usb 5-1: device descriptor read/64, error -71 [ 883.796972][ T6252] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 883.951515][ T6252] usb 5-1: device descriptor read/64, error -71 [ 884.076134][ T6252] usb usb5-port1: attempt power cycle [ 884.711601][ T6252] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 884.803595][T16556] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 884.812153][T16556] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 884.820749][T16556] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 884.848413][ T6252] usb 5-1: device descriptor read/8, error -71 [ 885.215432][ T6252] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 885.559460][ T6252] usb 5-1: device descriptor read/8, error -71 [ 885.732617][ T6252] usb usb5-port1: unable to enumerate USB device [ 886.957197][T16575] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3431'. [ 888.028843][ T5777] Bluetooth: hci4: command 0x0406 tx timeout [ 889.609013][T16595] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 889.618079][T16595] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 889.626831][T16595] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 890.296474][ T6241] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 890.501510][ T6241] usb 5-1: device descriptor read/64, error -71 [ 891.731792][ T6241] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 892.012127][ T6241] usb 5-1: device descriptor read/64, error -71 [ 892.151927][ T6241] usb usb5-port1: attempt power cycle [ 892.591466][ T6241] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 893.621651][ T6241] usb 5-1: device descriptor read/8, error -71 [ 893.818555][T16621] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3442'. [ 896.183027][T16644] overlayfs: failed to resolve '//tcp_congestion_control': -2 [ 896.491551][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 896.850054][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 896.984520][ T9] usb 2-1: config 255 has an invalid interface number: 97 but max is 0 [ 897.068864][ T9] usb 2-1: config 255 has no interface number 0 [ 897.103206][ T9] usb 2-1: config 255 interface 97 has no altsetting 0 [ 897.173201][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 897.209520][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.241718][ T9] usb 2-1: Product: syz [ 897.251736][ T9] usb 2-1: Manufacturer: syz [ 897.256434][ T9] usb 2-1: SerialNumber: syz [ 897.566547][ T9] usb 2-1: bad CDC descriptors [ 897.595637][ T9] usb 2-1: bad CDC descriptors [ 897.623471][ T9] usb 2-1: USB disconnect, device number 15 [ 898.630744][T16679] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 898.639449][ T6252] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 898.647481][T16679] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 898.656492][T16679] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 899.461442][ T6252] usb 2-1: device descriptor read/64, error -71 [ 899.466731][T16686] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3452'. [ 899.625567][T16689] overlayfs: failed to resolve './file2': -2 [ 899.731604][ T6252] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 901.531786][ T6252] usb 2-1: device descriptor read/64, error -71 [ 901.657433][ T6252] usb usb2-port1: attempt power cycle [ 903.484022][T16719] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3461'. [ 905.737057][T16748] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 905.747578][T16748] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 905.756381][T16748] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 905.837124][T16747] overlayfs: failed to resolve './file2': -2 [ 908.391604][ T6241] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 908.551900][ T6241] usb 1-1: device descriptor read/64, error -71 [ 908.629000][T16780] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3470'. [ 908.821533][ T6241] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 908.991683][ T6241] usb 1-1: device descriptor read/64, error -71 [ 909.122762][ T6241] usb usb1-port1: attempt power cycle [ 909.322259][T16791] 9pnet_fd: Insufficient options for proto=fd [ 909.531468][ T6241] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 909.564331][ T6241] usb 1-1: device descriptor read/8, error -71 [ 910.401115][ T6241] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 910.509578][T16810] overlayfs: failed to resolve './file2': -2 [ 910.544850][ T6241] usb 1-1: device descriptor read/8, error -71 [ 910.672101][ T6241] usb usb1-port1: unable to enumerate USB device [ 911.925195][T16825] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3478'. [ 912.084772][T16828] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3479'. [ 917.469989][T16858] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3488'. [ 917.745489][T16863] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3489'. [ 917.901567][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 918.190558][ T9] usb 2-1: device descriptor read/64, error -71 [ 919.271549][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 919.471534][ T9] usb 2-1: device descriptor read/64, error -71 [ 920.275962][ T9] usb usb2-port1: attempt power cycle [ 920.711537][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 920.972502][ T9] usb 2-1: device not accepting address 21, error -71 [ 923.167214][T16907] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3497'. [ 923.219234][T16909] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3498'. [ 923.690346][T16920] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 923.698979][T16920] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 923.707712][T16920] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 923.879570][ T6252] IPVS: starting estimator thread 0... [ 924.091645][T16923] IPVS: using max 16 ests per chain, 38400 per kthread [ 926.401833][ T6249] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 926.433493][T16963] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3507'. [ 926.576341][T16961] kernel profiling enabled (shift: 23) [ 926.616538][ T6249] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 926.637662][ T6249] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 926.650376][ T6249] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 926.677840][ T6249] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.705523][ T6249] usb 1-1: config 0 descriptor?? [ 926.783274][T16971] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3508'. [ 926.921191][ T6249] usb 1-1: USB disconnect, device number 15 [ 927.511404][ T6249] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 927.550910][ T9] IPVS: starting estimator thread 0... [ 927.661614][T16987] IPVS: using max 18 ests per chain, 43200 per kthread [ 928.144171][T16984] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 928.152731][T16984] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 928.162853][T16984] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 928.293220][ T6249] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.311554][ T6249] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 928.357804][ T6249] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 928.394659][ T6249] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.422556][ T6249] usb 1-1: config 0 descriptor?? [ 929.703329][T17013] overlayfs: failed to resolve '//tcp_congestion_control': -2 [ 929.734680][ T9] usb 1-1: USB disconnect, device number 16 [ 931.171541][ T7300] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 931.299652][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 931.355878][ T9] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 931.534550][ T7300] usb 2-1: unable to get BOS descriptor or descriptor too short [ 932.262511][ T7300] usb 2-1: config 255 has an invalid interface number: 97 but max is 0 [ 932.270887][ T7300] usb 2-1: config 255 has no interface number 0 [ 932.278259][ T7300] usb 2-1: config 255 interface 97 has no altsetting 0 [ 932.296896][ T7300] usb 2-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 932.321354][ T7300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.331382][ T7300] usb 2-1: Product: syz [ 932.335624][ T7300] usb 2-1: Manufacturer: syz [ 932.340445][ T7300] usb 2-1: SerialNumber: syz [ 932.350326][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.357045][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.543500][T17030] fido_id[17030]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 932.608557][ T7300] usb 2-1: bad CDC descriptors [ 932.646948][ T7300] usb 2-1: bad CDC descriptors [ 932.708026][ T7300] usb 2-1: USB disconnect, device number 23 [ 933.162930][T13821] Bluetooth: hci4: command 0x0406 tx timeout [ 933.423166][T17042] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 933.431834][T17042] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 933.440442][T17042] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 935.165323][T17059] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3518'. [ 935.751446][ T7300] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 937.584824][ T7300] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 937.596881][ T7300] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.626418][ T7300] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 937.646045][ T7300] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 937.670715][ T7300] usb 6-1: Manufacturer: syz [ 937.695037][ T7300] usb 6-1: config 0 descriptor?? [ 938.251513][ T7300] rc_core: IR keymap rc-hauppauge not found [ 938.290084][ T7300] Registered IR keymap rc-empty [ 938.485578][ T7300] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 938.807788][ T7300] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input9 [ 939.201520][ T7300] usb 6-1: USB disconnect, device number 3 [ 940.342475][T17095] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 940.350908][T17095] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 940.359670][T17095] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 940.863076][T17107] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3533'. [ 942.462910][T17120] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3535'. [ 942.901359][ T7300] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 943.015863][ T7300] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 943.289980][T17133] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3538'. [ 943.331950][T17133] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 943.344203][T17133] ip6gretap2: entered allmulticast mode [ 943.356724][T17133] batman_adv: batadv0: Adding interface: ip6gretap2 [ 943.372577][T17133] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.398615][T17133] batman_adv: batadv0: Interface activated: ip6gretap2 [ 945.408954][T17136] fido_id[17136]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 947.022795][T17156] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 947.031488][T17156] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 947.040297][T17156] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 947.619306][T17165] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3544'. [ 950.061937][T17186] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3547'. [ 950.139341][T17192] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 951.224879][ T6252] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 951.250866][ T6252] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 953.821153][T17226] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3556'. [ 955.419483][T17238] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3558'. [ 957.307546][T17253] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 957.481652][T17253] syz.4.3562 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 959.154473][T17271] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3566'. [ 959.491628][ T6252] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 959.743488][ T6252] usb 1-1: Using ep0 maxpacket: 32 [ 959.836159][ T6252] usb 1-1: config 11 has an invalid interface number: 207 but max is 2 [ 959.967545][ T6252] usb 1-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 960.085194][ T6252] usb 1-1: config 11 has an invalid interface number: 127 but max is 2 [ 960.196438][ T6252] usb 1-1: config 11 has an invalid interface number: 5 but max is 2 [ 960.311721][ T6252] usb 1-1: config 11 has no interface number 0 [ 960.317936][ T6252] usb 1-1: config 11 has no interface number 1 [ 960.324673][ T6252] usb 1-1: config 11 has no interface number 2 [ 960.330975][ T6252] usb 1-1: config 11 interface 207 altsetting 7 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 960.405080][ T6252] usb 1-1: config 11 interface 207 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 960.469489][ T6252] usb 1-1: config 11 interface 207 altsetting 7 bulk endpoint 0xF has invalid maxpacket 64 [ 960.510846][ T6252] usb 1-1: config 11 interface 207 altsetting 7 endpoint 0x6 has an invalid bInterval 225, changing to 7 [ 960.535992][ T6252] usb 1-1: config 11 interface 207 altsetting 7 endpoint 0x7 has invalid wMaxPacketSize 0 [ 960.567282][ T6252] usb 1-1: config 11 interface 207 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 960.604198][ T6252] usb 1-1: config 11 interface 207 altsetting 7 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 960.635914][ T6252] usb 1-1: config 11 interface 207 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 960.679048][ T6252] usb 1-1: config 11 interface 207 altsetting 7 endpoint 0x4 has invalid maxpacket 1975, setting to 1024 [ 960.737776][ T6252] usb 1-1: config 11 interface 127 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 960.750816][ T6252] usb 1-1: config 11 interface 127 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 960.770266][ T6252] usb 1-1: config 11 interface 127 altsetting 5 has an invalid endpoint with address 0xAE, skipping [ 960.787341][ T6252] usb 1-1: config 11 interface 127 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 960.836902][ T6252] usb 1-1: config 11 interface 127 altsetting 5 has an invalid endpoint with address 0x11, skipping [ 960.848593][ T6252] usb 1-1: config 11 interface 127 altsetting 5 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 960.861608][ T6252] usb 1-1: config 11 interface 127 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 960.873461][ T6252] usb 1-1: config 11 interface 127 altsetting 5 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 960.893279][T17298] comedi comedi0: No hardware detected at I/O base 0x294 [ 960.951481][ T6252] usb 1-1: config 11 interface 127 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 960.981509][ T6252] usb 1-1: config 11 interface 127 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 960.992699][ T6252] usb 1-1: config 11 interface 127 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 961.011491][ T6252] usb 1-1: config 11 interface 127 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 961.022782][ T6252] usb 1-1: config 11 interface 5 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 64 [ 961.041510][ T6252] usb 1-1: config 11 interface 5 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 961.204304][ T6252] usb 1-1: config 11 interface 5 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 961.215511][ T6252] usb 1-1: config 11 interface 5 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 961.226422][ T6252] usb 1-1: config 11 interface 5 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 961.237392][ T6252] usb 1-1: config 11 interface 5 altsetting 5 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 961.249094][ T6252] usb 1-1: config 11 interface 5 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 961.260077][ T6252] usb 1-1: config 11 interface 207 has no altsetting 0 [ 961.267147][ T6252] usb 1-1: config 11 interface 127 has no altsetting 0 [ 961.274582][ T6252] usb 1-1: config 11 interface 5 has no altsetting 0 [ 961.352583][ T6252] usb 1-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=4c.1d [ 961.385400][ T6252] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.433524][ T6252] usb 1-1: Product: syz [ 961.437777][ T6252] usb 1-1: Manufacturer: syz [ 961.466680][ T6252] usb 1-1: SerialNumber: syz [ 961.488436][T17277] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 961.512416][T17277] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 964.083372][ T6252] flexcop_usb: set interface failed. [ 964.088829][ T6252] b2c2_flexcop_usb: probe of 1-1:11.207 failed with error -22 [ 964.157820][ T6252] flexcop_usb: set interface failed. [ 964.176010][ T6252] b2c2_flexcop_usb: probe of 1-1:11.127 failed with error -22 [ 964.192503][ T6248] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 964.353766][ T6252] flexcop_usb: set interface failed. [ 964.359247][ T6252] b2c2_flexcop_usb: probe of 1-1:11.5 failed with error -22 [ 964.366964][ T6248] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 964.408702][ T6252] usb 1-1: USB disconnect, device number 17 [ 964.519859][T17321] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3578'. [ 965.632106][T17322] fido_id[17322]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 966.123751][T17341] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3582'. [ 970.027527][T17359] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3589'. [ 970.888561][T17372] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3592'. [ 974.435733][T17410] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3599'. [ 975.047915][T17431] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3601'. [ 976.303827][T17439] overlayfs: missing 'lowerdir' [ 978.230438][T17465] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3610'. [ 980.650221][T17487] overlay: Unknown parameter '/file0' [ 980.671095][T17489] overlayfs: failed to resolve '//tcp_congestion_control': -2 [ 981.003857][T17494] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 981.012428][T17494] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 981.021004][T17494] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 981.066419][ T6252] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 981.731587][ T6252] usb 5-1: unable to get BOS descriptor or descriptor too short [ 981.910408][ T6252] usb 5-1: config 255 has an invalid interface number: 97 but max is 0 [ 981.950004][ T6252] usb 5-1: config 255 has no interface number 0 [ 981.978043][ T6252] usb 5-1: config 255 interface 97 has no altsetting 0 [ 981.989073][T17498] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3620'. [ 982.060157][ T6252] usb 5-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 982.090172][ T6252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.131515][ T6252] usb 5-1: Product: syz [ 982.135781][ T6252] usb 5-1: Manufacturer: syz [ 982.162243][ T6252] usb 5-1: SerialNumber: syz [ 987.081666][ T6252] usb 5-1: bad CDC descriptors [ 987.098307][ T6252] usb 5-1: bad CDC descriptors [ 987.162131][ T6252] usb 5-1: USB disconnect, device number 27 [ 988.601477][T17538] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3630'. [ 990.977112][T17539] overlayfs: unescaped trailing colons in lowerdir mount option. [ 993.582079][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.588635][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.512854][T17565] overlayfs: failed to resolve '//tcp_congestion_control': -2 [ 995.821560][ T6252] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 996.033161][ T6252] usb 5-1: unable to get BOS descriptor or descriptor too short [ 996.067545][ T6252] usb 5-1: config 255 has an invalid interface number: 97 but max is 0 [ 996.091075][ T6252] usb 5-1: config 255 has no interface number 0 [ 996.120968][ T6252] usb 5-1: config 255 interface 97 has no altsetting 0 [ 996.137665][ T6252] usb 5-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 996.166762][ T6252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.197009][ T6252] usb 5-1: Product: syz [ 996.209960][ T6252] usb 5-1: Manufacturer: syz [ 996.217727][ T6252] usb 5-1: SerialNumber: syz [ 996.468556][T17573] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3635'. [ 996.497874][ T6252] usb 5-1: bad CDC descriptors [ 996.529074][ T6252] usb 5-1: bad CDC descriptors [ 996.566342][ T6252] usb 5-1: USB disconnect, device number 28 [ 996.727973][T17580] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3639'. [ 996.744696][T17579] comedi comedi0: No hardware detected at I/O base 0x294 [ 998.197052][ T6252] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 998.369226][ T6252] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 998.763174][T17597] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 998.771637][T17597] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 998.780253][T17597] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 999.420090][T17596] workqueue: Failed to create a rescuer kthread for wq "kdmflush/248:0": -EINTR [ 999.605517][T17591] fido_id[17591]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 999.973255][T17604] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3647'. [ 1002.812521][T17618] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3650'. [ 1004.242300][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1005.876743][ T9] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1006.176753][T17634] fido_id[17634]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1006.407856][T17641] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3657'. [ 1007.682415][T17653] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3662'. [ 1012.058782][T17669] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3667'. [ 1014.331860][T17678] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3671'. [ 1016.951494][ T27] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1017.178754][ T27] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1017.201536][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.235797][ T27] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1017.256613][ T27] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1017.300688][ T27] usb 2-1: Manufacturer: syz [ 1017.313867][ T27] usb 2-1: config 0 descriptor?? [ 1017.442174][T17694] process 'syz.0.3673' launched '/dev/fd/7/./tracing' with NULL argv: empty string added [ 1017.481357][ T27] rc_core: IR keymap rc-hauppauge not found [ 1017.503982][ T27] Registered IR keymap rc-empty [ 1017.525130][ T27] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1017.550734][ T27] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 1018.004952][ T5825] usb 2-1: USB disconnect, device number 24 [ 1018.657078][T17711] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3680'. [ 1020.413447][T17740] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3690'. [ 1020.791410][ T6248] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1020.981540][ T27] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1021.052909][ T6248] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1021.074604][ T6248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.120712][ T6248] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1021.136575][ T6248] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1021.144893][ T6248] usb 1-1: Manufacturer: syz [ 1021.165821][ T6248] usb 1-1: config 0 descriptor?? [ 1021.172395][ T27] usb 5-1: device descriptor read/64, error -71 [ 1021.324184][ T6248] rc_core: IR keymap rc-hauppauge not found [ 1021.338787][ T6248] Registered IR keymap rc-empty [ 1021.358297][ T6248] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1021.410741][ T6248] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 1021.461478][ T27] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1021.621711][ T27] usb 5-1: device descriptor read/64, error -71 [ 1021.752441][ T27] usb usb5-port1: attempt power cycle [ 1021.895804][ T6248] usb 1-1: USB disconnect, device number 20 [ 1022.201787][ T27] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1022.262172][ T27] usb 5-1: device descriptor read/8, error -71 [ 1022.531358][ T27] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1022.593092][ T27] usb 5-1: device descriptor read/8, error -71 [ 1022.882716][ T27] usb usb5-port1: unable to enumerate USB device [ 1024.966514][T17773] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3701'. [ 1034.250983][T17815] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3713'. [ 1035.002749][ T5825] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1035.010658][T17818] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 1035.026335][T17818] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 1035.161600][ T5825] usb 5-1: device descriptor read/64, error -71 [ 1035.901339][ T5825] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1037.761408][ T5825] usb 5-1: device descriptor read/64, error -71 [ 1037.892767][ T5825] usb usb5-port1: attempt power cycle [ 1038.610239][T17848] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3724'. [ 1043.087992][T17873] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3721'. [ 1043.416403][T17878] overlayfs: failed to resolve '//tcp_congestion_control': -2 [ 1044.071406][ T6241] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1045.123064][ T6241] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1045.171412][ T6241] usb 5-1: config 255 has an invalid interface number: 97 but max is 0 [ 1045.179761][ T6241] usb 5-1: config 255 has no interface number 0 [ 1045.216132][ T6241] usb 5-1: config 255 interface 97 has no altsetting 0 [ 1045.246885][ T6241] usb 5-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 1045.275929][ T6241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.305987][ T6241] usb 5-1: Product: syz [ 1045.310332][ T6241] usb 5-1: Manufacturer: syz [ 1045.344768][ T6241] usb 5-1: SerialNumber: syz [ 1046.552013][ T6241] usb 5-1: bad CDC descriptors [ 1046.618763][ T6241] usb 5-1: bad CDC descriptors [ 1046.710197][ T6241] usb 5-1: USB disconnect, device number 36 [ 1048.736432][T13821] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1048.745465][T13821] Bluetooth: hci2: Injecting HCI hardware error event [ 1048.754970][T13821] Bluetooth: hci2: hardware error 0x00 [ 1050.164018][T17906] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3740'. [ 1050.502387][T17910] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3742'. [ 1050.976014][T13821] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1053.783596][T17926] FAULT_INJECTION: forcing a failure. [ 1053.783596][T17926] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.822349][T17926] CPU: 1 PID: 17926 Comm: syz.4.3748 Not tainted syzkaller #0 [ 1053.829915][T17926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1053.840036][T17926] Call Trace: [ 1053.843372][T17926] [ 1053.846349][T17926] dump_stack_lvl+0x18c/0x250 [ 1053.851105][T17926] ? show_regs_print_info+0x20/0x20 [ 1053.856347][T17926] ? load_image+0x420/0x420 [ 1053.860875][T17926] ? __might_sleep+0xe0/0xe0 [ 1053.865500][T17926] ? __lock_acquire+0x7d80/0x7d80 [ 1053.870576][T17926] should_fail_ex+0x394/0x4c0 [ 1053.875379][T17926] should_failslab+0x9/0x20 [ 1053.879924][T17926] slab_pre_alloc_hook+0x59/0x300 [ 1053.884983][T17926] kmem_cache_alloc+0x5a/0x2c0 [ 1053.889774][T17926] ? mempool_init_node+0x1e9/0x480 [ 1053.895013][T17926] ? mempool_free+0x320/0x320 [ 1053.899753][T17926] mempool_init_node+0x1e9/0x480 [ 1053.904717][T17926] ? mempool_alloc_slab+0x60/0x60 [ 1053.909778][T17926] ? mempool_free+0x320/0x320 [ 1053.914474][T17926] mempool_create+0x81/0xc0 [ 1053.919017][T17926] ceph_osdc_init+0x4ee/0x8c0 [ 1053.923805][T17926] ceph_create_client+0x246/0x300 [ 1053.928896][T17926] ceph_get_tree+0x1ca/0x1800 [ 1053.933626][T17926] ? bpf_lsm_capable+0x9/0x10 [ 1053.938320][T17926] ? security_capable+0x89/0xb0 [ 1053.943199][T17926] vfs_get_tree+0x8c/0x280 [ 1053.947658][T17926] vfs_cmd_create+0xe3/0x230 [ 1053.952271][T17926] __se_sys_fsconfig+0x70a/0x850 [ 1053.957231][T17926] ? __x64_sys_fsconfig+0xc0/0xc0 [ 1053.962283][T17926] ? lockdep_hardirqs_on+0x98/0x150 [ 1053.967520][T17926] ? __x64_sys_fsconfig+0x20/0xc0 [ 1053.972566][T17926] do_syscall_64+0x55/0xb0 [ 1053.977001][T17926] ? clear_bhb_loop+0x40/0x90 [ 1053.981707][T17926] ? clear_bhb_loop+0x40/0x90 [ 1053.986410][T17926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1053.992322][T17926] RIP: 0033:0x7fed0139e159 [ 1053.996749][T17926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.016375][T17926] RSP: 002b:00007fed021b0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1054.024832][T17926] RAX: ffffffffffffffda RBX: 00007fed01625fa0 RCX: 00007fed0139e159 [ 1054.032839][T17926] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1054.040834][T17926] RBP: 00007fed01435024 R08: 0000000000000000 R09: 0000000000000000 [ 1054.048825][T17926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.056816][T17926] R13: 00007fed01626038 R14: 00007fed01625fa0 R15: 00007ffcc225aa98 [ 1054.064815][T17926] [ 1055.765741][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.772234][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.951566][T17935] overlayfs: failed to resolve '//tcp_congestion_control': -2 [ 1057.309439][ T6233] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1057.778171][ T6233] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1057.797494][ T6233] usb 5-1: config 255 has an invalid interface number: 97 but max is 0 [ 1057.836466][ T6233] usb 5-1: config 255 has no interface number 0 [ 1057.852970][ T6233] usb 5-1: config 255 interface 97 has no altsetting 0 [ 1057.874139][ T6233] usb 5-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 1057.887739][ T6233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.908293][ T6233] usb 5-1: Product: syz [ 1057.919548][ T6233] usb 5-1: Manufacturer: syz [ 1057.949218][ T6233] usb 5-1: SerialNumber: syz [ 1058.206460][ T6233] usb 5-1: bad CDC descriptors [ 1058.223935][ T6233] usb 5-1: bad CDC descriptors [ 1058.266300][ T6233] usb 5-1: USB disconnect, device number 37 [ 1067.995319][T17993] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3768'. [ 1068.122219][ T6233] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1069.891368][ T6233] usb 2-1: Using ep0 maxpacket: 32 [ 1069.924097][ T6233] usb 2-1: device descriptor read/all, error -71 [ 1075.407754][T18028] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3779'. [ 1075.491581][ T6233] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1075.741604][ T6233] usb 6-1: Using ep0 maxpacket: 16 [ 1075.749137][ T6233] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.761736][ T6233] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1075.801724][ T6233] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1075.922799][ T6233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.934805][ T6233] usb 6-1: config 0 descriptor?? [ 1078.346061][ T6233] usb 6-1: USB disconnect, device number 4 [ 1080.139700][T18054] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1080.148264][T18054] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1080.157116][T18054] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1082.952245][T18062] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3788'. [ 1085.376344][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1085.589681][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1085.611534][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1085.620686][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.665471][ T9] usb 1-1: config 0 descriptor?? [ 1085.941367][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 1085.949705][ T9] usbhid: probe of 1-1:0.0 failed with error -71 [ 1085.989105][ T9] usb 1-1: USB disconnect, device number 21 [ 1088.123378][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1088.539430][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.621764][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1088.697906][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1088.817456][ T9] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1089.881507][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.462687][ T9] cxacru_cm: 27 callbacks suppressed [ 1090.462768][ T9] cxacru 2-1:1.0: send of cm 0x91 failed (-71) [ 1090.482473][ T9] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1090.498246][ T9] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1090.526354][ T9] cxacru: probe of 2-1:1.0 failed with error -71 [ 1090.563400][ T9] usb 2-1: USB disconnect, device number 27 [ 1093.381533][ T6248] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1094.613938][ T6248] usb 6-1: Using ep0 maxpacket: 16 [ 1094.643202][ T6248] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.698095][ T6248] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1094.741346][ T6248] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1094.760784][ T6248] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.789306][ T6248] usb 6-1: config 0 descriptor?? [ 1094.819922][ T6248] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1096.148996][ T6249] usb 6-1: USB disconnect, device number 5 [ 1100.871484][ T6233] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1101.081500][ T6233] usb 2-1: Using ep0 maxpacket: 32 [ 1101.105921][ T6233] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1101.114631][ T6233] usb 2-1: config 0 has no interface number 0 [ 1101.130078][ T6233] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1101.159937][ T6233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.184644][ T6233] usb 2-1: Product: syz [ 1101.189994][ T6233] usb 2-1: Manufacturer: syz [ 1101.213572][ T6233] usb 2-1: SerialNumber: syz [ 1101.270745][ T6233] usb 2-1: config 0 descriptor?? [ 1101.303600][ T6233] smsc95xx v2.0.0 [ 1101.822388][ T6233] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1101.996134][ T6233] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1102.221449][ T6233] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1102.259914][ T6233] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 1102.284062][ T6233] usb 2-1: USB disconnect, device number 28 [ 1113.849533][T18238] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3837'. [ 1116.205553][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.212012][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.751025][T18272] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3847'. [ 1118.912593][T18274] overlayfs: failed to resolve '//tcp_congestion_control': -2 [ 1124.222612][ T6233] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1124.493543][ T6233] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.513375][ T6233] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1124.533511][ T6233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.553773][ T6233] usb 2-1: Product: syz [ 1124.558075][ T6233] usb 2-1: Manufacturer: syz [ 1124.574041][ T6233] usb 2-1: SerialNumber: syz [ 1124.606330][ T6233] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1125.075426][T18300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3845'. [ 1125.224934][ T6233] gspca_mr97310a: reg read [21] error -71 [ 1125.230791][ T6233] mr97310a: probe of 2-1:1.0 failed with error -71 [ 1125.888209][ T6233] usb 2-1: USB disconnect, device number 29 [ 1129.123928][T18310] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3857'. [ 1129.202795][T18314] overlayfs: failed to resolve '//tcp_congestion_control': -2 [ 1138.115379][T18346] overlayfs: failed to resolve '//tcp_congestion_control': -2 [ 1140.688037][T18361] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3869'. [ 1143.476531][T18372] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1143.484993][T18372] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1143.493693][T18372] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1144.165346][T18370] workqueue: Failed to create a rescuer kthread for wq "kdmflush/248:1": -EINTR [ 1146.342676][T18383] overlayfs: failed to resolve '//tcp_congestion_control': -2 [ 1148.081750][T18394] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3884'. [ 1148.554235][T18399] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1148.563201][T18399] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1148.571873][T18399] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1152.368405][ T6248] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1152.581379][ T6248] usb 5-1: Using ep0 maxpacket: 32 [ 1152.826854][ T6248] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1152.898620][ T6248] usb 5-1: config 0 has no interface number 0 [ 1152.980076][ T6248] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1153.201323][ T6248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.226897][ T6248] usb 5-1: Product: syz [ 1153.242631][ T6248] usb 5-1: Manufacturer: syz [ 1153.247320][ T6248] usb 5-1: SerialNumber: syz [ 1153.280700][ T6248] usb 5-1: config 0 descriptor?? [ 1153.344301][ T6248] smsc95xx v2.0.0 [ 1153.546487][T18424] overlayfs: failed to resolve '//tcp_congestion_control': -2 [ 1153.762390][T18427] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3893'. [ 1153.770381][ T6248] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1153.795532][ T6248] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1154.045194][ T6248] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1154.134584][ T6248] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 1154.304270][ T6248] usb 5-1: USB disconnect, device number 38 [ 1156.144371][T18441] [U]  [ 1162.577337][ T6233] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 1162.824999][ T6233] usb 5-1: device descriptor read/64, error -71 [ 1164.431958][ T6233] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 1164.921511][T18482] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3902'. [ 1172.244833][T18518] overlayfs: failed to resolve '//tcp_congestion_control': -2 [ 1172.445157][ T6249] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 1172.460396][T18523] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3918'. [ 1172.601430][ T6249] usb 5-1: device descriptor read/64, error -71 [ 1172.892905][ T6249] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 1173.113120][ T6249] usb 5-1: device descriptor read/64, error -71 [ 1173.302361][ T6249] usb usb5-port1: attempt power cycle [ 1173.761465][ T6249] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 1173.866909][ T6249] usb 5-1: device descriptor read/8, error -71 [ 1176.371466][ T7300] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1176.571675][ T7300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.583624][ T7300] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1176.595970][ T7300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.636263][ T7300] usb 2-1: config 0 descriptor?? [ 1176.895338][ T7300] usbhid 2-1:0.0: can't add hid device: -71 [ 1176.901544][ T7300] usbhid: probe of 2-1:0.0 failed with error -71 [ 1176.912741][ T7300] usb 2-1: USB disconnect, device number 30 [ 1177.471475][ T7300] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1177.645411][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.651928][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.660002][ T7300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.679255][ T7300] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1177.698799][ T7300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.763531][ T7300] usb 2-1: config 0 descriptor?? [ 1179.891559][ T6252] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1180.101351][ T6252] usb 6-1: Using ep0 maxpacket: 16 [ 1180.112628][ T6252] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1180.147618][ T6252] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1180.187426][ T6252] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.205834][T18554] overlayfs: failed to resolve '//tcp_congestion_control': -2 [ 1180.216827][ T6252] usb 6-1: config 0 descriptor?? [ 1180.239878][ T6252] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1180.575028][T18558] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3927'. [ 1181.501866][ T7300] usbhid 2-1:0.0: can't add hid device: -71 [ 1181.507928][ T7300] usbhid: probe of 2-1:0.0 failed with error -71 [ 1181.584325][T15738] usb 6-1: USB disconnect, device number 6 [ 1181.660450][ T7300] usb 2-1: USB disconnect, device number 31 [ 1182.211593][ T7300] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 1182.412080][ T7300] usb 2-1: device descriptor read/64, error -71 [ 1182.835903][ T7300] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 1183.011624][ T7300] usb 2-1: device descriptor read/64, error -71 [ 1183.183119][ T7300] usb usb2-port1: attempt power cycle [ 1183.652581][ T7300] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 1183.757533][ T7300] usb 2-1: device descriptor read/8, error -71 [ 1183.927554][T18585] overlayfs: failed to resolve '//tcp_congestion_control': -2 [ 1184.091334][ T7300] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 1184.173236][ T7300] usb 2-1: device descriptor read/8, error -71 [ 1184.684938][ T7300] usb usb2-port1: unable to enumerate USB device [ 1184.852942][T18592] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3939'. [ 1186.681358][ T7300] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1187.682198][ T7300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1187.701309][ T7300] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1187.710528][ T7300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.366641][ T7300] usb 2-1: config 0 descriptor?? [ 1189.431449][ T7300] usb 2-1: can't set config #0, error -71 [ 1189.453648][ T7300] usb 2-1: USB disconnect, device number 36 [ 1189.991329][ T9] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 1190.643555][ T9] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.672035][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1190.721555][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.433445][T18629] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3951'. [ 1192.548158][T18632] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3945'. [ 1192.598859][T18632] macsec0: entered promiscuous mode [ 1192.812248][T18636] overlayfs: failed to resolve '//tcp_congestion_control': -2 [ 1196.078409][ T7300] usb 5-1: USB disconnect, device number 45 [ 1197.768235][T18658] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3960'. [ 1202.851289][ T7300] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1202.857333][ T9] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 1203.045759][ T7300] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1203.091294][ T7300] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1203.110709][ T7300] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.138242][ T7300] usb 6-1: config 0 descriptor?? [ 1203.145731][ T9] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.168423][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1203.221272][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.353892][ T7300] usbhid 6-1:0.0: can't add hid device: -71 [ 1203.359913][ T7300] usbhid: probe of 6-1:0.0 failed with error -71 [ 1203.389657][ T7300] usb 6-1: USB disconnect, device number 7 [ 1203.922199][T18687] overlayfs: failed to resolve '//tcp_congestion_control': -2 [ 1203.971358][ T7300] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1204.179874][ T7300] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1204.223746][ T7300] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1204.234869][ T7300] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.257365][ T7300] usb 6-1: config 0 descriptor?? [ 1205.558164][ T9] usb 2-1: USB disconnect, device number 37 [ 1205.761657][T18701] xt_hashlimit: size too large, truncated to 1048576 [ 1206.084365][ T7300] usbhid 6-1:0.0: can't add hid device: -71 [ 1206.091405][ T7300] usbhid: probe of 6-1:0.0 failed with error -71 [ 1206.144317][ T7300] usb 6-1: USB disconnect, device number 8 [ 1206.209886][T18704] xt_hashlimit: size too large, truncated to 1048576 [ 1208.379924][T18720] [U]  [ 1208.619763][T18723] overlayfs: failed to resolve '//tcp_congestion_control': -2 [ 1209.082223][ T9] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 1209.141257][ T7300] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1209.293558][ T9] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.314459][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1209.341353][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.362813][ T7300] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1209.391354][ T7300] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.421371][ T7300] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1209.462924][ T7300] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1209.481238][ T7300] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1209.502461][ T7300] usb 1-1: Manufacturer: syz [ 1209.524480][ T7300] usb 1-1: config 0 descriptor?? [ 1209.554167][ T7300] igorplugusb 1-1:0.0: incorrect number of endpoints [ 1210.271280][ T7300] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1210.463410][ T7300] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1210.474704][ T7300] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1210.491590][ T7300] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.515093][ T7300] usb 6-1: config 0 descriptor?? [ 1210.740310][ T7300] usbhid 6-1:0.0: can't add hid device: -71 [ 1210.757871][ T7300] usbhid: probe of 6-1:0.0 failed with error -71 [ 1210.769062][ T7300] usb 6-1: USB disconnect, device number 9 [ 1211.341313][ T7300] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1211.538204][ T7300] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.554064][ T7300] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1211.565135][ T7300] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.580401][ T7300] usb 6-1: config 0 descriptor?? [ 1211.845813][ T6252] usb 5-1: USB disconnect, device number 46 [ 1211.909302][ T6241] usb 1-1: USB disconnect, device number 22 [ 1215.300250][ T7300] usbhid 6-1:0.0: can't add hid device: -71 [ 1215.329859][ T7300] usbhid: probe of 6-1:0.0 failed with error -71 [ 1215.340761][ T7300] usb 6-1: USB disconnect, device number 10 [ 1215.530277][T18757] overlayfs: failed to resolve '//tcp_congestion_control': -2 [ 1216.151396][ T6241] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1216.321355][ T7300] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1216.343856][ T6241] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.372097][ T6241] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1216.406094][ T6241] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1216.426411][ T6241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.450434][ T6241] usbtmc 1-1:16.0: bulk endpoints not found [ 1216.521544][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1216.537594][ T7300] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.571336][ T7300] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1216.601678][ T7300] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1216.635186][ T7300] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1216.654616][ T7300] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.755313][ T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1216.783540][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.806780][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1216.853186][ T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1216.881221][ T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1216.910096][ T9] usb 5-1: Manufacturer: syz [ 1216.932068][ T9] usb 5-1: config 0 descriptor?? [ 1216.952455][ T9] igorplugusb 5-1:0.0: incorrect number of endpoints [ 1218.486300][ T7300] cxacru 6-1:1.0: send of cm 0x91 failed (-71) [ 1218.500997][ T7300] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1218.509553][ T7300] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1218.522462][ T7300] cxacru: probe of 6-1:1.0 failed with error -71 [ 1218.541708][ T7300] usb 6-1: USB disconnect, device number 11 [ 1221.027405][ T6241] usb 1-1: USB disconnect, device number 23 [ 1221.125535][ T9] usb 5-1: USB disconnect, device number 47 [ 1228.562657][T18822] overlayfs: failed to resolve '//tcp_congestion_control': -2 [ 1228.721761][ T6249] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1229.002678][ T6249] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.014057][ T6249] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1229.031448][ T6249] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1229.044765][ T6249] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1229.057022][ T6249] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.654461][ T6249] cxacru 5-1:1.0: send of cm 0x91 failed (-71) [ 1229.661074][ T6249] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1229.669160][ T6249] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1229.679240][ T6249] cxacru: probe of 5-1:1.0 failed with error -71 [ 1229.690420][ T6249] usb 5-1: USB disconnect, device number 48 [ 1232.673272][ T7300] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1234.047751][ T7300] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.070329][ T7300] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1234.084113][ T7300] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1234.097441][ T7300] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.160577][ T7300] usbtmc 6-1:16.0: bulk endpoints not found [ 1234.360854][ T6241] usb 6-1: USB disconnect, device number 12 [ 1236.964861][ T6241] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1238.042421][ T6241] usb 2-1: Using ep0 maxpacket: 16 [ 1238.095956][ T6241] usb 2-1: device descriptor read/all, error -71 [ 1239.097185][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.749638][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.465161][T18879] overlayfs: failed to resolve '//tcp_congestion_control': -2 [ 1243.161715][ T6248] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 1243.481487][ T6248] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1243.541533][ T6248] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1243.582122][ T6248] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1243.620402][ T6248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.722496][ T6248] usbtmc 1-1:16.0: bulk endpoints not found [ 1247.000253][ T6233] usb 1-1: USB disconnect, device number 24 [ 1249.147335][T18916] overlayfs: failed to resolve '//tcp_congestion_control': -2 [ 1249.621461][ T6248] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1250.863233][ T6248] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1250.891300][ T6248] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1250.922938][ T6248] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1250.933711][ T6248] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1250.952057][ T6248] usb 6-1: Manufacturer: syz [ 1250.968548][ T6248] usb 6-1: config 0 descriptor?? [ 1250.982187][ T6248] igorplugusb 6-1:0.0: incorrect number of endpoints [ 1251.106250][ T6252] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1252.747889][ T6252] usb 2-1: Using ep0 maxpacket: 16 [ 1252.759448][ T6252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1252.779647][ T6252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.791988][ T6252] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1252.807235][ T6252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.847308][ T6233] usb 6-1: USB disconnect, device number 13 [ 1252.893542][ T6252] usb 2-1: config 0 descriptor?? [ 1255.248219][ T6252] usbhid 2-1:0.0: can't add hid device: -71 [ 1255.261565][ T6252] usbhid: probe of 2-1:0.0 failed with error -71 [ 1255.286620][ T6252] usb 2-1: USB disconnect, device number 40 [ 1255.311411][ T6233] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1257.114716][ T6233] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.130393][ T6233] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1257.171320][ T6233] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1257.196603][ T6233] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1257.230266][ T6233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.302028][ T6233] usbtmc 6-1:16.0: bulk endpoints not found [ 1257.501731][T15675] usb 6-1: USB disconnect, device number 14 [ 1262.161285][ T6248] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1262.440124][ T6248] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1262.470547][ T6248] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1262.567195][ T6248] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1262.608704][ T6248] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1262.643555][ T6248] usb 2-1: Manufacturer: syz [ 1262.841252][ T6252] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1263.031443][ T6252] usb 1-1: Using ep0 maxpacket: 16 [ 1263.124324][ T6248] usb 2-1: config 0 descriptor?? [ 1263.212751][ T6252] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.224900][ T6252] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1263.235358][ T6252] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1263.252796][ T6252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.273633][ T6248] usb 2-1: can't set config #0, error -71 [ 1263.297955][ T6248] usb 2-1: USB disconnect, device number 41 [ 1263.312597][ T6252] usb 1-1: config 0 descriptor?? [ 1265.680305][ T6252] usbhid 1-1:0.0: can't add hid device: -71 [ 1265.691513][ T6252] usbhid: probe of 1-1:0.0 failed with error -71 [ 1265.707133][ T6252] usb 1-1: USB disconnect, device number 25 [ 1273.021250][ T5825] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1274.016180][T19031] overlayfs: failed to resolve 'lower': -2 [ 1275.461455][ T5825] usb 2-1: Using ep0 maxpacket: 16 [ 1275.572508][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1275.657332][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1275.721801][ T5825] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1275.751764][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.778530][ T5825] usb 2-1: config 0 descriptor?? [ 1275.854038][ T5825] usb 2-1: can't set config #0, error -71 [ 1275.925129][ T5825] usb 2-1: USB disconnect, device number 42 [ 1276.581529][ T6233] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1277.232006][ T6233] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1277.333174][ T6233] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1277.346934][ T6241] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1277.598818][ T6241] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1277.609448][ T6233] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1277.702000][ T6233] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1277.786333][ T6233] usb 1-1: Manufacturer: syz [ 1278.061373][ T6233] usb 1-1: config 0 descriptor?? [ 1278.423546][ T6233] igorplugusb 1-1:0.0: incorrect number of endpoints [ 1278.519821][T19053] fido_id[19053]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1278.962246][T19061] UDC core: g1: couldn't find an available UDC or it's busy [ 1280.279135][ T6241] usb 1-1: USB disconnect, device number 26 [ 1280.658619][T19078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4069'. [ 1281.647037][T19082] overlayfs: failed to resolve 'lower': -2 [ 1283.291277][ T6248] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1283.521307][ T6248] usb 2-1: Using ep0 maxpacket: 16 [ 1283.547174][ T6248] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1283.591351][ T6248] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1283.636390][ T6248] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1283.672596][ T6248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.728417][ T6248] usb 2-1: config 0 descriptor?? [ 1284.204322][ T6248] usbhid 2-1:0.0: can't add hid device: -71 [ 1284.220754][ T6248] usbhid: probe of 2-1:0.0 failed with error -71 [ 1284.285992][ T6248] usb 2-1: USB disconnect, device number 43 [ 1285.481688][ T6233] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1285.617720][ T6233] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1287.169547][T19108] [U]  [ 1288.551521][T19106] fido_id[19106]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1294.524158][T19148] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1294.532706][T19148] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1294.541444][T19148] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1296.007357][T19162] overlayfs: failed to resolve 'upper': -2 [ 1297.663003][T19170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4093'. [ 1298.626218][T19179] netlink: 120 bytes leftover after parsing attributes in process `syz.5.4094'. [ 1300.542278][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.548673][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.557456][ T6241] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1301.575456][ T6241] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1306.841001][ T6233] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1307.611626][ T6233] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1307.652504][ T6233] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1307.730599][ T6233] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1307.798535][ T6233] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1308.051336][ T6233] usb 1-1: Manufacturer: syz [ 1308.075909][ T6233] usb 1-1: config 0 descriptor?? [ 1308.158146][ T6233] igorplugusb 1-1:0.0: incorrect number of endpoints [ 1308.938841][T19231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4103'. [ 1311.249687][T19238] overlayfs: failed to resolve 'upper': -2 [ 1312.284774][ T6252] usb 1-1: USB disconnect, device number 27 [ 1312.624425][ T6252] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1316.440390][ T6252] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1323.888881][T19289] overlayfs: failed to resolve 'work': -2 [ 1326.969778][ T6243] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1327.013352][ T6243] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1329.569028][T19312] fido_id[19312]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1332.184133][T19334] overlayfs: failed to resolve 'work': -2 [ 1333.521284][ T6248] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1333.721243][ T6248] usb 5-1: Using ep0 maxpacket: 16 [ 1333.755461][ T6248] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1333.887194][ T6248] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1334.027009][ T6248] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1334.145032][ T6248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.390284][ T6248] usb 5-1: config 0 descriptor?? [ 1334.925300][ T6248] usbhid 5-1:0.0: can't add hid device: -71 [ 1334.957738][ T6248] usbhid: probe of 5-1:0.0 failed with error -71 [ 1335.021744][ T6248] usb 5-1: USB disconnect, device number 49 [ 1336.393128][T19361] [U]  [ 1336.531431][ T6248] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1336.919188][ T6248] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1337.082364][ T6248] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1337.212693][ T6248] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1337.316021][ T6248] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1337.341732][ T6248] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.406254][ T6248] usbtmc: probe of 6-1:16.0 failed with error -22 [ 1337.851187][T19373] overlayfs: failed to resolve 'work': -2 [ 1341.678470][ T6241] usb 6-1: USB disconnect, device number 15 [ 1342.741906][T19397] [U]  [ 1346.641336][ T6248] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1346.791319][ T6243] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1347.081503][ T6243] usb 5-1: Using ep0 maxpacket: 16 [ 1347.345767][ T6243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.499190][ T6243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1347.624305][ T6243] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1347.726234][ T6243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.812379][ T6243] usb 5-1: config 0 descriptor?? [ 1348.008600][ T6248] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1348.125195][ T6248] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1348.245007][ T6248] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1348.375916][ T6248] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1348.464719][ T6248] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.575663][ T6243] usbhid 5-1:0.0: can't add hid device: -71 [ 1348.705856][ T6243] usbhid: probe of 5-1:0.0 failed with error -71 [ 1348.707709][ T6248] usbtmc: probe of 6-1:16.0 failed with error -22 [ 1348.720069][ T6243] usb 5-1: USB disconnect, device number 50 [ 1350.161363][ T6243] usb 6-1: USB disconnect, device number 16 [ 1351.934894][ T6243] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1352.131214][ T6243] usb 6-1: Using ep0 maxpacket: 8 [ 1352.148206][ T6243] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1352.191905][ T6243] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.300797][ T6243] usb 6-1: Product: syz [ 1352.309360][T15675] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1352.317665][ T6243] usb 6-1: Manufacturer: syz [ 1352.344794][ T6243] usb 6-1: SerialNumber: syz [ 1352.376267][T15675] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1352.392294][ T6243] usb 6-1: config 0 descriptor?? [ 1355.811907][ T6243] usb read operation failed. (-71) [ 1357.503515][ T6243] usb write operation failed. (-71) [ 1357.510014][ T6243] usb write operation failed. (-71) [ 1357.515932][ T6243] usb write operation failed. (-71) [ 1357.521434][ T6243] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 1357.533622][ T6243] usb 6-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1357.581723][T19473] fido_id[19473]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1357.608002][ T6243] usb 6-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1362.022521][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.029375][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.841734][T19518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4170'. [ 1365.091232][ T5777] Bluetooth: hci4: command 0x0406 tx timeout [ 1368.774995][T19546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4168'. [ 1368.812880][T19546] macsec0: entered promiscuous mode [ 1368.824112][ T6241] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1369.083547][ T6241] usb 2-1: Using ep0 maxpacket: 16 [ 1369.187192][ T6241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1369.287861][ T6241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1369.389680][ T6241] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1369.487190][ T6241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.604488][ T6241] usb 2-1: config 0 descriptor?? [ 1369.885499][ T6252] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1369.952483][ T6252] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1370.615105][ T6241] usbhid 2-1:0.0: can't add hid device: -71 [ 1372.046782][ T6241] usbhid: probe of 2-1:0.0 failed with error -71 [ 1372.170269][ T6241] usb 2-1: USB disconnect, device number 44 [ 1373.958516][T19555] fido_id[19555]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1376.407178][T19574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4183'. [ 1377.004325][T19572] null_blk: disk nullb1 created [ 1381.812521][T15675] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1383.621261][T15675] usb 5-1: Using ep0 maxpacket: 16 [ 1383.632650][T15675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1383.671130][T15675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1383.680973][T15675] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1383.729281][T15675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.767189][T15675] usb 5-1: config 0 descriptor?? [ 1384.425912][T15675] usbhid 5-1:0.0: can't add hid device: -71 [ 1384.445696][T15675] usbhid: probe of 5-1:0.0 failed with error -71 [ 1384.491411][T15675] usb 5-1: USB disconnect, device number 51 [ 1394.796590][T19636] xt_hashlimit: size too large, truncated to 1048576 [ 1395.317220][T19638] xt_hashlimit: size too large, truncated to 1048576 [ 1407.465069][T19683] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1407.483088][T19683] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1407.511519][T19683] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1407.573314][T19683] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1407.611435][T19683] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1407.622884][T19683] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1408.160182][T19681] chnl_net:caif_netlink_parms(): no params data found [ 1408.308389][T19681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.321440][T19681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.328716][T19681] bridge_slave_0: entered allmulticast mode [ 1408.336439][T19681] bridge_slave_0: entered promiscuous mode [ 1408.346056][T19681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.353620][T19681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1408.397710][T19681] bridge_slave_1: entered allmulticast mode [ 1408.466982][T19681] bridge_slave_1: entered promiscuous mode [ 1408.592167][ T6241] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1408.651471][ T6241] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1409.721231][ T5777] Bluetooth: hci0: command tx timeout [ 1410.027518][T19681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.248949][T19681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.885702][T19697] fido_id[19697]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1411.763282][T19681] team0: Port device team_slave_0 added [ 1411.801229][ T5777] Bluetooth: hci0: command tx timeout [ 1411.835107][T19681] team0: Port device team_slave_1 added [ 1412.107696][T19681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1412.131265][T19681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1412.208211][T19681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1412.291325][T19681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1412.298359][T19681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1412.401416][T19681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1412.674861][T19681] hsr_slave_0: entered promiscuous mode [ 1412.727360][T19681] hsr_slave_1: entered promiscuous mode [ 1413.936671][ T5777] Bluetooth: hci0: command tx timeout [ 1414.058266][T19681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1414.066224][T19681] Cannot create hsr debugfs directory [ 1415.003777][T19681] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1415.054198][T19681] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1415.111951][T19681] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1415.150615][T19681] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1415.972529][ T5777] Bluetooth: hci0: command tx timeout [ 1417.517572][T19681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1417.685703][T19681] 8021q: adding VLAN 0 to HW filter on device team0 [ 1417.730618][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.737992][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1417.814156][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.821467][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1419.360557][ T6243] usb 6-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1419.475527][ T6243] dvb_usb_az6007: probe of 6-1:0.0 failed with error -110 [ 1419.494095][ T6243] usb 6-1: USB disconnect, device number 17 [ 1423.424817][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.431269][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.912748][T19681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1424.865037][T19681] veth0_vlan: entered promiscuous mode [ 1424.934615][T19681] veth1_vlan: entered promiscuous mode [ 1425.042535][T19681] veth0_macvtap: entered promiscuous mode [ 1425.064715][T19681] veth1_macvtap: entered promiscuous mode [ 1425.109023][T19681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1425.128470][T19681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.139149][T19681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1425.165579][T19681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.185742][T19681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1425.264048][T19681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1425.300863][T19681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.317786][T19681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1425.351296][T19681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.624773][T19681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1426.757500][ T6241] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1426.857148][ T6241] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1429.280328][T14758] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.553983][T19681] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.564726][T19681] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.612634][T19681] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.621847][T19681] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.717476][T14758] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.887713][T14758] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.175009][T14758] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.575170][ T5980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1430.723810][ T5980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.836589][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.889366][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1432.464989][ T7300] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1432.929889][ T7300] usb 1-1: Dual-Role OTG device on HNP port [ 1433.040705][ T7300] usb 1-1: can't set HNP mode: -71 [ 1441.597292][T15675] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1442.160064][T15675] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1443.972545][T19847] fido_id[19847]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1447.234858][T14758] hsr_slave_0: left promiscuous mode [ 1447.326777][T14758] hsr_slave_1: left promiscuous mode [ 1447.410628][T14758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1447.440400][T14758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1447.485400][T14758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1447.508677][T14758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1447.559730][T14758] bridge_slave_1: left allmulticast mode [ 1447.571174][ T7300] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1447.583603][T14758] bridge_slave_1: left promiscuous mode [ 1447.607856][T14758] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.662537][T14758] bridge_slave_0: left allmulticast mode [ 1447.732318][T14758] bridge_slave_0: left promiscuous mode [ 1447.741963][T14758] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.833364][ T7300] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1447.861270][ T7300] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1447.894868][ T7300] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1447.931666][ T7300] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1447.939842][ T7300] usb 6-1: Manufacturer: syz [ 1447.963970][ T7300] usb 6-1: config 0 descriptor?? [ 1448.195697][T14758] veth1_macvtap: left promiscuous mode [ 1448.206472][T14758] veth0_macvtap: left promiscuous mode [ 1448.222816][ T7300] rc_core: IR keymap rc-hauppauge not found [ 1448.227614][T14758] veth1_vlan: left promiscuous mode [ 1448.228773][ T7300] Registered IR keymap rc-empty [ 1448.254375][T14758] veth0_vlan: left promiscuous mode [ 1448.280775][ T7300] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1448.365317][ T7300] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input12 [ 1448.737118][T15675] usb 6-1: USB disconnect, device number 18 [ 1452.199493][T19892] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in; [ 1452.199493][T19892] program syz.6.4241 not setting count and/or reply_len properly [ 1455.171358][T15675] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1455.351550][T15675] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1457.156733][T19924] fido_id[19924]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1461.352222][T14758] team0 (unregistering): Port device team_slave_1 removed [ 1461.680395][T14758] team0 (unregistering): Port device team_slave_0 removed [ 1461.984196][T14758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1464.131670][T14758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1467.154560][T14758] bond0 (unregistering): Released all slaves [ 1467.594155][T19935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4253'. [ 1470.655260][ T27] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1470.685842][ T27] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1472.946923][T19990] fido_id[19990]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1473.328325][T14758] IPVS: stop unused estimator thread 0... [ 1475.520117][T20016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4271'. [ 1477.021536][ T5825] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1478.871134][ T5825] usb 6-1: Using ep0 maxpacket: 8 [ 1478.934423][ T5825] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1478.956099][ T5825] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1479.005174][ T5825] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1479.057973][ T5825] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1479.087817][ T5825] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1479.139406][ T5825] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1480.821190][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.943288][ T5825] usb 6-1: can't set config #16, error -71 [ 1480.972699][ T5825] usb 6-1: USB disconnect, device number 19 [ 1485.631838][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.638322][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.823111][T20086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4281'. [ 1488.766889][ T27] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1489.980556][ T27] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1491.766724][T20102] fido_id[20102]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1500.235079][ T5825] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1500.326766][ T5825] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1501.842440][T20161] fido_id[20161]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1502.685632][T20178] ceph: No mds server is up or the cluster is laggy [ 1502.769069][ T7300] libceph: connect (1)[c::]:6789 error -101 [ 1502.936286][ T7300] libceph: mon0 (1)[c::]:6789 connect error [ 1503.697653][T20187] syz.5.4294: attempt to access beyond end of device [ 1503.697653][T20187] loop5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1503.711386][T20187] MINIX-fs: unable to read superblock [ 1509.333467][T20224] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4306'. [ 1509.367370][T20224] macsec0: entered promiscuous mode [ 1510.189696][T15675] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1510.223617][T15675] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1512.006761][T20230] fido_id[20230]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1512.592107][T20242] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4309'. [ 1519.802545][T15675] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1519.840082][T20299] netlink: 120 bytes leftover after parsing attributes in process `syz.6.4318'. [ 1519.936188][T15675] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1521.452699][T20309] fido_id[20309]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1521.851247][T15675] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1522.056352][T15675] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1522.066054][T15675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1522.089366][T15675] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1522.101132][T15675] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1522.116436][T15675] usb 1-1: Manufacturer: syz [ 1522.129940][T15675] usb 1-1: config 0 descriptor?? [ 1522.261409][T15675] rc_core: IR keymap rc-hauppauge not found [ 1522.267656][T15675] Registered IR keymap rc-empty [ 1522.288598][T15675] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1522.323212][T15675] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 1523.433384][ T6252] usb 1-1: USB disconnect, device number 33 [ 1527.801858][T20358] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4328'. [ 1528.188956][ T5825] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1528.243002][ T5825] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1531.490137][T20368] fido_id[20368]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1534.227837][ T5777] Bluetooth: hci0: command 0x0406 tx timeout [ 1536.351844][T19683] Bluetooth: hci0: command 0x0406 tx timeout [ 1539.600027][ T5825] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 1542.749264][ T5825] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1544.609723][T20438] fido_id[20438]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1544.810741][T20453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4336'. [ 1545.635036][T15675] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1545.694169][T15675] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1546.298195][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.304747][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.722612][T20440] netlink: 'syz.6.4344': attribute type 13 has an invalid length. [ 1546.950449][T20461] fido_id[20461]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1547.337879][T20467] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1547.344967][T20467] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1547.425560][T20467] vhci_hcd vhci_hcd.0: Device attached [ 1547.631292][T15675] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 1547.707576][ T7300] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 1547.833232][T15675] usb 6-1: config 0 has no interfaces? [ 1547.838770][T15675] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1549.749035][T15675] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.765234][T15675] usb 6-1: config 0 descriptor?? [ 1550.028592][T20468] usbip_core: unknown command [ 1550.144447][T20468] vhci_hcd: unknown pdu 0 [ 1550.164048][T20468] usbip_core: unknown command [ 1551.755223][T19255] vhci_hcd: stop threads [ 1551.818372][T19255] vhci_hcd: release socket [ 1551.891247][T19255] vhci_hcd: disconnect device [ 1552.034863][ T6233] usb 6-1: USB disconnect, device number 20 [ 1552.043350][T20496] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4353'. [ 1553.504139][T20504] general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] PREEMPT SMP KASAN [ 1553.516085][T20504] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 1553.524636][T20504] CPU: 1 PID: 20504 Comm: syz.0.4352 Not tainted syzkaller #0 [ 1553.532138][T20504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1553.542235][T20504] RIP: 0010:kthread_destroy_worker+0x26/0xd0 [ 1553.548274][T20504] Code: 1f 44 00 00 f3 0f 1e fa 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00 00 fc ff df e8 75 e9 2c 00 4c 8d 73 68 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 db 6a 85 00 4d 8b 36 4d 85 f6 74 [ 1553.567935][T20504] RSP: 0018:ffffc900032df0b0 EFLAGS: 00010207 [ 1553.574052][T20504] RAX: 000000000000000c RBX: fffffffffffffffc RCX: 0000000000080000 [ 1553.582090][T20504] RDX: ffffc90018289000 RSI: 0000000000002ac3 RDI: 0000000000002ac4 [ 1553.590139][T20504] RBP: 0000000000000000 R08: ffff88805aa7d03b R09: 1ffff1100b54fa07 [ 1553.598154][T20504] R10: dffffc0000000000 R11: ffffed100b54fa08 R12: dffffc0000000000 [ 1553.606180][T20504] R13: dffffc0000000000 R14: 0000000000000064 R15: dffffc0000000000 [ 1553.614197][T20504] FS: 00007efdfeffd6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1553.623174][T20504] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1553.629798][T20504] CR2: 0000001b30b15ff8 CR3: 00000000219bd000 CR4: 00000000003506e0 [ 1553.637824][T20504] Call Trace: [ 1553.641141][T20504] [ 1553.644111][T20504] ? vdpasim_unbind_mm+0x170/0x170 [ 1553.649315][T20504] vdpasim_free+0x56/0x430 [ 1553.653774][T20504] ? devres_release+0xa0/0xa0 [ 1553.658562][T20504] ? vdpasim_unbind_mm+0x170/0x170 [ 1553.663820][T20504] vdpa_release_dev+0x6c/0xf0 [ 1553.668545][T20504] ? __vdpa_alloc_device+0x410/0x410 [ 1553.673873][T20504] device_release+0xbc/0x1e0 [ 1553.678528][T20504] kobject_put+0x21b/0x450 [ 1553.683022][T20504] vdpasim_create+0x365/0x890 [ 1553.687753][T20504] vdpasim_blk_dev_add+0x11d/0x290 [ 1553.692922][T20504] ? vdpasim_net_mgmtdev_release+0x10/0x10 [ 1553.698777][T20504] ? vdpasim_blk_get_config+0x5a0/0x5a0 [ 1553.704374][T20504] ? vdpasim_blk_dev_del+0x20/0x20 [ 1553.709536][T20504] ? vdpasim_blk_work+0x15b0/0x15b0 [ 1553.714787][T20504] ? vdpa_mgmtdev_get_from_attr+0x267/0x270 [ 1553.720732][T20504] vdpa_nl_cmd_dev_add_set_doit+0xa85/0xbd0 [ 1553.726679][T20504] ? vdpa_nl_cmd_mgmtdev_get_dumpit+0x270/0x270 [ 1553.732969][T20504] ? __nla_parse+0x40/0x50 [ 1553.737442][T20504] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1553.743827][T20504] genl_family_rcv_msg_doit+0x21a/0x310 [ 1553.749431][T20504] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1553.755376][T20504] ? bpf_lsm_capable+0x9/0x10 [ 1553.760135][T20504] ? security_capable+0x89/0xb0 [ 1553.765048][T20504] genl_rcv_msg+0x611/0x7a0 [ 1553.769608][T20504] ? genl_bind+0x360/0x360 [ 1553.774069][T20504] ? vdpa_nl_cmd_mgmtdev_get_dumpit+0x270/0x270 [ 1553.780376][T20504] netlink_rcv_skb+0x235/0x4c0 [ 1553.785197][T20504] ? genl_bind+0x360/0x360 [ 1553.789664][T20504] ? netlink_ack+0x1160/0x1160 [ 1553.794479][T20504] ? __lock_acquire+0x7d80/0x7d80 [ 1553.799555][T20504] ? net_generic+0x1e/0x240 [ 1553.804180][T20504] ? down_read+0x1ac/0x2e0 [ 1553.808644][T20504] genl_rcv+0x28/0x40 [ 1553.812667][T20504] netlink_unicast+0x7b1/0x930 [ 1553.817478][T20504] netlink_sendmsg+0x8d0/0xbf0 [ 1553.822293][T20504] ? netlink_getsockopt+0x590/0x590 [ 1553.827541][T20504] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1553.833128][T20504] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1553.838468][T20504] ? security_socket_sendmsg+0x80/0xa0 [ 1553.843973][T20504] ? netlink_getsockopt+0x590/0x590 [ 1553.849219][T20504] ____sys_sendmsg+0x61b/0x980 [ 1553.854033][T20504] ? __asan_memset+0x22/0x40 [ 1553.858680][T20504] ? __sys_sendmsg_sock+0x30/0x30 [ 1553.863836][T20504] ? __import_iovec+0x5f2/0x850 [ 1553.868746][T20504] ? import_iovec+0x73/0xa0 [ 1553.873307][T20504] ___sys_sendmsg+0x2a6/0x360 [ 1553.878036][T20504] ? __sys_sendmsg+0x2b0/0x2b0 [ 1553.882891][T20504] __se_sys_sendmsg+0x1d0/0x2c0 [ 1553.887786][T20504] ? __x64_sys_sendmsg+0x80/0x80 [ 1553.892781][T20504] ? lockdep_hardirqs_on+0x98/0x150 [ 1553.898029][T20504] do_syscall_64+0x55/0xb0 [ 1553.902494][T20504] ? clear_bhb_loop+0x40/0x90 [ 1553.907219][T20504] ? clear_bhb_loop+0x40/0x90 [ 1553.911942][T20504] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1553.917887][T20504] RIP: 0033:0x7efdfe19e159 [ 1553.922347][T20504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1553.942001][T20504] RSP: 002b:00007efdfeffd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1553.950510][T20504] RAX: ffffffffffffffda RBX: 00007efdfe426090 RCX: 00007efdfe19e159 [ 1553.958538][T20504] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1553.966567][T20504] RBP: 00007efdfe235024 R08: 0000000000000000 R09: 0000000000000000 [ 1553.974581][T20504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1553.982598][T20504] R13: 00007efdfe426128 R14: 00007efdfe426090 R15: 00007ffc681c18d8 [ 1553.990631][T20504] [ 1553.993702][T20504] Modules linked in: [ 1553.999102][T20504] ---[ end trace 0000000000000000 ]--- [ 1554.004737][T20504] RIP: 0010:kthread_destroy_worker+0x26/0xd0 [ 1554.010786][T20504] Code: 1f 44 00 00 f3 0f 1e fa 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00 00 fc ff df e8 75 e9 2c 00 4c 8d 73 68 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 db 6a 85 00 4d 8b 36 4d 85 f6 74 [ 1554.030532][T20504] RSP: 0018:ffffc900032df0b0 EFLAGS: 00010207 [ 1554.036683][T20504] RAX: 000000000000000c RBX: fffffffffffffffc RCX: 0000000000080000 [ 1554.044741][T20504] RDX: ffffc90018289000 RSI: 0000000000002ac3 RDI: 0000000000002ac4 [ 1554.052841][T20504] RBP: 0000000000000000 R08: ffff88805aa7d03b R09: 1ffff1100b54fa07 [ 1554.060870][T20504] R10: dffffc0000000000 R11: ffffed100b54fa08 R12: dffffc0000000000 [ 1554.069181][T20504] R13: dffffc0000000000 R14: 0000000000000064 R15: dffffc0000000000 [ 1554.077269][T20504] FS: 00007efdfeffd6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1554.086313][T20504] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1554.169589][T20504] CR2: 0000001b30b15ff8 CR3: 00000000219bd000 CR4: 00000000003506e0 [ 1554.177816][T20504] Kernel panic - not syncing: Fatal exception [ 1554.184061][T20504] Kernel Offset: disabled [ 1554.188397][T20504] Rebooting in 86400 seconds..