last executing test programs: 12.193040396s ago: executing program 0 (id=5447): r0 = syz_usb_connect$hid(0x3, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0xff}}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "1000"}, @global=@item_4={0x3, 0x1, 0x5, "b667967f"}]}}, 0x0}, 0x0) 10.671136121s ago: executing program 1 (id=5454): mount$overlay(0x0, &(0x7f0000003580)='./file0\x00', 0x0, 0x8c1ea1bec7a34f89, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) r3 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r4 = fcntl$dupfd(r3, 0x406, r3) write$binfmt_script(r4, 0x0, 0x0) write$P9_RXATTRWALK(r4, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x4}, 0xca80) ioctl$EVIOCGLED(r2, 0x80284504, 0x0) 9.993783851s ago: executing program 0 (id=5455): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000fcffff7f00d669db7500000058110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000183900000500000000000000000000001800000006000000000000000d0000001840000000000000000000000000000018000000150900000000000007000000bf91000000000000b7020000000000008500000085000000b70000000000000095000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0xaece, 0x2, 0x3, 0x372, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0xf378, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r6, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4000000000009, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x591) acct(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0x15, 0x0, &(0x7f0000000040)) acct(0x0) close_range(r8, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000000680)) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x6000000, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x0, 0x0, 0x0}, 0xe0) 9.943860412s ago: executing program 1 (id=5457): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @broadcast, 'macvtap0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001100), 0x40000, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) 9.829949264s ago: executing program 3 (id=5458): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f00000004c0)}, {0x0}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xc0691000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x2100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8000, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x6, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x1ff, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x6, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x5], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x9, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x8400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x81000, 0xa6, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x2000006, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0x1, 0x20000006, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) r6 = fcntl$dupfd(r0, 0x0, r4) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5}) r7 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f00000000c0)={0x0, r7}) 9.828770464s ago: executing program 1 (id=5459): socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1c, 0x10, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}, @generic={0xb, 0xc, 0x5, 0xffff, 0x5}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffd}, @map_fd={0x18, 0x4, 0x1, 0x0, r1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x9}], &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r2, 0x40096100, &(0x7f0000000880)={{}, 0x6}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0430"], 0x6) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 8.687097802s ago: executing program 3 (id=5461): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 7.436322192s ago: executing program 1 (id=5462): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) io_setup(0x3, &(0x7f00000003c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3, &(0x7f0000000480)=[{0x48, 0x0, 0x60, 0xc68}, {0x1, 0x7, 0x1, 0x4}, {0x0, 0x8, 0x9, 0x580}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pselect6(0x40, &(0x7f0000000300)={0xff, 0x1, 0x6, 0x8000, 0x80000000, 0x80000000, 0x1000, 0x6}, &(0x7f0000000340)={0x6, 0x6, 0xfffffffffffffffb, 0x3c89, 0x89e, 0x7, 0x0, 0x7}, 0x0, &(0x7f00000003c0)={0x77359400}, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=@xfs_parent={0x1c, 0x82, {0x400, 0x13, 0x7, 0x3}}, &(0x7f0000000500), 0x1400) openat$cachefiles(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) 7.367084533s ago: executing program 2 (id=5463): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, 0x0, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) 7.365790943s ago: executing program 3 (id=5464): r0 = syz_usb_connect$hid(0x3, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0xff}}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "1000"}, @global=@item_4={0x3, 0x1, 0x5, "b667967f"}]}}, 0x0}, 0x0) 6.27897898s ago: executing program 2 (id=5465): r0 = syz_open_procfs(0x0, 0x0) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = gettid() sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000000000000000000000000000000020000", @ANYRES32=0x0, @ANYBLOB="010064060a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x20040051}, 0x4048080) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x0, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000340)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000280)='minix\x00', 0x380080b, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000480)={@remote, r7}, 0x14) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 5.990149295s ago: executing program 1 (id=5466): mount$overlay(0x0, &(0x7f0000003580)='./file0\x00', 0x0, 0x8c1ea1bec7a34f89, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) r3 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r4 = fcntl$dupfd(r3, 0x406, r3) write$binfmt_script(r4, 0x0, 0x0) write$P9_RXATTRWALK(r4, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x4}, 0xca80) ioctl$EVIOCGLED(r2, 0x80284504, 0x0) 4.564585347s ago: executing program 2 (id=5467): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x120a, &(0x7f0000000140)={0x0, 0x1e91, 0x2, 0x3, 0x127}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x2000000, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @null}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000003c0)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) 4.539634328s ago: executing program 0 (id=5468): socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0xffffff83}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.200688464s ago: executing program 2 (id=5469): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f00000004c0)}, {0x0}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xc0691000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x2100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8000, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x6, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x1ff, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x6, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x5], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x9, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x8400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x81000, 0xa6, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x2000006, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0x1, 0x20000006, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) r6 = fcntl$dupfd(r0, 0x0, r4) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5}) r7 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f00000000c0)={0x0, r7}) 4.001128147s ago: executing program 3 (id=5470): openat$nullb(0xffffffffffffff9c, 0x0, 0x4a2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @val=@iter={0x0}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3], 0x3c}}, 0x0) close(r3) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7e) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) 3.208111279s ago: executing program 0 (id=5471): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x6bf68237da62a01, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 3.16043141s ago: executing program 2 (id=5472): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x1b, 0xfa00, {0x0, {0xa, 0x9, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xb970}}}, 0x30) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 674.219979ms ago: executing program 3 (id=5473): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, 0x0, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) 664.719539ms ago: executing program 0 (id=5474): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 570.374451ms ago: executing program 0 (id=5475): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x40001f, 0x10000, 0x4, 0x4, 0xcca, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x202, 0x1, 0x6, 0xfe, 0x0, 0x1a449, 0x20003, 0x40000006, 0x89, 0xcaa7, 0x0, 0x8, 0x6, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) 495.771332ms ago: executing program 2 (id=5476): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000fcffff7f00d669db7500000058110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000183900000500000000000000000000001800000006000000000000000d0000001840000000000000000000000000000018000000150900000000000007000000bf91000000000000b7020000000000008500000085000000b70000000000000095000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0xaece, 0x2, 0x3, 0x372, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0xf378, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r6, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4000000000009, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x591) acct(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0x15, 0x0, &(0x7f0000000040)) acct(0x0) close_range(r8, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000000680)) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x6000000, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x0, 0x0, 0x0}, 0xe0) 22.793589ms ago: executing program 1 (id=5477): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x120a, &(0x7f0000000140)={0x0, 0x1e91, 0x2, 0x3, 0x127}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x2000000, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @null}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000003c0)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) 0s ago: executing program 3 (id=5478): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1 1 [ 2242.186262][ T2937] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2242.192430][T21890] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2242.244096][T21890] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2242.255638][T21890] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2242.272953][T21890] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2242.291362][T21890] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2242.561259][ T2937] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2242.621885][T24040] wg1 speed is unknown, defaulting to 1000 [ 2242.866221][ T2937] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2242.971983][ T2937] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2244.393141][T21890] Bluetooth: hci3: command tx timeout [ 2245.515219][T24040] chnl_net:caif_netlink_parms(): no params data found [ 2246.399921][T24040] bridge0: port 1(bridge_slave_0) entered blocking state [ 2246.409765][T24040] bridge0: port 1(bridge_slave_0) entered disabled state [ 2246.420718][T24040] bridge_slave_0: entered allmulticast mode [ 2246.429669][T24040] bridge_slave_0: entered promiscuous mode [ 2246.474035][T21890] Bluetooth: hci3: command tx timeout [ 2246.514765][ T2937] bond2: (slave gretap1): Releasing active interface [ 2246.651502][T24040] bridge0: port 2(bridge_slave_1) entered blocking state [ 2246.659080][T24040] bridge0: port 2(bridge_slave_1) entered disabled state [ 2246.678731][T24040] bridge_slave_1: entered allmulticast mode [ 2246.691108][T24040] bridge_slave_1: entered promiscuous mode [ 2246.774641][T24040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2246.865651][T24099] netlink: 'syz.0.4600': attribute type 1 has an invalid length. [ 2247.005029][T24099] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2247.122074][T24099] vlan2: entered allmulticast mode [ 2247.127591][T24099] veth1: entered allmulticast mode [ 2247.159668][T24099] bond6: (slave vlan2): making interface the new active one [ 2247.180238][T24099] bond6: (slave vlan2): Enslaving as an active interface with an up link [ 2247.212566][T24040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2247.667479][T24102] bond6: (slave veth3): Enslaving as an active interface with a down link [ 2248.175496][T24099] syz.0.4600 (24099) used greatest stack depth: 19528 bytes left [ 2248.255335][T24040] team0: Port device team_slave_0 added [ 2248.332436][T24040] team0: Port device team_slave_1 added [ 2248.553673][T21890] Bluetooth: hci3: command tx timeout [ 2248.680810][T24040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2248.719919][T24040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2248.816703][T24040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2248.861059][T24040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2248.891144][T24040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2248.989094][T24040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2249.520512][T24040] hsr_slave_0: entered promiscuous mode [ 2249.621900][ T58] Bluetooth: hci4: Frame reassembly failed (-84) [ 2249.628864][T24040] hsr_slave_1: entered promiscuous mode [ 2249.674312][T24040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2249.681887][T24040] Cannot create hsr debugfs directory [ 2249.759025][ T2937] hsr_slave_0: left promiscuous mode [ 2249.786095][ T2937] hsr_slave_1: left promiscuous mode [ 2249.822761][ T2937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2249.855804][ T2937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2249.886197][ T2937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2249.930761][ T2937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2249.950526][ T2937] dummy0: left allmulticast mode [ 2249.971010][ T2937] bridge0: port 3(dummy0) entered disabled state [ 2250.057853][ T2937] bridge_slave_1: left allmulticast mode [ 2250.064260][ T2937] bridge_slave_1: left promiscuous mode [ 2250.070401][ T2937] bridge0: port 2(bridge_slave_1) entered disabled state [ 2250.080122][ T2937] bridge_slave_0: left allmulticast mode [ 2250.086275][ T2937] bridge0: port 1(bridge_slave_0) entered disabled state [ 2250.170342][ T2937] veth1_macvtap: left promiscuous mode [ 2250.175964][ T2937] veth0_macvtap: left promiscuous mode [ 2250.181761][ T2937] veth1_vlan: left promiscuous mode [ 2250.193413][ T2937] veth0_vlan: left promiscuous mode [ 2250.643420][ T5792] Bluetooth: hci3: command tx timeout [ 2251.386118][T24145] syz.1.4606: attempt to access beyond end of device [ 2251.386118][T24145] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2251.399073][T24145] (syz.1.4606,24145,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 2251.408902][T24145] (syz.1.4606,24145,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 2251.425900][T24145] (syz.1.4606,24145,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 2251.439126][T24145] (syz.1.4606,24145,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 2251.492410][ T2937] bond4 (unregistering): Released all slaves [ 2251.674152][ T5792] Bluetooth: hci4: command 0x1003 tx timeout [ 2251.690775][ T2937] bond3 (unregistering): Released all slaves [ 2251.803931][T21890] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2252.199719][ T28] audit: type=1800 audit(1753287465.707:140): pid=24149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4607" name="bus" dev="overlay" ino=2927 res=0 errno=0 [ 2252.953929][ T2937] bond2 (unregistering): Released all slaves [ 2253.006709][ T2937] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 2253.024566][ T2937] vcan1 (unregistering): left promiscuous mode [ 2253.363331][T24154] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 2253.369974][T24154] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2253.381090][T24154] vhci_hcd vhci_hcd.0: Device attached [ 2253.403139][T24155] vhci_hcd: connection closed [ 2253.591929][ T7969] vhci_hcd: stop threads [ 2253.603169][ T7969] vhci_hcd: release socket [ 2253.607619][ T7969] vhci_hcd: disconnect device [ 2253.743850][ T2937] bond1 (unregistering): Released all slaves [ 2255.303019][ T787] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2255.532787][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 2255.566290][ T787] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 2255.574791][ T787] usb 4-1: config 0 has no interface number 0 [ 2255.581085][ T787] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2255.630856][ T787] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2255.646038][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2255.656826][ T787] usb 4-1: Product: syz [ 2255.661020][ T787] usb 4-1: Manufacturer: syz [ 2255.667789][ T787] usb 4-1: SerialNumber: syz [ 2255.675310][ T787] usb 4-1: config 0 descriptor?? [ 2255.688783][ T787] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2255.698798][ T787] em28xx 4-1:0.132: Video interface 132 found: [ 2255.721711][ T2937] team0 (unregistering): Port device team_slave_1 removed [ 2255.773538][ T2937] team0 (unregistering): Port device team_slave_0 removed [ 2255.820029][ T2937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2255.870695][ T2937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2256.100454][ T787] em28xx 4-1:0.132: chip ID is em2884 [ 2256.255680][ T2937] team0 (unregistering): Port device bond0 removed [ 2256.390281][ T2937] bond0 (unregistering): Released all slaves [ 2256.521321][T24164] wg1 speed is unknown, defaulting to 1000 [ 2256.996945][ T787] em28xx 4-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 2257.284306][ T787] em28xx 4-1:0.132: failed to read eeprom (err=-5) [ 2257.350340][ T787] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 2257.433064][ T787] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2257.451161][ T787] em28xx 4-1:0.132: analog set to bulk mode. [ 2257.489956][ T8] em28xx 4-1:0.132: Registering V4L2 extension [ 2257.544493][ T787] usb 4-1: USB disconnect, device number 65 [ 2257.598824][ T787] em28xx 4-1:0.132: Disconnecting em28xx [ 2258.380398][ T2937] IPVS: stop unused estimator thread 0... [ 2258.414823][ T8] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 2258.422216][ T8] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 2258.483721][ T8] em28xx 4-1:0.132: No AC97 audio processor [ 2258.562538][ T8] usb 4-1: Decoder not found [ 2258.581672][ T8] em28xx 4-1:0.132: failed to create media graph [ 2258.606376][ T8] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 2258.631151][ T8] em28xx 4-1:0.132: Remote control support is not available for this card. [ 2258.643240][ T787] em28xx 4-1:0.132: Closing input extension [ 2259.336810][ T787] em28xx 4-1:0.132: Freeing device [ 2261.210950][T24040] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2261.784037][T24040] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2262.446903][T24040] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2262.572403][T24040] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2263.300002][T24040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2263.552386][T24244] syz.3.4623: attempt to access beyond end of device [ 2263.552386][T24244] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2263.565469][T24244] (syz.3.4623,24244,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 2263.576248][T24244] (syz.3.4623,24244,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 2263.583887][T24244] (syz.3.4623,24244,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 2263.592662][T24244] (syz.3.4623,24244,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 2263.654882][T24040] 8021q: adding VLAN 0 to HW filter on device team0 [ 2264.097225][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 2264.104364][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2264.125261][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 2264.132341][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2264.159450][T24040] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2264.298920][T24040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2265.718407][T24040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2265.930087][T24040] veth0_vlan: entered promiscuous mode [ 2265.977414][T24040] veth1_vlan: entered promiscuous mode [ 2266.160981][T24040] veth0_macvtap: entered promiscuous mode [ 2266.190318][T24040] veth1_macvtap: entered promiscuous mode [ 2266.208213][T24040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2266.227375][T24040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2266.287686][T24040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2266.317791][T24040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2266.350008][T24040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2266.380777][T24040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2266.405471][T24040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2266.486327][T24040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2266.529069][T24040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2266.551991][T24040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2266.578558][T24040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2266.610018][T24040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2266.634172][T24040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2266.677318][T24040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2266.721497][T24040] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2266.734324][T24040] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2266.744749][T24040] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2266.775364][T24040] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2267.081096][ T7969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2267.136766][ T7969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2267.234556][T14270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2267.263075][T14270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2267.723815][T24306] syz.0.4629 (24306): drop_caches: 2 [ 2267.776391][T24306] syz.0.4629 (24306): drop_caches: 2 [ 2269.507633][T14601] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2269.703051][T14601] usb 3-1: Using ep0 maxpacket: 16 [ 2269.711884][T14601] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2269.746804][T24323] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4631'. [ 2269.846672][T24324] input: syz0 as /devices/virtual/input/input63 [ 2270.545400][T14601] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2270.557240][T14601] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2270.567039][T14601] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2270.582952][T14601] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2270.598905][T14601] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2270.608518][T14601] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2270.623098][T14601] usb 3-1: Manufacturer: syz [ 2270.644841][T14601] usb 3-1: config 0 descriptor?? [ 2271.555658][T14601] rc_core: IR keymap rc-hauppauge not found [ 2271.561609][T14601] Registered IR keymap rc-empty [ 2271.572101][T14601] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2271.833078][T14601] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2271.893485][T14601] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 2271.959112][T14601] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input64 [ 2272.045734][T14601] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2272.103065][T14601] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2272.158792][T14601] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2272.213121][T14601] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2272.385325][T24360] syz.0.4639 (24360): drop_caches: 2 [ 2272.391857][T24360] syz.0.4639 (24360): drop_caches: 2 [ 2272.496405][T14601] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2272.626525][T14601] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2272.753408][T14601] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2273.763073][T14601] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2273.920544][T14601] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2273.963906][T14601] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2274.043954][T14601] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 2274.117756][T14601] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2274.287846][T14601] usb 3-1: USB disconnect, device number 65 [ 2275.693538][ T28] audit: type=1800 audit(1753287489.157:141): pid=24384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4643" name="bus" dev="overlay" ino=3009 res=0 errno=0 [ 2277.499328][T14601] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 2277.538773][T14601] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2279.619630][T21890] Bluetooth: hci0: unexpected event for opcode 0x2031 [ 2280.332025][T24427] syz.2.4652 (24427): drop_caches: 2 [ 2280.338609][T24427] syz.2.4652 (24427): drop_caches: 2 [ 2283.870509][ T1278] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2283.889060][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.901113][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2285.901437][ T787] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2286.311840][ T787] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2286.321245][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2286.335512][ T787] usb 2-1: Product: syz [ 2286.341683][ T787] usb 2-1: Manufacturer: syz [ 2287.327162][ T787] usb 2-1: SerialNumber: syz [ 2287.362403][ T787] usb 2-1: config 0 descriptor?? [ 2291.418395][T24507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4671'. [ 2291.453227][ T787] usb 2-1: can't set config #0, error -71 [ 2291.603398][ T787] usb 2-1: USB disconnect, device number 62 [ 2294.715101][T24542] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2295.927450][T24562] syz.1.4685: attempt to access beyond end of device [ 2295.927450][T24562] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2296.032926][T24562] (syz.1.4685,24562,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 2296.041296][T24562] (syz.1.4685,24562,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 2296.049291][T24562] (syz.1.4685,24562,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 2296.058290][T24562] (syz.1.4685,24562,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 2296.232511][T22429] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 2296.492330][T22429] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2296.549119][T22429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2297.173530][T22429] usb 1-1: Product: syz [ 2297.190351][T22429] usb 1-1: Manufacturer: syz [ 2297.195606][T22429] usb 1-1: SerialNumber: syz [ 2297.463707][T22429] usb 1-1: config 0 descriptor?? [ 2297.793732][T22429] hso 1-1:0.0: Failed to find INT IN ep [ 2297.799986][T22429] usb-storage 1-1:0.0: USB Mass Storage device detected [ 2301.673992][ T787] usb 1-1: USB disconnect, device number 75 [ 2304.059307][T24631] syz.0.4705: attempt to access beyond end of device [ 2304.059307][T24631] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2304.073081][T24631] (syz.0.4705,24631,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 2304.082347][T24631] (syz.0.4705,24631,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 2304.090358][T24631] (syz.0.4705,24631,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 2304.099347][T24631] (syz.0.4705,24631,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 2304.463443][ T787] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2304.993017][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 2305.000047][ T787] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2305.046114][ T787] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2305.066030][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2305.091193][ T787] usb 2-1: Product: syz [ 2305.097116][ T787] usb 2-1: Manufacturer: syz [ 2305.107454][ T787] usb 2-1: SerialNumber: syz [ 2305.114653][ T787] usb 2-1: config 0 descriptor?? [ 2305.409021][T24642] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2306.350668][T22429] usb 2-1: USB disconnect, device number 63 [ 2309.153240][T14611] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2309.865923][T24678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4718'. [ 2309.934651][T14611] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2309.968807][T14611] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2309.979542][T14611] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2309.991434][T14611] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 2310.001201][T14611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2310.055797][T14611] usb 2-1: config 0 descriptor?? [ 2310.496616][T14611] uclogic 0003:5543:0064.0010: item fetching failed at offset 5/7 [ 2310.530178][T14611] uclogic 0003:5543:0064.0010: parse failed [ 2310.547620][T14611] uclogic: probe of 0003:5543:0064.0010 failed with error -22 [ 2310.688989][T14611] usb 2-1: USB disconnect, device number 64 [ 2311.008204][T24698] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4723'. [ 2312.690008][T24715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4728'. [ 2312.828613][T24718] syz.3.4729: attempt to access beyond end of device [ 2312.828613][T24718] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2312.850012][T24718] (syz.3.4729,24718,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 2312.858216][T24718] (syz.3.4729,24718,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 2312.875016][T24718] (syz.3.4729,24718,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 2312.889704][T24718] (syz.3.4729,24718,1):ocfs2_fill_super:1178 ERROR: status = -5 [ 2314.622539][T24721] syz.0.4730: attempt to access beyond end of device [ 2314.622539][T24721] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2314.636388][T24721] (syz.0.4730,24721,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 2314.644858][T24721] (syz.0.4730,24721,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 2314.652324][T24721] (syz.0.4730,24721,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 2314.662259][T24721] (syz.0.4730,24721,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 2319.368878][T24770] syz.3.4743: attempt to access beyond end of device [ 2319.368878][T24770] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2319.425498][T24770] (syz.3.4743,24770,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 2319.452490][T24770] (syz.3.4743,24770,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 2319.463655][T24770] (syz.3.4743,24770,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 2319.473971][T24770] (syz.3.4743,24770,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 2319.980163][T24781] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4747'. [ 2321.219673][T24786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4749'. [ 2324.920506][T24821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2326.310864][T24839] syz.3.4762: attempt to access beyond end of device [ 2326.310864][T24839] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2326.358017][T24839] (syz.3.4762,24839,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 2326.376832][T24839] (syz.3.4762,24839,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 2326.463912][T24839] (syz.3.4762,24839,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 2326.476709][T24839] (syz.3.4762,24839,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 2332.613546][T22917] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2333.507766][T22917] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2333.523348][T22917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2333.553940][T22917] usb 3-1: Product: syz [ 2333.561792][T22917] usb 3-1: Manufacturer: syz [ 2333.579088][T22917] usb 3-1: SerialNumber: syz [ 2333.621001][T22917] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2333.889398][T19792] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2333.898494][ T23] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 2334.445516][ T23] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2334.456596][ T23] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2334.467076][ T23] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2334.476373][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2334.525067][T24907] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2334.529699][T14601] usb 3-1: USB disconnect, device number 66 [ 2334.554570][ T23] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 2334.817193][ T23] usb 1-1: USB disconnect, device number 76 [ 2335.272961][T19792] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2335.378927][T19792] ath9k_htc: Failed to initialize the device [ 2335.419039][T14601] usb 3-1: ath9k_htc: USB layer deinitialized [ 2337.732927][T22429] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 2337.915172][T22429] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2337.926870][T22429] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2337.939739][T22429] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2337.946610][T22429] usb 1-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 2337.956097][T22429] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2337.977785][T22429] usb 1-1: config 0 descriptor?? [ 2338.483711][T22429] usbhid 1-1:0.0: can't add hid device: -71 [ 2338.743871][T22429] usbhid: probe of 1-1:0.0 failed with error -71 [ 2338.770597][T22429] usb 1-1: USB disconnect, device number 77 [ 2339.144005][T24959] overlayfs: failed to resolve './file1': -2 [ 2341.842203][T24981] syz.1.4802: attempt to access beyond end of device [ 2341.842203][T24981] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2341.860813][T24981] (syz.1.4802,24981,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 2341.887985][T24981] (syz.1.4802,24981,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 2341.903030][T24981] (syz.1.4802,24981,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 2341.926463][T24981] (syz.1.4802,24981,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 2342.517761][T24989] syz.0.4803: attempt to access beyond end of device [ 2342.517761][T24989] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2342.573818][T24989] (syz.0.4803,24989,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 2342.616844][T24989] (syz.0.4803,24989,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 2342.676751][T24989] (syz.0.4803,24989,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 2342.697222][T24989] (syz.0.4803,24989,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 2345.128182][ T1278] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2345.141929][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.149905][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2347.398446][T25031] syz.3.4815: attempt to access beyond end of device [ 2347.398446][T25031] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2347.412593][T25031] (syz.3.4815,25031,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 2347.434975][T25031] (syz.3.4815,25031,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 2347.442473][T25031] (syz.3.4815,25031,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 2347.451817][T25031] (syz.3.4815,25031,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 2348.279735][T25040] overlayfs: failed to resolve './file1': -2 [ 2353.772999][T22429] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2353.954585][T22429] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2353.982007][T22429] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2354.022768][T22429] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2354.037728][T22429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2354.065885][T25069] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2354.082124][T22429] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 2354.238267][T25079] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4829'. [ 2354.639047][T22429] usb 2-1: USB disconnect, device number 65 [ 2354.672955][T17719] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 2354.748083][T25082] udevd[25082]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2354.863067][T17719] usb 1-1: Using ep0 maxpacket: 8 [ 2354.876750][T17719] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2354.889471][T17719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2354.923604][T17719] usb 1-1: Product: syz [ 2354.928127][T17719] usb 1-1: Manufacturer: syz [ 2355.711996][T17719] usb 1-1: SerialNumber: syz [ 2355.712099][ T28] audit: type=1800 audit(1753287568.517:142): pid=25086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4830" name="bus" dev="overlay" ino=410 res=0 errno=0 [ 2355.762063][T17719] usb 1-1: config 0 descriptor?? [ 2355.880705][ T28] audit: type=1800 audit(1753287569.387:143): pid=25090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4831" name="bus" dev="overlay" ino=3270 res=0 errno=0 [ 2356.413159][T14601] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2356.946745][T17719] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 2356.962581][T14601] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2356.980431][T17719] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 2357.201288][T14601] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2357.249386][T17719] usb 1-1: USB disconnect, device number 78 [ 2357.255752][T14601] usb 4-1: Product: syz [ 2357.400304][T14601] usb 4-1: Manufacturer: syz [ 2357.516468][T14601] usb 4-1: SerialNumber: syz [ 2357.549110][T14601] usb 4-1: config 0 descriptor?? [ 2357.769367][T14601] hso 4-1:0.0: Failed to find INT IN ep [ 2357.776267][T14601] usb-storage 4-1:0.0: USB Mass Storage device detected [ 2359.049757][ T7969] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2359.214536][ T7969] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2359.382808][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2359.394626][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2359.403478][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2359.420874][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2359.428450][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2359.435796][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2359.604363][ T7969] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2359.650476][T25132] wg1 speed is unknown, defaulting to 1000 [ 2359.729724][ T7969] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2359.964839][T17719] usb 4-1: USB disconnect, device number 66 [ 2360.042092][ T28] audit: type=1800 audit(1753287573.547:144): pid=25137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4843" name="bus" dev="overlay" ino=446 res=0 errno=0 [ 2360.140921][T11682] infiniband : set down [ 2360.685933][T22429] wg1 speed is unknown, defaulting to 1000 [ 2360.691810][T22429] wg1 speed is unknown, defaulting to 1000 [ 2361.516026][T25156] syz.2.4847: attempt to access beyond end of device [ 2361.516026][T25156] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2361.530426][ T5792] Bluetooth: hci2: command tx timeout [ 2361.553837][T25156] (syz.2.4847,25156,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 2361.565855][T25156] (syz.2.4847,25156,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 2361.575288][T25156] (syz.2.4847,25156,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 2361.613061][T25156] (syz.2.4847,25156,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 2361.918784][T25132] chnl_net:caif_netlink_parms(): no params data found [ 2362.132271][T25132] bridge0: port 1(bridge_slave_0) entered blocking state [ 2362.144478][T25132] bridge0: port 1(bridge_slave_0) entered disabled state [ 2362.151750][T25132] bridge_slave_0: entered allmulticast mode [ 2362.161067][T25132] bridge_slave_0: entered promiscuous mode [ 2362.207115][T25132] bridge0: port 2(bridge_slave_1) entered blocking state [ 2362.214539][T25132] bridge0: port 2(bridge_slave_1) entered disabled state [ 2362.221877][T25132] bridge_slave_1: entered allmulticast mode [ 2362.231492][T25132] bridge_slave_1: entered promiscuous mode [ 2362.375995][T25132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2362.390645][T25132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2362.433513][T22429] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2362.623778][T22429] usb 4-1: Using ep0 maxpacket: 8 [ 2362.654258][T25132] team0: Port device team_slave_0 added [ 2362.666116][T22429] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2362.687612][T22429] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2362.697954][T22429] usb 4-1: Product: syz [ 2362.719672][T25132] team0: Port device team_slave_1 added [ 2362.733190][T22429] usb 4-1: Manufacturer: syz [ 2362.749096][T22429] usb 4-1: SerialNumber: syz [ 2362.795975][T22429] usb 4-1: config 0 descriptor?? [ 2362.972089][T25132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2363.000809][T25132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2363.042328][T25132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2363.060096][T25132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2363.099647][T25132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2363.365165][T25132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2363.416217][ T7969] hsr_slave_0: left promiscuous mode [ 2363.422239][ T7969] hsr_slave_1: left promiscuous mode [ 2363.428452][ T7969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2363.646512][ T5792] Bluetooth: hci2: command tx timeout [ 2364.124005][T22429] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -110 [ 2364.131900][T22429] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -110 [ 2364.159947][ T7969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2364.178110][ T7969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2364.203090][T22429] usb 4-1: USB disconnect, device number 67 [ 2364.204065][ T7969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2364.274707][ T7969] bridge_slave_1: left allmulticast mode [ 2364.322907][ T7969] bridge_slave_1: left promiscuous mode [ 2364.332245][ T7969] bridge0: port 2(bridge_slave_1) entered disabled state [ 2364.418213][ T7969] bridge_slave_0: left allmulticast mode [ 2364.430832][ T7969] bridge_slave_0: left promiscuous mode [ 2364.448944][ T7969] bridge0: port 1(bridge_slave_0) entered disabled state [ 2364.580000][ T7969] veth1_macvtap: left promiscuous mode [ 2364.602986][ T7969] veth0_macvtap: left promiscuous mode [ 2364.613359][ T7969] veth1_vlan: left promiscuous mode [ 2364.629492][ T7969] veth0_vlan: left promiscuous mode [ 2364.866617][ T7969] infiniband : set down [ 2365.337696][T22429] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2365.398700][ T7969] bond8 (unregistering): Released all slaves [ 2365.414516][ T7969] bond7 (unregistering): Released all slaves [ 2365.579037][T22429] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2365.590693][T22429] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2365.599707][T22429] usb 3-1: Product: syz [ 2365.607107][T22429] usb 3-1: Manufacturer: syz [ 2365.611723][T22429] usb 3-1: SerialNumber: syz [ 2365.627450][T22429] usb 3-1: config 0 descriptor?? [ 2365.651757][ T7969] bond6 (unregistering): Released all slaves [ 2365.668735][ T7969] bond5 (unregistering): Released all slaves [ 2365.678017][T21890] Bluetooth: hci2: command tx timeout [ 2365.695394][ T7969] bond4 (unregistering): Released all slaves [ 2365.732468][ T7969] bond3 (unregistering): Released all slaves [ 2365.870797][T22429] hso 3-1:0.0: Failed to find INT IN ep [ 2365.893333][T22429] usb-storage 3-1:0.0: USB Mass Storage device detected [ 2366.037141][ T7969] bond2 (unregistering): Released all slaves [ 2366.103464][ T7969] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 2366.118484][ T7969] vcan1 (unregistering): left promiscuous mode [ 2366.479804][ T7969] bond1 (unregistering): Released all slaves [ 2367.254966][ T7969] team0 (unregistering): Port device team_slave_1 removed [ 2367.346984][ T7969] team0 (unregistering): Port device team_slave_0 removed [ 2367.405557][ T7969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2367.433159][T21890] Bluetooth: hci3: command 0x0406 tx timeout [ 2367.559681][ T7969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2367.720774][T11905] smc: removing ib device  [ 2367.757296][ T5792] Bluetooth: hci2: command tx timeout [ 2368.381646][ T7969] bond0 (unregistering): Released all slaves [ 2368.608655][T14608] usb 3-1: USB disconnect, device number 67 [ 2368.783537][T19792] wg1 speed is unknown, defaulting to 1000 [ 2369.539431][T25132] hsr_slave_0: entered promiscuous mode [ 2369.556320][T25132] hsr_slave_1: entered promiscuous mode [ 2369.571748][T25132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2369.588980][T25132] Cannot create hsr debugfs directory [ 2370.919818][ T7969] IPVS: stop unused estimator thread 0... [ 2371.255721][ T28] audit: type=1326 audit(1753287584.767:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25249 comm="syz.0.4860" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f464598e9a9 code=0x0 [ 2372.797304][T25251] Falling back ldisc for ttyS3. [ 2373.339856][T25132] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2373.375989][T25132] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2373.409947][T25132] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2373.448320][T25132] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2373.697669][T25132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2373.749391][T25132] 8021q: adding VLAN 0 to HW filter on device team0 [ 2373.837614][T11905] bridge0: port 1(bridge_slave_0) entered blocking state [ 2373.844770][T11905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2373.904260][T11905] bridge0: port 2(bridge_slave_1) entered blocking state [ 2373.911398][T11905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2375.213482][T25132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2375.308310][T25132] veth0_vlan: entered promiscuous mode [ 2375.335293][T25132] veth1_vlan: entered promiscuous mode [ 2375.409505][T25132] veth0_macvtap: entered promiscuous mode [ 2375.440836][T25132] veth1_macvtap: entered promiscuous mode [ 2375.559700][T25132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2375.588529][T25132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2375.607563][T25132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2375.624405][T25132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2375.638710][T25132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2375.651790][T25132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2375.694281][T25132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2375.774699][T25132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2375.785550][T25132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2375.795778][T25132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2375.806979][T25132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2375.818056][T25132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2375.829659][T25132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2375.868737][T25132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2375.916012][T25132] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2375.933681][T25132] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2375.995062][T25132] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2376.104951][T25132] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2377.389466][ T28] audit: type=1326 audit(1753287590.897:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25313 comm="syz.3.4868" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa3df38e9a9 code=0x0 [ 2377.520403][T25316] mkiss: ax0: crc mode is auto. [ 2377.571610][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2377.692548][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2379.264610][T11905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2379.272572][T11905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2379.944073][T19792] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2380.213650][T19792] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2380.257846][T19792] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2380.314292][T19792] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2380.363710][T19792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2380.399384][T25336] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2380.453384][T14608] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 2380.495774][T19792] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 2381.018111][T14608] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2381.042660][T14608] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2381.265821][T14608] usb 1-1: Product: syz [ 2381.270226][T14608] usb 1-1: Manufacturer: syz [ 2381.490949][T14608] usb 1-1: SerialNumber: syz [ 2381.532190][T14608] usb 1-1: config 0 descriptor?? [ 2381.584489][T14601] usb 2-1: USB disconnect, device number 66 [ 2381.798853][T14608] hso 1-1:0.0: Failed to find INT IN ep [ 2381.818710][T14608] usb-storage 1-1:0.0: USB Mass Storage device detected [ 2382.432456][ T28] audit: type=1326 audit(1753287595.937:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25373 comm="syz.2.4878" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1a978e9a9 code=0x0 [ 2383.983377][T25376] Falling back ldisc for ttyS3. [ 2384.213956][ T28] audit: type=1800 audit(1753287597.727:148): pid=25386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4879" name="bus" dev="overlay" ino=31 res=0 errno=0 [ 2384.933439][T17719] usb 1-1: USB disconnect, device number 79 [ 2387.360569][ T28] audit: type=1800 audit(1753287600.237:149): pid=25417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4886" name="bus" dev="overlay" ino=3165 res=0 errno=0 [ 2387.718760][ T5792] Bluetooth: hci0: unexpected event for opcode 0x2031 [ 2387.950740][ T28] audit: type=1800 audit(1753287601.457:150): pid=25431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4890" name="bus" dev="overlay" ino=3184 res=0 errno=0 [ 2388.071171][T25433] syz.2.4891: attempt to access beyond end of device [ 2388.071171][T25433] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2388.084104][T25433] (syz.2.4891,25433,1):ocfs2_get_sector:1772 ERROR: status = -5 [ 2388.091808][T25433] (syz.2.4891,25433,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 2388.099289][T25433] (syz.2.4891,25433,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 2388.108025][T25433] (syz.2.4891,25433,1):ocfs2_fill_super:1178 ERROR: status = -5 [ 2389.022948][ T5850] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2389.861229][ T28] audit: type=1800 audit(1753287603.367:151): pid=25462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4896" name="bus" dev="overlay" ino=550 res=0 errno=0 [ 2390.671848][ T5850] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2390.733489][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2390.761015][ T5850] usb 4-1: Product: syz [ 2390.774660][ T5850] usb 4-1: Manufacturer: syz [ 2390.779298][ T5850] usb 4-1: SerialNumber: syz [ 2392.114372][ T5850] usb 4-1: config 0 descriptor?? [ 2392.965553][T25483] syz.1.4901: attempt to access beyond end of device [ 2392.965553][T25483] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2392.978618][T25483] (syz.1.4901,25483,1):ocfs2_get_sector:1772 ERROR: status = -5 [ 2392.986442][T25483] (syz.1.4901,25483,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 2392.993873][T25483] (syz.1.4901,25483,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 2393.002549][T25483] (syz.1.4901,25483,1):ocfs2_fill_super:1178 ERROR: status = -5 [ 2393.222115][ T5792] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 2394.191021][ T5850] usb 4-1: can't set config #0, error -71 [ 2394.215257][ T5850] usb 4-1: USB disconnect, device number 68 [ 2396.017582][T25530] syz.3.4912: attempt to access beyond end of device [ 2396.017582][T25530] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2396.032028][T25530] (syz.3.4912,25530,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 2396.039995][T25530] (syz.3.4912,25530,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 2396.047787][T25530] (syz.3.4912,25530,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 2396.056633][T25530] (syz.3.4912,25530,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 2398.123431][T22429] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2398.439284][T22429] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2398.475011][T22429] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2398.618835][T22429] usb 4-1: Product: syz [ 2398.659749][T22429] usb 4-1: Manufacturer: syz [ 2398.724417][T22429] usb 4-1: SerialNumber: syz [ 2398.793016][T17719] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2398.823982][T22429] usb 4-1: config 0 descriptor?? [ 2398.837655][T21890] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2398.847841][T21890] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2398.866801][T21890] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2398.898083][T21890] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2398.906091][T21890] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2398.913753][T21890] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2399.012944][T17719] usb 2-1: Using ep0 maxpacket: 8 [ 2399.040820][T22429] hso 4-1:0.0: Failed to find INT IN ep [ 2399.047729][T22429] usb-storage 4-1:0.0: USB Mass Storage device detected [ 2399.084035][T17719] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2399.157321][T17719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2399.189423][T17719] usb 2-1: Product: syz [ 2399.211985][T17719] usb 2-1: Manufacturer: syz [ 2399.223605][T17719] usb 2-1: SerialNumber: syz [ 2399.241565][T17719] usb 2-1: config 0 descriptor?? [ 2399.267306][T22789] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2399.369666][T22789] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2400.018808][T22789] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2400.222283][T22789] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2400.241649][T17719] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 2400.268064][T17719] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 2400.300863][T17719] usb 2-1: USB disconnect, device number 67 [ 2400.303382][T25549] chnl_net:caif_netlink_parms(): no params data found [ 2400.762319][ T28] audit: type=1800 audit(1753287614.267:152): pid=25576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4922" name="bus" dev="overlay" ino=609 res=0 errno=0 [ 2400.952964][ T5792] Bluetooth: hci1: command tx timeout [ 2401.345423][T25549] bridge0: port 1(bridge_slave_0) entered blocking state [ 2401.357654][T25549] bridge0: port 1(bridge_slave_0) entered disabled state [ 2401.374730][T25549] bridge_slave_0: entered allmulticast mode [ 2401.386776][T25549] bridge_slave_0: entered promiscuous mode [ 2401.487994][T25584] syz.2.4923: attempt to access beyond end of device [ 2401.487994][T25584] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2401.501077][T25584] (syz.2.4923,25584,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 2401.509063][T25584] (syz.2.4923,25584,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 2401.516631][T25584] (syz.2.4923,25584,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 2401.525503][T25584] (syz.2.4923,25584,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 2401.905721][T25549] bridge0: port 2(bridge_slave_1) entered blocking state [ 2401.949439][T25549] bridge0: port 2(bridge_slave_1) entered disabled state [ 2401.983088][T25549] bridge_slave_1: entered allmulticast mode [ 2402.047038][ T5850] usb 4-1: USB disconnect, device number 69 [ 2402.053340][T25549] bridge_slave_1: entered promiscuous mode [ 2402.627638][T25549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2402.661299][T25549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2403.033101][ T5792] Bluetooth: hci1: command tx timeout [ 2403.075486][T25549] team0: Port device team_slave_0 added [ 2403.187880][T25549] team0: Port device team_slave_1 added [ 2403.921066][T25549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2403.944252][T25549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2403.973691][T25549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2404.091753][T25549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2404.105068][T25549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2404.192885][T25549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2404.299294][T22789] bond2: (slave gretap1): Releasing active interface [ 2404.408410][T25624] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4931'. [ 2404.961410][T25549] hsr_slave_0: entered promiscuous mode [ 2405.000895][T25549] hsr_slave_1: entered promiscuous mode [ 2405.017263][T25549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2405.037194][T25549] Cannot create hsr debugfs directory [ 2405.197440][T25635] syz.3.4933: attempt to access beyond end of device [ 2405.197440][T25635] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2405.210460][T25635] (syz.3.4933,25635,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 2405.218372][T25635] (syz.3.4933,25635,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 2405.226122][T25635] (syz.3.4933,25635,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 2405.234988][T25635] (syz.3.4933,25635,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 2405.342133][ T5792] Bluetooth: hci1: command tx timeout [ 2405.682927][T17719] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2405.915687][T17719] usb 2-1: Using ep0 maxpacket: 8 [ 2406.209080][T17719] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2406.252014][T17719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2406.279718][T17719] usb 2-1: Product: syz [ 2406.297027][T17719] usb 2-1: Manufacturer: syz [ 2406.318783][T17719] usb 2-1: SerialNumber: syz [ 2406.342395][ T1278] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2406.354163][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.367747][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.401569][T17719] usb 2-1: config 0 descriptor?? [ 2406.772723][T22789] hsr_slave_0: left promiscuous mode [ 2406.783575][T22789] hsr_slave_1: left promiscuous mode [ 2406.789476][T22789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2406.808920][T22789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2406.833140][T22789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2406.840968][T22789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2406.849019][T22789] bridge_slave_1: left allmulticast mode [ 2406.855075][T22789] bridge_slave_1: left promiscuous mode [ 2406.861122][T22789] bridge0: port 2(bridge_slave_1) entered disabled state [ 2406.871130][T22789] bridge_slave_0: left allmulticast mode [ 2406.877151][T22789] bridge_slave_0: left promiscuous mode [ 2406.890178][T22789] bridge0: port 1(bridge_slave_0) entered disabled state [ 2406.974546][T22789] veth1_macvtap: left promiscuous mode [ 2406.981691][T22789] veth0_macvtap: left promiscuous mode [ 2406.992699][T22789] veth1_vlan: left promiscuous mode [ 2407.003200][T22789] veth0_vlan: left promiscuous mode [ 2407.118788][T17719] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 2407.126387][T17719] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 2407.145351][T17719] usb 2-1: USB disconnect, device number 68 [ 2407.225108][T22789] bond6 (unregistering): (slave veth3): Releasing active interface [ 2407.235821][T22789] vlan2 (unregistering): entered promiscuous mode [ 2407.242318][T22789] veth1 (unregistering): entered promiscuous mode [ 2407.270167][T22789] bond6 (unregistering): (slave vlan2): Releasing active interface [ 2407.284600][T22789] vlan2 (unregistering): left promiscuous mode [ 2407.290835][T22789] veth1 (unregistering): left promiscuous mode [ 2407.363745][ T5792] Bluetooth: hci1: command tx timeout [ 2407.438377][T22789] bond6 (unregistering): Released all slaves [ 2407.653466][T22789] bond5 (unregistering): Released all slaves [ 2407.820053][T22789] bond4 (unregistering): Released all slaves [ 2407.839161][T22789] bond3 (unregistering): Released all slaves [ 2407.990048][T22789] bond2 (unregistering): Released all slaves [ 2408.009415][T22789] bond1 (unregistering): Released all slaves [ 2408.026362][T22789] bond0 (unregistering): Released all slaves [ 2408.591937][T22789] team0 (unregistering): Port device team_slave_1 removed [ 2408.660946][T22789] team0 (unregistering): Port device team_slave_0 removed [ 2408.722259][T22789]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 2408.783369][T22789]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 2409.443757][T22789]  (unregistering): Released all slaves [ 2410.235683][T25662] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4940'. [ 2411.144525][T25669] syz.1.4942: attempt to access beyond end of device [ 2411.144525][T25669] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2411.157245][T25669] (syz.1.4942,25669,1):ocfs2_get_sector:1772 ERROR: status = -5 [ 2411.164911][T25669] (syz.1.4942,25669,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 2411.172266][T25669] (syz.1.4942,25669,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 2411.180942][T25669] (syz.1.4942,25669,1):ocfs2_fill_super:1178 ERROR: status = -5 [ 2411.629940][T22789] IPVS: stop unused estimator thread 0... [ 2411.891537][T25549] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2411.898364][T14611] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2411.907012][ T5850] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2411.916868][T25549] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2412.161271][ T5850] usb 4-1: Using ep0 maxpacket: 8 [ 2412.161881][T14611] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2412.184301][T14611] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2412.187877][T25549] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2412.194654][T14611] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2412.212947][T14611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2412.257201][T25683] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2412.265437][ T5850] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2412.301304][T14611] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 2412.308915][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2412.321320][ T5850] usb 4-1: Product: syz [ 2412.328581][ T5850] usb 4-1: Manufacturer: syz [ 2412.337899][ T5850] usb 4-1: SerialNumber: syz [ 2412.364498][T25549] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2412.383457][ T5850] usb 4-1: config 0 descriptor?? [ 2412.844498][ T8] usb 2-1: USB disconnect, device number 69 [ 2412.989579][ T5850] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 2413.018968][ T5850] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 2413.082171][ T5850] usb 4-1: USB disconnect, device number 70 [ 2414.183892][T25549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2414.310404][T25549] 8021q: adding VLAN 0 to HW filter on device team0 [ 2415.195383][ T4416] bridge0: port 1(bridge_slave_0) entered blocking state [ 2415.202572][ T4416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2415.212970][ T4416] bridge0: port 2(bridge_slave_1) entered blocking state [ 2415.220113][ T4416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2415.243253][T25724] syz.3.4951: attempt to access beyond end of device [ 2415.243253][T25724] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2415.255989][T25724] (syz.3.4951,25724,1):ocfs2_get_sector:1772 ERROR: status = -5 [ 2415.263680][T25724] (syz.3.4951,25724,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 2415.271037][T25724] (syz.3.4951,25724,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 2415.279848][T25724] (syz.3.4951,25724,1):ocfs2_fill_super:1178 ERROR: status = -5 [ 2415.472988][T25728] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4952'. [ 2417.100847][ T28] audit: type=1800 audit(1753287630.337:153): pid=25745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4956" name="bus" dev="overlay" ino=665 res=0 errno=0 [ 2417.876779][T25549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2417.919849][ T5792] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 2418.036037][T25549] veth0_vlan: entered promiscuous mode [ 2418.498410][T25766] syz.3.4961: attempt to access beyond end of device [ 2418.498410][T25766] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2418.516565][T25766] (syz.3.4961,25766,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 2418.528358][T25766] (syz.3.4961,25766,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 2418.537005][T25766] (syz.3.4961,25766,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 2418.558058][T25766] (syz.3.4961,25766,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 2418.583010][T14611] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2418.755248][T25549] veth1_vlan: entered promiscuous mode [ 2418.793082][T14611] usb 2-1: Using ep0 maxpacket: 8 [ 2418.815373][T14611] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2418.824627][T14611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2418.832736][T14611] usb 2-1: Product: syz [ 2418.837047][T14611] usb 2-1: Manufacturer: syz [ 2418.842945][T14611] usb 2-1: SerialNumber: syz [ 2418.875430][T14611] usb 2-1: config 0 descriptor?? [ 2419.115196][T25549] veth0_macvtap: entered promiscuous mode [ 2419.379316][T25549] veth1_macvtap: entered promiscuous mode [ 2419.498134][T25549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2419.577922][T25549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2419.642450][T14611] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 2419.655585][T25549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2419.672493][T14611] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 2419.680735][T25549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2419.703226][T25549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2419.723618][T25549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2419.854768][T14611] usb 2-1: USB disconnect, device number 70 [ 2420.229634][T25549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2420.288381][T25549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2420.371477][T25549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2420.424399][T25549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2420.544062][T25549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2420.554707][T25549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2420.565958][T25549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2421.313701][T25549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2421.353000][ T28] audit: type=1800 audit(1753287634.857:154): pid=25797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4966" name="bus" dev="overlay" ino=699 res=0 errno=0 [ 2421.422386][T25549] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2421.474527][T25549] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2421.503031][T25549] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2421.531472][T25549] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2421.616121][ T28] audit: type=1800 audit(1753287635.127:155): pid=25808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4969" name="bus" dev="overlay" ino=195 res=0 errno=0 [ 2421.737457][ T5792] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 2421.916081][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2421.937876][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2422.059705][T14270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2422.203033][T14270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2422.359123][T22429] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2422.645390][T22429] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2422.677421][T22429] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2422.690313][T22429] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2422.702064][T22429] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2422.737727][T25820] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2423.024387][T22429] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 2424.139139][T22429] usb 4-1: USB disconnect, device number 71 [ 2425.889511][ T28] audit: type=1800 audit(1753287639.287:156): pid=25850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4976" name="bus" dev="overlay" ino=728 res=0 errno=0 [ 2427.217813][ T28] audit: type=1800 audit(1753287640.727:157): pid=25871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4979" name="bus" dev="overlay" ino=742 res=0 errno=0 [ 2428.521054][T21890] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2428.544661][T21890] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2428.553423][T21890] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2428.574734][T21890] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2428.582497][T21890] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2428.589886][T21890] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2428.923354][T14611] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2429.040301][ T2937] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2429.156756][T14611] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2429.190421][T14611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2429.213906][T14611] usb 2-1: Product: syz [ 2429.224903][T14611] usb 2-1: Manufacturer: syz [ 2429.230795][T14611] usb 2-1: SerialNumber: syz [ 2429.301820][T14611] usb 2-1: config 0 descriptor?? [ 2429.338802][ T2937] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2429.359305][ T28] audit: type=1800 audit(1753287642.867:158): pid=25902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4986" name="bus" dev="overlay" ino=55 res=0 errno=0 [ 2429.532139][ T2937] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2429.587730][T14611] hso 2-1:0.0: Failed to find INT IN ep [ 2429.661607][T14611] usb-storage 2-1:0.0: USB Mass Storage device detected [ 2429.817573][ T2937] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2429.902890][T22429] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 2430.077004][T25890] chnl_net:caif_netlink_parms(): no params data found [ 2430.115228][T22429] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2430.136722][T22429] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2430.152204][T22429] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2430.161400][T22429] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2430.238513][T25906] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2430.268870][T22429] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 2430.633697][T21890] Bluetooth: hci0: command tx timeout [ 2430.676971][T22429] usb 1-1: USB disconnect, device number 80 [ 2430.821388][T25890] bridge0: port 1(bridge_slave_0) entered blocking state [ 2430.829548][T25890] bridge0: port 1(bridge_slave_0) entered disabled state [ 2430.841107][T25890] bridge_slave_0: entered allmulticast mode [ 2430.860269][T25890] bridge_slave_0: entered promiscuous mode [ 2430.887433][T25890] bridge0: port 2(bridge_slave_1) entered blocking state [ 2430.900341][T25890] bridge0: port 2(bridge_slave_1) entered disabled state [ 2430.917130][T25890] bridge_slave_1: entered allmulticast mode [ 2430.936705][T25890] bridge_slave_1: entered promiscuous mode [ 2431.250097][T21890] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 2431.362036][T25890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2432.262953][ T28] audit: type=1800 audit(1753287645.757:159): pid=25937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4990" name="bus" dev="overlay" ino=766 res=0 errno=0 [ 2432.361422][ T2937] bond1: (slave gretap1): Releasing active interface [ 2432.422309][T25890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2432.696046][T25949] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4992'. [ 2432.810735][T21890] Bluetooth: hci0: command tx timeout [ 2433.175871][T17719] usb 2-1: USB disconnect, device number 71 [ 2433.255804][T25890] team0: Port device team_slave_0 added [ 2433.785862][T25890] team0: Port device team_slave_1 added [ 2433.845652][ T28] audit: type=1800 audit(1753287647.337:160): pid=25959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4994" name="bus" dev="overlay" ino=86 res=0 errno=0 [ 2434.071481][T25890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2434.084147][T25890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2434.116805][T25890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2434.156326][T25890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2434.172905][T25890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2434.202270][T25890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2434.300006][T25890] hsr_slave_0: entered promiscuous mode [ 2434.305847][T17719] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2434.324664][T25890] hsr_slave_1: entered promiscuous mode [ 2434.416208][ T2937] hsr_slave_0: left promiscuous mode [ 2434.435246][ T2937] hsr_slave_1: left promiscuous mode [ 2434.450624][ T2937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2434.467744][ T2937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2434.484929][ T2937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2434.492610][ T2937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2434.501735][T17719] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2434.513328][T17719] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2434.526998][ T2937] bridge_slave_1: left allmulticast mode [ 2434.533329][T17719] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2434.561165][ T2937] bridge_slave_1: left promiscuous mode [ 2434.571628][T17719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2434.581263][ T2937] bridge0: port 2(bridge_slave_1) entered disabled state [ 2434.598212][T25963] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2434.612219][T17719] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 2434.622269][ T2937] bridge_slave_0: left allmulticast mode [ 2434.677734][ T2937] bridge_slave_0: left promiscuous mode [ 2434.711114][ T2937] bridge0: port 1(bridge_slave_0) entered disabled state [ 2434.873051][T21890] Bluetooth: hci0: command tx timeout [ 2434.919917][T25590] usb 2-1: USB disconnect, device number 72 [ 2434.943083][ T2937] veth1_macvtap: left promiscuous mode [ 2434.949058][ T2937] veth0_macvtap: left promiscuous mode [ 2434.964025][ T2937] veth1_vlan: left promiscuous mode [ 2434.971696][ T2937] veth0_vlan: left promiscuous mode [ 2435.689443][ T2937] bond2 (unregistering): Released all slaves [ 2435.919939][ T2937] bond1 (unregistering): Released all slaves [ 2436.962895][T21890] Bluetooth: hci0: command tx timeout [ 2438.443398][ T2937] team0 (unregistering): Port device team_slave_1 removed [ 2438.509749][ T2937] team0 (unregistering): Port device team_slave_0 removed [ 2438.564427][ T2937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2438.670921][ T2937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2438.893084][T17719] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 2439.099812][T17719] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2439.108978][T17719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2439.120943][T17719] usb 1-1: Product: syz [ 2439.159906][T17719] usb 1-1: Manufacturer: syz [ 2439.164627][T17719] usb 1-1: SerialNumber: syz [ 2439.181525][T17719] usb 1-1: config 0 descriptor?? [ 2439.412312][T17719] hso 1-1:0.0: Failed to find INT IN ep [ 2439.420280][T17719] usb-storage 1-1:0.0: USB Mass Storage device detected [ 2439.450275][ T2937] bond0 (unregistering): Released all slaves [ 2439.843012][ T28] audit: type=1800 audit(1753287653.317:161): pid=26010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5003" name="bus" dev="overlay" ino=801 res=0 errno=0 [ 2439.974371][T26013] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5002'. [ 2442.213133][T14607] usb 1-1: USB disconnect, device number 81 [ 2442.362723][ T2937] IPVS: stop unused estimator thread 0... [ 2444.759374][T25890] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2444.848080][T25890] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2444.904155][T25890] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2444.944097][T25890] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2445.415644][ T28] audit: type=1800 audit(1753287658.547:162): pid=26071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5011" name="bus" dev="overlay" ino=286 res=0 errno=0 [ 2445.696330][T26072] syz.2.5012: attempt to access beyond end of device [ 2445.696330][T26072] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2445.710930][T26072] (syz.2.5012,26072,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 2445.719202][T26072] (syz.2.5012,26072,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 2445.729093][T26072] (syz.2.5012,26072,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 2445.738328][T26072] (syz.2.5012,26072,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 2446.210682][T25890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2446.316564][T25890] 8021q: adding VLAN 0 to HW filter on device team0 [ 2446.347455][T11682] bridge0: port 1(bridge_slave_0) entered blocking state [ 2446.354606][T11682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2447.057221][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 2447.064383][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2447.103102][ T23] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2447.203029][T14607] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2447.546897][ T23] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2447.556116][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2447.564274][ T23] usb 2-1: Product: syz [ 2447.571005][ T23] usb 2-1: Manufacturer: syz [ 2447.575855][ T23] usb 2-1: SerialNumber: syz [ 2447.606373][ T23] usb 2-1: config 0 descriptor?? [ 2447.845473][T14607] usb 3-1: Using ep0 maxpacket: 8 [ 2447.853284][ T23] hso 2-1:0.0: Failed to find INT IN ep [ 2447.889898][T14607] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2447.911124][T14607] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2447.914277][ T23] usb-storage 2-1:0.0: USB Mass Storage device detected [ 2448.003055][T14607] usb 3-1: Product: syz [ 2448.033248][T14607] usb 3-1: Manufacturer: syz [ 2448.037985][T14607] usb 3-1: SerialNumber: syz [ 2448.050977][T14607] usb 3-1: config 0 descriptor?? [ 2448.351836][T25890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2448.509084][T25890] veth0_vlan: entered promiscuous mode [ 2448.533949][T25890] veth1_vlan: entered promiscuous mode [ 2448.657244][T25890] veth0_macvtap: entered promiscuous mode [ 2448.689421][T25890] veth1_macvtap: entered promiscuous mode [ 2448.762121][T14607] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71 [ 2448.785470][T25890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2448.796673][T14607] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 2448.807590][T25890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2448.832153][T14607] usb 3-1: USB disconnect, device number 68 [ 2448.845552][T25890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2448.863638][T25890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2448.874873][T25890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2448.886738][T25890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2448.901070][T25890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2448.921305][T25890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2448.976571][T25890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2448.986672][T25890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2448.997226][T25890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2449.007377][T25890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2449.018315][T25890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2449.031157][T25890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2449.097806][T25890] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2449.145539][T25890] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2449.223083][T25890] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2449.251340][T25890] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2450.130751][T11682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2450.159924][T11682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2450.261119][T11682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2450.271514][T11682] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2450.434212][T22917] usb 2-1: USB disconnect, device number 73 [ 2450.505157][T26141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4978'. [ 2450.654409][T26144] syz.0.5022: attempt to access beyond end of device [ 2450.654409][T26144] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2450.667515][T26144] (syz.0.5022,26144,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 2450.675404][T26144] (syz.0.5022,26144,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 2450.682962][T26144] (syz.0.5022,26144,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 2450.691722][T26144] (syz.0.5022,26144,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 2452.669164][T26161] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5027'. [ 2455.350668][T26193] syz.2.5034: attempt to access beyond end of device [ 2455.350668][T26193] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2455.366924][T26193] (syz.2.5034,26193,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 2455.377002][T26193] (syz.2.5034,26193,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 2455.384625][T26193] (syz.2.5034,26193,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 2455.397000][T26193] (syz.2.5034,26193,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 2457.162361][ T28] audit: type=1800 audit(1753287670.667:163): pid=26213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5041" name="bus" dev="overlay" ino=863 res=0 errno=0 [ 2458.832108][ T28] audit: type=1800 audit(1753287671.597:164): pid=26230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5044" name="bus" dev="overlay" ino=332 res=0 errno=0 [ 2461.747763][ T28] audit: type=1800 audit(1753287675.197:165): pid=26269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5052" name="bus" dev="overlay" ino=181 res=0 errno=0 [ 2462.621127][T26289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5058'. [ 2465.882882][ T8] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2466.182912][ T8] usb 4-1: device descriptor read/64, error -71 [ 2466.727972][T26333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5070'. [ 2467.237603][ T8] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2467.392951][ T8] usb 4-1: device descriptor read/64, error -71 [ 2467.639442][ T8] usb usb4-port1: attempt power cycle [ 2467.766429][ T1278] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2467.776179][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.889925][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.164126][ T8] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2468.443169][ T8] usb 4-1: device descriptor read/8, error -71 [ 2470.317651][T26368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5080'. [ 2471.162022][ T28] audit: type=1800 audit(1753287684.667:166): pid=26376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5083" name="bus" dev="overlay" ino=100 res=0 errno=0 [ 2471.673147][T22917] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2471.720655][ T8] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2471.843161][T22917] usb 1-1: device descriptor read/64, error -71 [ 2472.013506][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 2472.048078][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2472.061120][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2472.088136][ T8] usb 3-1: Product: syz [ 2472.092332][ T8] usb 3-1: Manufacturer: syz [ 2472.113908][T22917] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2472.155512][ T8] usb 3-1: SerialNumber: syz [ 2472.256859][ T8] usb 3-1: config 0 descriptor?? [ 2472.292990][T22917] usb 1-1: device descriptor read/64, error -71 [ 2472.416077][T22917] usb usb1-port1: attempt power cycle [ 2473.013048][T22917] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 2473.137809][T22917] usb 1-1: device descriptor read/8, error -71 [ 2473.236863][ T8] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71 [ 2473.247731][ T8] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 2473.276226][ T8] usb 3-1: USB disconnect, device number 69 [ 2473.413078][T22917] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 2473.466842][T22917] usb 1-1: device descriptor read/8, error -71 [ 2473.626942][T22917] usb usb1-port1: unable to enumerate USB device [ 2475.154041][T26409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5092'. [ 2476.538911][T26422] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5096'. [ 2481.953081][T26463] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5107'. [ 2483.961394][ T28] audit: type=1800 audit(1753287697.447:167): pid=26476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5111" name="bus" dev="overlay" ino=162 res=0 errno=0 [ 2485.359623][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 2490.683165][T26541] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5130'. [ 2490.958772][T14611] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2491.165052][T14611] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2491.180106][T14611] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2491.213642][T14611] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2491.248410][T14611] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 2491.283144][T14611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2491.324447][T14611] usb 2-1: config 0 descriptor?? [ 2491.865163][T14611] uclogic 0003:5543:0064.0011: item fetching failed at offset 5/7 [ 2491.932149][T14611] uclogic 0003:5543:0064.0011: parse failed [ 2491.943849][T14611] uclogic: probe of 0003:5543:0064.0011 failed with error -22 [ 2492.677164][ T5850] usb 2-1: USB disconnect, device number 74 [ 2495.183055][T14611] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2495.492923][T14611] usb 4-1: device descriptor read/64, error -71 [ 2495.709916][T26580] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5140'. [ 2495.864499][T14611] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2496.212974][T14611] usb 4-1: device descriptor read/64, error -71 [ 2496.419470][T14611] usb usb4-port1: attempt power cycle [ 2497.075523][ T8] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2497.263901][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 2497.289171][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2497.310795][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2497.413234][T14611] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2497.485207][T14611] usb 4-1: device descriptor read/8, error -71 [ 2497.488863][ T8] usb 2-1: Product: syz [ 2497.553120][ T8] usb 2-1: Manufacturer: syz [ 2497.557818][ T8] usb 2-1: SerialNumber: syz [ 2497.573930][ T8] usb 2-1: config 0 descriptor?? [ 2497.763789][T14611] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2498.004933][T14611] usb 4-1: device descriptor read/8, error -71 [ 2498.168758][T14611] usb usb4-port1: unable to enumerate USB device [ 2498.668440][ T8] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -110 [ 2499.042903][ T8] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -110 [ 2499.116280][ T8] usb 2-1: USB disconnect, device number 75 [ 2500.288155][T26626] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5152'. [ 2501.393074][T14611] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 2501.562903][T26645] (null): rxe_set_mtu: Set mtu to 1024 [ 2501.562960][T14611] usb 1-1: device descriptor read/64, error -71 [ 2501.578049][T26645] wg1 speed is unknown, defaulting to 1000 [ 2501.662180][T26645] wg1 speed is unknown, defaulting to 1000 [ 2501.739840][T26645] wg1 speed is unknown, defaulting to 1000 [ 2501.852958][T14611] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 2502.024530][T14611] usb 1-1: device descriptor read/64, error -71 [ 2502.250568][T14611] usb usb1-port1: attempt power cycle [ 2503.248332][T14611] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 2503.647370][T14611] usb 1-1: device descriptor read/8, error -71 [ 2504.083405][T14611] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 2504.490377][T14611] usb 1-1: device not accepting address 89, error -71 [ 2504.509042][T14611] usb usb1-port1: unable to enumerate USB device [ 2504.922966][T14611] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 2506.182865][T14611] usb 1-1: Using ep0 maxpacket: 8 [ 2506.379431][T14611] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2506.412810][T14611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2506.439411][T26645] infiniband : set active [ 2506.444027][T14611] usb 1-1: Product: syz [ 2506.449150][T26645] infiniband : added wg1 [ 2506.454504][T26645] : rxe_create_cq: returned err = -12 [ 2506.460632][T26645] infiniband : Couldn't create ib_mad CQ [ 2506.467784][T14611] usb 1-1: Manufacturer: syz [ 2506.485095][T26645] infiniband : Couldn't open port 1 [ 2506.490873][T14611] usb 1-1: SerialNumber: syz [ 2506.505835][T14611] usb 1-1: config 0 descriptor?? [ 2506.516730][T22917] wg1 speed is unknown, defaulting to 1000 [ 2506.603906][T26675] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5165'. [ 2506.908440][T26645] RDS/IB: : added [ 2506.994092][T26645] smc: adding ib device  with port count 1 [ 2507.110165][T26645] smc: ib device  port 1 has pnetid [ 2507.144665][T22917] wg1 speed is unknown, defaulting to 1000 [ 2507.153028][T26645] wg1 speed is unknown, defaulting to 1000 [ 2507.232615][T26680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5166'. [ 2507.402618][T14611] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 2507.630495][T14611] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 2507.703119][T14611] usb 1-1: USB disconnect, device number 90 [ 2507.746651][T26645] wg1 speed is unknown, defaulting to 1000 [ 2508.195591][T26645] wg1 speed is unknown, defaulting to 1000 [ 2509.162916][T26645] wg1 speed is unknown, defaulting to 1000 [ 2509.572359][T14601] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2509.858755][T14601] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2510.185912][T14601] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2510.390377][T14601] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2510.502453][T14601] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2510.819185][T26714] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5176'. [ 2511.184092][ T23] usb 3-1: USB disconnect, device number 70 [ 2511.882250][T21890] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 2514.032928][T14601] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2514.070826][ T28] audit: type=1800 audit(1753287727.557:168): pid=26739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5183" name="bus" dev="overlay" ino=1066 res=0 errno=0 [ 2514.222918][T14601] usb 4-1: Using ep0 maxpacket: 8 [ 2514.241222][T14601] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2514.250777][T14601] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2514.262260][T14601] usb 4-1: Product: syz [ 2514.307888][T14601] usb 4-1: Manufacturer: syz [ 2514.342076][T14601] usb 4-1: SerialNumber: syz [ 2514.357931][T14601] usb 4-1: config 0 descriptor?? [ 2515.971179][T14601] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -110 [ 2516.427412][T14601] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -110 [ 2517.426612][T14601] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2517.516033][T22917] usb 4-1: USB disconnect, device number 80 [ 2517.870781][T14601] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2517.894367][T14601] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2517.907294][T14601] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2518.126883][T14601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2518.367922][T14601] usb 2-1: USB disconnect, device number 76 [ 2520.047483][T26835] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5195'. [ 2521.117179][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 2525.635578][T14601] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2525.887070][T14601] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2525.899432][T14601] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2525.910486][T14601] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2526.033829][T14601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2526.693776][T22429] usb 4-1: USB disconnect, device number 81 [ 2528.323139][T22429] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2528.572514][T22429] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2528.682796][T22429] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2528.755032][T22429] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2528.793327][T22429] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 2528.812709][T22429] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2528.833460][T22429] usb 4-1: config 0 descriptor?? [ 2529.208888][ T1278] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2529.487282][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.498488][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.570414][T22429] uclogic 0003:5543:0064.0012: item fetching failed at offset 5/7 [ 2529.579289][T22429] uclogic 0003:5543:0064.0012: parse failed [ 2529.588731][T22429] uclogic: probe of 0003:5543:0064.0012 failed with error -22 [ 2529.684403][T22429] usb 4-1: USB disconnect, device number 82 [ 2529.729976][T26898] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2529.739583][T26898] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2529.748426][T26898] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2529.757259][T26898] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2529.769861][T26896] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 2530.222875][T14611] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 2531.172927][T14611] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2531.181975][T14611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2531.236780][T14611] usb 1-1: Product: syz [ 2531.241052][T14611] usb 1-1: Manufacturer: syz [ 2531.302961][T14611] usb 1-1: SerialNumber: syz [ 2531.337550][T14611] usb 1-1: config 0 descriptor?? [ 2531.555586][T14611] hso 1-1:0.0: Failed to find INT IN ep [ 2532.090105][T14611] usb-storage 1-1:0.0: USB Mass Storage device detected [ 2534.471182][T14611] usb 1-1: USB disconnect, device number 91 [ 2537.511955][ T28] audit: type=1800 audit(1753287751.017:169): pid=26993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5228" name="bus" dev="overlay" ino=1143 res=0 errno=0 [ 2539.598175][T27009] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5231'. [ 2540.272830][ T8] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2540.545634][ T8] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2540.556449][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2540.582411][ T8] usb 3-1: Product: syz [ 2540.827267][ T8] usb 3-1: Manufacturer: syz [ 2540.996770][ T8] usb 3-1: SerialNumber: syz [ 2541.087373][ T8] usb 3-1: config 0 descriptor?? [ 2541.322239][ T8] hso 3-1:0.0: Failed to find INT IN ep [ 2541.439154][ T8] usb-storage 3-1:0.0: USB Mass Storage device detected [ 2541.517783][ T28] audit: type=1800 audit(1753287755.017:170): pid=27052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5237" name="bus" dev="overlay" ino=509 res=0 errno=0 [ 2543.776066][T27078] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5243'. [ 2544.458592][T27085] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2544.467594][T27085] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2544.476412][T27085] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2544.485256][T27085] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2545.024424][T27084] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 2546.025663][ T28] audit: type=1800 audit(1753287759.507:171): pid=27094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5248" name="bus" dev="overlay" ino=375 res=0 errno=0 [ 2547.088868][ T23] usb 3-1: USB disconnect, device number 71 [ 2547.640963][T27107] (null): rxe_set_mtu: Set mtu to 1024 [ 2547.650691][T27107] rdma_rxe: rxe_newlink: failed to add wg1 [ 2551.761962][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 2553.514906][T27151] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5263'. [ 2558.102332][ T28] audit: type=1800 audit(1753287771.607:172): pid=27183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5272" name="bus" dev="overlay" ino=619 res=0 errno=0 [ 2558.257484][T27188] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5274'. [ 2560.782949][T22429] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2561.059822][T22429] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2561.082903][T22429] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2561.093695][T22429] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2561.107007][T22429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2561.120500][T27202] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2561.132868][T22429] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 2561.626751][T22429] usb 2-1: USB disconnect, device number 77 [ 2563.559824][ T28] audit: type=1800 audit(1753287777.067:173): pid=27225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5284" name="bus" dev="overlay" ino=428 res=0 errno=0 [ 2564.528194][T27232] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5285'. [ 2565.023693][T27237] overlayfs: missing 'lowerdir' [ 2567.158583][T27276] (null): rxe_set_mtu: Set mtu to 1024 [ 2567.200047][T27276] rdma_rxe: rxe_newlink: failed to add wg1 [ 2568.153256][T22917] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2568.440570][T22917] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2568.476397][T22917] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2569.292495][T22917] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2569.312897][T22917] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2569.322028][T22917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2569.354170][T22917] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 2569.361948][T22917] usb 4-1: invalid MIDI out EP 0 [ 2569.497459][ T28] audit: type=1800 audit(1753287782.977:174): pid=27295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5295" name="bus" dev="overlay" ino=1266 res=0 errno=0 [ 2569.723697][T22917] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 2570.412907][T22917] usb 4-1: USB disconnect, device number 83 [ 2570.738335][T27311] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5298'. [ 2571.562848][T22917] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2571.850404][T22917] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2571.862785][T22917] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2571.872657][T22917] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2571.883271][T22917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2571.900332][T27316] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2571.938530][T22917] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 2572.406049][T14601] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 2572.427335][T27328] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 2572.523043][T27326] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2572.531810][T27326] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2572.540592][T27326] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2572.549339][T27326] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2572.653116][T14601] usb 1-1: Using ep0 maxpacket: 8 [ 2572.661742][T14601] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2572.675455][T14601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2572.699222][T14601] usb 1-1: Product: syz [ 2572.718027][T14601] usb 1-1: Manufacturer: syz [ 2572.724225][T14601] usb 1-1: SerialNumber: syz [ 2572.743724][T14601] usb 1-1: config 0 descriptor?? [ 2572.776907][T14611] usb 3-1: USB disconnect, device number 72 [ 2573.262607][T14601] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 2573.323178][T14601] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 2573.364719][T14601] usb 1-1: USB disconnect, device number 92 [ 2573.511476][T27341] overlayfs: missing 'lowerdir' [ 2575.122987][T14601] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2577.028132][T14601] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2577.050233][T14601] usb 3-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2577.062199][T14601] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2577.076807][T14601] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2577.170327][T14601] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 2577.182678][T14601] usb 3-1: invalid MIDI out EP 0 [ 2577.900285][T27361] (null): rxe_set_mtu: Set mtu to 1024 [ 2577.943886][T27361] rdma_rxe: rxe_newlink: failed to add wg1 [ 2578.040150][T14601] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 2578.061710][T14601] usb 3-1: USB disconnect, device number 73 [ 2581.234294][T27397] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 2583.913355][T14601] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2584.008904][ T28] audit: type=1800 audit(1753287797.517:175): pid=27416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5327" name="bus" dev="overlay" ino=721 res=0 errno=0 [ 2584.260848][T14601] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2584.280782][T14601] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2584.302818][T14601] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2584.309473][T14601] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 2584.968088][T14601] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2584.980028][T14601] usb 3-1: config 0 descriptor?? [ 2586.560886][T14601] uclogic 0003:5543:0064.0013: item fetching failed at offset 5/7 [ 2586.657849][T14601] uclogic 0003:5543:0064.0013: parse failed [ 2586.686572][T14601] uclogic: probe of 0003:5543:0064.0013 failed with error -22 [ 2586.741333][T14601] usb 3-1: USB disconnect, device number 74 [ 2588.441103][ T28] audit: type=1800 audit(1753287801.927:176): pid=27451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5337" name="bus" dev="overlay" ino=494 res=0 errno=0 [ 2589.312492][T27465] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5341'. [ 2590.719855][ T1278] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2590.729034][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.742200][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2592.346644][ T28] audit: type=1800 audit(1753287805.857:177): pid=27497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5351" name="bus" dev="overlay" ino=518 res=0 errno=0 [ 2592.407061][T27495] sd 0:0:1:0: PR command failed: 1026 [ 2592.412525][T27495] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 2592.420753][T27495] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 2592.533089][T22429] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 2592.613920][T14601] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2592.764508][T22429] usb 1-1: Using ep0 maxpacket: 8 [ 2592.820387][T22429] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2592.860694][T22429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2592.902777][T14601] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2592.923298][T14601] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2592.935832][T22429] usb 1-1: Product: syz [ 2593.096337][T22429] usb 1-1: Manufacturer: syz [ 2593.101306][T14601] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2593.109282][T22429] usb 1-1: SerialNumber: syz [ 2593.116034][T14601] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 2593.613381][T22429] usb 1-1: config 0 descriptor?? [ 2593.638106][T14601] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2593.734244][T14601] usb 3-1: config 0 descriptor?? [ 2594.256017][T14601] uclogic 0003:5543:0064.0014: item fetching failed at offset 5/7 [ 2594.325428][T14601] uclogic 0003:5543:0064.0014: parse failed [ 2594.365815][T14601] uclogic: probe of 0003:5543:0064.0014 failed with error -22 [ 2594.375581][T22429] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 2594.410034][T22429] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 2594.423233][T22429] usb 1-1: USB disconnect, device number 93 [ 2594.531478][T14601] usb 3-1: USB disconnect, device number 75 [ 2597.852082][T27535] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5358'. [ 2598.428244][ T28] audit: type=1800 audit(1753287811.887:178): pid=27541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5360" name="bus" dev="overlay" ino=553 res=0 errno=0 [ 2601.372968][T14607] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2601.503046][T19792] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 2602.036068][T19792] usb 1-1: Using ep0 maxpacket: 8 [ 2602.044762][T19792] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2602.057659][T19792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2602.091474][T19792] usb 1-1: config 0 descriptor?? [ 2602.310921][T14607] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2602.323235][T14607] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2602.333448][T14607] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2602.340231][T14607] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 2602.349530][T14607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2602.364259][T14607] usb 4-1: config 0 descriptor?? [ 2603.172622][T14607] uclogic 0003:5543:0064.0015: item fetching failed at offset 5/7 [ 2603.252129][T14607] uclogic 0003:5543:0064.0015: parse failed [ 2603.528662][T14607] uclogic: probe of 0003:5543:0064.0015 failed with error -22 [ 2603.541840][T14607] usb 4-1: USB disconnect, device number 84 [ 2603.667454][T27588] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5371'. [ 2604.561220][T19792] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2605.285282][T19792] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 2605.767846][T19792] asix: probe of 1-1:0.0 failed with error -71 [ 2605.782662][T19792] usb 1-1: USB disconnect, device number 94 [ 2607.762868][T22429] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2607.944898][T22429] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2607.960354][T22429] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2607.970669][T22429] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 2608.004296][T22429] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2608.580120][T22429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2608.619649][T22429] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 2608.770638][T27623] udevd[27623]: setting mode of /dev/dmmidi3 to 020660 failed: No such file or directory [ 2608.795029][T22429] snd-usb-audio: probe of 2-1:27.0 failed with error -12 [ 2608.798568][ T5850] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 2608.809844][T27560] udevd[27560]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2608.861333][T27623] udevd[27623]: setting owner of /dev/dmmidi3 to uid=0, gid=29 failed: No such file or directory [ 2608.985416][T22429] usb 2-1: USB disconnect, device number 78 [ 2609.066655][ T5850] usb 1-1: Using ep0 maxpacket: 8 [ 2609.326478][T27630] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5383'. [ 2609.360650][ T5850] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2609.387900][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2609.396104][ T5850] usb 1-1: Product: syz [ 2609.401923][ T5850] usb 1-1: Manufacturer: syz [ 2609.408156][ T5850] usb 1-1: SerialNumber: syz [ 2609.437813][ T5850] usb 1-1: config 0 descriptor?? [ 2610.915907][ T5850] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -110 [ 2611.243577][ T5850] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -110 [ 2611.289464][T27647] ieee802154 phy0 wpan0: encryption failed: -22 [ 2611.961757][T22429] usb 1-1: USB disconnect, device number 95 [ 2614.112888][T22429] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 2614.324761][T22429] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2614.348076][T22429] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2614.359091][T22429] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 2614.369962][T22429] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2614.393160][T22429] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2614.410686][T27700] sd 0:0:1:0: PR command failed: 1026 [ 2614.459548][T27700] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 2614.502380][T27700] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 2614.548886][T22429] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 2615.332294][T22429] snd-usb-audio: probe of 1-1:27.0 failed with error -12 [ 2615.358053][T27560] udevd[27560]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2615.390787][T22429] usb 1-1: USB disconnect, device number 96 [ 2615.474592][T27710] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5394'. [ 2615.988405][T21890] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 2616.924068][T22429] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2617.133089][T22429] usb 3-1: Using ep0 maxpacket: 8 [ 2617.233919][T22429] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2617.249709][T22429] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2617.378629][T22429] usb 3-1: Product: syz [ 2617.504977][T22429] usb 3-1: Manufacturer: syz [ 2617.665836][T22429] usb 3-1: SerialNumber: syz [ 2617.690500][T22429] usb 3-1: config 0 descriptor?? [ 2618.813224][T22429] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110 [ 2618.820745][T22429] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -110 [ 2618.854424][T14611] usb 3-1: USB disconnect, device number 76 [ 2619.542956][T22429] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2619.687598][T27756] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5409'. [ 2619.811215][T22429] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2619.826261][T22429] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2619.836413][T22429] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2619.879697][T22429] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2619.935797][T27746] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2619.946400][T22429] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 2620.234356][T22429] usb 4-1: USB disconnect, device number 85 [ 2622.080703][T27770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5412'. [ 2623.647995][T27775] overlayfs: overlapping lowerdir path [ 2624.504425][ T8] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2624.705276][T27789] netlink: 'syz.0.5418': attribute type 10 has an invalid length. [ 2625.075456][ T8] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2625.090269][ T8] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2625.105861][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2625.125317][ T8] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 2625.135976][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2625.173613][T27789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2625.228959][ T8] usb 4-1: config 0 descriptor?? [ 2625.237888][T27789] team0: Port device bond0 added [ 2625.344340][T27792] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5419'. [ 2625.967165][ T8] uclogic 0003:5543:0064.0016: item fetching failed at offset 5/7 [ 2625.976524][ T8] uclogic 0003:5543:0064.0016: parse failed [ 2625.982528][ T8] uclogic: probe of 0003:5543:0064.0016 failed with error -22 [ 2626.185613][T14607] usb 4-1: USB disconnect, device number 86 [ 2627.263117][T14607] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2627.873519][T14607] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2627.911162][T14607] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2627.987609][T14607] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2628.106177][T14607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2628.989299][T27803] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2629.001835][T14607] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 2629.290230][T14607] usb 4-1: USB disconnect, device number 87 [ 2629.435660][T14611] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2629.582826][ T23] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2629.654520][T14611] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2629.672785][T14611] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 2629.692769][T14611] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 2629.712781][T14611] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2629.721846][T14611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2629.734984][T27842] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2629.745513][T14611] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 2629.770520][ T23] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2629.808394][ T23] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2629.842936][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2629.852272][ T23] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 2629.870688][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2629.889634][ T23] usb 2-1: config 0 descriptor?? [ 2630.156450][ T8] usb 3-1: USB disconnect, device number 77 [ 2631.074786][ T23] uclogic 0003:5543:0064.0017: item fetching failed at offset 5/7 [ 2631.090600][ T23] uclogic 0003:5543:0064.0017: parse failed [ 2631.096712][ T23] uclogic: probe of 0003:5543:0064.0017 failed with error -22 [ 2631.110033][ T23] usb 2-1: USB disconnect, device number 79 [ 2633.866269][T21890] Bluetooth: hci0: command 0x0406 tx timeout [ 2633.948257][T27898] netlink: 'syz.2.5440': attribute type 10 has an invalid length. [ 2634.021314][T27898] bridge0: port 2(bridge_slave_1) entered disabled state [ 2634.028611][T27898] bridge0: port 1(bridge_slave_0) entered disabled state [ 2634.883235][T19792] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2634.917028][T27898] bridge0: port 2(bridge_slave_1) entered blocking state [ 2634.924277][T27898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2634.931644][T27898] bridge0: port 1(bridge_slave_0) entered blocking state [ 2634.938813][T27898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2634.956071][T27898] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2635.080622][T19792] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2635.091662][T19792] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2635.139242][T19792] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2635.162811][T19792] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2635.177286][T19792] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2635.193057][T22429] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 2635.203702][T19792] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2635.213068][T19792] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2635.221100][T19792] usb 2-1: Product: syz [ 2635.226749][T19792] usb 2-1: Manufacturer: syz [ 2635.245904][T19792] cdc_wdm 2-1:1.0: skipping garbage [ 2635.251200][T19792] cdc_wdm 2-1:1.0: skipping garbage [ 2635.260676][T19792] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2635.271815][T19792] cdc_wdm 2-1:1.0: Unknown control protocol [ 2635.384832][T22429] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2635.397613][T22429] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2635.408221][T22429] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2635.421022][T22429] usb 1-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 2635.430606][T22429] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2635.445015][T22429] usb 1-1: config 0 descriptor?? [ 2635.722516][T19792] usb 2-1: USB disconnect, device number 80 [ 2636.081674][T22429] uclogic 0003:5543:0064.0018: item fetching failed at offset 5/7 [ 2636.204263][T22429] uclogic 0003:5543:0064.0018: parse failed [ 2636.232887][T22429] uclogic: probe of 0003:5543:0064.0018 failed with error -22 [ 2636.276708][T22429] usb 1-1: USB disconnect, device number 97 [ 2636.302449][T27928] ieee802154 phy0 wpan0: encryption failed: -22 [ 2638.411576][T22429] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 2638.632819][T22429] usb 1-1: Using ep0 maxpacket: 8 [ 2638.703815][T22429] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2638.740725][T22429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2638.772202][T27962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5461'. [ 2638.807095][T22429] usb 1-1: Product: syz [ 2638.811282][T22429] usb 1-1: Manufacturer: syz [ 2639.609010][T22429] usb 1-1: SerialNumber: syz [ 2639.623592][T22429] usb 1-1: config 0 descriptor?? [ 2640.071319][T14601] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2640.550984][T14601] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2640.603360][T14601] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2640.651817][T14601] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2640.658592][T22429] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -110 [ 2640.681164][T22429] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -110 [ 2640.688855][T14601] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 2640.702827][T14601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2640.740678][T19792] usb 1-1: USB disconnect, device number 98 [ 2640.746944][T14601] usb 4-1: config 0 descriptor?? [ 2642.324805][T14601] uclogic 0003:5543:0064.0019: item fetching failed at offset 5/7 [ 2642.353882][T14601] uclogic 0003:5543:0064.0019: parse failed [ 2642.360694][T14601] uclogic: probe of 0003:5543:0064.0019 failed with error -22 [ 2642.382312][T14601] usb 4-1: USB disconnect, device number 88 [ 2643.923948][T28007] random: crng reseeded on system resumption [ 2644.500144][T28007] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5470'. [ 2645.808884][ T28] audit: type=1800 audit(1753287859.317:179): pid=28013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5471" name="bus" dev="overlay" ino=788 res=0 errno=0 [ 2647.309735][T28027] ================================================================================ [ 2647.320379][T28027] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl812.c:1152:10 [ 2647.338240][T28027] shift exponent 4194335 is too large for 32-bit type 'int' [ 2647.348750][T28027] CPU: 0 PID: 28027 Comm: syz.0.5475 Not tainted 6.6.99-syzkaller #0 [ 2647.356855][T28027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2647.366950][T28027] Call Trace: [ 2647.370249][T28027] [ 2647.373202][T28027] dump_stack_lvl+0x16c/0x230 [ 2647.377914][T28027] ? show_regs_print_info+0x20/0x20 [ 2647.383134][T28027] ? load_image+0x3b0/0x3b0 [ 2647.387682][T28027] ubsan_epilogue+0xa/0x30 [ 2647.392123][T28027] __ubsan_handle_shift_out_of_bounds+0x380/0x400 [ 2647.398580][T28027] pcl812_attach+0x1cd1/0x2440 [ 2647.403388][T28027] comedi_device_attach+0x519/0x660 [ 2647.408632][T28027] comedi_unlocked_ioctl+0x68d/0xf00 [ 2647.413952][T28027] ? tomoyo_path_number_perm+0x477/0x590 [ 2647.419624][T28027] ? comedi_poll+0x8c0/0x8c0 [ 2647.424270][T28027] ? __fget_files+0x28/0x4d0 [ 2647.428866][T28027] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2647.433802][T28027] ? security_file_ioctl+0x80/0xa0 [ 2647.438921][T28027] ? comedi_poll+0x8c0/0x8c0 [ 2647.443812][T28027] __se_sys_ioctl+0xfd/0x170 [ 2647.448423][T28027] do_syscall_64+0x55/0xb0 [ 2647.452845][T28027] ? clear_bhb_loop+0x40/0x90 [ 2647.457531][T28027] ? clear_bhb_loop+0x40/0x90 [ 2647.462203][T28027] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2647.468100][T28027] RIP: 0033:0x7f250318e9a9 [ 2647.472531][T28027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2647.492135][T28027] RSP: 002b:00007f2503f29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2647.500678][T28027] RAX: ffffffffffffffda RBX: 00007f25033b5fa0 RCX: 00007f250318e9a9 [ 2647.508653][T28027] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 2647.516615][T28027] RBP: 00007f2503210d69 R08: 0000000000000000 R09: 0000000000000000 [ 2647.524588][T28027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2647.532567][T28027] R13: 0000000000000000 R14: 00007f25033b5fa0 R15: 00007ffca3df4848 [ 2647.540549][T28027] [ 2647.701813][T28027] ================================================================================ [ 2647.820932][T28027] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 2647.828177][T28027] CPU: 0 PID: 28027 Comm: syz.0.5475 Not tainted 6.6.99-syzkaller #0 [ 2647.836260][T28027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2647.846418][T28027] Call Trace: [ 2647.849707][T28027] [ 2647.852645][T28027] dump_stack_lvl+0x16c/0x230 [ 2647.857339][T28027] ? show_regs_print_info+0x20/0x20 [ 2647.862544][T28027] ? load_image+0x3b0/0x3b0 [ 2647.867077][T28027] panic+0x2c0/0x710 [ 2647.870993][T28027] ? bpf_jit_dump+0xd0/0xd0 [ 2647.875527][T28027] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2647.881195][T28027] ? check_panic_on_warn+0x70/0xa0 [ 2647.886329][T28027] check_panic_on_warn+0x84/0xa0 [ 2647.891298][T28027] __ubsan_handle_shift_out_of_bounds+0x380/0x400 [ 2647.897765][T28027] pcl812_attach+0x1cd1/0x2440 [ 2647.902560][T28027] comedi_device_attach+0x519/0x660 [ 2647.907786][T28027] comedi_unlocked_ioctl+0x68d/0xf00 [ 2647.913094][T28027] ? tomoyo_path_number_perm+0x477/0x590 [ 2647.918748][T28027] ? comedi_poll+0x8c0/0x8c0 [ 2647.923412][T28027] ? __fget_files+0x28/0x4d0 [ 2647.928029][T28027] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2647.932974][T28027] ? security_file_ioctl+0x80/0xa0 [ 2647.938102][T28027] ? comedi_poll+0x8c0/0x8c0 [ 2647.942708][T28027] __se_sys_ioctl+0xfd/0x170 [ 2647.947312][T28027] do_syscall_64+0x55/0xb0 [ 2647.951736][T28027] ? clear_bhb_loop+0x40/0x90 [ 2647.956417][T28027] ? clear_bhb_loop+0x40/0x90 [ 2647.961100][T28027] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2647.967008][T28027] RIP: 0033:0x7f250318e9a9 [ 2647.971430][T28027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2647.991044][T28027] RSP: 002b:00007f2503f29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2647.999479][T28027] RAX: ffffffffffffffda RBX: 00007f25033b5fa0 RCX: 00007f250318e9a9 [ 2648.007466][T28027] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 2648.015454][T28027] RBP: 00007f2503210d69 R08: 0000000000000000 R09: 0000000000000000 [ 2648.023430][T28027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2648.031407][T28027] R13: 0000000000000000 R14: 00007f25033b5fa0 R15: 00007ffca3df4848 [ 2648.039392][T28027] [ 2648.042623][T28027] Kernel Offset: disabled [ 2648.047026][T28027] Rebooting in 86400 seconds..