last executing test programs: 24m38.947883409s ago: executing program 0 (id=11): shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) 24m37.923375367s ago: executing program 0 (id=13): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close_range(r0, 0xffffffffffffffff, 0x0) 24m37.651146281s ago: executing program 0 (id=15): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xa9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000100)=0xe, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000080)={0x1, r3, 0xfffffffd, 0x4, 0x80000000, 0x2, 0x56afe045}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r4, &(0x7f0000000240), 0x0}, 0x20) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x24040000) socket$nl_netfilter(0x10, 0x3, 0xc) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000180)="04", 0x1}, {0x0}], 0x2, 0x6) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 24m37.380022366s ago: executing program 0 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) fstatfs(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65"], 0x64}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, 0x0, 0x2) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0x0, r5, {0x7, 0x2b, 0x8000, 0x2400, 0x8, 0x8, 0xff, 0x1, 0x0, 0x0, 0x100, 0x4}}, 0x50) landlock_create_ruleset(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) 24m36.626082998s ago: executing program 0 (id=18): syz_emit_ethernet(0x46, &(0x7f00000008c0)=ANY=[], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r1, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 24m33.085321477s ago: executing program 0 (id=23): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) unshare(0x6a040000) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x10, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x2200, 0x0, 0x2}, 0x18, 0x1) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xa}, 0x94) 24m13.853979537s ago: executing program 32 (id=23): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) unshare(0x6a040000) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x10, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x2200, 0x0, 0x2}, 0x18, 0x1) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xa}, 0x94) 6m30.386692338s ago: executing program 4 (id=2276): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 6m27.903534788s ago: executing program 4 (id=2280): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a01010044", @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6m25.547431795s ago: executing program 4 (id=2285): mkdir(&(0x7f0000000100)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3000005, 0x0) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) 6m24.385544183s ago: executing program 4 (id=2288): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 6m23.638309725s ago: executing program 4 (id=2289): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6(0xa, 0x80003, 0x101) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, 0x0, 0x80) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x53, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x24, 0x40000339}, 0x0, &(0x7f00000020c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3, 0x8, 0x2}, 0x5}) write$sndseq(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='ocfs2\x00', 0x5, 0x0) 6m22.405556595s ago: executing program 4 (id=2294): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, 0x0) 6m21.837041614s ago: executing program 33 (id=2294): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, 0x0) 8.054590622s ago: executing program 1 (id=3111): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r0}, 0x18) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000080)=[{&(0x7f00000000c0)="0207070002000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d20096811c5a663a947eaf378bf56aaccdde0d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b40070beae950827d3efce8a34af6c67c60ee83b76c1132f55a7ccf7843a9a1de5284a60a57f66fa52701bccb915def033b664bc63242c782ecc7", 0x10}], 0x1}, 0x0) 7.57683556s ago: executing program 5 (id=3113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x16, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.55130959s ago: executing program 1 (id=3114): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000010c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @void, {@ipv6={0x86dd, @icmpv6={0xa, 0x6, "4f3f8a", 0x14, 0x3a, 0x0, @private2, @private2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x73, 0x0, @local, @local, {[@fragment={0x2f, 0x0, 0x7, 0x1, 0x0, 0x9, 0x66}]}}}}}, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) semget$private(0x0, 0x2, 0x302) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xb, 0xa, 0x9, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001680), 0x8000, r2}, 0x38) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) 7.212045306s ago: executing program 3 (id=3115): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f60"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000"}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close(0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) 6.703891694s ago: executing program 1 (id=3117): socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) add_key(0x0, &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0x1, 0xfffffffffffffffe) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) modify_ldt$read(0x0, &(0x7f0000000200)=""/250, 0xfa) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 6.692781894s ago: executing program 5 (id=3118): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x40) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x29, 0xffffff81, 0x2a000b02, 0x2, 0x0, 0x6}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x1d0) ioctl$FIBMAP(r2, 0x401070ca, &(0x7f00000002c0)) 5.964083256s ago: executing program 5 (id=3120): r0 = userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x5, 0xfffffffffffffffc, 0x0, 0x2, 0x8000000000000001, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x1c, 0x2, 0x3, 0x2, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x1, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1]}) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) recvmmsg(r4, &(0x7f0000000b40)=[{{0x0, 0x1f00, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x80, 0x0, &(0x7f00000010c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 5.192370738s ago: executing program 1 (id=3121): r0 = socket(0xa, 0x3, 0xff) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="468d6b2f6da98027f6b1ab1734fe9daf545d8bbcbd5e8219596b19d6472eed7a72d7d1694120cdc3bd5aee2ee668a4dc4275e6ffd911a7de8ce4b044050f3231cea84e45e8f63f63a7a5d66898b13472d2570cd0a18fb7603808aef1d366269a90ce333569025c21208213df9aadba9159a7f01843f5ed81c715e4a177fd2f33c0c116a0d8842ace91313f35d213cb9eb525412163dd4afc7267d3a31e6825f951105fc7b34949724072f385628bbf8731da5ab5e66fac293238a7f793cbfb1c152c8eb78d02c14c2965c306b1c1a2ae6994124a671e603dc31c3475b3ea3ade12baf3a1f8d1600d9cbe6299", 0xec}, {&(0x7f0000000000)="8d1dcfb57f3e14c97fe147ba1b7a1580afa9210d9d1e70", 0x17}], 0x2, 0x5, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) preadv(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0, 0xe6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000580)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000010", 0x8, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {0x2, 0x0, 0x8}}}}}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, r4, 0x0, 0x0, 0x8}]) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 5.092915299s ago: executing program 5 (id=3122): socket$nl_netfilter(0x10, 0x3, 0xc) fanotify_init(0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 5.001259751s ago: executing program 2 (id=3123): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x8e, &(0x7f00000001c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0x70, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "c4b90326ca327e6ffc5be852323293a2"}, @mptcp=@generic={0x0, 0x5, "d600a1"}, @md5sig={0x13, 0x12, "54499830dd50402aab0278bcd268e0b8"}, @md5sig={0x13, 0x12, "34fb486441852c4ca586f16b58160adf"}]}}}}}}}}, 0x0) 4.787083844s ago: executing program 2 (id=3124): socket$kcm(0x10, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22900, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xaece, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x7, 0x81, 0x2) gettid() r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r1, 0x400, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000061c0)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x836b, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 4.309409142s ago: executing program 3 (id=3125): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000010c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @void, {@ipv6={0x86dd, @icmpv6={0xa, 0x6, "4f3f8a", 0x14, 0x3a, 0x0, @private2, @private2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x73, 0x0, @local, @local, {[@fragment={0x2f, 0x0, 0x7, 0x1, 0x0, 0x9, 0x66}]}}}}}, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) semget$private(0x0, 0x2, 0x302) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x10, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xb, 0xa, 0x9, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001680), 0x8000, r2}, 0x38) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) 3.744969291s ago: executing program 2 (id=3126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x1b, 0xfa00, {0x0, {0xa, 0x9, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xb970}}}, 0x30) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.587972483s ago: executing program 3 (id=3127): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, 0x0, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) 3.524961574s ago: executing program 2 (id=3128): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb, 0x0, 0x1}, 0x0, &(0x7f0000000280)={0x3ff, 0x252d, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) 2.481479901s ago: executing program 3 (id=3129): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.455605151s ago: executing program 2 (id=3130): socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) add_key(0x0, 0x0, &(0x7f0000001940)='\f', 0x1, 0xfffffffffffffffe) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) modify_ldt$read(0x0, &(0x7f0000000200)=""/250, 0xfa) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 2.147968996s ago: executing program 3 (id=3131): mkdir(&(0x7f0000000400)='./file0\x00', 0x54) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0xf000, 0x0) 2.029538098s ago: executing program 3 (id=3132): socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth1_virt_wifi\x00', &(0x7f00000000c0)=@ethtool_ts_info}) ioprio_get$pid(0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0xc0001, 0x0) write$cgroup_int(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r5, &(0x7f00000001c0), 0x2, 0x0) mkdirat$cgroup(r5, &(0x7f0000001e40)='syz0\x00', 0x1ff) 1.575203765s ago: executing program 1 (id=3133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@ipv6_getaddrlabel={0x24, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r6, 0x0, 0x0, 0x6bf68237da62a01, 0x0) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, r5, 0x0, 0x5, 0x2000001}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 1.489488076s ago: executing program 5 (id=3134): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x6bf68237da62a01, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 380.785274ms ago: executing program 1 (id=3135): mount$overlay(0x0, &(0x7f0000003580)='./file0\x00', 0x0, 0x8c1ea1bec7a34f89, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) r3 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r4 = fcntl$dupfd(r3, 0x406, r3) write$binfmt_script(r4, 0x0, 0x0) write$P9_RXATTRWALK(r4, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x4}, 0xca80) ioctl$EVIOCGLED(r2, 0x80284504, 0x0) 322.554815ms ago: executing program 5 (id=3136): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x40001f, 0x10000, 0x4, 0x4, 0xcca, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x202, 0x1, 0x6, 0xfe, 0x0, 0x1a449, 0x20003, 0x40000006, 0x89, 0xcaa7, 0x0, 0x8, 0x6, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) 0s ago: executing program 2 (id=3137): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) kernel console output (not intermixed with test programs): .789596][T14534] mkiss: ax0: crc mode is auto. [ 1079.846517][ T28] audit: type=1326 audit(1753287396.952:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.4.2100" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f312838e9a9 code=0x0 [ 1081.544951][ T9087] airspy 3-1:0.0: Board ID: 00 [ 1081.561815][ T9087] airspy 3-1:0.0: Firmware version: [ 1082.076809][T14541] Bluetooth: hci4: Frame reassembly failed (-84) [ 1082.097626][T12425] Bluetooth: hci4: Frame reassembly failed (-84) [ 1082.139276][ T9087] airspy 3-1:0.0: usb_control_msg() failed -32 request 12 [ 1082.161057][ T9087] airspy 3-1:0.0: Registered as swradio24 [ 1082.182847][ T9087] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1083.287492][ T9087] usb 3-1: USB disconnect, device number 28 [ 1083.448502][ T28] audit: type=1800 audit(1753287400.542:141): pid=14554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2104" name="bus" dev="overlay" ino=2788 res=0 errno=0 [ 1084.197989][T14559] trusted_key: encrypted_key: key user:syz not found [ 1084.252838][ T5789] Bluetooth: hci4: command 0x1003 tx timeout [ 1084.254961][ T5102] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1086.403886][ T9087] Process accounting resumed [ 1087.703984][T14595] trusted_key: encrypted_key: key user:syz not found [ 1088.378022][ T28] audit: type=1800 audit(1753287405.492:142): pid=14598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2117" name="bus" dev="overlay" ino=2851 res=0 errno=0 [ 1092.112116][T14619] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2124'. [ 1092.856085][T14631] syz.4.2127: attempt to access beyond end of device [ 1092.856085][T14631] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1092.878623][T14631] (syz.4.2127,14631,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 1092.887581][T14631] (syz.4.2127,14631,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1092.898607][T14631] (syz.4.2127,14631,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1092.911626][T14631] (syz.4.2127,14631,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1098.839937][T14693] syz.1.2147 (14693): drop_caches: 2 [ 1098.873489][T14693] syz.1.2147 (14693): drop_caches: 2 [ 1099.225124][ T9087] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1099.405098][ T9087] usb 3-1: device descriptor read/64, error -71 [ 1099.705130][ T9087] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1099.925012][ T9087] usb 3-1: device descriptor read/64, error -71 [ 1100.113862][ T9087] usb usb3-port1: attempt power cycle [ 1100.585189][ T9087] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1100.689760][ T9087] usb 3-1: device descriptor read/8, error -71 [ 1101.038671][ T9087] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1101.148304][ T9087] usb 3-1: device descriptor read/8, error -71 [ 1101.275157][ T9087] usb usb3-port1: unable to enumerate USB device [ 1101.358113][T14701] mkiss: ax0: crc mode is auto. [ 1101.375868][ T28] audit: type=1326 audit(1753287418.492:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14697 comm="syz.1.2148" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa00898e9a9 code=0x0 [ 1106.649009][T14742] mkiss: ax0: crc mode is auto. [ 1106.678158][ T28] audit: type=1326 audit(1753287423.792:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14739 comm="syz.2.2158" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f126058e9a9 code=0x0 [ 1109.085872][T14750] overlayfs: missing 'lowerdir' [ 1109.735250][ T5946] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1110.135362][ T5946] usb 4-1: Using ep0 maxpacket: 32 [ 1110.171891][ T5946] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1110.475008][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.499085][ T5946] usb 4-1: Product: syz [ 1110.513122][ T5946] usb 4-1: Manufacturer: syz [ 1110.518542][ T5946] usb 4-1: SerialNumber: syz [ 1110.529577][ T5946] usb 4-1: config 0 descriptor?? [ 1111.439349][ T5946] airspy 4-1:0.0: Board ID: 00 [ 1111.444249][ T5946] airspy 4-1:0.0: Firmware version: [ 1111.654003][T14778] mkiss: ax0: crc mode is auto. [ 1111.677771][ T28] audit: type=1326 audit(1753287428.792:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14771 comm="syz.1.2168" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa00898e9a9 code=0x0 [ 1112.700792][T14560] Bluetooth: hci3: command 0x0406 tx timeout [ 1113.199652][T14787] syz.2.2169: attempt to access beyond end of device [ 1113.199652][T14787] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1113.213224][T14787] (syz.2.2169,14787,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 1113.221510][T14787] (syz.2.2169,14787,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1113.230593][T14787] (syz.2.2169,14787,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1113.239802][T14787] (syz.2.2169,14787,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1113.562793][ T5946] airspy 4-1:0.0: usb_control_msg() failed -71 request 12 [ 1113.590322][ T5946] airspy 4-1:0.0: Registered as swradio24 [ 1113.599254][ T5946] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1113.627937][T14790] autofs4:pid:14790:autofs_fill_super: called with bogus options [ 1113.670570][ T5946] usb 4-1: USB disconnect, device number 28 [ 1114.935022][ T5826] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1115.135247][ T5826] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1115.165134][ T5826] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1115.199371][ T5826] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1115.345062][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.426843][T14805] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1115.498762][ T5826] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 1115.750250][T14812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2176'. [ 1115.826190][ T5826] usb 5-1: USB disconnect, device number 25 [ 1116.272079][ T1280] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1116.281618][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.288169][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.472576][T14818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2176'. [ 1116.966997][T14823] mkiss: ax0: crc mode is auto. [ 1116.993935][ T28] audit: type=1326 audit(1753287434.102:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14820 comm="syz.3.2178" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc49818e9a9 code=0x0 [ 1117.992846][T14830] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2179'. [ 1118.302893][T14831] overlayfs: missing 'lowerdir' [ 1121.364751][T14858] mkiss: ax0: crc mode is auto. [ 1122.810728][ T28] audit: type=1326 audit(1753287438.492:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14856 comm="syz.3.2189" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc49818e9a9 code=0x0 [ 1123.248489][T14864] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2190'. [ 1124.555406][ T23] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1124.754979][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 1124.825866][ T23] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1124.835211][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.843352][ T23] usb 4-1: Product: syz [ 1124.847880][ T23] usb 4-1: Manufacturer: syz [ 1124.852617][ T23] usb 4-1: SerialNumber: syz [ 1124.901103][ T23] usb 4-1: config 0 descriptor?? [ 1125.581741][ T23] airspy 4-1:0.0: Board ID: 00 [ 1125.586695][ T23] airspy 4-1:0.0: Firmware version: [ 1127.071567][ T23] airspy 4-1:0.0: usb_control_msg() failed -32 request 0f [ 1127.091113][ T23] airspy 4-1:0.0: Registered as swradio24 [ 1127.097215][ T23] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1127.156438][ T23] usb 4-1: USB disconnect, device number 29 [ 1127.624868][T11962] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1127.643477][T14899] mkiss: ax0: crc mode is auto. [ 1127.700505][ T28] audit: type=1326 audit(1753287444.772:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14895 comm="syz.1.2200" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa00898e9a9 code=0x0 [ 1129.423126][T11962] usb 5-1: Using ep0 maxpacket: 32 [ 1129.446759][T11962] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 1129.464997][T11962] usb 5-1: config 0 has no interface number 0 [ 1129.472631][T11962] usb 5-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1129.484569][T11962] usb 5-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 1129.495440][T11962] usb 5-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping [ 1129.508501][T11962] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29793, setting to 1024 [ 1129.611566][T11962] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1129.655302][ T8] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1129.733269][T11962] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1129.916875][T11962] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1129.929568][T11962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.932693][ T8] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1129.937816][T11962] usb 5-1: Product: syz [ 1129.937835][T11962] usb 5-1: Manufacturer: syz [ 1129.937850][T11962] usb 5-1: SerialNumber: syz [ 1129.941034][T11962] usb 5-1: config 0 descriptor?? [ 1129.972907][T14894] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1130.007582][T14894] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1130.132948][T11962] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 1130.679396][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.688930][ T8] usb 3-1: Product: syz [ 1130.693487][ T8] usb 3-1: Manufacturer: syz [ 1130.698375][ T8] usb 3-1: SerialNumber: syz [ 1130.713749][ T8] usb 3-1: config 0 descriptor?? [ 1130.772265][T11962] usb 5-1: USB disconnect, device number 26 [ 1133.354930][T14931] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1133.361576][T14931] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1133.381524][T14931] vhci_hcd vhci_hcd.0: Device attached [ 1133.469076][ T8] usb 3-1: can't set config #0, error -71 [ 1133.476369][ T8] usb 3-1: USB disconnect, device number 33 [ 1133.526310][T14932] vhci_hcd: connection closed [ 1133.527102][T12425] vhci_hcd: stop threads [ 1133.554056][T12425] vhci_hcd: release socket [ 1133.580423][T12425] vhci_hcd: disconnect device [ 1133.594972][T11962] vhci_hcd: vhci_device speed not set [ 1133.704956][ T788] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1133.792294][T14939] mkiss: ax0: crc mode is auto. [ 1133.875879][ T28] audit: type=1326 audit(1753287450.922:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14936 comm="syz.2.2211" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f126058e9a9 code=0x0 [ 1135.210026][ T788] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1135.340845][ T788] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1135.351505][ T788] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1135.360691][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.401993][T14935] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1135.555412][ T788] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 1135.945268][T11962] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1136.023217][ T788] usb 5-1: USB disconnect, device number 27 [ 1136.136133][T11962] usb 4-1: Using ep0 maxpacket: 32 [ 1136.149856][T11962] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1136.159519][T11962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.169851][T11962] usb 4-1: Product: syz [ 1136.174066][T11962] usb 4-1: Manufacturer: syz [ 1136.180132][T11962] usb 4-1: SerialNumber: syz [ 1136.201372][T11962] usb 4-1: config 0 descriptor?? [ 1136.515097][T14955] syz.1.2216: attempt to access beyond end of device [ 1136.515097][T14955] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1136.528275][T14955] (syz.1.2216,14955,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 1136.536336][T14955] (syz.1.2216,14955,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1136.543855][T14955] (syz.1.2216,14955,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1136.552983][T14955] (syz.1.2216,14955,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1136.660753][T11962] airspy 4-1:0.0: Board ID: 00 [ 1136.665827][T11962] airspy 4-1:0.0: Firmware version: [ 1137.325891][ T28] audit: type=1800 audit(1753287454.442:150): pid=14964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2218" name="bus" dev="overlay" ino=2964 res=0 errno=0 [ 1137.514893][T11962] airspy 4-1:0.0: usb_control_msg() failed -32 request 0f [ 1139.116504][T11962] airspy 4-1:0.0: Registered as swradio24 [ 1139.122604][T11962] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1139.144562][T11962] usb 4-1: USB disconnect, device number 30 [ 1139.394928][T11374] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1139.618685][T14977] Bluetooth: MGMT ver 1.22 [ 1139.816581][T11374] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1139.826611][T11374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.834732][T11374] usb 5-1: Product: syz [ 1139.839042][T11374] usb 5-1: Manufacturer: syz [ 1139.843783][T11374] usb 5-1: SerialNumber: syz [ 1139.853568][T11374] usb 5-1: config 0 descriptor?? [ 1139.883510][ T28] audit: type=1326 audit(1753287456.992:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14969 comm="syz.2.2221" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f126058e9a9 code=0x0 [ 1139.957254][T14971] mkiss: ax0: crc mode is auto. [ 1140.156330][T11374] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1140.674877][T11962] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1140.872064][T11962] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1140.885972][T11962] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1140.905238][T11962] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1140.917327][T11962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.970930][T14988] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1141.087802][T11962] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1141.426029][T11962] usb 3-1: USB disconnect, device number 34 [ 1141.879387][ T788] usb 5-1: USB disconnect, device number 28 [ 1142.056693][T11962] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1142.264904][T11962] usb 4-1: Using ep0 maxpacket: 32 [ 1142.282947][T11962] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1142.293795][T11962] usb 4-1: config 0 has no interface number 0 [ 1142.310620][T11962] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1142.383686][T11962] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1142.405013][T11962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.413842][T11962] usb 4-1: Product: syz [ 1142.422717][T11962] usb 4-1: Manufacturer: syz [ 1142.429982][T11962] usb 4-1: SerialNumber: syz [ 1142.445982][T15002] syz.4.2227: attempt to access beyond end of device [ 1142.445982][T15002] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1142.474275][T15002] (syz.4.2227,15002,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 1142.484852][T15002] (syz.4.2227,15002,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1142.485668][T11962] usb 4-1: config 0 descriptor?? [ 1142.499702][T15002] (syz.4.2227,15002,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1142.503496][T11962] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1142.519492][T11962] em28xx 4-1:0.132: Video interface 132 found: [ 1142.532379][T15002] (syz.4.2227,15002,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1142.940304][T15016] mkiss: ax0: crc mode is auto. [ 1142.954032][ T28] audit: type=1326 audit(1753287460.062:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15013 comm="syz.4.2232" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f312838e9a9 code=0x0 [ 1144.336498][T11962] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1144.986033][T11962] em28xx 4-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 1145.075612][T11962] em28xx 4-1:0.132: failed to read eeprom (err=-5) [ 1145.106640][T11962] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1145.184963][T11962] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1145.192931][T11962] em28xx 4-1:0.132: analog set to bulk mode. [ 1145.206218][ T9087] em28xx 4-1:0.132: Registering V4L2 extension [ 1145.247912][T11962] usb 4-1: USB disconnect, device number 31 [ 1145.263626][T11962] em28xx 4-1:0.132: Disconnecting em28xx [ 1145.832246][T15038] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2234'. [ 1146.092193][ T9087] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1146.161066][ T9087] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1146.322616][ T9087] em28xx 4-1:0.132: No AC97 audio processor [ 1146.536067][ T9087] usb 4-1: Decoder not found [ 1146.540833][ T9087] em28xx 4-1:0.132: failed to create media graph [ 1146.548232][ T9087] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1146.723382][ T9087] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1146.732572][T11962] em28xx 4-1:0.132: Closing input extension [ 1146.791361][T11962] em28xx 4-1:0.132: Freeing device [ 1147.194967][T11962] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1147.467916][T11962] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1147.495012][T11962] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1147.505596][T11962] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1147.514721][T11962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.638645][T15049] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1147.856089][T11962] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1148.034167][T15064] mkiss: ax0: crc mode is auto. [ 1148.652130][ T28] audit: type=1326 audit(1753287465.162:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15062 comm="syz.2.2242" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f126058e9a9 code=0x0 [ 1149.299024][T11962] usb 4-1: USB disconnect, device number 32 [ 1149.495242][T15047] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1149.705094][T15047] usb 2-1: Using ep0 maxpacket: 16 [ 1149.711850][T15072] syz.4.2244: attempt to access beyond end of device [ 1149.711850][T15072] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1149.716186][T15047] usb 2-1: config 2 has an invalid interface number: 32 but max is 1 [ 1149.734139][T15047] usb 2-1: config 2 has no interface number 1 [ 1149.744957][T15047] usb 2-1: config 2 interface 32 has no altsetting 0 [ 1149.752645][T15072] (syz.4.2244,15072,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 1149.755497][T15047] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=65.11 [ 1149.771978][T15072] (syz.4.2244,15072,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1149.779705][T15072] (syz.4.2244,15072,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1149.789645][T15072] (syz.4.2244,15072,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1149.816637][T15047] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.816829][T15075] netlink: 'syz.2.2245': attribute type 1 has an invalid length. [ 1149.824840][T15047] usb 2-1: Product: syz [ 1149.836910][T15047] usb 2-1: Manufacturer: syz [ 1149.852183][T15047] usb 2-1: SerialNumber: syz [ 1150.098636][T15075] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1152.562636][T15077] bond4: (slave veth3): Enslaving as an active interface with a down link [ 1152.639277][T15075] vlan2: entered allmulticast mode [ 1152.677501][T15075] veth1: entered allmulticast mode [ 1152.678708][T15047] usb 2-1: USB disconnect, device number 40 [ 1152.709416][T15075] veth1: entered promiscuous mode [ 1152.735682][T15075] veth1: left promiscuous mode [ 1152.903086][T15075] bond4: (slave vlan2): making interface the new active one [ 1152.949208][T15075] veth1: entered promiscuous mode [ 1152.987003][T15075] vlan2: entered promiscuous mode [ 1153.039840][T15075] bond4: (slave vlan2): Enslaving as an active interface with an up link [ 1153.050492][T13929] udevd[13929]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1154.380277][T15103] syz.1.2252: attempt to access beyond end of device [ 1154.380277][T15103] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1154.394802][T15103] (syz.1.2252,15103,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 1154.402548][T15103] (syz.1.2252,15103,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1154.413044][T15103] (syz.1.2252,15103,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1154.422092][T15103] (syz.1.2252,15103,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1155.175505][T15109] overlayfs: failed to resolve './file0': -2 [ 1156.041729][T15111] mkiss: ax0: crc mode is auto. [ 1156.058044][ T28] audit: type=1326 audit(1753287473.172:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15107 comm="syz.2.2253" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f126058e9a9 code=0x0 [ 1156.602092][T15116] syz.1.2255: attempt to access beyond end of device [ 1156.602092][T15116] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1156.624881][T15116] (syz.1.2255,15116,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 1156.638485][T15116] (syz.1.2255,15116,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1156.659963][T15116] (syz.1.2255,15116,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1156.674346][T15116] (syz.1.2255,15116,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1157.132024][T14560] Bluetooth: hci0: unexpected event for opcode 0x2031 [ 1160.743163][T15152] mkiss: ax0: crc mode is auto. [ 1160.771034][ T28] audit: type=1326 audit(1753287477.882:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15146 comm="syz.2.2265" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f126058e9a9 code=0x0 [ 1163.123361][T15156] syz.4.2267: attempt to access beyond end of device [ 1163.123361][T15156] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1163.143190][T15156] (syz.4.2267,15156,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 1163.153136][T15156] (syz.4.2267,15156,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1163.170714][T15156] (syz.4.2267,15156,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1163.182199][T15156] (syz.4.2267,15156,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1164.390017][T15143] wg1 speed is unknown, defaulting to 1000 [ 1165.845078][T15047] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1166.045083][T15047] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1166.056350][T15047] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1166.067260][T15047] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1166.104197][T15047] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.286280][T15165] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1166.494222][T15047] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1167.205167][T15047] usb 3-1: USB disconnect, device number 35 [ 1170.135293][T15200] mkiss: ax0: crc mode is auto. [ 1170.149393][ T28] audit: type=1326 audit(1753287487.262:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15197 comm="syz.3.2278" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc49818e9a9 code=0x0 [ 1171.105707][T15203] syz.2.2279: attempt to access beyond end of device [ 1171.105707][T15203] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1171.118944][T15203] (syz.2.2279,15203,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 1171.129667][T15203] (syz.2.2279,15203,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1171.146753][T15203] (syz.2.2279,15203,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1171.157769][T15203] (syz.2.2279,15203,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1171.605162][ T59] vlan2: left promiscuous mode [ 1172.454614][T15218] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2284'. [ 1172.546287][T11962] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1172.745179][T11962] usb 4-1: Using ep0 maxpacket: 16 [ 1172.760262][T11962] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.784012][T11962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1172.795124][T11962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1172.814848][T11962] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1172.855801][T11962] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1172.875570][T11962] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1172.885511][T11962] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1172.915525][T11962] usb 4-1: Manufacturer: syz [ 1172.948479][T11962] usb 4-1: config 0 descriptor?? [ 1173.243357][T11374] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1173.557471][T11374] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1173.698265][T11374] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1173.715322][T11962] rc_core: IR keymap rc-hauppauge not found [ 1173.721434][T11962] Registered IR keymap rc-empty [ 1173.775115][T11962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1173.865457][T11962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1173.918262][T11962] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1173.949599][T11962] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input16 [ 1174.055318][T11962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1174.109024][T11962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1174.145633][T11962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1174.185969][T11374] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1174.214938][T11962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1174.232509][T11374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.258889][T15227] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1174.285158][T11962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1174.304030][T11374] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1174.318331][T11962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1174.354899][T11962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1174.469126][T11962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1174.538549][T11962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1174.621136][T11962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1174.786256][T11962] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1174.880700][T11962] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1175.078652][T11962] usb 4-1: USB disconnect, device number 33 [ 1175.436856][T11374] usb 2-1: USB disconnect, device number 41 [ 1175.721829][ T2939] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.902348][ T2939] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.077339][ T2939] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.200602][ T2939] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.291151][T14414] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1177.302719][T14414] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1177.315068][T14414] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1177.324228][T14414] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1177.336954][T14414] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1177.359833][T14414] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1177.667643][ T1280] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1177.680086][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.686566][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.512432][T15267] wg1 speed is unknown, defaulting to 1000 [ 1179.416134][T14414] Bluetooth: hci3: command tx timeout [ 1179.595532][ T23] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1179.776799][T15294] syz.2.2302: attempt to access beyond end of device [ 1179.776799][T15294] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1179.792684][T15294] (syz.2.2302,15294,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 1179.801434][T15294] (syz.2.2302,15294,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1179.810158][T15294] (syz.2.2302,15294,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1179.819369][T15294] (syz.2.2302,15294,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1179.856558][ T23] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1179.910159][ T23] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1179.952400][ T23] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1180.013119][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.087841][T15289] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1180.155430][ T23] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1180.457306][T15047] usb 2-1: USB disconnect, device number 42 [ 1180.827876][ T2939] hsr_slave_0: left promiscuous mode [ 1180.847776][ T2939] hsr_slave_1: left promiscuous mode [ 1180.885334][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1180.892799][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1180.919971][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1180.944862][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1180.966125][ T2939] dummy0: left allmulticast mode [ 1180.971333][ T2939] bridge0: port 3(dummy0) entered disabled state [ 1181.003077][ T2939] bridge_slave_1: left allmulticast mode [ 1181.019350][ T2939] bridge_slave_1: left promiscuous mode [ 1181.032000][ T2939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.091546][ T2939] bridge_slave_0: left allmulticast mode [ 1181.115251][ T2939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.286674][ T2939] veth1_macvtap: left promiscuous mode [ 1181.315124][ T2939] veth0_macvtap: left promiscuous mode [ 1181.320814][ T2939] veth1_vlan: left promiscuous mode [ 1181.381946][ T2939] veth0_vlan: left promiscuous mode [ 1181.495871][T14414] Bluetooth: hci3: command tx timeout [ 1182.133748][ T2939] bond3 (unregistering): Released all slaves [ 1182.710001][ T2939] bond2 (unregistering): Released all slaves [ 1182.732125][ T2939] bond1 (unregistering): Released all slaves [ 1183.576295][T14414] Bluetooth: hci3: command tx timeout [ 1183.612615][T15337] syz.2.2310: attempt to access beyond end of device [ 1183.612615][T15337] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1183.626007][T15337] (syz.2.2310,15337,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 1183.633924][T15337] (syz.2.2310,15337,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1183.641602][T15337] (syz.2.2310,15337,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1183.650667][T15337] (syz.2.2310,15337,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1184.167749][T15341] input: syz0 as /devices/virtual/input/input17 [ 1185.895499][T14414] Bluetooth: hci3: command tx timeout [ 1186.145112][T15347] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1186.910295][ T2939] team0 (unregistering): Port device team_slave_1 removed [ 1187.036799][ T2939] team0 (unregistering): Port device team_slave_0 removed [ 1187.116570][ T2939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1187.194712][ T2939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1187.779609][ T2939] bond0 (unregistering): Released all slaves [ 1187.886064][ T788] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1187.922736][T15340] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2309'. [ 1187.975432][T15267] chnl_net:caif_netlink_parms(): no params data found [ 1188.104859][ T788] usb 2-1: Using ep0 maxpacket: 8 [ 1188.112083][ T788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.132365][ T788] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1188.147370][ T788] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1188.156901][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.197788][ T788] usb 2-1: Product: syz [ 1188.202009][ T788] usb 2-1: Manufacturer: syz [ 1188.520373][ T788] usb 2-1: SerialNumber: syz [ 1188.597018][ T788] usb 2-1: config 0 descriptor?? [ 1188.754825][T15373] syz.2.2316: attempt to access beyond end of device [ 1188.754825][T15373] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1188.768852][T15373] (syz.2.2316,15373,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 1188.777614][T15373] (syz.2.2316,15373,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1188.788077][T15373] (syz.2.2316,15373,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1188.800003][T15373] (syz.2.2316,15373,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1189.143835][T15267] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.183927][T15267] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.228035][T15267] bridge_slave_0: entered allmulticast mode [ 1189.251782][T15267] bridge_slave_0: entered promiscuous mode [ 1189.270147][T15267] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.277661][T15267] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.429776][T15267] bridge_slave_1: entered allmulticast mode [ 1189.440229][T15267] bridge_slave_1: entered promiscuous mode [ 1189.795329][ T788] usb 2-1: USB disconnect, device number 43 [ 1189.989848][T15267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1190.091022][T15267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1190.875626][ T2939] IPVS: stop unused estimator thread 0... [ 1190.878471][T15267] team0: Port device team_slave_0 added [ 1190.977265][T15267] team0: Port device team_slave_1 added [ 1191.147470][T15267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1191.154463][T15267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.261089][T15267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1191.289576][T15267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1191.317297][T15267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.621839][T15267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1192.050241][T15267] hsr_slave_0: entered promiscuous mode [ 1192.081789][T15267] hsr_slave_1: entered promiscuous mode [ 1192.162447][T15267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1192.597608][T15267] Cannot create hsr debugfs directory [ 1196.011182][T15267] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1196.065496][T15267] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1196.128586][T15267] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1196.160416][T15267] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1196.566796][T15267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1196.617900][T15267] 8021q: adding VLAN 0 to HW filter on device team0 [ 1196.644092][T13752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.651311][T13752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1196.705631][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.712825][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1197.076562][T15461] syz.1.2331: attempt to access beyond end of device [ 1197.076562][T15461] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1197.091136][T15461] (syz.1.2331,15461,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 1197.099105][T15461] (syz.1.2331,15461,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1197.106661][T15461] (syz.1.2331,15461,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1197.116902][T15461] (syz.1.2331,15461,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1197.355334][T15267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1197.404877][T15267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1197.807835][T15472] syz.1.2334: attempt to access beyond end of device [ 1197.807835][T15472] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1197.837086][T15472] (syz.1.2334,15472,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 1197.854545][T15472] (syz.1.2334,15472,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1197.869979][T15472] (syz.1.2334,15472,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1197.940839][T15472] (syz.1.2334,15472,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1198.563495][T15267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1198.648949][T15487] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1200.066720][T15503] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2338'. [ 1202.036128][T15267] veth0_vlan: entered promiscuous mode [ 1202.197228][T15267] veth1_vlan: entered promiscuous mode [ 1202.427533][T15267] veth0_macvtap: entered promiscuous mode [ 1202.623933][ T28] audit: type=1800 audit(1753287519.732:157): pid=15548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2346" name="bus" dev="overlay" ino=3145 res=0 errno=0 [ 1202.641004][T15267] veth1_macvtap: entered promiscuous mode [ 1203.340549][T15267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.372614][T15539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2345'. [ 1203.391156][T15267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.619575][T15557] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2350'. [ 1203.778862][T15267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1204.164302][T15267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1204.204201][T15267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1204.262586][T15267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1204.332706][T15267] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.520690][T15267] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.605060][T15267] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.614032][T15267] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.891440][T15568] wg1 speed is unknown, defaulting to 1000 [ 1205.065960][T13752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.104564][T13752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.309426][T12425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.336881][T12425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.110094][T14560] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1208.121032][T14560] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1208.130624][T14560] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1208.154315][T14560] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1208.184928][T14560] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1208.197999][T14560] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1208.429177][T15612] wg1 speed is unknown, defaulting to 1000 [ 1208.782108][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.954016][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.965029][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1209.124356][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.274951][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 1209.277337][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.314151][ T23] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1209.356957][ T23] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1209.399009][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.442386][ T23] usb 6-1: Product: syz [ 1209.464881][ T23] usb 6-1: Manufacturer: syz [ 1209.469681][ T23] usb 6-1: SerialNumber: syz [ 1209.518835][ T23] usb 6-1: config 0 descriptor?? [ 1209.917646][T15612] chnl_net:caif_netlink_parms(): no params data found [ 1210.148802][T15571] usb 6-1: USB disconnect, device number 2 [ 1210.312870][ T48] tipc: Disabling bearer [ 1210.329493][ T48] tipc: Left network mode [ 1210.340419][T15612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.385250][T14560] Bluetooth: hci4: command tx timeout [ 1210.445379][T15612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.495527][T15612] bridge_slave_0: entered allmulticast mode [ 1210.502789][T15612] bridge_slave_0: entered promiscuous mode [ 1211.019589][T15612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.075100][T15612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.096631][T15612] bridge_slave_1: entered allmulticast mode [ 1211.120492][T15612] bridge_slave_1: entered promiscuous mode [ 1211.422231][T15612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.702265][T15612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1212.106392][T15682] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2367'. [ 1212.455141][T14560] Bluetooth: hci4: command tx timeout [ 1212.990499][T15612] team0: Port device team_slave_0 added [ 1214.534926][T14560] Bluetooth: hci4: command tx timeout [ 1214.569975][T15612] team0: Port device team_slave_1 added [ 1214.739062][T15612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1214.762022][T15612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1214.826273][T15612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1214.992835][T15612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1215.000780][T15612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1215.028790][T15612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1215.886630][ T48] bond3: (slave gretap1): Releasing active interface [ 1216.150260][T15612] hsr_slave_0: entered promiscuous mode [ 1216.159821][T15612] hsr_slave_1: entered promiscuous mode [ 1216.170432][T15612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1216.182940][T15612] Cannot create hsr debugfs directory [ 1216.614940][T14560] Bluetooth: hci4: command tx timeout [ 1217.766063][T15047] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1217.921999][ T48] hsr_slave_0: left promiscuous mode [ 1217.941859][ T48] hsr_slave_1: left promiscuous mode [ 1217.958787][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1217.972886][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1217.976003][T15047] usb 4-1: Using ep0 maxpacket: 8 [ 1217.987305][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1218.006008][T15047] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1218.015055][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.023180][ T48] bridge_slave_1: left allmulticast mode [ 1218.029469][ T48] bridge_slave_1: left promiscuous mode [ 1218.034065][T15047] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1218.043783][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.068052][T15047] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.095865][T15047] usb 4-1: Product: syz [ 1218.117795][T15047] usb 4-1: Manufacturer: syz [ 1218.158094][T15047] usb 4-1: SerialNumber: syz [ 1218.251418][T15047] usb 4-1: config 0 descriptor?? [ 1218.771227][ T48] veth1: left promiscuous mode [ 1218.786579][ T48] veth1_macvtap: left promiscuous mode [ 1218.792407][ T48] veth0_macvtap: left promiscuous mode [ 1218.802689][ T48] veth1_vlan: left promiscuous mode [ 1218.809291][ T48] veth0_vlan: left promiscuous mode [ 1219.013603][T11374] usb 4-1: USB disconnect, device number 34 [ 1219.037579][ T48] bond4 (unregistering): (slave vlan2): Releasing active interface [ 1219.148335][ T48] bond4 (unregistering): (slave veth3): Releasing active interface [ 1221.317213][ T48] bond4 (unregistering): Released all slaves [ 1222.689399][ T48] bond3 (unregistering): Released all slaves [ 1222.783427][ T48] bond2 (unregistering): Released all slaves [ 1222.834488][ T48] bond1 (unregistering): Released all slaves [ 1223.239566][ T788] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1223.428457][ T788] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1223.439938][ T788] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1223.450835][ T788] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1223.460079][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.472781][T15823] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1223.484823][ T788] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1223.620440][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1223.671618][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1223.739268][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1223.793456][T15047] usb 4-1: USB disconnect, device number 35 [ 1223.812548][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1224.491770][ T48] bond0 (unregistering): Released all slaves [ 1224.543290][ T28] audit: type=1800 audit(1753287541.652:158): pid=15836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2388" name="bus" dev="overlay" ino=3248 res=0 errno=0 [ 1225.790710][T15848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1225.978990][T15853] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2393'. [ 1226.559483][ T48] IPVS: stop unused estimator thread 0... [ 1226.707370][T15047] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1226.972079][T15047] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1227.178098][T15047] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1227.445560][T15047] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1227.455182][T15047] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.478292][T15856] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1227.497696][T15047] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1227.759373][T15571] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1228.097931][T15612] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1228.130530][T15612] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1228.162627][ T788] usb 2-1: USB disconnect, device number 44 [ 1228.173637][T15612] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1228.205968][T15612] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1228.223351][T15571] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1228.247413][T15571] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1228.453803][T15571] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1228.479905][T15571] usb 6-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1228.491284][T15571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.518182][T15571] usb 6-1: config 0 descriptor?? [ 1228.627460][T15612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1228.659976][T15612] 8021q: adding VLAN 0 to HW filter on device team0 [ 1228.677735][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.686065][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1228.708822][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.716153][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1228.988073][T15571] uclogic 0003:5543:0064.0009: item fetching failed at offset 5/7 [ 1229.008894][T15571] uclogic 0003:5543:0064.0009: parse failed [ 1229.029767][T15571] uclogic: probe of 0003:5543:0064.0009 failed with error -22 [ 1229.262483][T15612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1229.379410][ T788] usb 6-1: USB disconnect, device number 3 [ 1229.689036][T15612] veth0_vlan: entered promiscuous mode [ 1229.691738][T15916] syz.3.2402: attempt to access beyond end of device [ 1229.691738][T15916] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1229.707608][T15916] (syz.3.2402,15916,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 1229.718481][T15916] (syz.3.2402,15916,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1229.728229][T15916] (syz.3.2402,15916,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1229.733317][T15612] veth1_vlan: entered promiscuous mode [ 1229.745147][T15916] (syz.3.2402,15916,1):ocfs2_fill_super:1178 ERROR: status = -5 [ 1229.882168][T15612] veth0_macvtap: entered promiscuous mode [ 1229.910011][T15612] veth1_macvtap: entered promiscuous mode [ 1229.956562][T15612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1229.967897][T15612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.986771][T15612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1230.116590][T15612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1230.161682][T15612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1230.204555][T15612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1230.272514][T15612] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.047940][T15612] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.110721][T15612] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.233779][T15612] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.268478][T15932] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1231.613339][T15930] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1231.622798][T15930] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1231.631616][T15930] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1231.640394][T15930] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1232.450238][T15776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.468804][T15776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.316917][T15776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.360045][T15776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.917687][ T28] audit: type=1800 audit(1753287551.032:159): pid=15957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2356" name="bus" dev="overlay" ino=26 res=0 errno=0 [ 1234.055073][T15047] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1234.801479][T15047] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1234.813542][T15047] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1234.815029][T15960] overlayfs: missing 'lowerdir' [ 1234.823804][T15047] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1234.944995][T15047] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.002511][T15955] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1235.152205][T15047] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 1236.131242][T15047] usb 6-1: USB disconnect, device number 4 [ 1236.350719][T14414] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1236.368341][T14414] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1236.408061][T14414] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1236.457352][T14414] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1236.471379][T14414] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1236.482140][T14414] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1236.896187][T15974] wg1 speed is unknown, defaulting to 1000 [ 1237.647372][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.849207][T12504] infiniband : set down [ 1237.886806][ T23] wg1 speed is unknown, defaulting to 1000 [ 1238.212770][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.829445][T14560] Bluetooth: hci0: command tx timeout [ 1239.120340][ T23] wg1 speed is unknown, defaulting to 1000 [ 1239.216899][ T1280] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1239.330686][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.345984][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.506029][ T28] audit: type=1800 audit(1753287556.622:160): pid=16018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2418" name="bus" dev="overlay" ino=58 res=0 errno=0 [ 1240.319387][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.658307][ T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.854966][T14414] Bluetooth: hci0: command tx timeout [ 1241.686566][T16038] overlayfs: failed to resolve './file1': -2 [ 1242.639724][T15974] chnl_net:caif_netlink_parms(): no params data found [ 1243.395724][T14414] Bluetooth: hci0: command tx timeout [ 1243.980923][T15974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.632947][T15974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.046235][T16081] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2427'. [ 1245.055181][T15974] bridge_slave_0: entered allmulticast mode [ 1245.080701][T15974] bridge_slave_0: entered promiscuous mode [ 1245.127404][T15974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.134574][T15974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.357263][T15974] bridge_slave_1: entered allmulticast mode [ 1245.387679][T15974] bridge_slave_1: entered promiscuous mode [ 1245.417668][T14414] Bluetooth: hci0: command tx timeout [ 1245.607925][T15974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1245.818501][T15974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1247.262871][T15974] team0: Port device team_slave_0 added [ 1247.299181][T15974] team0: Port device team_slave_1 added [ 1248.319871][T15974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1248.387188][T15974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1248.479144][T15974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1249.799603][ T28] audit: type=1326 audit(1753287566.912:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.3.2436" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc49818e9a9 code=0x0 [ 1251.324838][T15974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1251.337390][T16140] Falling back ldisc for ttyS3. [ 1251.350074][T15974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1251.426136][T15974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1251.790743][T15974] hsr_slave_0: entered promiscuous mode [ 1251.817702][T15974] hsr_slave_1: entered promiscuous mode [ 1251.827384][T15974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1251.854905][T15974] Cannot create hsr debugfs directory [ 1253.731773][T16183] syz.2.2442: attempt to access beyond end of device [ 1253.731773][T16183] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1253.744861][T16183] (syz.2.2442,16183,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 1253.752705][T16183] (syz.2.2442,16183,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1253.760554][T16183] (syz.2.2442,16183,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1253.769585][T16183] (syz.2.2442,16183,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1254.317757][ T48] bond6: (slave gretap1): Releasing active interface [ 1255.113809][ T28] audit: type=1326 audit(1753287572.222:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16191 comm="syz.3.2444" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc49818e9a9 code=0x0 [ 1256.759002][T16195] Falling back ldisc for ttyS3. [ 1257.180445][ T28] audit: type=1800 audit(1753287574.282:163): pid=16207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2447" name="bus" dev="overlay" ino=3373 res=0 errno=0 [ 1259.332021][T15974] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1259.387555][T15974] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1259.521796][T15974] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1259.563570][T15974] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1259.602398][ T48] hsr_slave_0: left promiscuous mode [ 1259.620933][ T48] hsr_slave_1: left promiscuous mode [ 1259.634668][ T48] dummy0: left allmulticast mode [ 1259.640081][ T48] bridge0: port 1(dummy0) entered disabled state [ 1259.827112][T16237] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2452'. [ 1260.265470][ T48] veth1_macvtap: left promiscuous mode [ 1260.271125][ T48] veth0_macvtap: left promiscuous mode [ 1260.294665][ T48] veth1_vlan: left promiscuous mode [ 1260.320573][ T48] veth0_vlan: left promiscuous mode [ 1261.367170][ T28] audit: type=1326 audit(1753287578.482:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.3.2454" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc49818e9a9 code=0x0 [ 1262.147170][ T48] infiniband : set down [ 1262.149810][T16251] Falling back ldisc for ttyS3. [ 1262.393612][ T28] audit: type=1800 audit(1753287579.472:165): pid=16264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2456" name="bus" dev="overlay" ino=3402 res=0 errno=0 [ 1263.242432][ T48] bond6 (unregistering): Released all slaves [ 1263.273277][ T48] bond5 (unregistering): Released all slaves [ 1263.290425][ T48] bond4 (unregistering): Released all slaves [ 1263.313123][ T48] bond3 (unregistering): Released all slaves [ 1263.376648][ T48] bond2 (unregistering): Released all slaves [ 1263.417090][ T48] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 1263.425407][ T48] vcan1 (unregistering): left promiscuous mode [ 1264.131710][ T48] bond1 (unregistering): Released all slaves [ 1264.835473][T15780] smc: removing ib device  [ 1265.627412][ T48] bond0 (unregistering): Released all slaves [ 1265.831444][ T23] wg1 speed is unknown, defaulting to 1000 [ 1266.291166][T16293] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2461'. [ 1266.496983][T15974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1266.778395][T15974] 8021q: adding VLAN 0 to HW filter on device team0 [ 1266.835856][T15784] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.843079][T15784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1266.934047][T15784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.941262][T15784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1267.133120][ T48] IPVS: stop unused estimator thread 0... [ 1268.569860][T15974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1268.728447][T15974] veth0_vlan: entered promiscuous mode [ 1268.802669][T15974] veth1_vlan: entered promiscuous mode [ 1268.890448][T15974] veth0_macvtap: entered promiscuous mode [ 1268.922232][T15974] veth1_macvtap: entered promiscuous mode [ 1268.961904][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1268.973115][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.007047][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1269.024973][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.025030][ T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1269.060539][T15974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1269.290127][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.564921][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.585173][ T8] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1269.623952][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.635085][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.650678][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.680587][T15974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1269.688747][ T8] usb 6-1: Product: syz [ 1269.692948][ T8] usb 6-1: Manufacturer: syz [ 1269.700014][ T8] usb 6-1: SerialNumber: syz [ 1269.722539][ T8] usb 6-1: config 0 descriptor?? [ 1269.741090][T15974] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.775734][T15974] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.784469][T15974] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.936595][T15974] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.951931][ T8] hso 6-1:0.0: Failed to find INT IN ep [ 1270.613780][ T8] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1270.986604][T10838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.067573][T10838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.472936][T10838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.483324][T10838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.228434][T16348] usb 6-1: USB disconnect, device number 5 [ 1273.334883][T15571] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1274.255807][T15571] usb 2-1: Using ep0 maxpacket: 8 [ 1274.278747][T15571] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1274.296858][T15571] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.329120][T15571] usb 2-1: Product: syz [ 1274.339163][T15571] usb 2-1: Manufacturer: syz [ 1274.352366][T15571] usb 2-1: SerialNumber: syz [ 1274.370592][T15571] usb 2-1: config 0 descriptor?? [ 1274.982280][T15571] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 1275.005103][T15571] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 1275.015165][T15571] usb 2-1: USB disconnect, device number 45 [ 1276.524410][T16427] syz.5.2478: attempt to access beyond end of device [ 1276.524410][T16427] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1276.537444][T16427] (syz.5.2478,16427,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 1276.545264][T16427] (syz.5.2478,16427,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1276.552728][T16427] (syz.5.2478,16427,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1276.562812][T16427] (syz.5.2478,16427,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1276.916059][T14560] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1276.935232][T14560] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1276.951768][T14560] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1276.965772][T14560] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1276.974682][T14560] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1276.988284][T14560] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1277.563176][T16439] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2479'. [ 1279.297504][T14560] Bluetooth: hci1: command tx timeout [ 1279.966490][T16428] chnl_net:caif_netlink_parms(): no params data found [ 1281.348322][T14560] Bluetooth: hci1: command tx timeout [ 1281.538863][T16428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1281.553564][T16428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.576973][T16428] bridge_slave_0: entered allmulticast mode [ 1281.584671][T16428] bridge_slave_0: entered promiscuous mode [ 1281.691628][T16428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.709927][T16428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.723540][T16428] bridge_slave_1: entered allmulticast mode [ 1281.826056][T16428] bridge_slave_1: entered promiscuous mode [ 1281.836034][T16490] syz.1.2489: attempt to access beyond end of device [ 1281.836034][T16490] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1281.848836][T16490] (syz.1.2489,16490,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 1281.856539][T16490] (syz.1.2489,16490,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1281.863981][T16490] (syz.1.2489,16490,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1281.872688][T16490] (syz.1.2489,16490,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1281.949893][T16348] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1282.065016][T16495] syz.1.2490: attempt to access beyond end of device [ 1282.065016][T16495] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1282.077788][T16495] (syz.1.2490,16495,1):ocfs2_get_sector:1772 ERROR: status = -5 [ 1282.086041][T16495] (syz.1.2490,16495,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 1282.093403][T16495] (syz.1.2490,16495,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1282.102144][T16495] (syz.1.2490,16495,1):ocfs2_fill_super:1178 ERROR: status = -5 [ 1282.134915][T16348] usb 6-1: Using ep0 maxpacket: 8 [ 1282.170029][T16348] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1282.209668][T16348] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.239346][T16348] usb 6-1: Product: syz [ 1282.249656][T16428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1282.274064][T16348] usb 6-1: Manufacturer: syz [ 1282.283050][T16348] usb 6-1: SerialNumber: syz [ 1282.304518][T16348] usb 6-1: config 0 descriptor?? [ 1282.333956][T16428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1282.436214][T16428] team0: Port device team_slave_0 added [ 1282.454070][T16428] team0: Port device team_slave_1 added [ 1282.555059][ T8] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1282.563156][T16428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1282.641573][T16428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1282.727161][T16428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1282.816928][ T8] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1282.844256][ T8] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1282.893659][ T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1282.923425][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.926141][T16428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1282.954057][T16348] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -71 [ 1283.186177][T16348] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 1283.193760][T16428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1283.212811][T16499] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1283.348222][ T8] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1283.364976][T16348] usb 6-1: USB disconnect, device number 6 [ 1283.369842][T16428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1283.416399][T14560] Bluetooth: hci1: command tx timeout [ 1283.709555][ T8] usb 2-1: USB disconnect, device number 46 [ 1283.757798][T16385] udevd[16385]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1284.158791][T15778] bond6: (slave gretap1): Releasing active interface [ 1284.197993][T16428] hsr_slave_0: entered promiscuous mode [ 1284.242685][T16428] hsr_slave_1: entered promiscuous mode [ 1284.282824][T16428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1284.434882][T16428] Cannot create hsr debugfs directory [ 1285.448673][T16533] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2497'. [ 1285.505034][T14560] Bluetooth: hci1: command tx timeout [ 1286.038875][T16536] syz.5.2498: attempt to access beyond end of device [ 1286.038875][T16536] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1286.051807][T16536] (syz.5.2498,16536,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 1286.059518][T16536] (syz.5.2498,16536,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1286.066945][T16536] (syz.5.2498,16536,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1286.075707][T16536] (syz.5.2498,16536,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1286.833719][T15778] hsr_slave_0: left promiscuous mode [ 1286.846678][T15778] hsr_slave_1: left promiscuous mode [ 1286.863647][T15778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1286.872609][T15778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1286.894706][T15778] bridge_slave_1: left allmulticast mode [ 1286.908704][T15778] bridge_slave_1: left promiscuous mode [ 1286.914625][T15778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.925851][T15778] bridge_slave_0: left allmulticast mode [ 1286.931634][T15778] bridge_slave_0: left promiscuous mode [ 1286.938148][T15778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.234950][ T9087] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1287.244727][T15778] bond9 (unregistering): Released all slaves [ 1287.437530][ T9087] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1287.449028][ T9087] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1287.463529][ T9087] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1287.474988][ T9087] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.519935][T16554] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1287.558750][ T9087] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1288.019025][T15778] bond8 (unregistering): Released all slaves [ 1288.178700][ T23] usb 2-1: USB disconnect, device number 47 [ 1288.452515][T15778] bond7 (unregistering): Released all slaves [ 1288.596082][T15778] bond6 (unregistering): Released all slaves [ 1288.612160][T15778] bond5 (unregistering): Released all slaves [ 1288.629818][T15778] bond4 (unregistering): Released all slaves [ 1288.649137][T15778] bond3 (unregistering): Released all slaves [ 1288.655435][ T8] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1288.682762][T15778] bond2 (unregistering): Released all slaves [ 1288.703559][T15778] bond1 (unregistering): Released all slaves [ 1288.845387][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 1288.876069][ T8] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1288.890843][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.899149][ T8] usb 6-1: Product: syz [ 1288.903412][ T8] usb 6-1: Manufacturer: syz [ 1288.908409][ T8] usb 6-1: SerialNumber: syz [ 1288.926150][ T8] usb 6-1: config 0 descriptor?? [ 1289.983156][ T8] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -110 [ 1289.990916][ T8] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -110 [ 1290.051421][ T23] usb 6-1: USB disconnect, device number 7 [ 1290.109195][T15778] team0 (unregistering): Port device team_slave_1 removed [ 1290.172849][T15778] team0 (unregistering): Port device team_slave_0 removed [ 1290.242392][T15778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1290.317919][T15778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1290.796950][T15778] team0 (unregistering): Port device bond0 removed [ 1290.956841][T15778] bond0 (unregistering): Released all slaves [ 1291.346123][T16583] syz.2.2508: attempt to access beyond end of device [ 1291.346123][T16583] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1291.358894][T16583] (syz.2.2508,16583,1):ocfs2_get_sector:1772 ERROR: status = -5 [ 1291.366570][T16583] (syz.2.2508,16583,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 1291.373939][T16583] (syz.2.2508,16583,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1291.382677][T16583] (syz.2.2508,16583,1):ocfs2_fill_super:1178 ERROR: status = -5 [ 1291.667596][ T28] audit: type=1800 audit(1753287608.782:166): pid=16593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2510" name="bus" dev="overlay" ino=270 res=0 errno=0 [ 1293.452801][T16428] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1293.467256][T15778] IPVS: stop unused estimator thread 0... [ 1293.474960][ T788] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1293.708992][ T788] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1293.827999][T16428] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1293.929805][ T788] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1294.032058][ T788] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1294.050197][T16428] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1294.061217][ T788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.074690][T16428] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1294.116389][T16602] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1294.198727][ T788] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 1294.565776][T15571] usb 6-1: USB disconnect, device number 8 [ 1294.590002][T16428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1294.695547][T16428] 8021q: adding VLAN 0 to HW filter on device team0 [ 1294.778860][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.786025][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1294.802361][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.809539][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.846993][T16428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1297.124082][T16428] veth0_vlan: entered promiscuous mode [ 1297.234639][T16428] veth1_vlan: entered promiscuous mode [ 1297.499319][T16650] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2519'. [ 1297.553888][T16428] veth0_macvtap: entered promiscuous mode [ 1297.572119][T16428] veth1_macvtap: entered promiscuous mode [ 1297.592114][T16428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.603236][T16428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.613999][T16428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.631492][T16428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.924837][T16428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.937536][T16428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.143730][T16428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1298.337947][T16428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.389658][T16428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.433283][T16428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.462865][ T28] audit: type=1800 audit(1753287615.572:167): pid=16657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2521" name="bus" dev="overlay" ino=284 res=0 errno=0 [ 1298.816267][T16428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.212670][T16428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1299.223954][T16428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.246612][T16659] syz.5.2522: attempt to access beyond end of device [ 1299.246612][T16659] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1299.260237][T16659] (syz.5.2522,16659,1):ocfs2_get_sector:1772 ERROR: status = -5 [ 1299.268013][T16659] (syz.5.2522,16659,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 1299.275431][T16659] (syz.5.2522,16659,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1299.284089][T16659] (syz.5.2522,16659,1):ocfs2_fill_super:1178 ERROR: status = -5 [ 1299.316685][T16428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1299.379111][T16428] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.687578][T16428] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.141468][T16428] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.150389][T16428] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.436989][T12425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.477628][T12425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.538855][ T1280] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1300.548473][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.558004][T12425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.566004][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.683378][T12425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.616242][T14414] Bluetooth: hci3: command 0x0406 tx timeout [ 1303.262516][ T28] audit: type=1800 audit(1753287620.372:168): pid=16714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2532" name="bus" dev="overlay" ino=314 res=0 errno=0 [ 1306.547704][T16730] syz.1.2539: attempt to access beyond end of device [ 1306.547704][T16730] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1306.580597][T16730] (syz.1.2539,16730,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 1306.590868][T16730] (syz.1.2539,16730,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1306.598636][T16730] (syz.1.2539,16730,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1306.607707][T16730] (syz.1.2539,16730,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1310.437353][ T28] audit: type=1800 audit(1753287627.542:169): pid=16776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2548" name="bus" dev="overlay" ino=147 res=0 errno=0 [ 1310.789785][T16788] syz.5.2550: attempt to access beyond end of device [ 1310.789785][T16788] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1310.802881][T16788] (syz.5.2550,16788,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 1310.810798][T16788] (syz.5.2550,16788,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1310.818524][T16788] (syz.5.2550,16788,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1310.827534][T16788] (syz.5.2550,16788,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1314.912821][T16824] overlayfs: failed to resolve './file1': -2 [ 1316.209063][T16840] syz.3.2562: attempt to access beyond end of device [ 1316.209063][T16840] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1316.222648][T16840] (syz.3.2562,16840,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 1316.230652][T16840] (syz.3.2562,16840,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1316.239999][T16840] (syz.3.2562,16840,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1316.250612][T16840] (syz.3.2562,16840,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1318.224377][T16850] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2565'. [ 1323.395045][T15571] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1323.904926][T15571] usb 3-1: Using ep0 maxpacket: 8 [ 1323.920138][T15571] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1323.962876][T15571] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.053239][T16892] syz.1.2576: attempt to access beyond end of device [ 1324.053239][T16892] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1324.066517][T16892] (syz.1.2576,16892,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 1324.076260][T16892] (syz.1.2576,16892,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1324.083787][T16892] (syz.1.2576,16892,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1324.092861][T16892] (syz.1.2576,16892,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1324.439370][T15571] usb 3-1: Product: syz [ 1324.443658][T15571] usb 3-1: Manufacturer: syz [ 1324.456101][T15571] usb 3-1: SerialNumber: syz [ 1324.496222][T15571] usb 3-1: config 0 descriptor?? [ 1325.691030][T15571] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110 [ 1326.381851][T15571] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -110 [ 1327.080584][T15571] usb 3-1: USB disconnect, device number 36 [ 1328.613734][T16927] syz.5.2586: attempt to access beyond end of device [ 1328.613734][T16927] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1328.629033][T16927] (syz.5.2586,16927,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 1328.646737][T16927] (syz.5.2586,16927,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1328.655244][T16927] (syz.5.2586,16927,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1328.665226][T16927] (syz.5.2586,16927,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1332.379288][ T28] audit: type=1800 audit(1753287649.482:170): pid=16968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2596" name="bus" dev="overlay" ino=438 res=0 errno=0 [ 1333.355691][T14560] Bluetooth: hci4: command 0x0406 tx timeout [ 1333.387251][T16981] syz.3.2598: attempt to access beyond end of device [ 1333.387251][T16981] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1333.400304][T16981] (syz.3.2598,16981,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 1333.408244][T16981] (syz.3.2598,16981,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1333.415850][T16981] (syz.3.2598,16981,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1333.424648][T16981] (syz.3.2598,16981,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1336.173036][T16993] syz.3.2606: attempt to access beyond end of device [ 1336.173036][T16993] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1336.185832][T16993] (syz.3.2606,16993,1):ocfs2_get_sector:1772 ERROR: status = -5 [ 1336.193464][T16993] (syz.3.2606,16993,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 1336.200880][T16993] (syz.3.2606,16993,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1336.209585][T16993] (syz.3.2606,16993,1):ocfs2_fill_super:1178 ERROR: status = -5 [ 1336.217742][ T28] audit: type=1800 audit(1753287652.892:171): pid=17002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2608" name="bus" dev="overlay" ino=466 res=0 errno=0 [ 1341.062236][ T28] audit: type=1800 audit(1753287658.152:172): pid=17049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2621" name="bus" dev="overlay" ino=497 res=0 errno=0 [ 1341.707811][T17054] overlayfs: failed to resolve './bus': -2 [ 1344.822385][ T28] audit: type=1800 audit(1753287661.912:173): pid=17089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2633" name="bus" dev="overlay" ino=292 res=0 errno=0 [ 1345.379919][T17094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2634'. [ 1345.381749][T17099] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2636'. [ 1346.179158][T17106] overlayfs: failed to resolve './bus': -2 [ 1351.224702][T17154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2650'. [ 1351.537710][T17159] overlayfs: failed to resolve './bus': -2 [ 1351.564975][T15571] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1352.333297][T15571] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1352.375222][T15571] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.394487][T15571] usb 6-1: Product: syz [ 1352.399703][T15571] usb 6-1: Manufacturer: syz [ 1352.404314][T15571] usb 6-1: SerialNumber: syz [ 1352.417166][T15571] usb 6-1: config 0 descriptor?? [ 1354.309934][T15571] hso 6-1:0.0: Failed to find INT IN ep [ 1354.353541][T15571] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1354.949205][T15571] usb 6-1: USB disconnect, device number 9 [ 1357.200126][ T9087] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1357.200145][T17197] syz.2.2661: attempt to access beyond end of device [ 1357.200145][T17197] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1357.222929][T17197] (syz.2.2661,17197,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 1357.231588][T17197] (syz.2.2661,17197,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1357.347706][T17197] (syz.2.2661,17197,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1357.359399][T17197] (syz.2.2661,17197,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1357.425209][ T9087] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1357.441402][ T9087] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1357.459356][ T9087] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1357.468871][ T9087] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1357.481029][ T9087] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.508831][ T9087] usb 4-1: config 0 descriptor?? [ 1358.133709][ T9087] usbhid 4-1:0.0: can't add hid device: -71 [ 1358.146932][ T9087] usbhid: probe of 4-1:0.0 failed with error -71 [ 1358.171676][ T9087] usb 4-1: USB disconnect, device number 36 [ 1358.315176][T14414] Bluetooth: hci4: unexpected event for opcode 0x2031 [ 1358.550476][T11374] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1358.948199][T14414] Bluetooth: hci0: command 0x0406 tx timeout [ 1358.958749][T11374] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1358.999553][T11374] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.684911][T11374] usb 6-1: Product: syz [ 1360.689140][T11374] usb 6-1: Manufacturer: syz [ 1360.693742][T11374] usb 6-1: SerialNumber: syz [ 1360.854572][T11374] usb 6-1: config 0 descriptor?? [ 1361.998822][ T1280] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1362.045275][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.051669][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1364.420244][ T28] audit: type=1800 audit(1753287681.532:174): pid=17244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2673" name="bus" dev="overlay" ino=492 res=0 errno=0 [ 1365.910839][T11374] usb 6-1: can't set config #0, error -110 [ 1366.164500][T11374] usb 6-1: USB disconnect, device number 10 [ 1369.201921][T14560] Bluetooth: hci4: unexpected event for opcode 0x2031 [ 1369.297879][ T28] audit: type=1800 audit(1753287686.412:175): pid=17289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2686" name="bus" dev="overlay" ino=232 res=0 errno=0 [ 1371.755097][T16348] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1373.851217][T16348] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1373.991419][T16348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.171929][T16348] usb 4-1: Product: syz [ 1374.230053][T16348] usb 4-1: Manufacturer: syz [ 1374.271409][T16348] usb 4-1: SerialNumber: syz [ 1374.323947][T16348] usb 4-1: config 0 descriptor?? [ 1375.730675][T14560] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 1376.365050][T15859] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1376.380589][T16348] usb 4-1: can't set config #0, error -71 [ 1376.411865][T16348] usb 4-1: USB disconnect, device number 37 [ 1376.546360][T15859] usb 6-1: device descriptor read/64, error -71 [ 1377.315147][T15859] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1377.495123][T15859] usb 6-1: device descriptor read/64, error -71 [ 1377.629817][T15859] usb usb6-port1: attempt power cycle [ 1378.094921][T15859] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1378.386996][T15859] usb 6-1: device descriptor read/8, error -71 [ 1378.414965][T16348] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1378.495124][ T28] audit: type=1800 audit(1753287695.602:176): pid=17362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2705" name="bus" dev="overlay" ino=262 res=0 errno=0 [ 1378.644889][T16348] usb 3-1: Using ep0 maxpacket: 8 [ 1379.267397][T16348] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1379.277486][T16348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.285694][T16348] usb 3-1: Product: syz [ 1379.289871][T16348] usb 3-1: Manufacturer: syz [ 1379.294477][T16348] usb 3-1: SerialNumber: syz [ 1379.302201][T16348] usb 3-1: config 0 descriptor?? [ 1379.654364][T17371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'. [ 1379.873929][T17375] fuse: Bad value for 'fd' [ 1380.110042][ T8] Process accounting resumed [ 1380.120092][ T788] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1380.254533][T16348] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71 [ 1380.266486][T16348] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 1380.280336][T16348] usb 3-1: USB disconnect, device number 37 [ 1380.564410][ T788] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1380.624529][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.693836][ T788] usb 2-1: Product: syz [ 1380.708360][ T788] usb 2-1: Manufacturer: syz [ 1380.738353][ T788] usb 2-1: SerialNumber: syz [ 1380.767436][ T788] usb 2-1: config 0 descriptor?? [ 1380.975134][T15571] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1381.082275][ T788] hso 2-1:0.0: Failed to find INT IN ep [ 1381.119271][ T788] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1381.176668][T15571] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1381.203969][T15571] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1381.243972][T15571] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1381.269978][T15571] usb 6-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1381.308523][T15571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.355278][T15571] usb 6-1: config 0 descriptor?? [ 1382.681588][T15571] usbhid 6-1:0.0: can't add hid device: -71 [ 1382.736333][T15571] usbhid: probe of 6-1:0.0 failed with error -71 [ 1382.771217][T15571] usb 6-1: USB disconnect, device number 15 [ 1383.424344][T15859] usb 2-1: USB disconnect, device number 48 [ 1383.679167][T17404] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2714'. [ 1384.371340][T15571] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1385.156633][T15571] usb 2-1: device descriptor read/64, error -71 [ 1385.400758][T17418] overlayfs: failed to resolve './file0': -2 [ 1385.620627][T15571] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1386.334897][T15571] usb 2-1: device descriptor read/64, error -71 [ 1386.498622][T15571] usb usb2-port1: attempt power cycle [ 1387.004893][T15047] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1387.395004][T15047] usb 3-1: Using ep0 maxpacket: 8 [ 1387.905057][T15047] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1387.923537][T15047] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.936085][T15047] usb 3-1: Product: syz [ 1387.943742][T15047] usb 3-1: Manufacturer: syz [ 1387.962974][T15047] usb 3-1: SerialNumber: syz [ 1388.009445][T15047] usb 3-1: config 0 descriptor?? [ 1389.095143][T15047] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110 [ 1389.169165][T15047] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -110 [ 1389.209619][T17447] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2727'. [ 1389.238059][T15047] usb 3-1: USB disconnect, device number 38 [ 1389.434974][T15571] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1389.619778][T17450] overlayfs: failed to resolve './file0': -2 [ 1390.316693][T15571] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1390.331568][T15571] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.390666][T15571] usb 2-1: Product: syz [ 1390.395094][T15571] usb 2-1: Manufacturer: syz [ 1390.399713][T15571] usb 2-1: SerialNumber: syz [ 1390.415690][T15571] usb 2-1: config 0 descriptor?? [ 1393.884306][T17479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2736'. [ 1394.065432][T15571] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1394.101184][T17484] overlayfs: failed to resolve './file0': -2 [ 1395.649418][T15571] usb 2-1: USB disconnect, device number 52 [ 1398.400636][T17521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2748'. [ 1400.539681][T14414] Bluetooth: hci1: command 0x0406 tx timeout [ 1408.495852][T17602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2768'. [ 1410.065069][T11374] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1410.300812][T11374] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1410.313115][T11374] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1410.323774][T11374] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1410.335886][T11374] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1410.354731][T11374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.368325][T11374] usb 2-1: config 0 descriptor?? [ 1410.820839][T11374] uclogic 0003:5543:0064.000A: item fetching failed at offset 5/7 [ 1410.850898][T11374] uclogic 0003:5543:0064.000A: parse failed [ 1410.868861][T11374] uclogic: probe of 0003:5543:0064.000A failed with error -22 [ 1411.020471][T11374] usb 2-1: USB disconnect, device number 53 [ 1417.124922][ T788] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1417.309817][ T788] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1417.359540][ T788] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1417.402669][ T788] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1417.430009][ T788] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1417.467989][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.505183][ T788] usb 2-1: config 0 descriptor?? [ 1417.981731][ T788] uclogic 0003:5543:0064.000B: item fetching failed at offset 5/7 [ 1418.013279][ T788] uclogic 0003:5543:0064.000B: parse failed [ 1418.029676][ T788] uclogic: probe of 0003:5543:0064.000B failed with error -22 [ 1418.181116][T15047] usb 2-1: USB disconnect, device number 54 [ 1420.108941][ T23] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1420.364973][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 1420.403910][ T23] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1420.430622][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.474961][ T23] usb 6-1: Product: syz [ 1420.485633][ T23] usb 6-1: Manufacturer: syz [ 1420.521811][ T23] usb 6-1: SerialNumber: syz [ 1420.729882][ T23] usb 6-1: config 0 descriptor?? [ 1421.812786][ T23] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -71 [ 1421.883936][ T23] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 1422.332672][ T23] usb 6-1: USB disconnect, device number 16 [ 1423.437459][ T1280] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1423.495661][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.502205][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1430.358440][T15859] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1430.602229][T15859] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1430.630802][T15859] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1430.649575][T15859] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1430.668645][T15859] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1430.679835][T15859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.742323][T15859] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1431.091732][T15859] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 1431.110407][T16274] udevd[16274]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1431.125917][T15859] usb 2-1: USB disconnect, device number 55 [ 1433.392767][T11374] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1433.616512][T11374] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1433.631237][T11374] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1433.651240][T11374] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1433.731100][T11374] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1433.794975][T11374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.875253][T11374] usb 3-1: config 0 descriptor?? [ 1434.456065][T11374] uclogic 0003:5543:0064.000C: item fetching failed at offset 5/7 [ 1434.634434][T11374] uclogic 0003:5543:0064.000C: parse failed [ 1434.756832][T16348] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1434.836715][T11374] uclogic: probe of 0003:5543:0064.000C failed with error -22 [ 1434.971172][T11374] usb 3-1: USB disconnect, device number 39 [ 1435.235518][T16348] usb 2-1: Using ep0 maxpacket: 8 [ 1435.245170][T16348] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1435.256208][T16348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.265020][T16348] usb 2-1: Product: syz [ 1435.269210][T16348] usb 2-1: Manufacturer: syz [ 1435.273810][T16348] usb 2-1: SerialNumber: syz [ 1435.305917][T16348] usb 2-1: config 0 descriptor?? [ 1436.504231][T16348] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 1436.515270][T15859] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1436.549306][T16348] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 1436.579270][T16348] usb 2-1: USB disconnect, device number 56 [ 1436.717242][T15859] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.734463][T15859] usb 6-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1436.764967][T15859] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1436.778832][T15859] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1436.794020][T15859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.044051][T15859] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 1437.197805][T15859] snd-usb-audio: probe of 6-1:27.0 failed with error -2 [ 1437.278891][T16274] udevd[16274]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1437.326490][T15859] usb 6-1: USB disconnect, device number 17 [ 1439.605076][T11374] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1439.797594][T11374] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1439.809124][T11374] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1439.826687][T11374] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1439.837734][T11374] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1439.949878][T11374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.406381][T11374] usb 2-1: config 0 descriptor?? [ 1441.268406][T11374] uclogic 0003:5543:0064.000D: item fetching failed at offset 5/7 [ 1441.437495][T11374] uclogic 0003:5543:0064.000D: parse failed [ 1441.443527][T11374] uclogic: probe of 0003:5543:0064.000D failed with error -22 [ 1441.461143][T11374] usb 2-1: USB disconnect, device number 57 [ 1442.889336][T11374] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1443.150056][T11374] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.185883][T11374] usb 6-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1443.210069][T11374] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1444.036816][T11374] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1444.071831][T11374] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.484714][T11374] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 1445.035553][T11374] snd-usb-audio: probe of 6-1:27.0 failed with error -2 [ 1445.069373][T15859] usb 6-1: USB disconnect, device number 18 [ 1445.179000][T17894] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2846'. [ 1445.567682][T16274] udevd[16274]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1446.015230][T15571] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1446.327888][T15571] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1446.350054][T15571] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1446.377236][T15571] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1446.394173][T15571] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1446.428746][T15571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.474934][T15571] usb 2-1: config 0 descriptor?? [ 1447.318187][T15571] uclogic 0003:5543:0064.000E: item fetching failed at offset 5/7 [ 1447.333580][T15571] uclogic 0003:5543:0064.000E: parse failed [ 1447.339733][T15571] uclogic: probe of 0003:5543:0064.000E failed with error -22 [ 1447.422115][T16348] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1447.515760][T15571] usb 2-1: USB disconnect, device number 58 [ 1447.680526][T16348] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1447.694429][T16348] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.716884][T16348] usb 6-1: Product: syz [ 1447.778537][T16348] usb 6-1: Manufacturer: syz [ 1447.783187][T16348] usb 6-1: SerialNumber: syz [ 1447.794397][T16348] usb 6-1: config 0 descriptor?? [ 1448.025149][T16348] hso 6-1:0.0: Failed to find INT IN ep [ 1448.069176][T16348] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1448.385144][T11962] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1448.605670][T11962] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1448.637679][T11962] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1448.651607][T11962] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1448.662923][T11962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.679798][T17929] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1448.691242][T11962] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1449.060691][T17938] overlayfs: missing 'lowerdir' [ 1450.582596][T16348] usb 4-1: USB disconnect, device number 38 [ 1450.926412][ T9087] usb 6-1: USB disconnect, device number 19 [ 1451.288926][T16348] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1451.576808][T16348] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1451.587650][T16348] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1451.605030][T16348] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1451.632064][T16348] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1451.644118][T16348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.670673][T16348] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1451.679235][T16348] usb 3-1: invalid MIDI out EP 0 [ 1451.694902][T15571] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1451.762402][T16348] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 1451.819102][T16385] udevd[16385]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1451.875347][T15571] usb 6-1: Using ep0 maxpacket: 8 [ 1451.883477][ T9087] usb 3-1: USB disconnect, device number 40 [ 1451.885404][T15571] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1452.252824][T15571] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.329087][T15571] usb 6-1: Product: syz [ 1452.384716][T15571] usb 6-1: Manufacturer: syz [ 1452.431554][T15571] usb 6-1: SerialNumber: syz [ 1452.526012][T15571] usb 6-1: config 0 descriptor?? [ 1453.771439][T15571] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -110 [ 1453.874397][T15571] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -110 [ 1454.021850][T15571] usb 6-1: USB disconnect, device number 20 [ 1454.219770][T17973] (null): rxe_set_mtu: Set mtu to 1024 [ 1454.228775][T17973] wg1 speed is unknown, defaulting to 1000 [ 1454.246434][T17973] wg1 speed is unknown, defaulting to 1000 [ 1454.254582][T17973] wg1 speed is unknown, defaulting to 1000 [ 1456.621658][T17973] infiniband : set active [ 1456.626242][T15571] wg1 speed is unknown, defaulting to 1000 [ 1456.645014][T17973] infiniband : added wg1 [ 1456.658685][T17973] : rxe_create_cq: returned err = -12 [ 1456.672622][T17973] infiniband : Couldn't create ib_mad CQ [ 1456.696184][T17973] infiniband : Couldn't open port 1 [ 1457.010849][T15571] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1457.562865][T17973] RDS/IB: : added [ 1457.618893][T17973] smc: adding ib device  with port count 1 [ 1457.648410][T17973] smc: ib device  port 1 has pnetid [ 1457.664210][T17973] wg1 speed is unknown, defaulting to 1000 [ 1457.673793][ T8] wg1 speed is unknown, defaulting to 1000 [ 1457.876182][T15571] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.035872][T15571] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1458.626314][T15571] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1458.639908][T15571] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1458.654847][T15571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.677137][T15571] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 1458.688024][T15571] usb 6-1: invalid MIDI out EP 0 [ 1458.793215][T17973] wg1 speed is unknown, defaulting to 1000 [ 1458.807551][T15571] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 1458.899477][T15571] usb 6-1: USB disconnect, device number 21 [ 1459.045093][T17973] wg1 speed is unknown, defaulting to 1000 [ 1459.183230][T17973] wg1 speed is unknown, defaulting to 1000 [ 1459.712855][T15859] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1459.925123][T15859] usb 3-1: Using ep0 maxpacket: 8 [ 1460.086101][T15859] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1460.095670][T15859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.103963][T15859] usb 3-1: Product: syz [ 1460.108377][T15859] usb 3-1: Manufacturer: syz [ 1460.146164][T15859] usb 3-1: SerialNumber: syz [ 1460.165467][T15859] usb 3-1: config 0 descriptor?? [ 1461.600904][T15859] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110 [ 1461.635282][T15859] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -110 [ 1461.737367][T16348] usb 3-1: USB disconnect, device number 41 [ 1466.162111][T18075] overlayfs: missing 'lowerdir' [ 1471.733782][ T28] audit: type=1800 audit(1753287788.842:177): pid=18140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2905" name="bus" dev="overlay" ino=845 res=0 errno=0 [ 1472.020225][T18150] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2909'. [ 1473.501829][T18163] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1473.510814][T18163] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1473.519805][T18163] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1473.528829][T18163] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1473.786770][T18163] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1475.075483][T18196] overlayfs: missing 'workdir' [ 1476.418873][ T28] audit: type=1800 audit(1753287793.532:178): pid=18205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2917" name="bus" dev="overlay" ino=951 res=0 errno=0 [ 1476.655065][T15859] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1476.864869][T15859] usb 4-1: Using ep0 maxpacket: 8 [ 1476.955411][T15859] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1478.498488][T15859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.572265][T15859] usb 4-1: Product: syz [ 1478.640231][T15859] usb 4-1: Manufacturer: syz [ 1478.657487][T15859] usb 4-1: SerialNumber: syz [ 1478.675979][T15859] usb 4-1: config 0 descriptor?? [ 1478.687274][T15859] usb 4-1: can't set config #0, error -71 [ 1478.719974][T15859] usb 4-1: USB disconnect, device number 39 [ 1480.788093][T18255] overlayfs: missing 'workdir' [ 1481.361392][T18262] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1481.786744][ T9087] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1482.125096][ T9087] usb 3-1: Using ep0 maxpacket: 8 [ 1482.282351][ T9087] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1482.297225][ T9087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.307828][ T9087] usb 3-1: Product: syz [ 1482.312025][ T9087] usb 3-1: Manufacturer: syz [ 1482.318690][ T9087] usb 3-1: SerialNumber: syz [ 1482.330275][ T9087] usb 3-1: config 0 descriptor?? [ 1482.535157][T18275] overlayfs: overlapping lowerdir path [ 1482.963935][ T9087] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71 [ 1483.020881][ T9087] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 1483.087501][ T9087] usb 3-1: USB disconnect, device number 42 [ 1483.663766][T18293] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2936'. [ 1484.859267][ T1280] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1484.868678][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.875284][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.986907][T18306] overlayfs: missing 'workdir' [ 1487.178402][T18320] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1487.179321][T18322] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1487.187248][T18320] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1487.204119][T18320] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1487.212944][T18320] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1487.390393][T18326] overlayfs: overlapping lowerdir path [ 1488.324644][T18334] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2946'. [ 1489.789177][T18348] overlayfs: missing 'lowerdir' [ 1490.885180][T18364] overlayfs: overlapping lowerdir path [ 1491.923726][T18376] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1491.932774][T18376] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1491.941733][T18376] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1491.950623][T18376] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1492.367902][T18372] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1494.938856][T18411] block device autoloading is deprecated and will be removed. [ 1496.035877][T15571] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1496.224839][T15571] usb 3-1: Using ep0 maxpacket: 8 [ 1496.258626][T15571] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1496.289139][T15571] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.320286][T15571] usb 3-1: Product: syz [ 1496.341281][T15571] usb 3-1: Manufacturer: syz [ 1496.356710][T15571] usb 3-1: SerialNumber: syz [ 1496.405293][T15571] usb 3-1: config 0 descriptor?? [ 1497.450939][T15571] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71 [ 1497.484193][T15571] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 1497.507015][T15571] usb 3-1: USB disconnect, device number 43 [ 1497.552989][T18439] sd 0:0:1:0: PR command failed: 1026 [ 1497.575683][T18439] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1497.582592][T18439] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1497.986876][ T28] audit: type=1800 audit(1753287814.992:179): pid=18450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2976" name="bus" dev="overlay" ino=622 res=0 errno=0 [ 1499.802463][T18467] tipc: Failed to obtain node identity [ 1499.829528][T18467] tipc: Enabling of bearer rejected, failed to enable media [ 1500.580415][ T28] audit: type=1800 audit(1753287817.682:180): pid=18485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2986" name="bus" dev="overlay" ino=967 res=0 errno=0 [ 1501.868783][T18495] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1501.878210][T18495] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1504.705044][ T28] audit: type=1800 audit(1753287821.782:181): pid=18519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2996" name="bus" dev="overlay" ino=1093 res=0 errno=0 [ 1505.602155][T18540] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1505.611252][T18540] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1506.953461][T18554] netlink: 'syz.3.3001': attribute type 10 has an invalid length. [ 1507.117820][T18554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.126616][T18554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.452529][ T28] audit: type=1800 audit(1753287824.562:182): pid=18566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3006" name="bus" dev="overlay" ino=1011 res=0 errno=0 [ 1507.529767][T18554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1507.537014][T18554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1507.544358][T18554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1507.552380][T18554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1507.663290][T18554] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1509.520573][T18576] netlink: 'syz.5.3008': attribute type 10 has an invalid length. [ 1509.954408][T18576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1509.967560][T18576] team0: Port device bond0 added [ 1514.372775][T18618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3019'. [ 1516.785905][T14414] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 1518.015004][T15571] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1518.446958][T15571] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1518.458030][T15571] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1518.468515][T15571] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1518.480077][T15571] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1518.501539][T15571] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1518.524652][T15571] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1518.540038][T15571] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1518.558443][T15571] usb 2-1: Product: syz [ 1518.562646][T15571] usb 2-1: Manufacturer: syz [ 1518.598844][T15571] cdc_wdm 2-1:1.0: skipping garbage [ 1518.604115][T15571] cdc_wdm 2-1:1.0: skipping garbage [ 1518.629520][T15571] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1518.636561][T15571] cdc_wdm 2-1:1.0: Unknown control protocol [ 1519.095262][T15859] usb 2-1: USB disconnect, device number 59 [ 1525.988967][T18720] netlink: 'syz.5.3048': attribute type 39 has an invalid length. [ 1528.602027][T18732] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3050'. [ 1532.430655][T18769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3061'. [ 1534.709585][T18784] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3063'. [ 1536.416654][T18799] overlayfs: overlapping lowerdir path [ 1536.864882][T15859] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1537.574942][T15859] usb 2-1: Using ep0 maxpacket: 32 [ 1537.582660][T15859] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 1537.601261][T15859] usb 2-1: config 0 has no interface number 0 [ 1537.615054][T15859] usb 2-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1537.634807][T15859] usb 2-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 1537.658520][T15859] usb 2-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping [ 1537.670761][T14414] Bluetooth: hci1: command 0x0406 tx timeout [ 1537.685990][T15859] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29793, setting to 1024 [ 1537.697824][T15859] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1537.708490][T15859] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1537.725478][T15859] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1537.734883][T15859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.742976][T15859] usb 2-1: Product: syz [ 1537.748035][T15859] usb 2-1: Manufacturer: syz [ 1537.752740][T15859] usb 2-1: SerialNumber: syz [ 1537.760696][T15859] usb 2-1: config 0 descriptor?? [ 1537.767067][T18804] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1537.775201][T18804] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1537.785698][T15859] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 1537.998093][T18804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.020589][T18804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1538.043004][T15859] usb 2-1: USB disconnect, device number 60 [ 1539.970737][T18837] overlayfs: overlapping lowerdir path [ 1540.495147][T18858] Cannot find add_set index 0 as target [ 1540.680691][T18859] fuse: Bad value for 'fd' [ 1542.295149][T14414] Bluetooth: hci1: command 0x0406 tx timeout [ 1546.301799][ T1280] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1546.457371][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.467199][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1550.107405][T18959] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3110'. [ 1550.169372][T16348] Process accounting resumed [ 1550.291041][T18959] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3110'. [ 1550.545400][T18959] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3110'. [ 1550.905146][ T5950] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1551.106972][ T5950] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1551.134053][ T5950] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 1551.158464][ T5950] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1551.183623][ T5950] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1551.235107][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.266664][T18977] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1551.401918][ T5950] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1551.690714][T18988] fuse: Bad value for 'fd' [ 1551.958067][T16348] usb 4-1: USB disconnect, device number 40 [ 1555.492859][T19027] netlink: 'syz.3.3129': attribute type 10 has an invalid length. [ 1555.504971][T14560] Bluetooth: hci1: command 0x0406 tx timeout [ 1555.529142][T19027] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1557.337679][ T28] audit: type=1800 audit(1753287874.442:183): pid=19040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3134" name="bus" dev="overlay" ino=1292 res=0 errno=0 [ 1558.032138][T19050] ================================================================================ [ 1558.104952][T19050] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl812.c:1152:10 [ 1558.194998][T19050] shift exponent 4194335 is too large for 32-bit type 'int' [ 1558.248980][T19050] CPU: 0 PID: 19050 Comm: syz.5.3136 Not tainted 6.6.99-syzkaller #0 [ 1558.257102][T19050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1558.267193][T19050] Call Trace: [ 1558.270500][T19050] [ 1558.273466][T19050] dump_stack_lvl+0x16c/0x230 [ 1558.278179][T19050] ? show_regs_print_info+0x20/0x20 [ 1558.283403][T19050] ? load_image+0x3b0/0x3b0 [ 1558.287953][T19050] ubsan_epilogue+0xa/0x30 [ 1558.292400][T19050] __ubsan_handle_shift_out_of_bounds+0x380/0x400 [ 1558.298861][T19050] pcl812_attach+0x1cd1/0x2440 [ 1558.303670][T19050] comedi_device_attach+0x519/0x660 [ 1558.308909][T19050] comedi_unlocked_ioctl+0x68d/0xf00 [ 1558.314200][T19050] ? tomoyo_path_number_perm+0x477/0x590 [ 1558.319834][T19050] ? comedi_poll+0x8c0/0x8c0 [ 1558.324466][T19050] ? __fget_files+0x28/0x4d0 [ 1558.329062][T19050] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1558.333991][T19050] ? security_file_ioctl+0x80/0xa0 [ 1558.339101][T19050] ? comedi_poll+0x8c0/0x8c0 [ 1558.343685][T19050] __se_sys_ioctl+0xfd/0x170 [ 1558.348279][T19050] do_syscall_64+0x55/0xb0 [ 1558.352688][T19050] ? clear_bhb_loop+0x40/0x90 [ 1558.357362][T19050] ? clear_bhb_loop+0x40/0x90 [ 1558.362035][T19050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1558.367969][T19050] RIP: 0033:0x7f7d9798e9a9 [ 1558.372412][T19050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1558.392049][T19050] RSP: 002b:00007f7d98789038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1558.400461][T19050] RAX: ffffffffffffffda RBX: 00007f7d97bb5fa0 RCX: 00007f7d9798e9a9 [ 1558.408432][T19050] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 1558.416404][T19050] RBP: 00007f7d97a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 1558.424367][T19050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1558.432330][T19050] R13: 0000000000000000 R14: 00007f7d97bb5fa0 R15: 00007fffba0e4878 [ 1558.440309][T19050] [ 1558.464948][T19050] ================================================================================ [ 1558.480366][T19050] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 1558.487612][T19050] CPU: 1 PID: 19050 Comm: syz.5.3136 Not tainted 6.6.99-syzkaller #0 [ 1558.495700][T19050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1558.505743][T19050] Call Trace: [ 1558.509008][T19050] [ 1558.511924][T19050] dump_stack_lvl+0x16c/0x230 [ 1558.516589][T19050] ? show_regs_print_info+0x20/0x20 [ 1558.521770][T19050] ? load_image+0x3b0/0x3b0 [ 1558.526267][T19050] panic+0x2c0/0x710 [ 1558.530151][T19050] ? bpf_jit_dump+0xd0/0xd0 [ 1558.534648][T19050] check_panic_on_warn+0x84/0xa0 [ 1558.539591][T19050] __ubsan_handle_shift_out_of_bounds+0x380/0x400 [ 1558.546022][T19050] pcl812_attach+0x1cd1/0x2440 [ 1558.550791][T19050] comedi_device_attach+0x519/0x660 [ 1558.555986][T19050] comedi_unlocked_ioctl+0x68d/0xf00 [ 1558.561266][T19050] ? tomoyo_path_number_perm+0x477/0x590 [ 1558.566891][T19050] ? comedi_poll+0x8c0/0x8c0 [ 1558.571497][T19050] ? __fget_files+0x28/0x4d0 [ 1558.576077][T19050] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1558.580998][T19050] ? security_file_ioctl+0x80/0xa0 [ 1558.586095][T19050] ? comedi_poll+0x8c0/0x8c0 [ 1558.590669][T19050] __se_sys_ioctl+0xfd/0x170 [ 1558.595248][T19050] do_syscall_64+0x55/0xb0 [ 1558.599662][T19050] ? clear_bhb_loop+0x40/0x90 [ 1558.604320][T19050] ? clear_bhb_loop+0x40/0x90 [ 1558.608983][T19050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1558.614880][T19050] RIP: 0033:0x7f7d9798e9a9 [ 1558.619294][T19050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1558.638892][T19050] RSP: 002b:00007f7d98789038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1558.647287][T19050] RAX: ffffffffffffffda RBX: 00007f7d97bb5fa0 RCX: 00007f7d9798e9a9 [ 1558.655327][T19050] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 1558.663281][T19050] RBP: 00007f7d97a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 1558.671236][T19050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1558.679194][T19050] R13: 0000000000000000 R14: 00007f7d97bb5fa0 R15: 00007fffba0e4878 [ 1558.687158][T19050] [ 1558.690407][T19050] Kernel Offset: disabled [ 1558.694800][T19050] Rebooting in 86400 seconds..