last executing test programs: 14.674415058s ago: executing program 3 (id=3243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESOCT=r2, @ANYBLOB="040000000000ffff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000200000000faffffffffffffff00000000000000a94c451d347dfbba4edfa7fdd8aa88ec679768913b8aef6e28181c2ecd4d097df11c08db5df86d086d8932f6a7f0f04fa46e15618b31b43ff234ecfd9e897968498e7d15cde454312b6b0b3fa264f9b887"], 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0xb, &(0x7f00000002c0)=0x36c4, 0x4) bind$inet(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000040)=0x9, 0x4) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) 14.073527664s ago: executing program 3 (id=3245): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff", 0x15}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 10.953588836s ago: executing program 3 (id=3252): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4001, @empty, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 9.022677887s ago: executing program 1 (id=3261): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/39, 0x27}], 0x1, 0x0, 0xfffffffd) 7.901400322s ago: executing program 0 (id=3262): open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x2}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)="a39c1fb4d127f197e8e3a41c9fe5567d9137e293a21d262ad6ead1253f31493569f5737c8ed607d03401d5a3edcb", 0x2e}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b", 0x42}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317", 0x8a}], 0x3}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.720633458s ago: executing program 3 (id=3263): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x58, 0x0, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a3446ceb1c5a6525e8f56e2add"}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x20, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x3}, @request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0x6) r5 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x235, 0x0, &(0x7f0000000880), 0x0) read$hidraw(r5, &(0x7f0000002340)=""/147, 0x93) syz_usb_ep_write(r3, 0x81, 0x1, &(0x7f0000000140)='\x00') syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r7) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r8, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8040) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 7.720108118s ago: executing program 1 (id=3264): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x72ac}]}}]}, 0x38}}, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x3a, @rand_addr=0x64010100, 0x0, 0x0, 'lc\x00', 0x22, 0x1, 0x57}, 0x2c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005a00011000000000000000001c000000080001001436c99f"], 0x1c}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90120600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_usb_connect(0x3, 0x2d, &(0x7f0000001240)=ANY=[@ANYBLOB="12010000b44b0140720c13004f1d0000000109021b00017f00f00009047c0001f8191c000905020800040a0501dcffcbc294a0d66774c401d3d028a73ebb426efd640cfb7d4a8985e861836b3099cf89c0c944825714efeff1a8612de8d066ed24c9b69c7aad1de4dc18e1eba68be582276a05b2b4ef558bc24a0299d7337b26f5459ca0a01a4462d6f8dcdba296e8378d5328bf9053750320f9e8db9bf080571f927e08eb2329b54e9cfcf88d0c0c807724d162444f47beaafe1f497e5ceb369cb4c881ba3704b43c0968b5a51084074d48c53a68ad4055b024ade2451c8739c24a6bd77b0d5e7d642d60711fdb1f23529983aa46746d60e515e4cd437ad6692444d35e78e25d2019469bd59317ddb1463a45f64a37e3080affab"], 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) 6.906050475s ago: executing program 0 (id=3265): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x610, 0x550, 0x1f0, 0x408, 0x550, 0x120, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000180)=0x1000) ppoll(&(0x7f0000000040)=[{r4, 0x20}], 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x5, &(0x7f0000fff000/0x1000)=nil, 0xc) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x4000) 6.472375865s ago: executing program 2 (id=3267): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r5) 5.383489867s ago: executing program 2 (id=3268): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000001200)={0x84, @local, 0x15, 0x1, 'sh\x00', 0x0, 0x3, 0x71}, 0x2c) socket$inet_sctp(0x2, 0x5, 0x84) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r2, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) lseek(r2, 0x0, 0x4) socketpair(0x23, 0x2, 0x1, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) 5.375973678s ago: executing program 1 (id=3269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4a173eaa) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r3, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000940)='u', 0x1}], 0x1}}], 0x1, 0x4c040) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 4.71274057s ago: executing program 0 (id=3270): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x0, 0x4bb8, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de2920a9fc0790cc176bd2b901e4127b09835ae6d0d196048bb19a64d26f20a05b95c69f371882ef2e20c5606ed1b2ebcf09a4a333f6e1c3c4fb64d8182df4ab09d0a381d966977fc041cea9bdf0aa31fe51efe9211b9b8e6e4551b6438f8efcc41265574ff6504435eb22a678a99768f0327ded8fdcb41f27c2024d2b923f7dc5df5bf62af447b121dd9f94d766d6cebdeb02f611ab10e57af4b3268fb3f9777373bd5fd6b82f730e67c4eab113d8e65d7405be3e5d92dc5e7e85d34bb8b7c894cbed629ecc25c288b3d4556a85a1e2150cac5b686a8de29ab7c35040b77875bfa0e451dc0869cfe105bd115e7cf48f44dfdf26be65f3b727fd88d6395d051e49c060998e84b19377fcb20fe2eb392335e5a9d84555ef037aab37169ce761aa8a8ec08ea87e3a3b896f3d1b2380bc8256e0f7ea7dc488382e6112b53a7bb269d6261f87e0e0e0cef9152f8a67f412148f34880c970101fbd7b0e8fc49d6a5c87e487b7b175b15be26b6b8e1ed8527614dcefcfd80f8392560c8b706418b7de8fbb7a666a7e7f322dc70373606bf39efa04616cb99d662dfc591061bde5ed27a66aa7edbfec1eb0b1e843c372b84c3ed514a0aadf523b8669e526765d429824aeaa0a6f4c185754d437d977a1f586431dc256ce5aa7c25be259de3a0ae6e5bcdf56b4c7e8199fe6b461e78467cfac19de6956056ef57e93d3a7df8f646f4a9002b100edb0a6caa72b3f6eb29dc54de58120d27daff9cd61c64107e1bcb3b3212e1e2aa24fb24dc2dafc636c82ad25da9d934e46c7783d8f915337612feb348857ce2262240dfe51ec94d9d61074959f167b9840b20f003883bf167149228d7f03eafde851427cd1966a96aeae05b51ae4cd82f4b4dad60a070c01a8b500e2683f7136e331602e76845262825d7f3764cf1a05ad95d88aab71d41484f63fa6a43c044c7f03130552321933bc40b888fd0cc55939ff79a5059516f3b80c7ba8188ffb6a259a34567ee52c1f9df0f6c91737d688e36d076a49d1045cac30d5ed52a10381c96d9f22e469cc531bb06853d18b8f8625d2a917e795ffa4407fa75713510a3f5370e1ecbf7a5ff68a90a1eda077531cf4d399d4908f138c936e1931c72240070c6a6255f5fd03966e9a06c1d481e8e3d128e880776e572177780a3481c49bd86c174e152bafed245d58ef3428c645b08e48833960d1b5223d7be0c67a2b2c7531390d1837a84ed004a00cb4b0cd6e78824da032b48c49ec006d14206dc3d0c67d7ca87e9ea0faddc3e0b0c917c64eefeebf79e3a16c958db63a08a5d4d7210273aba3e56a4cd4cccb044750ff97749505ff1332b2dd30990849ab1500e1947d0abfb0c59760f0a502806ee1bce56fbb42251dd6ac8b709c73a6b8c548c2b23cf351dc498810e477bd082464e76702703b56d3cd2f3d8a2e00f19d8ffa3c236d3601f169c9dfe9c316f8cbe63c3801a51ea5ac785694a0c653cd28d68c5a81c2590d2aeea8c8688b2e88f46c4f99890e51b42cce485fcb4d91557fb3912b36b0dbeac8df44e945eb9937141402fb2aa1476185e1f8c37f6c98bc937f36d9c7237135132a54a03067b002b9c657ab0daa253af66eee78b0309cb8532dd2dee800c8349b731da0efa66ead82eebe0102279df5aa281fe1d86c0dbf154910d5e8a113ecbddbd046367b9e2acfa7cc406f61b472bbec6919534615ed81b664da956ce6586bf4c92d63ef371dfec5f9ce748931d585cadc9372a95a1372c7213e2c52fca253945afeee02e9f2de2d9452c85fd2dbdc87cb6c25697dfcbed8a0eba381835e6c360f3861367ec98a9a9ccf956d6cbfb706fee0d391cf82a0d4662792274f52fc2b5d72a43ec74a86400e62d3652f607774cfad1504bc0476570d532b527bf0d7012804b2e6fdf9a9414f10b16c9374f2b065348d865b309e37750d3a7e12394e356c48c9fa0d4a9a43f689f6cbf70b09a3b9782cc3d5d93480f8a7a21a049780fc6bf21f1eca938a37afcbb2b929a0c502e164d2571e78d214b359d97e3edc0ad5c7fd1625b4ece33e1f569676e9a7262ead857873f77ef149d2f8c5a09ab19ae384a7f957f612a24283c35327aa969b20711309644c5b3e6c89da94e1f5da54246bd771468a1adc8a8d601e0b12769604f0f07ca43ce2a8a2f4b5654c0b76b146c49038e07db54dae702580b97096911f034fc1797029de8b7c213c902d1d754e77ff85e6222e745db9d5d2d45c5d29a8b6de0f27e5701fdf12b09fd6c70baa0f85a424c21ce0796dbe1fd366b94fcdf64ea232b3e88b89a38d728de77e84decc804f07a48f2716ca6f76b24923cea1a4da0d1f1dc73611269e784c4fd921f9b26c11f35b5cda45842a81b603ce2155d95c273fa0743a571b52e68c9ea3f28009fc37406b9e329ce50fedfb20dfb4cdf3a94769aee2586c2a17e68a07abfcd18aceddfd3876b14558e4d092eadb9120796c44e89610494085117bc41b5c4619a8c160b97811df49fc7d9bf222d7a002640644337ef5af53ed50661131f7c042665b276c0adf0c9a74f3542729beb7632a6027e65eddff7bb27915826701ec9b6a4c672f08877eefd859e0aa6e75a2e841e1ea98dff994e5a58be628df86bff17497a4d0f92ab39db421eb1062a2a393656bbb1d92becbb91a59619156b51585cd2eafd8a18d6326166312efeaa7258bddad63e0c7372ffb7ce1f1adf1ac2ffa0f278e4be6684d762f8971ed7bb04096b96f8126bf5fd32142e745d421f495327dde0f1e2d9a1d8ba63c1453101396a2e54e89cdabac2c6a01f23a5c1d5a2dfa2a3c634176e97c9c62b41ea28102b5a08af2fba1d311bb323df086ea97726c9d8c7b7b53a3399a80f040d434fdcc2148fb1da3b7d7f0f3e3fd56471a310ee275da611c79f86be8ed6343f6ed0ad91dfeffebc3ab6389d0566d6db904c1db499ae7d2698fdc7170320f85cc3d3d0d9d0d0c7d45db7b53c5eb79a2fed2a048d9d74419532122fac62f6315a9e13b461cb4e26514491debd366927987271be963ea5805a49b8b480c6a393fda1b11fd5634890cf02948cb5bfea237afb30d081c7403cd334a02e5bb8db542c4d5fa5ec5c8a0dd36b62156881c98e01948b4775a502c5d8453439fd930df52caac9d71c28b712000b306b913c10918ca0bc194f2533334462e5cd2b2e6c978a4838febfbc2d4375b8108bd0aa32aeaf05e7ba30c781cace6470ead574f5cbfa68aa8c8d835e9b3ab2bd7dd90b5e3e6cd62d8e04c3b45326e1f560a8dd8f3db4177e9e5ccd61f21dacb5c40c8030559cdfe88f7aa98bdcde90c121"}, {0x0, 0x0, 0x41ff7484, 0x0}, {0x0, 0x0, 0x100d5ba, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x40005, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3e6ac3bf761a781b, &(0x7f0000001000)=""/209, &(0x7f0000000300)=0xd1) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.576750086s ago: executing program 3 (id=3271): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0xbc}, 0x1, 0x0, 0x0, 0x804}, 0x800) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x52aa, 0x400, 0x1, 0x8000087}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r2, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 3.576368916s ago: executing program 1 (id=3272): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) 3.352865457s ago: executing program 1 (id=3273): syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0xc9, 0x8}]}}}, 0x8) 3.158771775s ago: executing program 2 (id=3274): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f0104000000"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff", 0x15}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 3.10880281s ago: executing program 3 (id=3275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) 3.10858433s ago: executing program 1 (id=3276): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9", 0x7}], 0x1) 2.911740138s ago: executing program 0 (id=3277): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r5) 1.936965789s ago: executing program 0 (id=3278): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x610, 0x550, 0x1f0, 0x408, 0x550, 0x120, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000180)=0x1000) ppoll(&(0x7f0000000040)=[{r4, 0x20}], 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x5, &(0x7f0000fff000/0x1000)=nil, 0xc) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x4000) 1.134354154s ago: executing program 2 (id=3279): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) eventfd(0x8c66) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x80, @tick=0x3c9, 0xf7, {0x6, 0x7}, 0x2, 0x2, 0x1}) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x8000) mq_open(&(0x7f00000003c0)='netem\x00', 0x40, 0x4, &(0x7f0000000400)={0x5, 0xf, 0xfffffffffffffffe, 0x6}) ioctl$SIOCSIFHWADDR(r3, 0x8916, 0x0) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0), 0x0}, 0x50) 204.928801ms ago: executing program 0 (id=3280): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 197.451952ms ago: executing program 2 (id=3281): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40042, 0x21) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) 0s ago: executing program 2 (id=3282): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) kernel console output (not intermixed with test programs): 5] usb 2-1: USB disconnect, device number 45 [ 534.892366][T12819] usb 4-1: config 0 descriptor?? [ 534.905028][T12819] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 534.915277][T12819] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 534.963951][T13339] fido_id[13339]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 535.058696][T13341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2331'. [ 535.831756][T13344] 9pnet_fd: Insufficient options for proto=fd [ 537.621344][T13358] ip6gretap0: entered promiscuous mode [ 537.627559][T13358] vlan2: entered promiscuous mode [ 538.627715][T12819] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 538.704025][T12819] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 538.751518][T12819] em28xx 4-1:0.0: board has no eeprom [ 538.856167][T12819] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 538.953784][T12819] em28xx 4-1:0.0: dvb set to bulk mode. [ 538.968374][T12821] em28xx 4-1:0.0: Binding DVB extension [ 538.971395][T13370] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2339'. [ 538.995969][T13370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2339'. [ 539.616966][T12819] usb 4-1: USB disconnect, device number 38 [ 539.627926][T12819] em28xx 4-1:0.0: Disconnecting em28xx [ 539.761423][T12821] em28xx 4-1:0.0: Registering input extension [ 539.771375][T12819] em28xx 4-1:0.0: Closing input extension [ 539.831067][T12819] em28xx 4-1:0.0: Freeing device [ 542.076134][ T7735] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 542.271538][ T7735] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.390528][ T7735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 542.411840][ T7735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 542.423427][ T7735] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 543.092662][ T7735] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 543.174686][ T7735] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 543.191229][ T7735] usb 4-1: Manufacturer: syz [ 543.203784][ T7735] usb 4-1: config 0 descriptor?? [ 543.447392][T13391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.496508][T13391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.716138][ T7735] rc_core: IR keymap rc-hauppauge not found [ 543.744961][ T7735] Registered IR keymap rc-empty [ 543.768549][ T7735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 543.826346][ T7735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 543.860915][ T7735] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 543.881064][ T7735] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input40 [ 543.899457][ T7735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 543.936335][ T7735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 543.966152][ T7735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 544.006295][ T7735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 544.044678][ T7735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 544.078610][T13420] syzkaller0: entered promiscuous mode [ 544.084547][T13420] syzkaller0: entered allmulticast mode [ 544.090372][ T7735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 544.129876][ T7735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 544.176273][ T7735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 544.200089][T13420] tipc: Enabled bearer , priority 0 [ 544.214804][T13419] tipc: Resetting bearer [ 544.236226][ T7735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 544.266335][T13419] tipc: Disabling bearer [ 544.272268][ T7735] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 544.321233][ T7735] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 544.351165][ T7735] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 544.391373][ T7735] usb 4-1: USB disconnect, device number 39 [ 545.447226][T13439] tipc: Enabling of bearer rejected, failed to enable media [ 547.600079][T13478] dlm: no locking on control device [ 550.113304][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 550.123860][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 550.551030][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 550.571831][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 550.584188][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 550.621719][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 551.823020][ T7582] syz_tun (unregistering): left promiscuous mode [ 552.535734][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.622958][T13491] chnl_net:caif_netlink_parms(): no params data found [ 552.676306][ T5776] Bluetooth: hci1: command tx timeout [ 552.751609][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.304928][T13531] overlayfs: invalid origin (000000790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 553.377056][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.444687][T13491] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.464045][T13491] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.474646][T13491] bridge_slave_0: entered allmulticast mode [ 553.501139][T13491] bridge_slave_0: entered promiscuous mode [ 553.510407][T13491] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.518059][T13491] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.526638][T13491] bridge_slave_1: entered allmulticast mode [ 553.539632][T13491] bridge_slave_1: entered promiscuous mode [ 553.567975][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.321721][T13491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.352041][T13491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.431761][T13491] team0: Port device team_slave_0 added [ 554.480843][T13491] team0: Port device team_slave_1 added [ 554.546472][ T6649] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 554.561643][T13491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.577165][T13491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.643871][T13491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.746569][T13491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.755501][T13491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.807298][ T5776] Bluetooth: hci1: command tx timeout [ 554.832044][T13491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.866287][ T6649] usb 2-1: Using ep0 maxpacket: 8 [ 554.875841][ T6649] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 554.892367][ T42] tipc: Left network mode [ 554.908322][ T6649] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 554.942419][ T6649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.988881][ T6649] usb 2-1: Product: syz [ 554.993252][ T6649] usb 2-1: Manufacturer: syz [ 555.002469][ T6649] usb 2-1: SerialNumber: syz [ 555.021983][T13491] hsr_slave_0: entered promiscuous mode [ 555.034838][ T6649] usb 2-1: config 0 descriptor?? [ 555.044198][ T6649] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 555.061659][T13491] hsr_slave_1: entered promiscuous mode [ 555.071718][T13491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 555.086766][T13491] Cannot create hsr debugfs directory [ 556.197546][ T42] erspan0 (unregistering): left promiscuous mode [ 556.257245][ T6649] gspca_zc3xx: reg_w_i err -71 [ 556.549580][T13570] syzkaller0: entered promiscuous mode [ 556.555628][T13570] syzkaller0: entered allmulticast mode [ 556.846264][ T5776] Bluetooth: hci1: command tx timeout [ 556.916150][ T6649] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 556.950483][ T6649] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 556.994673][ T6649] usb 2-1: USB disconnect, device number 46 [ 557.135834][ T42] hsr_slave_0: left promiscuous mode [ 557.154944][ T42] hsr_slave_1: left promiscuous mode [ 557.261581][ T42] veth1_macvtap: left promiscuous mode [ 557.272420][ T42] veth0_macvtap: left promiscuous mode [ 557.289804][ T42] veth1_vlan: left promiscuous mode [ 558.230090][ T42] bond1 (unregistering): Released all slaves [ 559.602720][ T5776] Bluetooth: hci1: command tx timeout [ 562.639119][ T6649] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 562.826286][ T6649] usb 2-1: Using ep0 maxpacket: 16 [ 562.847073][ T6649] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 562.855378][ T6649] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 562.871242][ T6649] usb 2-1: config 8 has no interface number 0 [ 562.878759][ T6649] usb 2-1: config 8 interface 206 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 562.897470][ T6649] usb 2-1: config 8 interface 206 has no altsetting 0 [ 562.911015][ T6649] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 562.920323][ T6649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.930773][ T6649] usb 2-1: Product: syz [ 562.934963][ T6649] usb 2-1: Manufacturer: syz [ 562.939665][ T6649] usb 2-1: SerialNumber: syz [ 563.256389][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.362393][T13630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.376222][T13630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.766475][ T42] bond0 (unregistering): Released all slaves [ 563.967423][T13491] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 563.999910][T13491] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 564.091772][T13491] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 564.157598][T13491] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 565.174172][ T6649] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 565.208983][ T6649] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 565.240881][ T6649] garmin_gps: probe of ttyUSB0 failed with error -22 [ 565.258458][ T6649] usb 2-1: USB disconnect, device number 47 [ 565.270900][ T6649] garmin_gps 2-1:8.206: device disconnected [ 569.143195][T13491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.490406][T13491] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.540563][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.549029][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.663054][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.670256][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.045758][T13491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.064539][T13694] syzkaller0: entered promiscuous mode [ 571.071632][T13694] syzkaller0: entered allmulticast mode [ 571.202814][T13491] veth0_vlan: entered promiscuous mode [ 571.232531][T13491] veth1_vlan: entered promiscuous mode [ 571.334953][T13491] veth0_macvtap: entered promiscuous mode [ 571.372285][T13491] veth1_macvtap: entered promiscuous mode [ 571.421986][T13491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.452572][T13491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.483954][T13491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.516255][T13491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.542293][T13491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.578075][T13491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.608005][T13491] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.626685][T13491] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.644759][T13491] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.669113][T13491] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.848959][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.880869][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.966726][ T1030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.994925][ T1030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.606555][T12820] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 572.828004][T12820] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.866355][T12820] usb 3-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 572.900242][T12820] usb 3-1: config 0 interface 0 has no altsetting 0 [ 572.916608][T12820] usb 3-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 572.925922][T12820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.952706][T12820] usb 3-1: config 0 descriptor?? [ 573.172988][ T5767] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 573.190730][ T5767] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 573.199682][ T5767] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 573.227511][ T5767] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 573.237789][ T5767] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 573.245706][ T5767] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 573.405972][T12820] a4tech 0003:09DA:000A.0009: item fetching failed at offset 0/3 [ 573.414540][T12820] a4tech 0003:09DA:000A.0009: parse failed [ 573.420570][T12820] a4tech: probe of 0003:09DA:000A.0009 failed with error -22 [ 573.512900][T13744] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 573.538816][T13741] syzkaller0: entered promiscuous mode [ 573.544383][T13741] syzkaller0: entered allmulticast mode [ 573.620527][ T9246] usb 3-1: USB disconnect, device number 35 [ 573.686915][T13735] chnl_net:caif_netlink_parms(): no params data found [ 573.900568][T13735] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.909591][T13735] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.919538][T13735] bridge_slave_0: entered allmulticast mode [ 573.935002][T13735] bridge_slave_0: entered promiscuous mode [ 573.948035][T13735] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.956402][T13735] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.964330][T13735] bridge_slave_1: entered allmulticast mode [ 573.972540][T13735] bridge_slave_1: entered promiscuous mode [ 574.059999][T13735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.090343][T13735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.357364][T13735] team0: Port device team_slave_0 added [ 574.398156][T13735] team0: Port device team_slave_1 added [ 574.408429][T13764] loop8: detected capacity change from 0 to 8 [ 574.421142][T13764] Dev loop8: unable to read RDB block 8 [ 574.437846][T13764] loop8: unable to read partition table [ 574.446682][T13764] loop8: partition table beyond EOD, truncated [ 574.452911][T13764] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 574.640828][T13735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.664561][T13735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.704694][T13735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.724230][T13735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.731467][T13735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.777095][T13735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.795450][ T1030] tipc: Left network mode [ 575.319783][ T5776] Bluetooth: hci2: command tx timeout [ 575.770322][T13735] hsr_slave_0: entered promiscuous mode [ 575.780438][T13735] hsr_slave_1: entered promiscuous mode [ 575.911448][T13784] syzkaller0: entered promiscuous mode [ 575.917216][T12821] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 575.935461][T13784] syzkaller0: entered allmulticast mode [ 576.119268][T12821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.144134][T12821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.159961][T12821] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 576.175361][T12821] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 576.188973][T12821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.215563][T12821] usb 4-1: config 0 descriptor?? [ 577.230851][T12821] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 577.258896][T12821] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 577.396824][ T5776] Bluetooth: hci2: command tx timeout [ 578.707692][T12821] usb 4-1: USB disconnect, device number 40 [ 579.454133][ T1030] hsr_slave_0: left promiscuous mode [ 579.476142][ T5776] Bluetooth: hci2: command tx timeout [ 579.481761][ T1030] hsr_slave_1: left promiscuous mode [ 581.616296][ T5776] Bluetooth: hci2: command tx timeout [ 582.171441][ T1030] bond0 (unregistering): Released all slaves [ 582.747602][T13735] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 582.885116][T13735] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 582.905620][T13735] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 582.935549][T13735] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 583.211223][ T1030] IPVS: stop unused estimator thread 0... [ 585.117793][T13735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.134835][ T27] audit: type=1326 audit(1767166378.553:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13906 comm="syz.3.2451" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f614e78f749 code=0x0 [ 585.269515][T13735] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.290961][ T1030] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.298230][ T1030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.335946][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.343118][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.815283][T13735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.950278][T13735] veth0_vlan: entered promiscuous mode [ 585.983998][T13735] veth1_vlan: entered promiscuous mode [ 586.041286][T13735] veth0_macvtap: entered promiscuous mode [ 586.059011][T13735] veth1_macvtap: entered promiscuous mode [ 586.108610][T13735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.121664][T13735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.132959][T13735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.144994][T13735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.161084][T13735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.176569][T13735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.206418][T13735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.226031][T13735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.246097][T13735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.267233][T13735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.293998][T13735] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.305938][T13735] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.327523][T13735] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.356168][T13735] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.435401][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.453645][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.702720][ T1082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.718381][ T1082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.976121][T12821] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 588.330504][T12821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 165, changing to 11 [ 588.361637][T12821] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 588.370846][T12821] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 588.486040][T12821] usb 1-1: Manufacturer: syz [ 588.498059][T12821] usb 1-1: config 0 descriptor?? [ 588.515294][T12821] usb 1-1: Found UVC 0.00 device (18ec:3288) [ 588.522694][T12821] usb 1-1: No valid video chain found. [ 588.721663][T12821] usb 1-1: USB disconnect, device number 37 [ 591.991989][T14003] mkiss: ax0: crc mode is auto. [ 592.468962][ T5829] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 592.688830][ T5829] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 592.698586][ T5829] usb 2-1: config 0 has no interface number 0 [ 592.767791][ T5829] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 592.777292][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.856105][ T5829] usb 2-1: Product: syz [ 592.860371][ T5829] usb 2-1: Manufacturer: syz [ 592.865362][ T5829] usb 2-1: SerialNumber: syz [ 592.894617][ T5829] usb 2-1: config 0 descriptor?? [ 593.125781][ T5829] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 593.160983][ T5829] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 593.176176][ T5829] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 593.186879][ T5829] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 593.230000][ T5829] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 593.475917][ T5829] usb 2-1: USB disconnect, device number 48 [ 593.516465][ T5829] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 593.617469][ T5829] keyspan 2-1:0.133: device disconnected [ 595.211497][T14030] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.219259][T14030] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.892615][T14030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.948524][T14030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.485713][T14061] genirq: Flags mismatch irq 10. 00000000 (comedi_parport) vs. 00000080 (virtio2) [ 597.543717][T14030] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.553002][T14030] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.564809][T14030] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.574578][T14030] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.958011][T14086] tipc: Started in network mode [ 599.962941][T14086] tipc: Node identity 42a8664c9657, cluster identity 4711 [ 600.023056][T14086] tipc: Enabled bearer , priority 0 [ 600.092826][T14086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2486'. [ 600.720769][T14086] tipc: Resetting bearer [ 601.810555][T14085] tipc: Disabling bearer [ 601.899995][T14095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2487'. [ 601.964511][ T23] tipc: Node number set to 3573507660 [ 606.197154][ T5767] Bluetooth: hci4: command 0x0406 tx timeout [ 607.386943][T14136] tipc: Enabled bearer , priority 0 [ 607.699464][T14146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2502'. [ 607.799353][T14150] tipc: Resetting bearer [ 607.984069][T14134] tipc: Disabling bearer [ 608.819109][ T6649] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 608.819201][T14161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2508'. [ 609.728171][ T6649] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 609.775101][ T6649] usb 3-1: config 0 has no interface number 0 [ 609.854711][ T6649] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 609.874941][T14171] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2511'. [ 609.884827][ T6649] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 609.902102][ T6649] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 609.913427][ T6649] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 609.934451][ T6649] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 609.954343][ T6649] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.023766][ T6649] usb 3-1: config 0 descriptor?? [ 610.043159][T14155] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 610.149463][ T6649] ldusb 3-1:0.55: Interrupt in endpoint not found [ 610.292769][T14176] syzkaller0: entered promiscuous mode [ 610.321277][ T6649] usb 3-1: USB disconnect, device number 36 [ 610.359556][T14176] syzkaller0: entered allmulticast mode [ 610.478471][T14171] syz.3.2511 (14171) used greatest stack depth: 17832 bytes left [ 610.979212][T14185] tipc: Enabled bearer , priority 0 [ 610.991510][T14185] syzkaller0: entered promiscuous mode [ 610.997134][T14185] syzkaller0: entered allmulticast mode [ 611.034896][T14185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2517'. [ 611.059952][T14184] tipc: Resetting bearer [ 611.081029][ T27] audit: type=1326 audit(1767166404.503:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14182 comm="syz.2.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384398f749 code=0x7ffc0000 [ 611.132559][T14184] tipc: Disabling bearer [ 611.143556][ T27] audit: type=1326 audit(1767166404.543:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14182 comm="syz.2.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f384398f749 code=0x7ffc0000 [ 611.204751][ T27] audit: type=1326 audit(1767166404.543:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14182 comm="syz.2.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384398f749 code=0x7ffc0000 [ 611.269224][ T27] audit: type=1326 audit(1767166404.543:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14182 comm="syz.2.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384398f749 code=0x7ffc0000 [ 611.329902][ T27] audit: type=1326 audit(1767166404.543:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14182 comm="syz.2.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f384398f749 code=0x7ffc0000 [ 611.372102][ T27] audit: type=1326 audit(1767166404.543:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14182 comm="syz.2.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384398f749 code=0x7ffc0000 [ 611.441827][ T27] audit: type=1326 audit(1767166404.553:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14182 comm="syz.2.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f384398f749 code=0x7ffc0000 [ 611.464188][ C0] vkms_vblank_simulate: vblank timer overrun [ 611.489922][ T27] audit: type=1326 audit(1767166404.553:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14182 comm="syz.2.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384398f749 code=0x7ffc0000 [ 611.512765][ T27] audit: type=1326 audit(1767166404.553:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14182 comm="syz.2.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f384398f749 code=0x7ffc0000 [ 611.535534][ T27] audit: type=1326 audit(1767166404.553:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14182 comm="syz.2.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384398f749 code=0x7ffc0000 [ 613.603272][T14207] syzkaller0: entered promiscuous mode [ 613.623129][T14207] syzkaller0: entered allmulticast mode [ 615.114853][T14218] tipc: Enabled bearer , priority 0 [ 615.137020][T14218] syzkaller0: entered promiscuous mode [ 615.142553][T14218] syzkaller0: entered allmulticast mode [ 615.217685][T14218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2526'. [ 615.239936][T14217] tipc: Resetting bearer [ 615.297692][T14217] tipc: Disabling bearer [ 618.606890][ T5767] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 618.617976][ T5767] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 618.630048][ T5767] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 618.638934][ T5767] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 618.647817][ T5767] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 618.657974][ T5767] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 618.677782][T14249] syzkaller0: entered promiscuous mode [ 618.707825][T14249] syzkaller0: entered allmulticast mode [ 618.968970][T14259] tipc: Enabled bearer , priority 0 [ 618.982599][T14262] syzkaller0: entered promiscuous mode [ 618.988413][T14262] syzkaller0: entered allmulticast mode [ 619.461115][T14257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2538'. [ 619.600239][T14256] tipc: Resetting bearer [ 619.655832][T14256] tipc: Disabling bearer [ 620.702765][T14252] chnl_net:caif_netlink_parms(): no params data found [ 620.768310][ T5776] Bluetooth: hci3: command tx timeout [ 621.031578][ T11] tipc: Left network mode [ 621.032434][T14252] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.046285][T14252] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.064437][T14252] bridge_slave_0: entered allmulticast mode [ 621.087629][T14252] bridge_slave_0: entered promiscuous mode [ 621.263966][T14252] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.263973][ T9244] libceph: connect (1)[c::]:6789 error -101 [ 621.276121][T14252] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.286863][ T9244] libceph: mon0 (1)[c::]:6789 connect error [ 621.297457][T14252] bridge_slave_1: entered allmulticast mode [ 621.324586][T14252] bridge_slave_1: entered promiscuous mode [ 621.416869][T14295] ceph: No mds server is up or the cluster is laggy [ 621.801419][ T6649] libceph: connect (1)[c::]:6789 error -101 [ 621.807525][ T6649] libceph: mon0 (1)[c::]:6789 connect error [ 621.961902][T14301] ip6tnl1: entered promiscuous mode [ 622.122640][T14252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.178003][T14252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.324527][T14252] team0: Port device team_slave_0 added [ 622.345636][T14252] team0: Port device team_slave_1 added [ 622.411801][T14306] syzkaller0: entered promiscuous mode [ 622.425168][T14306] syzkaller0: entered allmulticast mode [ 622.471572][T14252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.483800][T14252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.518339][T14252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.600775][T14252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.648591][T14252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.829027][T14252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.840236][ T5776] Bluetooth: hci3: command tx timeout [ 623.645309][T14319] tipc: Enabled bearer , priority 0 [ 623.722007][T14315] syzkaller0: entered promiscuous mode [ 623.727777][T14315] syzkaller0: entered allmulticast mode [ 623.925858][T14252] hsr_slave_0: entered promiscuous mode [ 623.932952][T14252] hsr_slave_1: entered promiscuous mode [ 623.939506][T14252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 623.947252][T14252] Cannot create hsr debugfs directory [ 623.952917][T14315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2549'. [ 623.978569][T14316] tipc: Resetting bearer [ 624.033199][T14313] tipc: Resetting bearer [ 624.065336][T14313] tipc: Disabling bearer [ 624.272366][ T11] hsr_slave_0: left promiscuous mode [ 624.281107][ T11] hsr_slave_1: left promiscuous mode [ 624.450529][ T11] bond2 (unregistering): Released all slaves [ 624.614968][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.916187][ T5776] Bluetooth: hci3: command tx timeout [ 625.242487][ T11] bond1 (unregistering): Released all slaves [ 625.358221][ T5828] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 625.617656][ T5828] usb 3-1: device descriptor read/64, error -71 [ 626.723782][ T5828] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 626.966071][ T5828] usb 3-1: device descriptor read/64, error -71 [ 627.006357][ T5776] Bluetooth: hci3: command tx timeout [ 627.086334][ T5828] usb usb3-port1: attempt power cycle [ 627.518115][ T5828] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 627.575320][ T5828] usb 3-1: device descriptor read/8, error -71 [ 628.025014][ T11] bond0 (unregistering): Released all slaves [ 628.120376][T14367] tipc: Started in network mode [ 628.125313][T14367] tipc: Node identity 7e3424911c36, cluster identity 4711 [ 628.132790][T14367] tipc: Enabled bearer , priority 0 [ 628.143031][T14368] syzkaller0: entered promiscuous mode [ 628.148638][ T5828] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 628.169390][T14368] syzkaller0: entered allmulticast mode [ 628.184083][T14373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2559'. [ 628.204276][T14374] tipc: Resetting bearer [ 628.215394][ T5828] usb 3-1: Using ep0 maxpacket: 16 [ 628.243189][ T5828] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.265518][T14364] tipc: Resetting bearer [ 628.272959][ T5828] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 628.283072][ T5828] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 628.291833][ T5828] usb 3-1: Manufacturer: syz [ 628.300164][ T5828] usb 3-1: config 0 descriptor?? [ 628.324156][T14364] tipc: Disabling bearer [ 628.788134][ T11] IPVS: stop unused estimator thread 0... [ 629.283141][T14252] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 629.307186][T14252] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 629.321156][T14403] usb usb5: usbfs: process 14403 (syz.0.2563) did not claim interface 0 before use [ 629.344013][T14252] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 629.362733][T12821] usb 3-1: USB disconnect, device number 40 [ 629.381622][T14252] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 630.454893][T14252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.521639][T14252] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.553174][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.560367][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.633400][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.640572][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.315809][T14252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.460716][T14252] veth0_vlan: entered promiscuous mode [ 631.516712][T14252] veth1_vlan: entered promiscuous mode [ 631.600262][T14252] veth0_macvtap: entered promiscuous mode [ 631.629428][T14252] veth1_macvtap: entered promiscuous mode [ 631.686398][T14252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.706761][T14252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.726012][T14252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.763910][T14252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.783310][T14252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 632.489611][T14252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.166469][T14252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.246825][T14252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.258205][T14252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.283753][T14252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.358563][T14252] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.406184][T14252] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.426197][T14252] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.451630][T14252] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.483952][T14454] tipc: Enabling of bearer rejected, failed to enable media [ 633.516865][T14454] syzkaller0: entered promiscuous mode [ 633.522388][T14454] syzkaller0: entered allmulticast mode [ 633.583337][T14450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2569'. [ 633.712240][T14451] syzkaller0: entered promiscuous mode [ 633.726267][T14451] syzkaller0: entered allmulticast mode [ 640.040837][T14506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2581'. [ 640.591287][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.636032][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.715417][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.735513][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.956258][ T9244] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 643.606249][T14548] syzkaller0: entered promiscuous mode [ 643.629230][T14548] syzkaller0: entered allmulticast mode [ 643.669711][ T9244] usb 3-1: Using ep0 maxpacket: 32 [ 643.689764][ T9244] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 643.723832][ T9244] usb 3-1: config 0 has no interface number 0 [ 643.737759][ T9244] usb 3-1: config 0 interface 184 has no altsetting 0 [ 643.781048][ T9244] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 643.811411][ T9244] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.836165][ T9244] usb 3-1: Product: syz [ 643.840603][ T9244] usb 3-1: Manufacturer: syz [ 643.861171][ T9244] usb 3-1: SerialNumber: syz [ 643.883634][ T9244] usb 3-1: config 0 descriptor?? [ 643.914048][ T9244] smsc75xx v1.0.0 [ 644.191470][T14551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2588'. [ 645.139025][ T9244] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 645.649398][ T9244] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 645.804663][ T9244] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 646.175599][ T9244] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 646.189307][ T9244] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 646.201095][ T9244] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 646.211766][ T9244] smsc75xx: probe of 3-1:0.184 failed with error -32 [ 647.386167][T12820] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 647.531046][ T5828] usb 3-1: USB disconnect, device number 41 [ 647.653865][T12820] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 647.675857][T14624] syzkaller0: entered promiscuous mode [ 647.686151][T14624] syzkaller0: entered allmulticast mode [ 647.720571][T12820] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 647.732196][T12820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 647.749369][T12820] usb 2-1: Product: syz [ 647.756974][T12820] usb 2-1: Manufacturer: syz [ 647.764583][T12820] usb 2-1: SerialNumber: syz [ 648.029994][T12820] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 49 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 648.181287][T14627] mkiss: ax0: crc mode is auto. [ 650.983885][T12820] usb 2-1: USB disconnect, device number 49 [ 651.020389][T12820] usblp0: removed [ 653.229145][ T9246] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 653.452133][ T9246] usb 2-1: Using ep0 maxpacket: 16 [ 653.582550][ T9246] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.656109][ T9246] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.706570][ T9246] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 653.730006][T14664] syzkaller0: entered promiscuous mode [ 653.735481][T14664] syzkaller0: entered allmulticast mode [ 653.751416][ T9246] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 653.762916][ T9246] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.793736][ T9246] usb 2-1: config 0 descriptor?? [ 656.347506][ T9246] usbhid 2-1:0.0: can't add hid device: -71 [ 656.353493][ T9246] usbhid: probe of 2-1:0.0 failed with error -71 [ 656.368344][ T9246] usb 2-1: USB disconnect, device number 50 [ 657.856569][T14693] veth1_macvtap: left promiscuous mode [ 657.864287][T14693] macsec0: entered allmulticast mode [ 657.904386][T14695] syzkaller0: entered promiscuous mode [ 657.910489][T14695] syzkaller0: entered allmulticast mode [ 658.016046][ T9246] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 658.956107][ T9246] usb 3-1: Using ep0 maxpacket: 8 [ 658.964825][ T9246] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 658.977687][ T9246] usb 3-1: config 179 has no interface number 0 [ 659.002917][ T9246] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 659.036182][ T9246] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 659.073567][ T9246] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 659.111883][ T9246] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 659.152041][ T9246] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 659.170784][ T9246] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 659.185591][ T9246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.217021][T14691] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 660.061319][ T5776] Bluetooth: hci4: command 0x0406 tx timeout [ 660.186252][ T5829] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 660.429265][ T5829] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 660.441894][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.474975][ T5829] usb 4-1: Product: syz [ 660.479732][ T5829] usb 4-1: Manufacturer: syz [ 660.484610][ T5829] usb 4-1: SerialNumber: syz [ 660.588002][ T5829] usb 4-1: config 0 descriptor?? [ 660.897945][ T5829] usb 4-1: USB disconnect, device number 41 [ 661.758193][ T9246] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input43 [ 661.822122][T14505] udevd[14505]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 662.058270][T12821] usb 3-1: USB disconnect, device number 42 [ 662.058284][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 662.058325][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 662.081320][T12821] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 662.188562][T14729] syzkaller0: entered promiscuous mode [ 662.196785][T14729] syzkaller0: entered allmulticast mode [ 663.315058][T14743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2643'. [ 663.569252][ T9246] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 663.916137][ T9246] usb 1-1: Using ep0 maxpacket: 32 [ 663.978457][ T9246] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 664.045927][ T9246] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.123304][ T9246] usb 1-1: config 0 has no interface number 0 [ 664.140887][ T9246] usb 1-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 664.163271][ T9246] usb 1-1: config 0 interface 133 altsetting 0 has an invalid endpoint with address 0xF8, skipping [ 664.185061][ T9246] usb 1-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 664.204352][ T9246] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 664.221332][ T9246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.229853][ T9246] usb 1-1: Product: syz [ 664.235567][ T9246] usb 1-1: Manufacturer: syz [ 664.243326][ T9246] usb 1-1: SerialNumber: syz [ 664.261227][ T9246] usb 1-1: config 0 descriptor?? [ 664.279326][T14741] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 664.292446][T14762] syzkaller0: entered promiscuous mode [ 664.301208][T14762] syzkaller0: entered allmulticast mode [ 664.505401][ T9246] usb 1-1: probing VID:PID(0424:012C) [ 664.522551][ T9246] usb 1-1: vub300 testing BULK OUT EndPoint(0) 0B [ 664.539019][ T9246] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 664.579820][ T9246] vub300: probe of 1-1:0.133 failed with error -22 [ 664.605654][ T9246] usb 1-1: USB disconnect, device number 38 [ 665.935673][ T5829] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 666.196226][ T5829] usb 1-1: Using ep0 maxpacket: 8 [ 666.238138][ T5829] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 666.318812][ T5829] usb 1-1: config 179 has no interface number 0 [ 666.393893][ T5829] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 666.431682][ T5829] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 666.475227][ T5829] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 666.505995][ T5829] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 666.619014][ T5829] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 666.639384][ T5829] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 666.660569][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.860625][T14772] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 667.955444][ T5829] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input44 [ 668.319823][ T5829] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 668.721100][ T9246] usb 1-1: USB disconnect, device number 39 [ 668.721147][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 668.736256][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 668.744634][ T9246] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 668.766375][ T5829] usb 4-1: Using ep0 maxpacket: 16 [ 668.783316][ T5829] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 668.826419][ T5829] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 668.836635][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.942019][ T5829] usb 4-1: config 0 descriptor?? [ 668.995671][ T5829] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input45 [ 669.218524][ T5829] bcm5974 4-1:0.0: could not read from device [ 669.332787][ T5122] bcm5974 4-1:0.0: could not read from device [ 669.409091][ T5829] input: failed to attach handler mousedev to device input45, error: -5 [ 669.442689][ T5122] bcm5974 4-1:0.0: could not read from device [ 669.462851][ T5122] bcm5974 4-1:0.0: could not read from device [ 669.462962][ T5829] usb 4-1: USB disconnect, device number 42 [ 669.489939][T14646] bcm5974 4-1:0.0: could not read from device [ 671.034082][T14821] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2668'. [ 671.812380][T14829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2672'. [ 672.756414][ T5767] Bluetooth: hci1: command 0x0406 tx timeout [ 674.616069][T12821] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 674.729804][ T5829] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 674.838026][T12821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 674.849427][T12821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.859313][T12821] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 674.869606][T12821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.882540][T12821] usb 2-1: config 0 descriptor?? [ 674.890935][T12821] hub 2-1:0.0: USB hub found [ 674.916330][ T5829] usb 4-1: Using ep0 maxpacket: 32 [ 674.925128][T14872] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 674.933484][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.945697][T14872] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 674.950994][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.964484][ T5829] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 674.978396][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.989588][ T5829] usb 4-1: config 0 descriptor?? [ 675.092880][T12821] hub 2-1:0.0: 2 ports detected [ 675.246062][ T6649] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 675.404233][ T5829] corsair 0003:1B1C:1B3E.000B: failed to start in urb: -90 [ 675.415017][ T5829] corsair 0003:1B1C:1B3E.000B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.3-1/input0 [ 675.429605][ T6649] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 675.438948][ T6649] usb 3-1: config 0 has no interface number 0 [ 675.445163][ T6649] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 675.468580][ T6649] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 64 [ 675.480370][ T6649] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 675.490799][ T6649] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.512740][ T6649] usb 3-1: config 0 descriptor?? [ 675.526489][T14872] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 675.555438][ T6649] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 675.576552][T12821] usb 2-1: USB disconnect, device number 51 [ 675.638166][ T5828] usb 4-1: USB disconnect, device number 43 [ 675.754969][ T9244] usb 3-1: USB disconnect, device number 43 [ 675.761116][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 675.963087][T14872] fuse: Unknown parameter '00000000000000000000' [ 677.486123][T14910] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2702'. [ 677.566202][T12821] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 677.674617][ T6649] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 677.786572][T12821] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 677.795847][T12821] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 677.809895][T12821] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 677.821171][T12821] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.870557][T12821] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 677.880616][T12821] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 677.889342][T12821] usb 4-1: Product: syz [ 677.897493][T12821] usb 4-1: Manufacturer: syz [ 677.910043][T12821] cdc_wdm 4-1:1.0: skipping garbage [ 677.915418][T12821] cdc_wdm 4-1:1.0: skipping garbage [ 677.930819][T12821] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 677.945112][T12821] cdc_wdm 4-1:1.0: Unknown control protocol [ 677.996330][ T6649] usb 2-1: Using ep0 maxpacket: 32 [ 678.013512][ T6649] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 678.056585][ T6649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.085707][ T6649] usb 2-1: config 0 descriptor?? [ 678.122540][ T6649] gspca_main: sq930x-2.14.0 probing 041e:403c [ 678.128083][T12821] usb 4-1: USB disconnect, device number 44 [ 679.352621][ T6649] gspca_sq930x: reg_r 001f failed -110 [ 679.400220][ T6649] sq930x: probe of 2-1:0.0 failed with error -110 [ 679.423907][ T27] kauditd_printk_skb: 29 callbacks suppressed [ 679.423919][ T27] audit: type=1326 audit(1767166472.843:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14915 comm="syz.0.2705" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4f658f749 code=0x0 [ 680.719656][T14943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2711'. [ 680.728928][T14943] netlink: set zone limit has 8 unknown bytes [ 680.789869][ T6649] usb 2-1: USB disconnect, device number 52 [ 682.821014][T14965] netlink: 'syz.1.2718': attribute type 1 has an invalid length. [ 682.829041][T14965] netlink: 'syz.1.2718': attribute type 2 has an invalid length. [ 682.837098][T14965] netlink: 'syz.1.2718': attribute type 1 has an invalid length. [ 682.844933][T14965] netlink: 'syz.1.2718': attribute type 1 has an invalid length. [ 683.706090][T14975] input: syz1 as /devices/virtual/input/input46 [ 683.871062][T14976] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 683.878153][T14976] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 683.946066][T14976] vhci_hcd vhci_hcd.0: Device attached [ 684.342838][ T9244] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 684.686673][T14977] vhci_hcd: unknown pdu 1 [ 684.711574][ T49] vhci_hcd: stop threads [ 684.716919][ T49] vhci_hcd: release socket [ 684.723769][ T49] vhci_hcd: disconnect device [ 686.042485][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.569849][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2734'. [ 687.579044][T15019] netlink: set zone limit has 8 unknown bytes [ 687.658054][T12820] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 688.296026][T12820] usb 2-1: Using ep0 maxpacket: 8 [ 688.311254][T12820] usb 2-1: unable to get BOS descriptor or descriptor too short [ 688.327206][T12820] usb 2-1: config 4 interface 0 has no altsetting 0 [ 688.339182][T12820] usb 2-1: string descriptor 0 read error: -22 [ 688.345559][T12820] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 688.354656][T12820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.367415][T12820] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 688.376923][T12820] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 688.394748][T12820] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 688.403770][T12820] usb 2-1: media controller created [ 688.428055][T12820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 689.683932][ T9244] vhci_hcd: vhci_device speed not set [ 690.277518][ T9246] usb 2-1: USB disconnect, device number 53 [ 692.296627][T15057] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 694.961880][T15088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2752'. [ 694.989465][T15088] netlink: set zone limit has 8 unknown bytes [ 695.524341][T11269] Bluetooth: hci0: Frame reassembly failed (-84) [ 696.768976][T15106] netlink: 'syz.2.2757': attribute type 1 has an invalid length. [ 696.784947][T15106] netlink: 'syz.2.2757': attribute type 2 has an invalid length. [ 696.793553][T15106] netlink: 'syz.2.2757': attribute type 1 has an invalid length. [ 696.805079][T15106] netlink: 'syz.2.2757': attribute type 1 has an invalid length. [ 697.165043][T15111] mkiss: ax0: crc mode is auto. [ 697.557954][ T5776] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 697.990992][T15121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2763'. [ 698.636890][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 699.158675][ T9244] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 699.426096][ T9244] usb 2-1: Using ep0 maxpacket: 32 [ 699.437748][ T9244] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 699.456090][ T9244] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 700.083972][ T9244] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 700.114008][ T9244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 700.137949][ T9244] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 700.147822][ T9244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 700.157684][ T9244] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 700.169023][ T9244] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 700.239139][ T9244] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 700.289820][ T9244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.317576][ T9244] usb 2-1: config 0 descriptor?? [ 700.551312][ T9244] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 700.759007][ T9244] usb 2-1: USB disconnect, device number 54 [ 700.772084][ T9244] usblp0: removed [ 700.899580][T15146] netlink: 'syz.0.2771': attribute type 1 has an invalid length. [ 700.907571][T15146] netlink: 'syz.0.2771': attribute type 2 has an invalid length. [ 700.915425][T15146] netlink: 'syz.0.2771': attribute type 1 has an invalid length. [ 700.923491][T15146] netlink: 'syz.0.2771': attribute type 1 has an invalid length. [ 702.702640][T15160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2776'. [ 703.038429][ T6649] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 703.286313][ T6649] usb 2-1: Using ep0 maxpacket: 32 [ 703.297447][ T6649] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 703.310301][ T6649] usb 2-1: config 4 has no interface number 0 [ 703.933304][ T6649] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.944653][ T6649] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.026023][ T6649] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 704.047763][ T6649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.098947][ T6649] hub 2-1:4.128: USB hub found [ 704.308275][ T6649] hub 2-1:4.128: config failed, can't read hub descriptor (err -90) [ 705.246921][T12819] usb 2-1: USB disconnect, device number 55 [ 706.446124][T15186] vivid-000: disconnect [ 706.596155][T15179] vivid-000: reconnect [ 707.418022][T15176] netlink: 'syz.3.2782': attribute type 1 has an invalid length. [ 707.425791][T15176] netlink: 'syz.3.2782': attribute type 2 has an invalid length. [ 707.433801][T15176] netlink: 'syz.3.2782': attribute type 1 has an invalid length. [ 707.441529][T15176] netlink: 'syz.3.2782': attribute type 1 has an invalid length. [ 708.118416][T15200] Bluetooth: MGMT ver 1.22 [ 708.488166][T15205] dvmrp0: entered allmulticast mode [ 710.523525][T15241] tipc: Started in network mode [ 710.657133][T15241] tipc: Node identity 5667f9435bcd, cluster identity 4711 [ 710.667025][T15241] tipc: Enabled bearer , priority 0 [ 710.674482][T15226] tipc: Resetting bearer [ 712.509080][T15257] tty tty22: ldisc open failed (-12), clearing slot 21 [ 713.068858][T12819] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 713.274352][T12819] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 713.285814][T12819] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 713.316143][T12819] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 713.338608][T12819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.374633][T15263] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 713.387384][T12819] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 714.980878][ T9244] usb 4-1: USB disconnect, device number 45 [ 715.472896][T13491] cgroup: fork rejected by pids controller in /syz2 [ 717.882331][T15306] syz.1.2817 (15306): /proc/15303/oom_adj is deprecated, please use /proc/15303/oom_score_adj instead. [ 718.904416][T15226] tipc: Disabling bearer [ 718.954344][ T6649] tipc: Node number set to 229308739 [ 720.062478][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.136628][T15329] veth1_to_bond: entered allmulticast mode [ 720.147506][T15327] veth1_to_bond: left allmulticast mode [ 720.202956][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.310564][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.973691][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.274665][ T42] tipc: Left network mode [ 722.372214][ T5767] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 722.384920][ T5767] CPU: 0 PID: 5767 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 722.392534][ T5767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 722.402615][ T5767] Workqueue: hci2 hci_rx_work [ 722.407328][ T5767] Call Trace: [ 722.410601][ T5767] [ 722.413533][ T5767] dump_stack_lvl+0x16c/0x230 [ 722.418219][ T5767] ? show_regs_print_info+0x20/0x20 [ 722.423419][ T5767] ? load_image+0x3b0/0x3b0 [ 722.427930][ T5767] sysfs_create_dir_ns+0x256/0x280 [ 722.433042][ T5767] ? hci_rx_work+0x43a/0xd80 [ 722.437637][ T5767] ? sysfs_warn_dup+0xa0/0xa0 [ 722.442313][ T5767] ? do_raw_spin_unlock+0x121/0x230 [ 722.447511][ T5767] kobject_add_internal+0x6b8/0xc70 [ 722.452713][ T5767] kobject_add+0x156/0x220 [ 722.457127][ T5767] ? __rwlock_init+0x150/0x150 [ 722.461892][ T5767] ? kobject_init+0x1e0/0x1e0 [ 722.466563][ T5767] ? _raw_spin_unlock+0x28/0x40 [ 722.471408][ T5767] ? get_device_parent+0x366/0x390 [ 722.476520][ T5767] device_add+0x408/0xc20 [ 722.480855][ T5767] hci_conn_add_sysfs+0xd5/0x1e0 [ 722.485799][ T5767] le_conn_complete_evt+0xf36/0x1500 [ 722.491080][ T5767] ? hci_event_packet+0x4a7/0x1210 [ 722.496196][ T5767] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 722.502439][ T5767] ? __copy_skb_header+0xa7/0x550 [ 722.507471][ T5767] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 722.513102][ T5767] ? skb_pull_data+0xfb/0x200 [ 722.517784][ T5767] hci_le_enh_conn_complete_evt+0x189/0x460 [ 722.523673][ T5767] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 722.530077][ T5767] ? hci_remote_host_features_evt+0x160/0x160 [ 722.536142][ T5767] hci_event_packet+0x795/0x1210 [ 722.541079][ T5767] ? bis_list+0x290/0x290 [ 722.545403][ T5767] ? lockdep_hardirqs_on+0x98/0x150 [ 722.550596][ T5767] ? hci_send_to_monitor+0xd7/0x4f0 [ 722.555795][ T5767] hci_rx_work+0x43a/0xd80 [ 722.560219][ T5767] ? process_scheduled_works+0x957/0x15b0 [ 722.565935][ T5767] process_scheduled_works+0xa45/0x15b0 [ 722.571496][ T5767] ? assign_work+0x400/0x400 [ 722.576116][ T5767] ? assign_work+0x39e/0x400 [ 722.580700][ T5767] worker_thread+0xa55/0xfc0 [ 722.585305][ T5767] kthread+0x2fa/0x390 [ 722.589369][ T5767] ? pr_cont_work+0x560/0x560 [ 722.594046][ T5767] ? kthread_blkcg+0xd0/0xd0 [ 722.598628][ T5767] ret_from_fork+0x48/0x80 [ 722.603035][ T5767] ? kthread_blkcg+0xd0/0xd0 [ 722.607619][ T5767] ret_from_fork_asm+0x11/0x20 [ 722.612386][ T5767] [ 722.616647][ T5767] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 722.631261][ T5767] Bluetooth: hci2: failed to register connection device [ 722.640633][ T5767] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 722.734408][T15105] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 722.745833][T15105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 722.754257][T15105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 722.762452][T15105] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 722.773533][T15105] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 724.434458][T15373] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2837'. [ 724.656023][T12821] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 724.836437][ T5776] Bluetooth: hci0: command tx timeout [ 724.855983][T12821] usb 1-1: Using ep0 maxpacket: 8 [ 724.865279][T12821] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 724.876610][T12821] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 724.887312][T12821] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 724.897659][T12821] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 724.910933][T12821] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 724.920800][T12821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.167509][T12821] usb 1-1: GET_CAPABILITIES returned 0 [ 725.177570][T12821] usbtmc 1-1:16.0: can't read capabilities [ 725.189453][T15358] chnl_net:caif_netlink_parms(): no params data found [ 725.375220][ T5828] usb 1-1: USB disconnect, device number 40 [ 725.504607][ T42] dvmrp0 (unregistering): left allmulticast mode [ 725.561853][T15401] 9pnet_fd: Insufficient options for proto=fd [ 726.116370][T15358] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.135066][T15358] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.144435][T15358] bridge_slave_0: entered allmulticast mode [ 726.167199][T15358] bridge_slave_0: entered promiscuous mode [ 726.240231][T15358] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.411669][T15358] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.010373][ T5776] Bluetooth: hci0: command tx timeout [ 727.057783][T15358] bridge_slave_1: entered allmulticast mode [ 727.075278][T15358] bridge_slave_1: entered promiscuous mode [ 727.341073][T15358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.360240][T15421] dvmrp0: entered allmulticast mode [ 727.382108][T15358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.431949][ T42] hsr_slave_0: left promiscuous mode [ 727.449045][ T42] hsr_slave_1: left promiscuous mode [ 727.470418][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.484253][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.503564][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.512014][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.523841][ T42] bridge_slave_1: left allmulticast mode [ 727.530049][ T42] bridge_slave_1: left promiscuous mode [ 727.536432][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.546117][ T5829] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 727.560617][ T42] bridge_slave_0: left allmulticast mode [ 727.566602][ T42] bridge_slave_0: left promiscuous mode [ 727.581326][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.715323][ T42] veth1_macvtap: left promiscuous mode [ 727.721126][ T42] veth0_macvtap: left promiscuous mode [ 727.728451][ T42] veth1_vlan: left promiscuous mode [ 727.735259][ T42] veth0_vlan: left promiscuous mode [ 727.750595][ T5829] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.765288][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 727.782609][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 727.793041][ T5829] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 727.818296][ T5829] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 727.832767][ T5829] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 727.845341][ T5829] usb 4-1: Manufacturer: syz [ 727.893860][ T5829] usb 4-1: config 0 descriptor?? [ 727.966306][T12819] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 728.126581][T15420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.143402][T15420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.167758][T12819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.179521][T12819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.190059][T12819] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 728.203399][T12819] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 728.213519][T12819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.255461][T12819] usb 1-1: config 0 descriptor?? [ 728.286326][ T5829] rc_core: IR keymap rc-hauppauge not found [ 728.293051][ T5829] Registered IR keymap rc-empty [ 728.298728][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 728.346395][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 728.396199][ T5829] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 728.413428][ T5829] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input47 [ 728.459330][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 728.482107][ C1] mceusb 4-1:0.0: long-range (0x80) receiver active [ 728.516542][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 728.536485][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 728.586247][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 728.641379][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 728.682499][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 728.716206][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 728.748799][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 728.762687][T12819] hid-generic 0003:1044:7A4D.000C: item fetching failed at offset 0/1 [ 728.775226][T12819] hid-generic: probe of 0003:1044:7A4D.000C failed with error -22 [ 728.796203][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 728.841039][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 728.887992][ T5829] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 728.901978][ T5829] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x80 active) [ 728.904398][ T42] team0 (unregistering): Port device team_slave_1 removed [ 728.963935][ T5829] usb 4-1: USB disconnect, device number 46 [ 728.993893][ T5828] usb 1-1: USB disconnect, device number 41 [ 729.076549][ T5776] Bluetooth: hci0: command tx timeout [ 729.109591][ T42] team0 (unregistering): Port device team_slave_0 removed [ 729.199431][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 729.311947][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.156121][ T5776] Bluetooth: hci0: command tx timeout [ 731.531446][ T42] bond0 (unregistering): Released all slaves [ 731.650593][T15456] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 731.665183][T15456] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 731.823128][T15450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2853'. [ 732.023869][T15358] team0: Port device team_slave_0 added [ 732.075161][T15358] team0: Port device team_slave_1 added [ 732.183755][T15358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.202702][T15358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.232293][T15358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.287659][T15358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.321480][T15358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.427705][T15358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.628870][T15358] hsr_slave_0: entered promiscuous mode [ 732.663905][T15358] hsr_slave_1: entered promiscuous mode [ 732.670378][T15358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 732.696130][T15358] Cannot create hsr debugfs directory [ 734.676135][ T9246] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 734.870270][T15358] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 734.904562][T15358] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 734.929108][T15358] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 734.949398][T15358] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 735.073639][ T9246] usb 2-1: Using ep0 maxpacket: 16 [ 735.087264][ T9246] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.098394][ T9246] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.108236][ T9246] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 735.749727][T15358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.818504][T15358] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.877097][ T9246] usb 2-1: New USB device found, idVendor=045e, idProduct=fc40, bcdDevice=72.a8 [ 735.905020][ T9246] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.907854][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.920173][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.945038][ T9246] usb 2-1: config 0 descriptor?? [ 735.963006][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.970258][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.129583][T15358] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 736.376277][ T9246] hid-generic 0003:045E:FC40.000D: hidraw0: USB HID v0.00 Device [HID 045e:fc40] on usb-dummy_hcd.1-1/input0 [ 736.571757][ T9246] usb 2-1: USB disconnect, device number 56 [ 736.848978][T15358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.971080][T15358] veth0_vlan: entered promiscuous mode [ 737.018215][T15358] veth1_vlan: entered promiscuous mode [ 737.149383][T15358] veth0_macvtap: entered promiscuous mode [ 737.190407][T15358] veth1_macvtap: entered promiscuous mode [ 737.259804][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.284762][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.375164][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.474710][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.606523][T15358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.516114][ T5776] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 738.524740][ T5776] Bluetooth: hci3: Injecting HCI hardware error event [ 738.535074][ T5776] Bluetooth: hci3: hardware error 0x00 [ 738.607658][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.622752][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.633099][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.662673][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.674409][T15358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.821122][T15358] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.831022][T15358] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.840030][T15358] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.848810][T15358] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.963693][T15546] atomic_op ffff88801cab5998 conn xmit_atomic 0000000000000000 [ 740.005604][T11269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.021738][T11269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.087606][T11269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.099102][T11269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.591591][T15565] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 740.637557][T15565] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 740.856171][ T5776] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 741.587262][T15575] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 743.051735][T15600] tipc: Enabled bearer , priority 0 [ 743.107178][T15602] syzkaller0: entered promiscuous mode [ 743.129893][T15602] syzkaller0: entered allmulticast mode [ 743.287611][T15600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2876'. [ 743.358580][T15600] tipc: Resetting bearer [ 743.409976][T15599] tipc: Resetting bearer [ 743.640879][T15599] tipc: Disabling bearer [ 744.218848][T12821] libceph: connect (1)[c::]:6789 error -101 [ 744.229001][T12821] libceph: mon0 (1)[c::]:6789 connect error [ 744.256629][ T6649] libceph: connect (1)[c::]:6789 error -101 [ 744.290839][ T6649] libceph: mon0 (1)[c::]:6789 connect error [ 744.366433][T12819] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 744.499322][T12821] libceph: connect (1)[c::]:6789 error -101 [ 744.505353][T12821] libceph: mon0 (1)[c::]:6789 connect error [ 744.581175][T12819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.591853][ T6649] libceph: connect (1)[c::]:6789 error -101 [ 744.598619][T12819] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 744.613510][T12819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.626367][ T6649] libceph: mon0 (1)[c::]:6789 connect error [ 744.628947][T12819] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 744.657238][T12819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.671730][T12819] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 744.696137][T12819] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 744.706169][T12819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 744.714350][T12819] usb 4-1: Product: syz [ 744.719119][T12819] usb 4-1: Manufacturer: syz [ 744.727352][T12819] usb 4-1: SerialNumber: syz [ 744.744201][T12819] usb 4-1: config 0 descriptor?? [ 744.989684][T15630] ceph: No mds server is up or the cluster is laggy [ 744.999203][T15633] ceph: No mds server is up or the cluster is laggy [ 745.030374][T12821] libceph: connect (1)[c::]:6789 error -101 [ 745.038148][T12821] libceph: mon0 (1)[c::]:6789 connect error [ 747.480901][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.629422][ T6649] usb 4-1: USB disconnect, device number 47 [ 749.630897][T12819] IPVS: starting estimator thread 0... [ 749.796402][T15706] IPVS: using max 21 ests per chain, 50400 per kthread [ 750.098696][T15717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2900'. [ 751.147089][T12819] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 751.375977][T12819] usb 2-1: Using ep0 maxpacket: 16 [ 751.395757][T12819] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.416338][T12819] usb 2-1: config 0 has no interfaces? [ 751.434577][T12819] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 751.454052][T12819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.472062][T12819] usb 2-1: Product: syz [ 751.488982][T12819] usb 2-1: Manufacturer: syz [ 751.501453][T12819] usb 2-1: SerialNumber: syz [ 751.520905][T12819] usb 2-1: config 0 descriptor?? [ 753.406129][ T6649] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 753.596237][ T6649] usb 4-1: Using ep0 maxpacket: 32 [ 753.720680][ T6649] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.805201][ T6649] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.881742][ T6649] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 753.974702][ T6649] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.173415][ T6649] usb 4-1: config 0 descriptor?? [ 754.206176][ T9246] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 754.335258][ T9244] usb 2-1: USB disconnect, device number 57 [ 754.600861][ T9246] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.755099][ T9246] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.878686][ T9246] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 755.057936][ T9246] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 755.107298][ T6649] ft260 0003:0403:6030.000E: unknown main item tag 0x7 [ 755.193132][ T9246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.301736][ T9246] usb 1-1: config 0 descriptor?? [ 755.321102][ T6649] ft260 0003:0403:6030.000E: chip code: 6424 8183 [ 755.530639][ T6649] ft260 0003:0403:6030.000E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 755.548454][T15768] netlink: 'syz.1.2916': attribute type 13 has an invalid length. [ 755.731285][ T6649] ft260 0003:0403:6030.000E: failed to retrieve status: -32, no wakeup [ 755.803568][ T9246] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 755.829574][ T9246] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 755.876364][ T9244] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 755.957323][T12821] usb 4-1: USB disconnect, device number 48 [ 756.078639][ T9244] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 756.092986][ T9244] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 756.104316][ T9244] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 756.118490][ T9244] usb 2-1: config 0 interface 0 has no altsetting 0 [ 756.127108][ T9244] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 756.138851][ T9244] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 756.150774][ T9244] usb 2-1: config 0 interface 0 has no altsetting 0 [ 756.161303][ T9244] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 756.171116][ T9244] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 756.185394][ T9244] usb 2-1: config 0 interface 0 has no altsetting 0 [ 756.193766][ T9244] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 756.205197][ T9244] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 756.218923][ T9244] usb 2-1: config 0 interface 0 has no altsetting 0 [ 756.232024][ T9244] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 756.244434][ T9244] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 756.260608][ T9244] usb 2-1: config 0 interface 0 has no altsetting 0 [ 756.269326][ T9244] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 756.269776][T12821] usb 1-1: USB disconnect, device number 42 [ 756.279269][T15757] usb 1-1: string descriptor 0 read error: -19 [ 756.295816][ T9244] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 756.309217][ T9244] usb 2-1: config 0 interface 0 has no altsetting 0 [ 756.316906][T15760] plantronics 0003:047F:FFFF.000F: usb_submit_urb(ctrl) failed: -19 [ 756.325822][ T9244] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 756.338165][ T9244] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 756.370136][ T9244] usb 2-1: config 0 interface 0 has no altsetting 0 [ 756.389318][ T9244] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 756.412369][ T9244] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 756.434144][ T9244] usb 2-1: config 0 interface 0 has no altsetting 0 [ 756.457166][ T9244] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 756.469453][ T9244] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 756.480433][ T9244] usb 2-1: Product: syz [ 756.484637][ T9244] usb 2-1: Manufacturer: syz [ 756.491977][ T9244] usb 2-1: SerialNumber: syz [ 756.503183][ T9244] usb 2-1: config 0 descriptor?? [ 756.533021][ T9244] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 756.770813][ T9244] usb 2-1: USB disconnect, device number 58 [ 756.788156][ T9244] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 759.356130][T12821] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 759.610111][T12821] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x72, skipping [ 759.628223][T12821] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 759.641786][T12821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.650223][T12821] usb 2-1: Product: syz [ 759.655701][T12821] usb 2-1: Manufacturer: syz [ 759.671936][T12821] usb 2-1: SerialNumber: syz [ 759.686821][T12821] usb 2-1: config 0 descriptor?? [ 759.694944][T12821] powermate: probe of 2-1:0.0 failed with error -22 [ 759.757080][T15804] binder: 15803:15804 ioctl 4018620d 0 returned -22 [ 759.899121][ T5829] usb 2-1: USB disconnect, device number 59 [ 760.929458][T15821] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 764.071666][T15840] netdevsim netdevsim0 ªªªªª»: renamed from netdevsim0 (while UP) [ 764.541943][T15846] tipc: Enabled bearer , priority 0 [ 764.717149][T15849] syzkaller0: entered promiscuous mode [ 764.722794][T15849] syzkaller0: entered allmulticast mode [ 764.734031][T15846] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 764.744253][T15846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2942'. [ 764.760070][T15846] tipc: Resetting bearer [ 764.786749][T15845] tipc: Resetting bearer [ 764.859537][T15845] tipc: Disabling bearer [ 766.362907][T15865] tty tty25: ldisc open failed (-12), clearing slot 24 [ 766.962258][T15881] syzkaller1: entered promiscuous mode [ 766.980344][T15881] syzkaller1: entered allmulticast mode [ 769.506435][T15918] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 769.513011][T15918] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 769.537455][T15918] vhci_hcd vhci_hcd.0: Device attached [ 769.561113][T15921] vhci_hcd: connection closed [ 769.570051][ T1312] vhci_hcd: stop threads [ 769.683280][ T1312] vhci_hcd: release socket [ 769.703695][ T1312] vhci_hcd: disconnect device [ 771.446668][T15946] tipc: Enabled bearer , priority 0 [ 771.454059][T15946] syzkaller0: entered promiscuous mode [ 771.462730][T15946] syzkaller0: entered allmulticast mode [ 771.471392][T15946] sch_tbf: peakrate 786 is lower than or equals to rate 19658 ! [ 771.482236][T15944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2969'. [ 771.686193][T15946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2972'. [ 771.713370][T15946] tipc: Resetting bearer [ 771.911460][T15945] tipc: Resetting bearer [ 772.016819][T15945] tipc: Disabling bearer [ 773.626234][T15974] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2981'. [ 773.771493][T15977] tipc: Enabled bearer , priority 0 [ 773.845283][T15978] syzkaller0: entered promiscuous mode [ 773.853226][T15978] syzkaller0: entered allmulticast mode [ 773.863108][T15977] syzkaller0: entered promiscuous mode [ 773.871486][T15977] syzkaller0: entered allmulticast mode [ 774.363909][ T5776] Bluetooth: hci0: command tx timeout [ 779.748859][T15977] sch_tbf: peakrate 786 is lower than or equals to rate 19658 ! [ 779.766654][T15980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2982'. [ 779.806797][T15981] tipc: Resetting bearer [ 779.830885][T15976] tipc: Resetting bearer [ 779.930332][T15976] tipc: Disabling bearer [ 779.962555][ T7735] tipc: Node number set to 1644307601 [ 779.972545][T16017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2992'. [ 780.574537][ T5829] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 781.206082][ T5829] usb 1-1: Using ep0 maxpacket: 32 [ 781.222132][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65280, setting to 1024 [ 781.266458][ T5829] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 781.344277][ T5829] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 781.353525][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 781.362497][ T5829] usb 1-1: Product: syz [ 781.367033][ T5829] usb 1-1: Manufacturer: syz [ 781.371773][ T5829] usb 1-1: SerialNumber: syz [ 781.424215][ T5829] usb 1-1: config 0 descriptor?? [ 781.433621][T16026] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 782.771925][T16051] syzkaller0: entered promiscuous mode [ 782.777528][T16051] syzkaller0: entered allmulticast mode [ 783.140983][ T9244] usb 1-1: USB disconnect, device number 43 [ 783.344599][ T5829] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 783.574781][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 783.592350][ T5829] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 783.605431][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.616355][ T5829] usb 4-1: Product: syz [ 783.620572][ T5829] usb 4-1: Manufacturer: syz [ 783.625185][ T5829] usb 4-1: SerialNumber: syz [ 783.637685][ T5829] usb 4-1: config 0 descriptor?? [ 783.645663][ T5829] hub 4-1:0.0: bad descriptor, ignoring hub [ 783.653549][ T5829] hub: probe of 4-1:0.0 failed with error -5 [ 783.668892][ T5829] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input50 [ 785.074027][T16083] Bluetooth: MGMT ver 1.22 [ 786.236866][T16061] tipc: Enabling of bearer rejected, failed to enable media [ 786.264072][T16075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3004'. [ 788.254236][T16117] syzkaller0: entered promiscuous mode [ 788.270922][T16117] syzkaller0: entered allmulticast mode [ 789.797989][ T9244] usb 4-1: USB disconnect, device number 49 [ 791.020446][ T9244] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 791.215257][ T9244] usb 3-1: Using ep0 maxpacket: 16 [ 791.249338][ T9244] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 791.264491][ T9244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 791.276228][ T9244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 791.286345][ T9244] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 791.298918][ T9244] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 791.315585][ T9244] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 791.324807][ T9244] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 791.332910][ T9244] usb 3-1: Manufacturer: syz [ 791.342140][ T9244] usb 3-1: config 0 descriptor?? [ 791.685243][ T9244] rc_core: IR keymap rc-hauppauge not found [ 791.691423][ T9244] Registered IR keymap rc-empty [ 791.697342][ T9244] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 791.726015][ T9244] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 791.766966][ T9244] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 791.782291][ T9244] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input51 [ 791.812031][ T9244] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 791.866371][ T9244] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 791.898066][ T9244] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 791.929303][ T9244] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 791.969794][ T9244] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 792.012068][ T9244] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 792.054976][ T9244] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 792.093806][ T9244] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 792.133802][ T9244] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 792.172702][ T9244] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 792.216722][ T9244] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 792.238769][ T9244] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 792.363713][T16130] tipc: Enabled bearer , priority 0 [ 792.383976][T16131] syzkaller0: entered promiscuous mode [ 792.427660][T16131] syzkaller0: entered allmulticast mode [ 792.462631][T16141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3024'. [ 792.586133][T16141] tipc: Resetting bearer [ 792.661908][T16141] tipc: Disabling bearer [ 794.614589][T16168] random: crng reseeded on system resumption [ 794.750741][T12819] usb 3-1: USB disconnect, device number 44 [ 795.257790][T16175] trusted_key: encrypted_key: hex blob is missing [ 795.744151][T16183] syzkaller0: entered promiscuous mode [ 795.768100][T16183] syzkaller0: entered allmulticast mode [ 795.855971][T12819] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 796.040934][T12819] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 796.063811][T12819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.093104][T12819] usb 4-1: Product: syz [ 796.111746][T12819] usb 4-1: Manufacturer: syz [ 796.130933][T12819] usb 4-1: SerialNumber: syz [ 796.188428][T12819] r8152-cfgselector 4-1: config 0 descriptor?? [ 796.604182][T12819] r8152-cfgselector 4-1: Unknown version 0x0000 [ 796.616048][T12819] r8152-cfgselector 4-1: USB disconnect, device number 50 [ 798.189521][T16211] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3045'. [ 800.072848][T16197] tipc: Enabling of bearer rejected, failed to enable media [ 800.083339][T16203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3043'. [ 801.564243][T16242] syzkaller0: entered promiscuous mode [ 801.579789][T16242] syzkaller0: entered allmulticast mode [ 802.450017][ T5776] Bluetooth: hci2: command tx timeout [ 805.404713][T16259] tipc: Enabling of bearer rejected, failed to enable media [ 805.579058][T16282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3065'. [ 807.159567][T16303] syzkaller0: entered promiscuous mode [ 807.167042][T16303] syzkaller0: entered allmulticast mode [ 807.818615][ T5829] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 807.908054][T12819] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 808.880203][ T5829] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 808.901712][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.911771][ T5829] usb 2-1: Product: syz [ 808.916337][ T5829] usb 2-1: Manufacturer: syz [ 808.920987][ T5829] usb 2-1: SerialNumber: syz [ 808.936663][T12819] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 808.947461][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.976735][ T5829] usb 2-1: config 0 descriptor?? [ 808.982908][T12819] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 808.997035][T12819] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 809.015977][T12819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.210158][T12819] usb 3-1: config 0 descriptor?? [ 809.220138][T16310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.248985][T12819] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 809.262426][T16310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.297553][ T5776] Bluetooth: hci2: unknown advertising packet type: 0x17 [ 809.297582][ T5776] Bluetooth: hci2: Malformed LE Event: 0x02 [ 812.072502][T16324] tipc: Enabling of bearer rejected, failed to enable media [ 812.128658][ T5829] usb-storage 2-1:0.0: USB Mass Storage device detected [ 812.327521][ T5829] usb 2-1: USB disconnect, device number 60 [ 815.877963][ T9244] usb 3-1: USB disconnect, device number 45 [ 815.996180][T16369] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input52 [ 816.181105][T16374] syzkaller0: entered promiscuous mode [ 816.186795][T16374] syzkaller0: entered allmulticast mode [ 819.811709][T16378] tipc: Enabled bearer , priority 0 [ 819.818731][T16381] syzkaller0: entered promiscuous mode [ 819.824305][T16381] syzkaller0: entered allmulticast mode [ 819.842702][T16375] tipc: Resetting bearer [ 819.885133][T16375] tipc: Disabling bearer [ 822.276438][ T9244] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 822.319636][T16435] syzkaller0: entered promiscuous mode [ 822.325281][T16435] syzkaller0: entered allmulticast mode [ 822.468372][ T9244] usb 3-1: Using ep0 maxpacket: 16 [ 822.533704][ T9244] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 822.559454][ T9244] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 822.569857][ T9244] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.581130][ T9244] usb 3-1: Product: syz [ 822.585343][ T9244] usb 3-1: Manufacturer: syz [ 822.604538][ T9244] usb 3-1: SerialNumber: syz [ 822.613242][ T9244] usb 3-1: config 0 descriptor?? [ 822.819294][T16436] orangefs_mount: mount request failed with -4 [ 823.326349][ T5829] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 823.707643][ T5829] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 823.721777][ T5829] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 823.743479][ T5829] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 823.839831][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.124458][T16441] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 824.365316][ T5829] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 824.515090][ T5829] usb 1-1: USB disconnect, device number 44 [ 825.537999][ T9246] usb 3-1: USB disconnect, device number 46 [ 826.786011][ T9246] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 826.941802][ T9246] usb 1-1: device descriptor read/64, error -71 [ 827.097554][T16461] tipc: Enabling of bearer rejected, failed to enable media [ 827.114782][T16448] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 827.131223][T16448] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 827.219521][ T9246] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 827.574073][ T9246] usb 1-1: device descriptor read/64, error -71 [ 827.696378][ T9246] usb usb1-port1: attempt power cycle [ 828.119015][ T9246] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 828.625477][ T9246] usb 1-1: device descriptor read/8, error -71 [ 828.915510][T16499] syzkaller0: entered promiscuous mode [ 828.921298][ T9246] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 828.929960][T16499] syzkaller0: entered allmulticast mode [ 828.978820][ T9246] usb 1-1: device descriptor read/8, error -71 [ 829.111021][ T9246] usb usb1-port1: unable to enumerate USB device [ 829.963719][ T7735] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 830.202351][ T7735] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 830.219807][ T7735] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 830.232250][ T7735] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 830.241778][ T7735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.262395][T16519] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 830.276753][ T7735] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 830.529104][ T7735] usb 2-1: USB disconnect, device number 61 [ 832.548117][T16507] tipc: Enabling of bearer rejected, failed to enable media [ 834.746026][ T9246] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 834.981410][ T9246] usb 2-1: device descriptor read/64, error -71 [ 835.419539][T16556] usb usb1: check_ctrlrecip: process 16556 (syz.2.3129) requesting ep 01 but needs 81 [ 835.429196][T16556] usb usb1: usbfs: process 16556 (syz.2.3129) did not claim interface 0 before use [ 835.468995][ T9246] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 835.626177][ T9246] usb 2-1: device descriptor read/64, error -71 [ 835.726082][ T23] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 835.746145][ T9246] usb usb2-port1: attempt power cycle [ 835.927856][ T23] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 835.966111][ T23] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 835.980525][ T23] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 835.990922][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.093444][T16555] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 836.109277][ T23] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 836.236035][ T9246] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 836.266894][ T9246] usb 2-1: device descriptor read/8, error -71 [ 836.394401][ T23] usb 4-1: USB disconnect, device number 51 [ 836.679604][ T9246] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 837.353149][ T9246] usb 2-1: device descriptor read/8, error -71 [ 837.359511][ T6649] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 837.456569][T16570] tipc: Started in network mode [ 837.462600][T16570] tipc: Node identity ce8045ccfe4d, cluster identity 4711 [ 837.476128][T16570] tipc: Enabled bearer , priority 0 [ 837.498532][T16570] syzkaller0: entered promiscuous mode [ 837.504130][T16570] syzkaller0: entered allmulticast mode [ 837.516213][ T9246] usb usb2-port1: unable to enumerate USB device [ 837.536034][ T6649] usb 1-1: device descriptor read/64, error -71 [ 837.606736][T16574] tipc: Resetting bearer [ 837.625151][T16569] tipc: Resetting bearer [ 837.673173][T16569] tipc: Disabling bearer [ 837.888040][ T6649] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 838.075993][ T6649] usb 1-1: device descriptor read/64, error -71 [ 838.317051][ T6649] usb usb1-port1: attempt power cycle [ 838.746000][ T6649] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 838.818540][ T6649] usb 1-1: device descriptor read/8, error -71 [ 839.363335][ T6649] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 839.607293][ T6649] usb 1-1: device not accepting address 52, error -71 [ 839.622583][ T6649] usb usb1-port1: unable to enumerate USB device [ 839.906527][ T9246] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 840.266042][ T9246] usb 2-1: device descriptor read/64, error -71 [ 840.646057][ T9246] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 840.795994][ T9246] usb 2-1: device descriptor read/64, error -71 [ 840.926703][ T9246] usb usb2-port1: attempt power cycle [ 840.955980][ T5828] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 841.151649][ T5828] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 841.356053][ T9246] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 841.504322][ T5828] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 841.546655][ T9246] usb 2-1: device descriptor read/8, error -71 [ 841.754186][ T5828] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 841.912107][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.927389][ T5828] usb 4-1: config 0 descriptor?? [ 842.806017][ T9246] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 842.838754][ T9246] usb 2-1: device descriptor read/8, error -71 [ 842.976252][ T9246] usb usb2-port1: unable to enumerate USB device [ 843.347968][ T5828] usb 4-1: can't set config #0, error -71 [ 843.369417][ T5828] usb 4-1: USB disconnect, device number 52 [ 845.767508][ T23] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 846.196098][ T9246] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 846.256173][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 846.272611][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 846.283253][ T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 846.456000][ T23] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 846.475427][ T23] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 846.495685][ T23] usb 4-1: Product: syz [ 846.501434][ T23] usb 4-1: Manufacturer: syz [ 846.507650][ T23] usb 4-1: SerialNumber: syz [ 846.558923][T16671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3164'. [ 846.663671][ T23] usb 4-1: config 0 descriptor?? [ 847.086829][ T9246] usb 3-1: device descriptor read/64, error -71 [ 847.428780][ T7735] usb 4-1: USB disconnect, device number 53 [ 847.637978][ T9246] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 847.816382][ T9246] usb 3-1: device descriptor read/64, error -71 [ 848.479470][ T9246] usb usb3-port1: attempt power cycle [ 849.025972][T12819] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 849.215927][T12819] usb 2-1: Using ep0 maxpacket: 16 [ 849.222768][T12819] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 849.256753][T12819] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 849.285968][T12819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.294043][T12819] usb 2-1: Product: syz [ 849.318728][T12819] usb 2-1: Manufacturer: syz [ 849.333923][T12819] usb 2-1: SerialNumber: syz [ 849.350253][T12819] usb 2-1: config 0 descriptor?? [ 849.605138][ T9246] usb usb3-port1: Cannot enable. Maybe the USB cable is bad? [ 849.766616][ T9246] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 849.807719][ T9246] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 849.827045][ T9246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.845492][ T9246] usb 3-1: config 0 descriptor?? [ 850.273496][ T9246] elecom 0003:056E:010D.0010: unknown main item tag 0x0 [ 850.282165][ T9246] elecom 0003:056E:010D.0010: unknown main item tag 0x0 [ 850.291534][ T9246] elecom 0003:056E:010D.0010: unknown main item tag 0x0 [ 850.303714][ T9246] elecom 0003:056E:010D.0010: unknown main item tag 0x0 [ 850.312323][ T9246] elecom 0003:056E:010D.0010: unknown main item tag 0x0 [ 850.319728][ T9246] elecom 0003:056E:010D.0010: unknown main item tag 0x0 [ 850.327151][ T9246] elecom 0003:056E:010D.0010: unknown main item tag 0x0 [ 850.373808][ T9246] elecom 0003:056E:010D.0010: hidraw0: USB HID v0.00 Device [HID 056e:010d] on usb-dummy_hcd.2-1/input0 [ 850.511487][T12820] usb 3-1: USB disconnect, device number 50 [ 851.590661][T12820] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 851.610187][T16727] dlm: no local IP address has been set [ 851.619144][T16727] dlm: cannot start dlm midcomms -107 [ 851.758616][ T9246] usb 2-1: USB disconnect, device number 70 [ 851.786037][T12820] usb 3-1: Using ep0 maxpacket: 8 [ 851.817196][T12820] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 851.866112][T12820] usb 3-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 851.895992][T12820] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 851.905155][T12820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.335388][ T6649] usb 3-1: USB disconnect, device number 51 [ 853.158062][T16750] tipc: Enabling of bearer rejected, failed to enable media [ 857.966444][ T7735] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 858.477142][ T7735] usb 3-1: Using ep0 maxpacket: 8 [ 858.510321][ T7735] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 858.587905][ T7735] usb 3-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 858.676329][ T7735] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 858.693976][ T7735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.223205][ T7735] usb 3-1: USB disconnect, device number 52 [ 860.645989][T12819] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 861.126406][T12819] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 861.141689][T12819] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 861.154990][T12819] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 861.164414][T12819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.384803][T12819] usb 2-1: GET_CAPABILITIES returned 0 [ 861.390371][T12819] usbtmc 2-1:16.0: can't read capabilities [ 861.598230][ T9244] usb 2-1: USB disconnect, device number 71 [ 862.400666][T16831] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3212'. [ 862.409753][T16831] nbd: must specify at least one socket [ 863.166010][T12820] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 863.376044][T12820] usb 4-1: Using ep0 maxpacket: 8 [ 863.383277][T12820] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 863.394401][T12820] usb 4-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 863.404167][T12820] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 863.414473][T12820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.616076][ T5829] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 863.637938][T12820] usb 4-1: USB disconnect, device number 54 [ 863.806182][ T5829] usb 3-1: Using ep0 maxpacket: 16 [ 863.823396][ T5829] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 863.835964][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 863.844339][ T5829] usb 3-1: Product: syz [ 863.849433][ T5829] usb 3-1: Manufacturer: syz [ 863.854070][ T5829] usb 3-1: SerialNumber: syz [ 863.866636][ T5829] usb 3-1: config 0 descriptor?? [ 864.461242][ T5776] Bluetooth: hci2: unexpected event for opcode 0x2024 [ 864.558723][ T5829] usb 3-1: USB disconnect, device number 53 [ 865.374288][ T9244] libceph: connect (1)[c::]:6789 error -101 [ 865.404662][ T9244] libceph: mon0 (1)[c::]:6789 connect error [ 865.862940][T16854] ceph: No mds server is up or the cluster is laggy [ 865.871985][ T9244] libceph: connect (1)[c::]:6789 error -101 [ 865.897111][ T9244] libceph: mon0 (1)[c::]:6789 connect error [ 867.216028][ T5829] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 867.435967][ T5829] usb 3-1: Using ep0 maxpacket: 8 [ 867.456730][ T5829] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 867.515912][ T5829] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 867.539684][ T5829] usb 3-1: config 179 has no interface number 0 [ 867.547414][ T5829] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 867.566258][ T5829] usb 3-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 867.609705][ T5829] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 867.630195][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.863089][T16898] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3232'. [ 867.890917][ T9246] usb 3-1: USB disconnect, device number 54 [ 870.602775][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.081816][T16930] syz.0.3239 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 871.437450][ T9246] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 872.386185][ T9246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 872.488491][ T9246] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 872.518946][ T9246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.545997][ T9246] usb 3-1: Product: syz [ 872.558773][ T9246] usb 3-1: Manufacturer: syz [ 872.570751][ T9246] usb 3-1: SerialNumber: syz [ 872.930078][ T9246] usb 3-1: config 0 descriptor?? [ 872.994249][ T9246] hub 3-1:0.0: bad descriptor, ignoring hub [ 873.042750][ T9246] hub: probe of 3-1:0.0 failed with error -5 [ 873.080384][ T9246] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input53 [ 873.570105][ T7735] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 874.701271][T16957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3248'. [ 874.889691][T16959] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 874.896252][T16959] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 874.921340][T16959] vhci_hcd vhci_hcd.0: Device attached [ 875.195948][ T23] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 875.704178][ T7735] usb 4-1: Using ep0 maxpacket: 8 [ 875.946134][ T7735] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 875.974813][ T7735] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 875.994314][T16960] vhci_hcd: connection reset by peer [ 876.011547][ T7735] usb 4-1: config 179 has no interface number 0 [ 876.014491][ T42] vhci_hcd: stop threads [ 876.022332][ T42] vhci_hcd: release socket [ 876.025981][ T7735] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 876.035931][ T42] vhci_hcd: disconnect device [ 876.057833][ T7735] usb 4-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 876.105943][ T7735] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 876.139519][ T7735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.220064][ T7735] usb 4-1: USB disconnect, device number 55 [ 876.693733][T16976] tipc: Enabled bearer , priority 10 [ 877.927747][ T5828] tipc: Node number set to 818759116 [ 878.518818][ T9246] usb 3-1: USB disconnect, device number 55 [ 879.368738][ T9246] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 879.513997][T17006] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:0 [ 879.525144][T17006] tipc: Enabled bearer , priority 10 [ 879.596430][ T9246] usb 3-1: Using ep0 maxpacket: 8 [ 879.603652][ T9246] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 879.612273][ T9246] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 879.626016][ T9246] usb 3-1: config 179 has no interface number 0 [ 879.632401][ T9246] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 879.642802][ T9246] usb 3-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 879.657699][ T9246] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 879.666904][ T9246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.726132][ T5828] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 879.826059][ T6649] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 879.892614][ T9246] usb 3-1: USB disconnect, device number 56 [ 879.908394][ T5828] usb 4-1: Using ep0 maxpacket: 16 [ 879.935663][ T5828] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.953129][ T5828] usb 4-1: config 0 interface 0 has no altsetting 0 [ 879.963500][ T5828] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 879.977681][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.001281][ T5828] usb 4-1: config 0 descriptor?? [ 880.018239][ T6649] usb 2-1: config 127 has an invalid interface number: 124 but max is 0 [ 880.033299][ T6649] usb 2-1: config 127 has no interface number 0 [ 880.042326][ T6649] usb 2-1: config 127 interface 124 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 880.061828][ T6649] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=1d.4f [ 880.072739][ T6649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.303233][ T6649] peak_usb 2-1:127.124 can0: unable to request usb[type=0 value=1] err=-71 [ 880.340846][ T6649] peak_usb 2-1:127.124: unable to read PCAN-Chip USB firmware info (err -71) [ 880.420295][ T6649] peak_usb: probe of 2-1:127.124 failed with error -71 [ 880.446459][ T5828] nzxt-smart2 0003:1E71:2009.0011: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 880.475407][ T6649] usb 2-1: USB disconnect, device number 72 [ 881.139229][ T5828] usb 4-1: USB disconnect, device number 56 [ 881.716378][ T23] vhci_hcd: vhci_device speed not set [ 882.245970][ T5828] IPVS: starting estimator thread 0... [ 882.335959][T17043] IPVS: using max 19 ests per chain, 45600 per kthread [ 884.037963][ T5776] Bluetooth: hci2: hcon ffff888077f08000 sent 1 < count 8 [ 884.167888][T17066] syzkaller0: entered promiscuous mode [ 884.174640][T17066] syzkaller0: entered allmulticast mode [ 884.452195][ T6649] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 884.766917][ T6649] usb 3-1: Using ep0 maxpacket: 8 [ 884.904189][ T6649] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 884.941702][ T6649] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 885.011349][ T6649] usb 3-1: config 179 has no interface number 0 [ 885.047671][ T6649] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 885.059121][ T6649] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 885.070605][ T6649] usb 3-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 885.098170][ T6649] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 885.108530][ T6649] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.132468][T17070] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 885.378739][ T23] usb 3-1: USB disconnect, device number 57 [ 887.092856][T17099] syz.0.3280: attempt to access beyond end of device [ 887.092856][T17099] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 887.127798][T17099] syz.0.3280: attempt to access beyond end of device [ 887.127798][T17099] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 887.143293][T17099] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 887.166239][T17099] syz.0.3280: attempt to access beyond end of device [ 887.166239][T17099] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 887.194996][T17099] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 887.205707][T17100] [ 887.208064][T17100] ====================================================== [ 887.215088][T17100] WARNING: possible circular locking dependency detected [ 887.222116][T17100] syzkaller #0 Not tainted [ 887.226515][T17100] ------------------------------------------------------ [ 887.233523][T17100] syz.0.3280/17100 is trying to acquire lock: [ 887.239571][T17100] ffff88807d5840e0 (&type->s_umount_key#77){++++}-{3:3}, at: super_lock+0x167/0x360 [ 887.248970][T17100] [ 887.248970][T17100] but task is already holding lock: [ 887.256334][T17100] ffff888148d9a388 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0 [ 887.266188][T17100] [ 887.266188][T17100] which lock already depends on the new lock. [ 887.266188][T17100] [ 887.276578][T17100] [ 887.276578][T17100] the existing dependency chain (in reverse order) is: [ 887.285579][T17100] [ 887.285579][T17100] -> #4 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 887.293731][T17100] __mutex_lock+0x129/0xcc0 [ 887.298744][T17100] bd_finish_claiming+0x22f/0x3f0 [ 887.304277][T17100] blkdev_get_by_dev+0x45c/0x600 [ 887.309718][T17100] bdev_open_by_dev+0x77/0x100 [ 887.314991][T17100] setup_bdev_super+0x59/0x660 [ 887.320278][T17100] mount_bdev+0x1dd/0x2d0 [ 887.325130][T17100] legacy_get_tree+0xea/0x180 [ 887.330332][T17100] vfs_get_tree+0x8c/0x280 [ 887.335267][T17100] do_new_mount+0x24b/0xa40 [ 887.340292][T17100] init_mount+0xd2/0x120 [ 887.345053][T17100] do_mount_root+0x97/0x230 [ 887.350070][T17100] mount_root_generic+0x195/0x3c0 [ 887.355614][T17100] prepare_namespace+0xc2/0x100 [ 887.360981][T17100] kernel_init_freeable+0x413/0x570 [ 887.367214][T17100] kernel_init+0x1d/0x1c0 [ 887.372061][T17100] ret_from_fork+0x48/0x80 [ 887.376986][T17100] ret_from_fork_asm+0x11/0x20 [ 887.382267][T17100] [ 887.382267][T17100] -> #3 (bdev_lock){+.+.}-{3:3}: [ 887.389381][T17100] __mutex_lock+0x129/0xcc0 [ 887.394496][T17100] bd_prepare_to_claim+0x1ba/0x480 [ 887.400132][T17100] truncate_bdev_range+0x4e/0x260 [ 887.405674][T17100] blkdev_common_ioctl+0x1ba8/0x2460 [ 887.411474][T17100] blkdev_ioctl+0x4eb/0x6f0 [ 887.416488][T17100] __se_sys_ioctl+0xfd/0x170 [ 887.421589][T17100] do_syscall_64+0x55/0xb0 [ 887.426528][T17100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 887.432950][T17100] [ 887.432950][T17100] -> #2 (mapping.invalidate_lock){++++}-{3:3}: [ 887.441288][T17100] down_write+0x97/0x1f0 [ 887.446050][T17100] set_blocksize+0x249/0x4b0 [ 887.451148][T17100] sb_min_blocksize+0xbe/0x190 [ 887.456419][T17100] ext4_fill_super+0x6df/0x66c0 [ 887.461777][T17100] get_tree_bdev+0x3e4/0x510 [ 887.466872][T17100] vfs_get_tree+0x8c/0x280 [ 887.471791][T17100] do_new_mount+0x24b/0xa40 [ 887.476807][T17100] init_mount+0xd2/0x120 [ 887.481554][T17100] do_mount_root+0x97/0x230 [ 887.486563][T17100] mount_root_generic+0x195/0x3c0 [ 887.492090][T17100] prepare_namespace+0xc2/0x100 [ 887.497447][T17100] kernel_init_freeable+0x413/0x570 [ 887.503149][T17100] kernel_init+0x1d/0x1c0 [ 887.507989][T17100] ret_from_fork+0x48/0x80 [ 887.512918][T17100] ret_from_fork_asm+0x11/0x20 [ 887.518189][T17100] [ 887.518189][T17100] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 887.526797][T17100] down_write+0x97/0x1f0 [ 887.531544][T17100] set_blocksize+0x201/0x4b0 [ 887.536634][T17100] sb_set_blocksize+0x4a/0x100 [ 887.541900][T17100] udf_load_vrs+0xe3/0xf00 [ 887.546821][T17100] udf_fill_super+0x67d/0x1720 [ 887.552088][T17100] mount_bdev+0x22b/0x2d0 [ 887.556974][T17100] legacy_get_tree+0xea/0x180 [ 887.562160][T17100] vfs_get_tree+0x8c/0x280 [ 887.567082][T17100] do_new_mount+0x24b/0xa40 [ 887.572086][T17100] __se_sys_mount+0x2da/0x3c0 [ 887.577273][T17100] do_syscall_64+0x55/0xb0 [ 887.582200][T17100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 887.588600][T17100] [ 887.588600][T17100] -> #0 (&type->s_umount_key#77){++++}-{3:3}: [ 887.596841][T17100] __lock_acquire+0x2ddb/0x7c80 [ 887.602195][T17100] lock_acquire+0x197/0x410 [ 887.607206][T17100] down_read+0x46/0x2e0 [ 887.611868][T17100] super_lock+0x167/0x360 [ 887.616707][T17100] fs_bdev_mark_dead+0xad/0x1f0 [ 887.622063][T17100] bdev_mark_dead+0x83/0x1a0 [ 887.627158][T17100] disk_force_media_change+0x132/0x1b0 [ 887.633121][T17100] nbd_ioctl+0x431/0xed0 [ 887.637867][T17100] blkdev_ioctl+0x58b/0x6f0 [ 887.642876][T17100] __se_sys_ioctl+0xfd/0x170 [ 887.647972][T17100] do_syscall_64+0x55/0xb0 [ 887.652891][T17100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 887.659292][T17100] [ 887.659292][T17100] other info that might help us debug this: [ 887.659292][T17100] [ 887.669500][T17100] Chain exists of: [ 887.669500][T17100] &type->s_umount_key#77 --> bdev_lock --> &bdev->bd_holder_lock [ 887.669500][T17100] [ 887.683128][T17100] Possible unsafe locking scenario: [ 887.683128][T17100] [ 887.690559][T17100] CPU0 CPU1 [ 887.695907][T17100] ---- ---- [ 887.701251][T17100] lock(&bdev->bd_holder_lock); [ 887.706171][T17100] lock(bdev_lock); [ 887.712568][T17100] lock(&bdev->bd_holder_lock); [ 887.720008][T17100] rlock(&type->s_umount_key#77); [ 887.725108][T17100] [ 887.725108][T17100] *** DEADLOCK *** [ 887.725108][T17100] [ 887.733239][T17100] 2 locks held by syz.0.3280/17100: [ 887.738417][T17100] #0: ffff888021a8d198 (&nbd->config_lock){+.+.}-{3:3}, at: nbd_ioctl+0x132/0xed0 [ 887.747709][T17100] #1: ffff888148d9a388 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0 [ 887.757695][T17100] [ 887.757695][T17100] stack backtrace: [ 887.763567][T17100] CPU: 1 PID: 17100 Comm: syz.0.3280 Not tainted syzkaller #0 [ 887.771007][T17100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 887.781045][T17100] Call Trace: [ 887.784312][T17100] [ 887.787236][T17100] dump_stack_lvl+0x16c/0x230 [ 887.791939][T17100] ? load_image+0x3b0/0x3b0 [ 887.796434][T17100] ? show_regs_print_info+0x20/0x20 [ 887.801625][T17100] ? print_circular_bug+0x12b/0x1a0 [ 887.806813][T17100] check_noncircular+0x2bd/0x3c0 [ 887.811738][T17100] ? print_deadlock_bug+0x5d0/0x5d0 [ 887.817011][T17100] ? lockdep_lock+0xe0/0x220 [ 887.821586][T17100] ? _find_first_zero_bit+0xd3/0x100 [ 887.826861][T17100] __lock_acquire+0x2ddb/0x7c80 [ 887.831705][T17100] ? __lock_acquire+0x1260/0x7c80 [ 887.836719][T17100] ? verify_lock_unused+0x140/0x140 [ 887.841910][T17100] lock_acquire+0x197/0x410 [ 887.846396][T17100] ? super_lock+0x167/0x360 [ 887.850891][T17100] ? __might_sleep+0xe0/0xe0 [ 887.855464][T17100] ? __mutex_trylock_common+0x153/0x250 [ 887.860997][T17100] ? read_lock_is_recursive+0x20/0x20 [ 887.866788][T17100] ? trace_raw_output_contention_end+0xd0/0xd0 [ 887.872934][T17100] down_read+0x46/0x2e0 [ 887.877077][T17100] ? super_lock+0x167/0x360 [ 887.881573][T17100] super_lock+0x167/0x360 [ 887.885896][T17100] ? user_get_super+0x180/0x180 [ 887.890738][T17100] ? mutex_lock_nested+0x20/0x20 [ 887.895696][T17100] fs_bdev_mark_dead+0xad/0x1f0 [ 887.900533][T17100] ? super_s_dev_set+0xa0/0xa0 [ 887.905281][T17100] bdev_mark_dead+0x83/0x1a0 [ 887.909945][T17100] disk_force_media_change+0x132/0x1b0 [ 887.915390][T17100] ? disk_check_media_change+0x310/0x310 [ 887.921021][T17100] ? blk_mq_unquiesce_queue+0xbe/0x120 [ 887.926468][T17100] nbd_ioctl+0x431/0xed0 [ 887.930713][T17100] ? nbd_release+0x140/0x140 [ 887.935289][T17100] ? nbd_release+0x140/0x140 [ 887.939860][T17100] blkdev_ioctl+0x58b/0x6f0 [ 887.944353][T17100] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 887.949802][T17100] ? bpf_lsm_file_ioctl+0x9/0x10 [ 887.954723][T17100] ? security_file_ioctl+0x80/0xa0 [ 887.959826][T17100] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 887.965269][T17100] __se_sys_ioctl+0xfd/0x170 [ 887.969849][T17100] do_syscall_64+0x55/0xb0 [ 887.974247][T17100] ? clear_bhb_loop+0x40/0x90 [ 887.978908][T17100] ? clear_bhb_loop+0x40/0x90 [ 887.983572][T17100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 887.989453][T17100] RIP: 0033:0x7fb4f658f749 [ 887.993864][T17100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 888.013455][T17100] RSP: 002b:00007fb4f47d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 888.021854][T17100] RAX: ffffffffffffffda RBX: 00007fb4f67e6090 RCX: 00007fb4f658f749 [ 888.029832][T17100] RDX: 0000000000000000 RSI: 000000000000ab04 RDI: 0000000000000005 [ 888.037803][T17100] RBP: 00007fb4f6613f91 R08: 0000000000000000 R09: 0000000000000000 [ 888.045769][T17100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.053726][T17100] R13: 00007fb4f67e6128 R14: 00007fb4f67e6090 R15: 00007ffc505ecda8 [ 888.061691][T17100] [ 888.105219][T17099] syz.0.3280: attempt to access beyond end of device [ 888.105219][T17099] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 888.149449][T17099] syz.0.3280: attempt to access beyond end of device [ 888.149449][T17099] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 888.317671][T17099] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 888.359062][T17099] syz.0.3280: attempt to access beyond end of device [ 888.359062][T17099] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 888.417226][T17099] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 888.500843][T17099] syz.0.3280: attempt to access beyond end of device [ 888.500843][T17099] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 888.524161][T17099] syz.0.3280: attempt to access beyond end of device [ 888.524161][T17099] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 888.557257][T17099] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 888.568647][T17099] syz.0.3280: attempt to access beyond end of device [ 888.568647][T17099] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 888.582116][T17099] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 888.595673][T17099] syz.0.3280: attempt to access beyond end of device [ 888.595673][T17099] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 888.609781][T17099] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 888.620263][T17099] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 888.632595][T17099] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 889.822134][T17074] syzkaller0: entered promiscuous mode [ 889.827871][T17074] syzkaller0: entered allmulticast mode