last executing test programs: 14m50.063700585s ago: executing program 0 (id=15): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1070) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 14m48.979674423s ago: executing program 3 (id=18): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r3 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r4, 0x402, 0x5) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) read$dsp(r5, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 14m46.526526591s ago: executing program 3 (id=21): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) 14m45.677462492s ago: executing program 3 (id=24): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000000c0)='./file1\x00', 0x4490, &(0x7f0000000000)=ANY=[], 0xf9, 0x2c0, &(0x7f0000000100)="$eJzs3U9rE08cx/HPbLZN+of+tr9WBOmpWvAkbT0oXgrSg3cvnkRtIhRDBVtBPUXP4gPw3qfgA/DoSTwLvXnyARQ8VGZ21kyS3SYtG7et7xc0bLLz3ZnJzDr73RAjAP+su5sH+zd/2D8j1VSTdEeKJDWkWNIlXW683Nnb3mu3mscdqOYi7J9RGmkGymzttPJCbZyL8BL7LNat8DWMR+O7OkszVbcCVXNnf45Iqvuz0+1vpC//Okr93UaWqFN1AypmDnWoV5qruh0AgOp0uut/5Nf5WX/9HkXSil/20/XfBEHn2GHVDRizz0P2B+u/y7KOjB3f/9yubr7nBjvWxImrv7cbPJlUOrN6LjDNsKzStSWaerrdbt3Yet5uRnqnDS9o0KJ7bKZTN3Owb1xOa7ffTg8cetnnpiPml1mGPFrpkEusognbh/Ww/UGRhXJrHM58MV/NQ5Poo5p/rv/iI2OHyY1U0jdSaftXi4/oejkpV6qgl/Oukiu+Bu/YXtZUkJEom1HzfQOYFLQz7omS6Y1Ke7dW3DsXtaC8qPVgzk3lRC32R3Vnc3F942Y+mAdmWT/1SZvB9X9k3+0VjXJm2jKupJ8Zx/YndiUT98b7taOzlFsyOm2PcArv9US3Nbf7+s2zx+1268VF2/A3KrRrz8QyDjihM9GvUjaySXBW2uM36na8SjhOtshU3y/bikpqz9adkQo3jTSwq/ifDm7LXxzdQT9hIJPgorDXXSbN/4J8ZdVdrNmHpPc6vR7GDv0AIDjiWkFu8L97nO7P4ApyA+NuPczkfLo4WGOQc/WksC7nunpdujZKjanEt/Ps2ThNkNnUNz3i/j8AAAAAAAAAAAAAAAAAAMB5U95XDhqFX7eouo8AAAAAAAAAAAAAAAAAAAAAAJx3Ob//W6/093/vK30Wa5b/Yx4Yr98BAAD//xUUb4I=") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 14m44.932859316s ago: executing program 0 (id=27): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x24044850) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) keyctl$link(0x8, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x8b, 0x100000500) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x9, 0x6b7, 0x80, 0x7fc, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x700) 14m44.876108202s ago: executing program 3 (id=28): syz_emit_vhci(0x0, 0x0) 14m43.883827808s ago: executing program 3 (id=30): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB='gid=forget,shortad,utf8,uid=', @ANYRESDEC=0x0, @ANYBLOB="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"], 0x1, 0xc5b, &(0x7f0000001bc0)="$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") mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) 14m43.087099589s ago: executing program 0 (id=32): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) write$cgroup_type(r0, 0x0, 0x0) close(0x3) 14m42.729292624s ago: executing program 3 (id=33): openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x1b, 0x5f005e4c1fdd0237) 14m42.262806201s ago: executing program 0 (id=34): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, &(0x7f00000005c0)) 14m41.685142068s ago: executing program 0 (id=35): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000008c0)={0x3c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20d0}, 0x40000) 14m40.844509892s ago: executing program 0 (id=37): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) setreuid(0x0, 0xee00) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f00000003c0)={0x8, {"c23b585272aca28d9cad01a3cdd1e3a9", "d40000007dcbfb5d3cf7c2cac100", "b0e953ee24cbee8739aa9f2a423b3429"}, 0x4, 0x6}) 14m34.306875676s ago: executing program 2 (id=48): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000780)={0x1, 0x0, [{0x809f000, 0x9d, &(0x7f0000000040)=""/157}]}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1}) 14m33.217063355s ago: executing program 2 (id=49): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000b80)={[{@delalloc}, {@data_err_abort}, {@noauto_da_alloc}, {@usrquota}, {@data_err_ignore}, {@grpid}, {@journal_checksum}, {@grpquota}, {@sysvgroups}, {@user_xattr}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") 14m32.0452831s ago: executing program 2 (id=51): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2}}, 0x20) 14m31.518451822s ago: executing program 2 (id=52): syz_mount_image$nilfs2(&(0x7f000000a000), &(0x7f0000000400)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0xdac, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x842, 0x0) pwrite64(r0, 0x0, 0x0, 0x8080c61) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) 14m30.450583445s ago: executing program 2 (id=56): r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000480)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) 14m29.204009526s ago: executing program 2 (id=58): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x80, 0x9}]}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0xc055) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0xc, 0x0, &(0x7f0000000340)) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r3, &(0x7f0000002240)={0x2020}, 0x2020) writev(r3, &(0x7f0000002140), 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14m26.80772197s ago: executing program 32 (id=33): openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x1b, 0x5f005e4c1fdd0237) 14m25.190727941s ago: executing program 33 (id=37): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) setreuid(0x0, 0xee00) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f00000003c0)={0x8, {"c23b585272aca28d9cad01a3cdd1e3a9", "d40000007dcbfb5d3cf7c2cac100", "b0e953ee24cbee8739aa9f2a423b3429"}, 0x4, 0x6}) 14m12.436732156s ago: executing program 34 (id=58): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x80, 0x9}]}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0xc055) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0xc, 0x0, &(0x7f0000000340)) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r3, &(0x7f0000002240)={0x2020}, 0x2020) writev(r3, &(0x7f0000002140), 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12m21.085196814s ago: executing program 4 (id=215): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2, 0xe, 0x0, 0x9, 0x2}, 0x10}}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x1}, 0x38) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 12m20.039079785s ago: executing program 4 (id=217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x1, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="05", 0x1, 0x4009, &(0x7f0000000140)={0x11, 0xf6, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 12m18.712573226s ago: executing program 4 (id=222): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 12m17.521587502s ago: executing program 4 (id=225): socket$inet6(0xa, 0x80003, 0x5) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f00000000c0)=0xfffffffffffffe8e) 12m16.009542075s ago: executing program 4 (id=231): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0xc, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x5452, 0x0) r2 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$char_usb(0xffffffffffffffff, &(0x7f00000007c0)="0bcde56c", 0x4) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000040)={0x2c, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_disconnect(r0) 12m13.344666395s ago: executing program 4 (id=238): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x40000) socket$alg(0x26, 0x5, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$unix(0x1, 0x1, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x40800) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000000000000700", @ANYRES32=0x1, @ANYBLOB="0000113a206d9227008000001b000000000000000000000000006e6c69f16396d1fa4cb4b8a90075bb7cd0034db54b93aa0b19ef9a4df66acbb22b042ddcd0e927d7f2a7e6139f099011e7fed7e8c073b42e9e1bafb2db9bcf7fd02f3b848f2a2f1cc5f7185fedfe60e6627c7319bb6b19fd5c", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) writev(0xffffffffffffffff, 0x0, 0x0) getgroups(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000002e00090027bd7000000000000400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x4058) 11m57.78829245s ago: executing program 35 (id=238): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x40000) socket$alg(0x26, 0x5, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$unix(0x1, 0x1, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x40800) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000000000000700", @ANYRES32=0x1, @ANYBLOB="0000113a206d9227008000001b000000000000000000000000006e6c69f16396d1fa4cb4b8a90075bb7cd0034db54b93aa0b19ef9a4df66acbb22b042ddcd0e927d7f2a7e6139f099011e7fed7e8c073b42e9e1bafb2db9bcf7fd02f3b848f2a2f1cc5f7185fedfe60e6627c7319bb6b19fd5c", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) writev(0xffffffffffffffff, 0x0, 0x0) getgroups(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000002e00090027bd7000000000000400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x4058) 11m29.338745071s ago: executing program 6 (id=316): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pread64(r0, 0x0, 0x0, 0x0) 11m27.127566996s ago: executing program 6 (id=319): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e80)=@newtfilter={0x2d8, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0x4, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x2ac, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xe7}, @TCA_U32_SEL={0x284, 0x5, {0xf, 0x4, 0x27, 0x5, 0x6, 0x7, 0xffff, 0xb, [{0x5, 0x4, 0x1, 0x4}, {0x8000, 0x7, 0x3, 0x10}, {0xffff, 0xfff, 0x9}, {0x6, 0x10001, 0x400, 0x7}, {0x5, 0xfffffff9, 0x6, 0xf}, {0x8, 0x9, 0x9, 0x7fff}, {0xfffffffb, 0x2, 0x4, 0x5}, {0x7, 0x4, 0x0, 0x6}, {0xd1, 0x4, 0x0, 0xfc72}, {0x1, 0x4, 0x80, 0x4}, {0x8000, 0x100, 0x3, 0x101}, {0x8958, 0x1, 0xe1, 0x4}, {0xfffffff9, 0x527c480, 0x1, 0x6}, {0xfffffffb, 0x7fffffff, 0x101, 0xffffff80}, {0x2, 0x0, 0x5, 0x5}, {0x455, 0x7, 0x7473, 0x7f9}, {0x6, 0x6, 0x8f8c, 0x4}, {0x0, 0xef, 0x5, 0x4}, {0x5ba, 0x5, 0x0, 0xc6d}, {0x5, 0x6, 0x1, 0x1}, {0x2, 0x9, 0x10, 0x3ff}, {0x40, 0x0, 0xe5c, 0x65}, {0x8, 0x7, 0x2, 0x5}, {0x4a, 0x4, 0x5, 0x4}, {0x2, 0x6, 0x6, 0x81}, {0x8, 0x9, 0x5, 0x4c}, {0x500, 0x1, 0xb, 0xbeb5}, {0x9, 0x9, 0x8, 0x4}, {0x58, 0x6, 0x730a53b, 0xb4c9}, {0x8, 0xef93423, 0x3}, {0x0, 0x7, 0x8, 0x69}, {0x2f, 0x2, 0x1, 0x2}, {0xf, 0x9, 0x1, 0x4}, {0xdf23, 0x7, 0x200, 0x6}, {0x8000, 0x6, 0x4, 0x9}, {0x0, 0x10000, 0x4, 0x9}, {0x8, 0x8, 0x613, 0x1}, {0x6, 0x7, 0xfffffffc, 0x7ff}, {0x1725, 0x6, 0xd}]}}, @TCA_U32_LINK={0x8, 0x3, 0xdb5}, @TCA_U32_INDEV={0x14, 0x8, 'macvlan0\x00'}]}}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 11m25.873941242s ago: executing program 6 (id=322): bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004ffff00000000000000e6ff00000000", @ANYRES32, @ANYBLOB="fdffffff00"], 0x50) 11m24.898480299s ago: executing program 6 (id=324): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000740)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1, 0x4c9, &(0x7f0000000c40)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) rename(&(0x7f0000000440)='./file0\x00', &(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 11m23.783451998s ago: executing program 6 (id=327): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbde}, 0x14}}, 0x4000814) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2a}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x95) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000000340)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x7, 0xffff, 0x80, 0x6}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x3, 0x39, 0x55, 0x65, 0x0, 0x6, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x9, 0x10, 0x7ff, 0x0, 0xff9f, {[@generic={0x4, 0xc, "d1127a9d1f79ad8f9c8f"}, @mss={0x2, 0x4, 0x2}]}}, {"3643db1630eb2df40603ed6bc4b67ed5588b102e90821e7145fd1ca8f9"}}}}}, 0x63) socket(0xf, 0x4, 0x0) unshare(0x20400) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0xd9, r4, 0x800000000000000}, 0x38) r5 = socket(0x2b, 0x80801, 0x1) shutdown(r5, 0x7ffffffe) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'bridge0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010340)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) 11m22.368326461s ago: executing program 6 (id=332): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) accept4(r0, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = socket$alg(0x26, 0x5, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, 0x0, 0x0) bind$alg(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e24, @loopback}, 0x2, 0x0, 0x4}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) 11m6.203555518s ago: executing program 36 (id=332): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) accept4(r0, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = socket$alg(0x26, 0x5, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, 0x0, 0x0) bind$alg(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e24, @loopback}, 0x2, 0x0, 0x4}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) 7.62090455s ago: executing program 9 (id=2090): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x2001, 0xa68d7c51bfc40bf1, 0xffbc, 0x6, 0x1, 0x7, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000001540)=[{&(0x7f00000003c0)='`', 0x1}], 0x1) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x1, 0x1, 0xfff, 0x5, 0x5, 0x3}) 7.490529089s ago: executing program 7 (id=2091): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = gettid() r2 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32, @ANYBLOB="089805000750050008001300", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) 7.326389971s ago: executing program 5 (id=2093): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xb}, {0xe, 0xffea}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c061}, 0x4890) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3c}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000900)='l', 0x1}], 0x1}, 0x4) 6.811332265s ago: executing program 8 (id=2094): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x54, 0xfffffffffffffffc, &(0x7f0000000500)="6c5be5400c291bf0f4c580348dc6c5dcaec3663b889897ef8c2021db175a85d68a76bfc5999b47b54c01d10f1c37ff40057d7e3cadd4a6bdf4846ef388c927d44019be5878de20279382f6c3a54f59a076210d47"}) 6.373998239s ago: executing program 7 (id=2096): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 5.993812543s ago: executing program 9 (id=2097): r0 = socket(0x21, 0x3, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1) sendmsg$TIPC_NL_SOCK_GET(r2, 0x0, 0x4) sendmsg$nl_generic(r2, 0x0, 0xc000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c0}, 0x44010) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x30, r3, 0x822, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.583923307s ago: executing program 1 (id=2098): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x7) sendto$inet(r0, &(0x7f0000000240)="f7", 0x1, 0x4008005, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 5.583413148s ago: executing program 8 (id=2099): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x5, 0x7ff, 0x1, 0x3, 0x8}, 0x5, 0xb3}, [{0x2, 0x2, 0x8a, 0x5, 0x1, 0xc}, {0x8, 0x2, 0xa6b, 0x3, 0x9, 0xd}, {0x8, 0x7, 0xee9, 0xfffffff8, 0x7, 0xffff7fff}, {0xf1, 0x3, 0x6, 0x4, 0x9, 0x1667e918}, {0x2, 0x1, 0x101, 0x6, 0xd3, 0x3ff}, {0x2, 0x401, 0x2, 0x8, 0x3, 0x5}, {0xff, 0x2, 0x3, 0x6, 0x5, 0x5}, {0x3511, 0x6, 0x8, 0x401, 0x400, 0xcb}, {0x9, 0x6, 0xe96, 0x3ff, 0x1a5e, 0x5f}, {0x7, 0x5, 0x2, 0x6, 0x3d, 0x1ff}, {0x6, 0x6e, 0x2, 0x6, 0x1ff, 0x101}, {0x101, 0x5, 0x0, 0x4, 0xfffffffa, 0x7f}, {0x5, 0x6, 0x0, 0x0, 0x3, 0x8}, {0xff, 0x100, 0x2, 0x7fffffff, 0x2, 0xc}, {0x96f, 0x3, 0x7ff, 0x9, 0xfff, 0x7}, {0x400, 0xff, 0x2, 0x5, 0x2, 0x3e97ca11}, {0x2, 0xfffffffd, 0xffff, 0x2d, 0x6, 0x7}, {0xd, 0x1, 0x6, 0xfffffffb, 0x1ac5, 0x3}, {0x6, 0xb6, 0x2, 0xfffffffb, 0x1, 0x7}, {0x0, 0x8, 0x1, 0x200, 0x8, 0x7fffffff}, {0x8, 0x1000, 0x13a00, 0x0, 0x5, 0x9}, {0x400, 0x2, 0x4, 0xffffff7f, 0x9, 0x1}, {0x5, 0x9, 0x2, 0xffff2552, 0xfffffff9, 0x7fff}, {0x6, 0x632, 0x10001, 0xfffff676, 0x5, 0x6}, {0x8, 0xffff8484, 0x3, 0x0, 0x6, 0x2}, {0x2, 0x2, 0x84, 0x1, 0x3, 0x2}, {0x80, 0x5f64, 0xc, 0xf, 0x0, 0x6}, {0x2, 0xfa6, 0x2, 0xb, 0x6, 0x8}, {0x60, 0x36eb959b, 0x8, 0x0, 0xe, 0x8}, {0xac, 0x2, 0x2, 0x2, 0xfffffff8, 0x101}, {0x9e, 0xd, 0x5, 0xe, 0xfffff3ce, 0x6}, {0x3404, 0x2, 0xead, 0x800, 0x8, 0x3}, {0x5, 0x800, 0x3, 0x8, 0x100, 0x49c836d6}, {0xd38, 0x6, 0x7ff, 0x3, 0x8, 0x5}, {0x10, 0x5, 0x4, 0x3, 0x9}, {0x6, 0x101, 0x7, 0x1, 0x4, 0x3}, {0x7, 0xe9ab, 0x0, 0x4, 0x1, 0x8}, {0xfffffffb, 0x80000001, 0x7, 0xfffffffb, 0x10, 0x3}, {0xffffffff, 0x4, 0xffff4e30, 0x0, 0x5}, {0x3, 0x4, 0xfffffffd, 0x797, 0xcf, 0xfff}, {0x3ff, 0x8, 0x1, 0x7, 0x0, 0x8}, {0x7ff, 0xa, 0x9, 0x6, 0x4, 0x5}, {0x44, 0x4, 0xba7d, 0x6, 0x9, 0x5}, {0x2, 0x9, 0x4, 0x80000001, 0x7, 0xb4d}, {0x2, 0x7, 0x3, 0x8, 0x3, 0xb7}, {0x6, 0x401, 0xf, 0x40, 0x546e, 0x11c}, {0xffff, 0xa215, 0x18, 0x4, 0x5, 0x3}, {0xfffffffe, 0x400, 0x5, 0x4, 0x8001, 0x6}, {0x8a, 0x4c2e, 0x795e, 0x8, 0x3, 0x3}, {0x5, 0x6, 0x94, 0xffff, 0x9, 0x1}, {0x2, 0x72f3, 0x7, 0x2, 0xb7b, 0xfffffc01}, {0x2, 0x7, 0x3, 0x6, 0x9, 0x3}, {0x4, 0x0, 0x7, 0x4, 0xffffff7f, 0x5ddc}, {0x5735, 0x9b93, 0x959, 0x10001, 0x100, 0x2}, {0x9c, 0x400, 0xb1ee, 0x5, 0x7, 0x8544}, {0x1ff, 0xffffffff, 0xffffffff, 0x363, 0x7ff, 0x1}, {0xa, 0x9, 0x4, 0xffffffff, 0x2, 0xf}, {0x7, 0x2, 0x80000000, 0x3ff, 0xfffffff4, 0xb}, {0xe, 0x5, 0x1, 0x2, 0xfff, 0x5}, {0x7, 0x5, 0x0, 0x3, 0x8001, 0x5f16}, {0x7, 0x6, 0x0, 0x8, 0x9, 0x3e}, {0x4, 0x7, 0x7fffffff, 0x6, 0xfffff287, 0x3}, {0x10001, 0x979, 0x40, 0x6, 0x2, 0xff}, {0x6, 0x40, 0xef, 0x0, 0xf9c0, 0x3}, {0x101, 0x5, 0xfe, 0xc7, 0x32, 0x1}, {0xffffffff, 0x0, 0x0, 0x0, 0x7fffffff, 0xb0a}, {0x1fd6, 0x7, 0x6, 0x2, 0x7, 0x5}, {0xffff, 0x9, 0xc, 0xf06, 0x8, 0x2}, {0x9, 0x5, 0xbd, 0x275, 0x7, 0x3}, {0x4, 0x1ff, 0x5, 0x88, 0x2, 0x8}, {0xb, 0x8, 0x3, 0x3cc3, 0x80000001}, {0x1, 0x743, 0x2, 0x57, 0x6, 0x1}, {0x5, 0xc, 0x2, 0x6, 0x4b0, 0x3}, {0x0, 0x401, 0x8, 0x8, 0x6}, {0x3, 0x8, 0x3, 0xb3, 0x1a327d9d, 0x39e}, {0x4, 0x5, 0xce, 0x1, 0x3, 0x888f}, {0xfffffff7, 0x7, 0x8be7, 0x4, 0x81, 0x8}, {0xfc, 0x9, 0x200, 0x3, 0x6, 0x81}, {0x9, 0x6, 0x100, 0x6, 0x1, 0x7fff}, {0x5, 0x5, 0x40, 0x7a, 0x7, 0x1000}, {0x7, 0x5, 0x9, 0x400, 0x5, 0x4}, {0xd, 0x19, 0x773d, 0x2c1, 0x81, 0x1}, {0x3, 0x9, 0xfff, 0x7, 0x4}, {0x6, 0x9, 0x40, 0x2, 0x7, 0x6}, {0x7, 0x5d9, 0x3, 0x80000001, 0x6, 0x4}, {0x80000000, 0x101, 0x5, 0x0, 0x10001, 0x6}, {0xbb, 0x4, 0x8001, 0x4, 0x8001, 0x7}, {0x8, 0x2616, 0x3, 0x4, 0xffffffff, 0x2f4f}, {0x3, 0x7ff, 0x2, 0x6, 0x10, 0x8}, {0x951, 0xc, 0x7, 0x3, 0xfffffffb, 0x40}, {0x7, 0x40, 0xff, 0x193, 0x8, 0xc0000000}, {0x7, 0xe978, 0x8, 0x7, 0x7, 0x7}, {0x9, 0x81, 0x5, 0x6, 0x9, 0x400}, {0x0, 0x101, 0x0, 0x32d62169, 0x167ddc9, 0x9}, {0x4393a33, 0x0, 0xfff, 0x3, 0x7fff, 0x3}, {0xffffffff, 0x6, 0xfffffff7, 0x8, 0x30000000, 0x4}, {0x5, 0x6, 0x400, 0x6, 0xfffffff7, 0x7fff}, {0x200, 0x8, 0x53, 0x2dc, 0x3, 0xe}, {0x6, 0x9, 0x309085d1, 0x1ff, 0x3, 0x7}, {0x7, 0x7f, 0x101, 0x4d23, 0xb, 0xfff}, {0x7, 0x6, 0xcd, 0xcb93571e, 0xa, 0x5}, {0x800, 0x8, 0x2, 0x9, 0x7f, 0xfffffe00}, {0x0, 0x2, 0x7, 0x8, 0xffff}, {0xa, 0x7ffb, 0xfffffffe, 0x3d, 0x8, 0x7}, {0x5, 0x10001, 0x9130, 0x264, 0x4, 0x2}, {0x7ff, 0x1, 0x3, 0x400, 0x2, 0xdac00000}, {0x2, 0x51, 0x5, 0x0, 0x405, 0x7fff}, {0x1f, 0x3, 0x9, 0x6, 0x68d96f84, 0x10001}, {0xa, 0x9, 0x4, 0x567b, 0xff}, {0x29, 0x0, 0x0, 0x6, 0x75e, 0x9c}, {0x0, 0x401, 0x0, 0x7, 0xd1, 0x5}, {0x4, 0x1, 0x4f27, 0x101, 0x9, 0xfffffffd}, {0x1, 0x8, 0xf, 0x0, 0x6, 0x2}, {0x9, 0x4, 0x4, 0x7fffffff, 0x1, 0x5}, {0x80000001, 0x6, 0x5252, 0x5, 0x7, 0x100}, {0x0, 0x90, 0x7, 0x1, 0x4, 0x8}, {0x2, 0x67, 0xefa, 0x7, 0x2f87, 0xfffffffa}, {0x413c07b2, 0x7, 0x7, 0xcf33, 0x1, 0x9}, {0x5, 0x200009, 0xfffffffd, 0x7, 0x401, 0x6}, {0x3, 0x0, 0x6c4, 0x4, 0x6, 0x1ff}, {0x9, 0x80000001, 0x9, 0xd, 0x2, 0x3}, {0x447fb3a9, 0x8001, 0x200, 0x10, 0x2, 0x5}, {0x7, 0xfffffffd, 0x1, 0xe, 0x7}, {0x3, 0x7, 0x88e, 0x0, 0x6, 0x7}, {0xffffffff, 0xffffffde, 0x81, 0x0, 0x7fff, 0xffff}, {0xd43, 0x855, 0x4, 0x41aa, 0x2, 0xf09c}, {0xaf, 0x61f784e8, 0xed, 0xea, 0x400, 0x5}, {0x7, 0xa, 0x1, 0x6656, 0xfff, 0xb}], [{}, {0x3}, {0x4, 0x1}, {0x0, 0x3aa157f48d3b3bb3}, {}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x5}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x3}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0xd26d20c064367a2c}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x1}, {}, {}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 5.535616044s ago: executing program 5 (id=2100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x2}, {0x0, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 5.463446199s ago: executing program 7 (id=2101): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'lo\x00'}}, 0x1e) 5.244338406s ago: executing program 9 (id=2102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="89e7ee0c7cdad9b4b47380c988ca", 0xe}], 0x1) 4.630420107s ago: executing program 1 (id=2103): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) bind$phonet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x1}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x2000000000000205) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 4.473656258s ago: executing program 8 (id=2104): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000094) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0xd8, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x21}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8001}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="045726f7c34a"}, @NL80211_ATTR_IE={0x7e, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x7}, 0xff, 0x2, @broadcast, 0x0, 0x7, 0x54a}}, @fast_bss_trans={0x37, 0x61, {0x53, 0x1, "54116784282ee19197aa55f0b438e760", "55e32b8af40567accaa96751793f4b9ebdf4a742c89f4cc8dccb4029db3b00c3", "ab7cb1012a399acfbd86473c7240a91ff2fba7c3fd6d265ed5eb8265fd52eab4", [{0x1, 0xd, "6c7ae6082e926dbd0d7486b3bd"}]}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x801}, 0x2000c401) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x8081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) 4.205532913s ago: executing program 5 (id=2105): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 4.076691216s ago: executing program 7 (id=2106): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00'}) gettid() r1 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r1, 0x0, 0x4000010) 3.866248168s ago: executing program 1 (id=2107): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x2001, 0xa68d7c51bfc40bf1, 0xffbc, 0x6, 0x1, 0x7, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000001540)=[{&(0x7f00000003c0)='`', 0x1}], 0x1) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x1, 0x1, 0xfff, 0x5, 0x5, 0x3}) 2.751356085s ago: executing program 9 (id=2108): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4004050) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x4014) 2.624109328s ago: executing program 7 (id=2109): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x54, 0xfffffffffffffffc, &(0x7f0000000500)="6c5be5400c291bf0f4c580348dc6c5dcaec3663b889897ef8c2021db175a85d68a76bfc5999b47b54c01d10f1c37ff40057d7e3cadd4a6bdf4846ef388c927d44019be5878de20279382f6c3a54f59a076210d47"}) 2.623803854s ago: executing program 8 (id=2110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1200, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.439221263s ago: executing program 5 (id=2111): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2.321428255s ago: executing program 1 (id=2112): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x200, 0x98, 0x98, 0x298, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x200}}, {{@ip={@private=0xa010100, @local, 0x0, 0xff, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x0, 0x48}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x6, 0x0, 0x0, 0x2, 0x4, 0xc]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x11, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @private=0xa010100, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.069079218s ago: executing program 9 (id=2113): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, 0x0, 0x0, 0x4008005, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 1.69436499s ago: executing program 7 (id=2114): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff, 0x3}}}}}]}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000180)={@host}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 1.643482576s ago: executing program 5 (id=2115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x2}, {0x0, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 1.526754398s ago: executing program 8 (id=2116): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'lo\x00'}}, 0x1e) 1.36010038s ago: executing program 1 (id=2117): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="00130000", @ANYRES16=r0, @ANYBLOB="c39203100400000000001900000009000300", @ANYRES32=r2, @ANYBLOB="10001d800c000080060005001200000070001d80"], 0x1300}, 0x1, 0x0, 0x0, 0x800}, 0x4050) 1.203740817s ago: executing program 9 (id=2118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="89e7ee0c7cdad9b4b47380c988ca", 0xe}], 0x1) 564.575844ms ago: executing program 5 (id=2119): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00'}) gettid() r1 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r1, 0x0, 0x4000010) 371.316195ms ago: executing program 1 (id=2120): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x200088c4}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 0s ago: executing program 8 (id=2121): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000094) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0xdc, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x21}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8001}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="045726f7c34a"}, @NL80211_ATTR_IE={0x84, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x7}, 0xff, 0x2, @broadcast, 0x0, 0x7, 0x54a}}, @fast_bss_trans={0x37, 0x67, {0x53, 0x1, "54116784282ee19197aa55f0b438e760", "55e32b8af40567accaa96751793f4b9ebdf4a742c89f4cc8dccb4029db3b00c3", "ab7cb1012a399acfbd86473c7240a91ff2fba7c3fd6d265ed5eb8265fd52eab4", [{0x1, 0x13, "6c7ae6082e926dbd0d7486b3bdd39f2f8b7ce9"}]}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x801}, 0x2000c401) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x8081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) kernel console output (not intermixed with test programs): 416][ T9114] loop5: detected capacity change from 0 to 512 [ 587.658516][ T9114] EXT4-fs: Ignoring removed mblk_io_submit option [ 587.697827][ T9129] netlink: 4 bytes leftover after parsing attributes in process `syz.9.756'. [ 587.747194][ T9114] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 587.796938][ T9129] netlink: 4 bytes leftover after parsing attributes in process `syz.9.756'. [ 587.879279][ T9114] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.750: bg 0: block 384: padding at end of block bitmap is not set [ 587.948533][ T9114] loop5: lost filesystem error report for type 5 error -117 [ 587.949789][ T9114] EXT4-fs (loop5): Remounting filesystem read-only [ 587.957543][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 587.957631][ C1] EXT4-fs (loop5): initial error at time 1778961755: ext4_validate_block_bitmap:441 [ 587.957749][ C1] EXT4-fs (loop5): last error at time 1778961755: ext4_validate_block_bitmap:441 [ 588.082149][ T9114] EXT4-fs (loop5): 1 truncate cleaned up [ 588.342009][ T9114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.703940][ T5680] usb 6-1: USB disconnect, device number 20 [ 589.719559][ T8379] udevd[8379]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 590.003163][ T5591] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 590.013857][ T5593] Bluetooth: hci0: command 0x040f tx timeout [ 590.144277][ T52] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.261182][ T95] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.395835][ T95] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.508582][ T95] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.863535][ T6426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.657310][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.9.759'. [ 593.865032][ T9171] fuse: Unknown parameter '0x0000000000000005' [ 594.994159][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.769'. [ 595.036180][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.769'. [ 595.249654][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 595.490874][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 595.535504][ T24] usb 6-1: config index 0 descriptor too short (expected 8032, got 96) [ 595.568260][ T24] usb 6-1: config 1 has too many interfaces: 191, using maximum allowed: 32 [ 595.595015][ T24] usb 6-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 595.634160][ T24] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 191 [ 595.649196][ T9187] tipc: Enabling of bearer rejected, already enabled [ 595.699170][ T24] usb 6-1: string descriptor 0 read error: -22 [ 595.713512][ T24] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 595.739193][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.053170][ T6617] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 596.281032][ T6617] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.348955][ T6617] usb 2-1: config 0 has no interfaces? [ 596.416560][ T6617] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 596.489288][ T24] usb 6-1: current rate 802816 is different from the runtime rate 48000 [ 596.495794][ T6617] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 596.540457][ T6617] usb 2-1: Product: syz [ 596.558949][ T6617] usb 2-1: Manufacturer: syz [ 596.669437][ T6617] usb 2-1: config 0 descriptor?? [ 596.854047][ T9184] loop5: detected capacity change from 0 to 512 [ 596.929208][ T9184] EXT4-fs: Ignoring removed mblk_io_submit option [ 597.020077][ T9184] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 597.035870][ T9190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.114918][ T9190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.142888][ T9184] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.770: bg 0: block 384: padding at end of block bitmap is not set [ 597.170871][ T9184] loop5: lost filesystem error report for type 5 error -117 [ 597.180249][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 597.194526][ C1] EXT4-fs (loop5): initial error at time 1778961764: ext4_validate_block_bitmap:441 [ 597.204225][ C1] EXT4-fs (loop5): last error at time 1778961764: ext4_validate_block_bitmap:441 [ 597.250031][ T9184] EXT4-fs (loop5): Remounting filesystem read-only [ 597.310621][ T9184] EXT4-fs (loop5): 1 truncate cleaned up [ 597.368232][ T9184] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.464885][ T5677] usb 2-1: USB disconnect, device number 32 [ 597.522596][ T24] usb 6-1: USB disconnect, device number 21 [ 598.634522][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.7.777'. [ 599.418837][ T6426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.207178][ T9218] fuse: Unknown parameter '0x0000000000000005' [ 600.515207][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.7.783'. [ 600.534793][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.7.783'. [ 601.608014][ T9235] tipc: Enabling of bearer rejected, already enabled [ 602.644718][ T5741] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 602.862667][ T5741] usb 2-1: unable to get BOS descriptor or descriptor too short [ 602.919461][ T5741] usb 2-1: config index 0 descriptor too short (expected 8032, got 96) [ 602.960890][ T5741] usb 2-1: config 1 has too many interfaces: 191, using maximum allowed: 32 [ 602.983271][ T5741] usb 2-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 603.041594][ T5741] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 191 [ 603.096737][ T5741] usb 2-1: string descriptor 0 read error: -22 [ 603.138885][ T5741] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 603.176559][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.327825][ T24] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 603.820063][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.9.793'. [ 604.439887][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.210793][ T24] usb 9-1: config 0 has no interfaces? [ 605.222146][ T24] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 605.232131][ T24] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 605.240520][ T24] usb 9-1: Product: syz [ 605.244864][ T24] usb 9-1: Manufacturer: syz [ 605.275006][ T24] usb 9-1: config 0 descriptor?? [ 605.662507][ T9249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.680457][ T5741] usb 2-1: current rate 802816 is different from the runtime rate 48000 [ 605.734155][ T9249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.034163][ T8054] usb 9-1: USB disconnect, device number 17 [ 606.049047][ T9243] loop1: detected capacity change from 0 to 512 [ 606.115743][ T9243] EXT4-fs: Ignoring removed mblk_io_submit option [ 606.152896][ T9243] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 606.319123][ T9243] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.789: bg 0: block 384: padding at end of block bitmap is not set [ 606.352223][ T9243] loop1: lost filesystem error report for type 5 error -117 [ 606.360273][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 606.374597][ C0] EXT4-fs (loop1): initial error at time 1778961774: ext4_validate_block_bitmap:441 [ 606.384369][ C0] EXT4-fs (loop1): last error at time 1778961774: ext4_validate_block_bitmap:441 [ 606.404692][ T9243] EXT4-fs (loop1): Remounting filesystem read-only [ 606.434169][ T9243] EXT4-fs (loop1): 1 truncate cleaned up [ 606.483152][ T9243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.680006][ T5741] usb 2-1: USB disconnect, device number 33 [ 607.049305][ T9272] fuse: Unknown parameter '0x0000000000000005' [ 607.058454][ T8054] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 607.240376][ T8054] usb 6-1: Using ep0 maxpacket: 32 [ 607.259328][ T8054] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 607.288372][ T8054] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 607.332441][ T8054] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.371894][ T8054] usb 6-1: config 0 descriptor?? [ 607.575959][ T5586] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.531720][ T9288] tipc: Started in network mode [ 608.567347][ T9288] tipc: Node identity ac14140f, cluster identity 4711 [ 608.609809][ T9288] tipc: New replicast peer: 255.255.255.255 [ 608.689283][ T9288] tipc: Enabled bearer , priority 10 [ 609.538396][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.7.805'. [ 609.751695][ T8054] tipc: Node number set to 2886997007 [ 609.977392][ T8054] usb 6-1: USB disconnect, device number 22 [ 610.810709][ T8054] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 611.021493][ T8054] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.066994][ T8054] usb 6-1: config 0 has no interfaces? [ 611.124202][ T8054] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 611.168722][ T8054] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 611.187961][ T8054] usb 6-1: Product: syz [ 611.216941][ T8054] usb 6-1: Manufacturer: syz [ 611.238264][ T9317] fuse: Unknown parameter 'group_id00000000000000000000' [ 611.252593][ T8054] usb 6-1: config 0 descriptor?? [ 611.557171][ T9311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.603714][ T9311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.762213][ T24] usb 6-1: USB disconnect, device number 23 [ 612.048753][ T9326] fuse: Unknown parameter '0x0000000000000005' [ 613.935796][ T5591] Bluetooth: hci0: command 0x040f tx timeout [ 613.942401][ T5593] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 615.195991][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.9.817'. [ 615.318712][ T9343] tipc: Enabling of bearer rejected, already enabled [ 616.033476][ T8054] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 616.251351][ T8054] usb 8-1: Using ep0 maxpacket: 32 [ 616.275413][ T8054] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 616.304432][ T8054] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.382618][ T8054] usb 8-1: config 0 descriptor?? [ 616.672996][ T8054] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 616.772949][ T8054] usb 8-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 616.813667][ T8054] usb 8-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 617.704774][ T9370] fuse: Unknown parameter 'group_id00000000000000000000' [ 618.340504][ T24] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 618.542183][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.582046][ T24] usb 10-1: config 0 has no interfaces? [ 618.603915][ T24] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 618.629979][ T24] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 618.649703][ T24] usb 10-1: Product: syz [ 618.667054][ T24] usb 10-1: Manufacturer: syz [ 618.719918][ T24] usb 10-1: config 0 descriptor?? [ 619.006869][ T9382] fuse: Unknown parameter 'fd0x0000000000000005' [ 619.051575][ T9376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.106281][ T9376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.238642][ T24] usb 10-1: USB disconnect, device number 10 [ 619.544031][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.8.832'. [ 620.007115][ T9396] tipc: Enabling of bearer rejected, already enabled [ 621.013282][ T5741] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 621.205498][ T5741] usb 6-1: Using ep0 maxpacket: 32 [ 621.247768][ T5741] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 621.275237][ T5741] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.319165][ T5741] usb 6-1: config 0 descriptor?? [ 621.643232][ T5741] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 621.910560][ T9416] fuse: Bad value for 'user_id' [ 621.953815][ T9416] fuse: Bad value for 'user_id' [ 623.000926][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.844'. [ 623.788826][ T9435] fuse: Unknown parameter 'fd0x0000000000000005' [ 624.044888][ T8390] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 624.251173][ T8390] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.306431][ T8390] usb 10-1: config 0 has no interfaces? [ 624.353558][ T8390] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 624.376873][ T8390] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 624.433143][ T8390] usb 10-1: Product: syz [ 624.445619][ T8390] usb 10-1: Manufacturer: syz [ 624.473719][ T8390] usb 10-1: config 0 descriptor?? [ 624.767866][ T9437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.837895][ T9437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.939872][ T9446] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.948475][ T9446] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.996307][ T6617] usb 10-1: USB disconnect, device number 11 [ 625.018848][ T9446] bridge0: entered allmulticast mode [ 625.888395][ T9461] fuse: Bad value for 'user_id' [ 625.926984][ T9461] fuse: Bad value for 'user_id' [ 626.181116][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.9.857'. [ 628.022478][ T9484] fuse: Unknown parameter 'fd0x0000000000000005' [ 629.051420][ T5677] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 629.270675][ T5677] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.299295][ T5677] usb 10-1: config 0 has no interfaces? [ 629.352484][ T5677] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 629.382767][ T5677] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 629.425315][ T5677] usb 10-1: Product: syz [ 629.449570][ T5677] usb 10-1: Manufacturer: syz [ 629.501136][ T5677] usb 10-1: config 0 descriptor?? [ 629.836451][ T9495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.911961][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.8.869'. [ 629.962443][ T9495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.109790][ T6617] usb 10-1: USB disconnect, device number 12 [ 630.237876][ T9505] fuse: Bad value for 'user_id' [ 630.288735][ T9505] fuse: Bad value for 'user_id' [ 631.211535][ T9515] tmpfs: Bad value for 'mpol' [ 632.576707][ T9530] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 632.588221][ T9530] UDF-fs: Scanning with blocksize 512 failed [ 632.626451][ T9530] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 632.666872][ T9530] UDF-fs: Scanning with blocksize 1024 failed [ 632.745837][ T9530] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 632.796856][ T9530] UDF-fs: Scanning with blocksize 2048 failed [ 632.854646][ T9530] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 632.884349][ T9530] UDF-fs: Scanning with blocksize 4096 failed [ 633.239384][ T9531] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.248127][ T9531] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.332986][ T9531] bridge0: entered allmulticast mode [ 634.015556][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.026718][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.683057][ T9549] netlink: 8 bytes leftover after parsing attributes in process `syz.7.883'. [ 636.168975][ T9560] fuse: Bad value for 'fd' [ 637.328376][ T9571] tmpfs: Bad value for 'mpol' [ 641.201304][ T5593] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 641.211590][ T5591] Bluetooth: hci0: command 0x040f tx timeout [ 642.525033][ T9593] netlink: 12 bytes leftover after parsing attributes in process `syz.8.897'. [ 642.763230][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.7.896'. [ 643.115464][ T9593] netlink: 12 bytes leftover after parsing attributes in process `syz.8.897'. [ 644.119861][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.8.902'. [ 644.158502][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.8.902'. [ 644.816781][ T9616] tmpfs: Bad value for 'mpol' [ 647.334592][ T9633] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.343155][ T9633] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.724843][ T5593] Bluetooth: hci0: command 0x040f tx timeout [ 648.732108][ T5591] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 649.078512][ T9633] bridge0: entered allmulticast mode [ 649.838843][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.8.910'. [ 650.723789][ T9649] netlink: 4 bytes leftover after parsing attributes in process `syz.7.914'. [ 650.786706][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.7.914'. [ 651.092358][ T9655] tmpfs: Bad value for 'mpol' [ 653.293211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 654.965456][ T5593] Bluetooth: hci0: command 0x040f tx timeout [ 654.972933][ T5591] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 656.400790][ T5677] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 656.490562][ T24] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 656.695972][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 656.738959][ T24] usb 2-1: config index 0 descriptor too short (expected 8032, got 96) [ 656.766822][ T24] usb 2-1: config 1 has too many interfaces: 191, using maximum allowed: 32 [ 656.821421][ T24] usb 2-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 656.869589][ T24] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 191 [ 656.952263][ T24] usb 2-1: string descriptor 0 read error: -22 [ 656.993206][ T24] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 657.054636][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.073025][ T24] usb 2-1: current rate 802816 is different from the runtime rate 48000 [ 658.087278][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.7.925'. [ 658.377100][ T9681] loop1: detected capacity change from 0 to 512 [ 658.454998][ T9681] EXT4-fs: Ignoring removed mblk_io_submit option [ 658.551328][ T9681] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 658.667425][ T9698] netlink: 4 bytes leftover after parsing attributes in process `syz.5.928'. [ 658.705251][ T9681] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.923: bg 0: block 384: padding at end of block bitmap is not set [ 658.811176][ T9681] loop1: lost filesystem error report for type 5 error -117 [ 658.822389][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 658.829193][ T9698] netlink: 4 bytes leftover after parsing attributes in process `syz.5.928'. [ 658.830078][ C1] EXT4-fs (loop1): initial error at time 1778961826: ext4_validate_block_bitmap:441 [ 658.854928][ C1] EXT4-fs (loop1): last error at time 1778961826: ext4_validate_block_bitmap:441 [ 658.865423][ T9681] EXT4-fs (loop1): Remounting filesystem read-only [ 658.896105][ T9681] EXT4-fs (loop1): 1 truncate cleaned up [ 658.967329][ T9681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 659.095330][ T8390] usb 2-1: USB disconnect, device number 34 [ 659.901719][ T9710] tmpfs: Bad value for 'mpol' [ 659.930560][ T5586] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.560444][ T5593] Bluetooth: hci0: command 0x040f tx timeout [ 662.567088][ T5591] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 664.776994][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.940'. [ 665.257121][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.8.941'. [ 665.309126][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.8.941'. [ 666.200482][ T8390] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 666.302659][ T9756] tmpfs: Bad value for 'mpol' [ 666.428165][ T8390] usb 9-1: unable to get BOS descriptor or descriptor too short [ 666.468733][ T8390] usb 9-1: config index 0 descriptor too short (expected 8032, got 96) [ 666.509173][ T8390] usb 9-1: config 1 has too many interfaces: 191, using maximum allowed: 32 [ 666.536300][ T8390] usb 9-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 666.598917][ T8390] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 191 [ 666.651480][ T8390] usb 9-1: string descriptor 0 read error: -22 [ 666.672768][ T8390] usb 9-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 666.698579][ T8390] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.509142][ T8390] usb 9-1: current rate 802816 is different from the runtime rate 48000 [ 667.821296][ T9752] loop8: detected capacity change from 0 to 512 [ 667.867825][ T9752] EXT4-fs: Ignoring removed mblk_io_submit option [ 667.971986][ T9752] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 668.150086][ T9752] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.944: bg 0: block 384: padding at end of block bitmap is not set [ 668.200807][ T9752] loop8: lost filesystem error report for type 5 error -117 [ 668.204211][ T9752] EXT4-fs (loop8): Remounting filesystem read-only [ 668.211946][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 668.212030][ C0] EXT4-fs (loop8): initial error at time 1778961835: ext4_validate_block_bitmap:441 [ 668.212149][ C0] EXT4-fs (loop8): last error at time 1778961835: ext4_validate_block_bitmap:441 [ 668.406177][ T9752] EXT4-fs (loop8): 1 truncate cleaned up [ 668.466485][ T9752] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.669695][ T8390] usb 9-1: USB disconnect, device number 18 [ 670.400881][ T5593] Bluetooth: hci0: command 0x040f tx timeout [ 670.407323][ T5591] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 671.139965][ T7221] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.504493][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.953'. [ 672.801261][ T8390] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 672.984459][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.8.954'. [ 673.009662][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.8.954'. [ 673.010867][ T8390] usb 2-1: Using ep0 maxpacket: 8 [ 673.091987][ T8390] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 673.143599][ T8390] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 673.223495][ T8390] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 673.252258][ T8390] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 673.307590][ T8390] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 673.342948][ T8390] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 673.436166][ T8390] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 673.458353][ T8390] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.745348][ T8390] usb 2-1: usb_control_msg returned -32 [ 673.779487][ T8390] usbtmc 2-1:16.0: can't read capabilities [ 674.125913][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 674.145799][ T9802] usbtmc 2-1:16.0: Unable to send data, error -71 [ 674.153384][ T9803] tmpfs: Bad value for 'mpol' [ 674.214575][ T9802] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 674.241081][ T8390] usb 2-1: USB disconnect, device number 35 [ 676.060711][ T8390] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 676.257205][ T8390] usb 9-1: unable to get BOS descriptor or descriptor too short [ 676.277207][ T8390] usb 9-1: config index 0 descriptor too short (expected 8032, got 96) [ 676.350888][ T8390] usb 9-1: config 1 has too many interfaces: 191, using maximum allowed: 32 [ 676.402551][ T8390] usb 9-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 676.444795][ T8390] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 191 [ 676.507567][ T8390] usb 9-1: string descriptor 0 read error: -22 [ 676.555449][ T8390] usb 9-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 676.594124][ T8390] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.381923][ T8390] usb 9-1: current rate 802816 is different from the runtime rate 48000 [ 679.053962][ T5593] Bluetooth: hci0: command 0x040f tx timeout [ 679.062533][ T5591] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 680.218004][ T5741] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 680.253218][ T8390] usb 9-1: USB disconnect, device number 19 [ 680.259983][ T5741] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 680.278031][ T8054] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 680.363094][ T8054] dvb_usb_az6027 8-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 680.424486][ T5741] usb 6-1: USB disconnect, device number 24 [ 680.462618][ T8054] usb 8-1: USB disconnect, device number 22 [ 680.745469][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.7.971'. [ 681.002785][ T9842] netlink: 12 bytes leftover after parsing attributes in process `syz.7.971'. [ 681.308164][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 681.493493][ T5680] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 681.595163][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.8.970'. [ 681.733091][ T5680] usb 10-1: Using ep0 maxpacket: 8 [ 681.754809][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.8.970'. [ 681.785922][ T9839] bond1: entered promiscuous mode [ 681.794342][ T5680] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 681.826743][ T5680] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 681.893366][ T5680] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 681.959911][ T5680] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 682.010697][ T5680] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 682.058804][ T5680] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 682.125975][ T5680] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 682.148115][ T5680] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.519529][ T5680] usb 10-1: usb_control_msg returned -32 [ 682.549008][ T5680] usbtmc 10-1:16.0: can't read capabilities [ 682.948852][ C1] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 682.959024][ T9864] usbtmc 10-1:16.0: Unable to send data, error -71 [ 684.386634][ T8054] usb 10-1: USB disconnect, device number 14 [ 685.113414][ T9882] block nbd5: not configured, cannot reconfigure [ 687.362497][ T5591] Bluetooth: hci0: command 0x040f tx timeout [ 687.369215][ T5593] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 689.175115][ T9897] netlink: 8 bytes leftover after parsing attributes in process `syz.7.985'. [ 689.303398][ T9901] netlink: 4 bytes leftover after parsing attributes in process `syz.9.987'. [ 689.414827][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.9.987'. [ 692.346650][ T9929] syzkaller0: entered promiscuous mode [ 692.355439][ T9929] syzkaller0: entered allmulticast mode [ 693.639916][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1000'. [ 693.869664][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'. [ 693.969058][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'. [ 694.852057][ T8054] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 695.044133][ T8054] usb 9-1: Using ep0 maxpacket: 16 [ 695.087820][ T8054] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.137361][ T8054] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 695.194516][ T8054] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.279441][ T8054] usb 9-1: config 0 descriptor?? [ 695.464818][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.474425][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.762180][ T8054] usbhid 9-1:0.0: can't add hid device: -71 [ 695.778161][ T8054] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 695.835481][ T8054] usb 9-1: USB disconnect, device number 20 [ 696.516637][ T9965] syzkaller0: entered promiscuous mode [ 696.552854][ T8054] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 696.578839][ T9965] syzkaller0: entered allmulticast mode [ 696.725832][ T8054] usb 6-1: Using ep0 maxpacket: 32 [ 696.768462][ T8054] usb 6-1: unable to get BOS descriptor or descriptor too short [ 696.798795][ T8054] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 696.841869][ T8054] usb 6-1: can't read configurations, error -71 [ 697.082991][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1012'. [ 697.137704][ T9974] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1012'. [ 697.376242][ T9974] geneve2: entered promiscuous mode [ 697.388229][ T9974] geneve2: entered allmulticast mode [ 697.900979][ T24] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 698.105294][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 698.200519][ T24] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 698.237975][ T24] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 698.312852][ T9986] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1017'. [ 698.323364][ T24] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 698.355243][ T24] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 698.389480][ T24] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 698.438191][ T24] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 698.502548][ T24] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 698.542987][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.917498][ T24] usb 10-1: usb_control_msg returned -32 [ 698.972396][ T24] usbtmc 10-1:16.0: can't read capabilities [ 699.328497][ C0] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 699.358093][ T9993] usbtmc 10-1:16.0: Unable to send data, error -71 [ 700.899077][ T8054] usb 10-1: USB disconnect, device number 15 [ 701.319443][T10004] tipc: Enabled bearer , priority 0 [ 701.922514][T10004] syzkaller0: entered promiscuous mode [ 701.961535][T10004] syzkaller0: entered allmulticast mode [ 702.043273][T10004] tipc: Resetting bearer [ 702.093824][T10003] tipc: Resetting bearer [ 702.297138][ T8054] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 702.481543][ T8054] usb 2-1: Using ep0 maxpacket: 32 [ 702.489958][T10003] tipc: Disabling bearer [ 702.542386][ T8054] usb 2-1: unable to get BOS descriptor or descriptor too short [ 702.586026][ T8054] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 702.619971][ T8054] usb 2-1: can't read configurations, error -71 [ 702.677593][T10018] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1029'. [ 704.464969][T10036] syzkaller0: entered promiscuous mode [ 704.496616][T10036] syzkaller0: entered allmulticast mode [ 705.795565][T10050] syzkaller0: entered promiscuous mode [ 705.811203][T10050] syzkaller0: entered allmulticast mode [ 707.017148][T10061] dummy0: mtu less than device minimum [ 707.323315][ T8054] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 707.512705][ T8054] usb 8-1: Using ep0 maxpacket: 32 [ 707.633233][ T8054] usb 8-1: unable to get BOS descriptor or descriptor too short [ 707.698336][ T8054] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 707.718064][ T8054] usb 8-1: can't read configurations, error -71 [ 712.241973][ T5591] Bluetooth: hci0: command 0x040f tx timeout [ 712.248264][ T5593] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 713.219746][ T24] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 713.533019][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 713.637812][ T24] usb 9-1: unable to get BOS descriptor or descriptor too short [ 713.680521][ T24] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 713.720813][ T24] usb 9-1: can't read configurations, error -71 [ 714.383217][T10130] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1066'. [ 718.403871][ T5593] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 718.410836][ T5591] Bluetooth: hci0: command 0x040f tx timeout [ 720.529682][T10181] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1080'. [ 721.535509][T10191] netlink: 'syz.8.1083': attribute type 1 has an invalid length. [ 722.287828][T10197] bond1: (slave gretap1): making interface the new active one [ 722.354833][T10197] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 722.851022][T10191] macvlan2: entered promiscuous mode [ 722.873742][T10191] macvlan2: entered allmulticast mode [ 722.934011][T10191] bond1: entered promiscuous mode [ 722.956180][T10191] gretap1: entered promiscuous mode [ 723.005085][T10191] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 723.054329][T10191] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 723.116932][T10191] bond1: left promiscuous mode [ 723.147278][T10191] gretap1: left promiscuous mode [ 723.267688][T10217] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1090'. [ 723.628503][T10227] syzkaller0: entered promiscuous mode [ 723.670592][T10227] syzkaller0: entered allmulticast mode [ 724.809599][T10239] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1095'. [ 724.874931][T10241] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1095'. [ 724.910906][ T5680] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 724.947451][T10245] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1097'. [ 725.109125][ T5680] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.154537][ T5680] usb 10-1: config 0 has no interfaces? [ 725.168671][ T5680] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 725.198892][ T5680] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 725.210938][ T5680] usb 10-1: Product: syz [ 725.223518][ T5680] usb 10-1: Manufacturer: syz [ 725.259959][ T5680] usb 10-1: config 0 descriptor?? [ 725.571681][T10237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.616086][T10237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.669632][ T5741] usb 10-1: USB disconnect, device number 16 [ 726.120495][ T8054] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 726.351575][ T8054] usb 8-1: Using ep0 maxpacket: 32 [ 726.399722][ T8054] usb 8-1: unable to get BOS descriptor or descriptor too short [ 726.460845][ T8054] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 726.497613][ T8054] usb 8-1: can't read configurations, error -71 [ 726.966560][T10265] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1104'. [ 727.455180][T10265] hsr_slave_1 (unregistering): left promiscuous mode [ 728.484502][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1111'. [ 728.544471][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1111'. [ 728.754259][T10288] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1112'. [ 729.831058][ T5680] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 730.052287][ T5680] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.115847][ T5680] usb 2-1: config 0 has no interfaces? [ 730.147117][ T5680] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 730.200314][ T5680] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 730.242127][ T5680] usb 2-1: Product: syz [ 730.268422][ T5680] usb 2-1: Manufacturer: syz [ 730.315017][ T5680] usb 2-1: config 0 descriptor?? [ 730.619142][T10296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.634528][T10299] syzkaller0: entered promiscuous mode [ 730.654583][T10299] syzkaller0: entered allmulticast mode [ 730.668061][T10296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.763838][ T5680] usb 2-1: USB disconnect, device number 38 [ 732.196080][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1128'. [ 732.291019][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1128'. [ 732.987385][T10345] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1130'. [ 735.133479][ T5741] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 735.378914][ T5741] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.433426][ T5741] usb 9-1: config 0 has no interfaces? [ 735.467289][ T5741] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 735.495787][ T5741] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 735.539630][ T5741] usb 9-1: Product: syz [ 735.580501][ T5741] usb 9-1: Manufacturer: syz [ 735.646893][ T5741] usb 9-1: config 0 descriptor?? [ 735.919243][T10366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.952433][T10366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.072240][ T5680] usb 9-1: USB disconnect, device number 23 [ 736.836640][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1143'. [ 736.878934][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1143'. [ 737.392226][T10388] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1146'. [ 739.388161][T10416] netlink: 'syz.7.1152': attribute type 4 has an invalid length. [ 740.579160][T10439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1158'. [ 740.745945][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1158'. [ 742.363420][T10448] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1161'. [ 742.641070][ T5593] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 742.648281][ T5593] Bluetooth: hci0: command 0x040f tx timeout [ 745.634844][T10484] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1173'. [ 746.504523][T10494] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1175'. [ 749.360854][ T5591] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 749.367351][ T5593] Bluetooth: hci0: command 0x040f tx timeout [ 752.459031][T10544] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1189'. [ 753.925041][T10567] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1194'. [ 755.567049][ T5227] veth0_vlan: left promiscuous mode [ 755.667239][ T5227] veth0_vlan: entered promiscuous mode [ 755.851811][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1197'. [ 755.916071][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1197'. [ 755.923692][ T5593] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 755.928405][ T5591] Bluetooth: hci0: command 0x040f tx timeout [ 756.420669][T10584] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 756.487949][T10584] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 756.893119][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.904945][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 756.952231][T10595] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1203'. [ 757.770812][ T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 757.977517][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 758.013545][ T24] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 758.065282][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 758.126094][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 758.183655][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 758.246587][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 758.299176][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 758.385771][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 758.417481][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.742860][ T24] usb 6-1: usb_control_msg returned -32 [ 758.785860][ T24] usbtmc 6-1:16.0: can't read capabilities [ 759.586861][ T24] usb 6-1: USB disconnect, device number 27 [ 760.961929][ T5591] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 760.968986][T10634] Bluetooth: hci0: command 0x040f tx timeout [ 761.756831][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88804f783a00: rx timeout, send abort [ 762.257810][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88804f731200: rx timeout, send abort [ 762.266894][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88804f783a00: abort rx timeout. Force session deactivation [ 762.766581][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88804f731200: abort rx timeout. Force session deactivation [ 763.996931][ T5680] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 764.221773][ T5680] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.268595][ T5680] usb 2-1: config 0 has no interfaces? [ 764.943903][ T5680] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 764.977555][ T5680] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 765.002190][ T5680] usb 2-1: Product: syz [ 765.014383][ T5680] usb 2-1: Manufacturer: syz [ 765.119615][ T5680] usb 2-1: config 0 descriptor?? [ 765.621892][ T5680] usb 2-1: USB disconnect, device number 39 [ 766.320619][ T5591] Bluetooth: hci0: command 0x040f tx timeout [ 766.327084][ T5593] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 768.513128][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1233'. [ 771.841354][ T5593] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 771.848306][ T5591] Bluetooth: hci0: command 0x040f tx timeout [ 773.472812][ T8390] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 776.934012][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1255'. [ 779.361045][ T5593] Bluetooth: hci0: command 0x040f tx timeout [ 779.367421][ T5591] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 785.682392][ T5593] Bluetooth: hci0: command 0x040f tx timeout [ 785.688895][ T5591] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 789.076507][ T5679] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 789.266155][ T5679] usb 6-1: Using ep0 maxpacket: 32 [ 789.353323][ T5679] usb 6-1: unable to get BOS descriptor or descriptor too short [ 789.406967][ T5679] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 789.446915][ T5679] usb 6-1: can't read configurations, error -71 [ 791.162753][ T5677] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 791.311859][ T5677] usb 2-1: device descriptor read/64, error -71 [ 791.961896][ T5677] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 792.132942][ T5677] usb 2-1: device descriptor read/64, error -71 [ 792.275931][ T5677] usb usb2-port1: attempt power cycle [ 792.463607][T10929] fuse: Bad value for 'fd' [ 792.560384][ T5593] Bluetooth: hci0: command 0x040f tx timeout [ 792.566946][ T5591] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 792.641720][ T5677] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 792.763398][ T5677] usb 2-1: device descriptor read/8, error -71 [ 793.010555][ T5677] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 793.076288][ T5677] usb 2-1: device descriptor read/8, error -71 [ 793.203624][ T5677] usb usb2-port1: unable to enumerate USB device [ 793.506438][ T5677] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 793.710719][ T5677] usb 10-1: Using ep0 maxpacket: 32 [ 793.745523][ T5677] usb 10-1: unable to get BOS descriptor or descriptor too short [ 793.775978][ T5677] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 793.806699][ T5677] usb 10-1: can't read configurations, error -71 [ 796.312243][T10971] fuse: Bad value for 'fd' [ 796.481762][ T5593] Bluetooth: hci0: command 0x040f tx timeout [ 796.488067][ T5591] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 797.314397][ T8390] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 797.493219][ T8390] usb 6-1: Using ep0 maxpacket: 32 [ 797.578775][ T8390] usb 6-1: unable to get BOS descriptor or descriptor too short [ 797.652164][ T8390] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 797.694505][ T8390] usb 6-1: can't read configurations, error -71 [ 800.090908][T11018] tc action pedit offset must be on 32 bit boundaries [ 800.097951][T11018] tc action pedit offset must be on 32 bit boundaries [ 800.105029][T11018] tc action pedit offset must be on 32 bit boundaries [ 800.112020][T11018] tc action pedit offset must be on 32 bit boundaries [ 800.119036][T11018] tc action pedit offset must be on 32 bit boundaries [ 800.126225][T11018] tc action pedit offset must be on 32 bit boundaries [ 800.133262][T11018] tc action pedit offset must be on 32 bit boundaries [ 800.140423][T11018] tc action pedit offset must be on 32 bit boundaries [ 800.147317][T11018] tc action pedit offset must be on 32 bit boundaries [ 800.154273][T11018] tc action pedit offset must be on 32 bit boundaries [ 800.161250][T11018] 0: reclassify loop, rule prio 0, protocol 800 [ 801.930790][ T8390] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 802.140595][ T8390] usb 6-1: Using ep0 maxpacket: 32 [ 802.207644][ T8390] usb 6-1: unable to get BOS descriptor or descriptor too short [ 802.260039][ T8390] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 802.295474][ T8390] usb 6-1: can't read configurations, error -71 [ 802.372215][T11049] syzkaller0: entered promiscuous mode [ 802.377979][T11049] syzkaller0: entered allmulticast mode [ 802.931311][T11055] fuse: Bad value for 'fd' [ 805.220619][ T5593] Bluetooth: hci0: command 0x040f tx timeout [ 805.283984][ T5591] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 810.496421][T11085] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1346'. [ 812.111571][T11105] fuse: Bad value for 'fd' [ 812.243562][T11106] syzkaller0: entered promiscuous mode [ 812.270607][T11106] syzkaller0: entered allmulticast mode [ 812.321577][ T5679] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 812.490843][ T5679] usb 10-1: Using ep0 maxpacket: 32 [ 812.540746][ T5679] usb 10-1: unable to get BOS descriptor or descriptor too short [ 812.598852][ T5679] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 812.638787][ T5679] usb 10-1: can't read configurations, error -71 [ 816.781772][ T8390] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 818.405962][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.412939][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 820.404251][T11149] syzkaller0: entered promiscuous mode [ 820.454697][T11149] syzkaller0: entered allmulticast mode [ 820.913928][T11155] syzkaller0: entered promiscuous mode [ 820.988115][T11155] syzkaller0: entered allmulticast mode [ 821.729176][ T5677] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 822.323759][ T5677] usb 10-1: Using ep0 maxpacket: 16 [ 824.295873][ T5677] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 824.588598][ T5677] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 824.967011][ T5677] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 825.187313][ T5677] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.272074][ T5677] usb 10-1: config 0 descriptor?? [ 826.320713][ T5677] usb 10-1: can't set config #0, error -71 [ 826.333486][ T5677] usb 10-1: USB disconnect, device number 21 [ 828.569960][T11202] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1386'. [ 829.171747][ T8390] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 829.241364][T11201] syzkaller0: entered promiscuous mode [ 829.247492][T11201] syzkaller0: entered allmulticast mode [ 829.373690][ T8390] usb 8-1: Using ep0 maxpacket: 16 [ 829.409617][ T8390] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.459015][ T8390] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 829.494820][ T8390] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 829.518800][ T8390] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.574534][ T8390] usb 8-1: config 0 descriptor?? [ 829.654413][ T8390] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 835.499103][ T8390] usb 8-1: USB disconnect, device number 29 [ 837.488137][T11269] syzkaller0: entered promiscuous mode [ 837.573756][T11269] syzkaller0: entered allmulticast mode [ 837.658231][ T5677] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 837.880913][ T5677] usb 6-1: Using ep0 maxpacket: 16 [ 837.928778][ T5677] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.968446][ T5677] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 838.029393][ T5677] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 838.057974][ T5677] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.108723][ T5677] usb 6-1: config 0 descriptor?? [ 838.158627][ T5677] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 844.158759][ T5741] usb 6-1: USB disconnect, device number 34 [ 846.155138][T11321] syzkaller0: entered promiscuous mode [ 846.178773][T11321] syzkaller0: entered allmulticast mode [ 851.437119][T11324] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 851.790654][ T5677] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 851.955722][ T5677] usb 6-1: no configurations [ 851.988241][ T5677] usb 6-1: can't read configurations, error -22 [ 852.160780][ T5677] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 852.335980][ T5677] usb 6-1: no configurations [ 852.348068][ T5677] usb 6-1: can't read configurations, error -22 [ 852.384081][ T5677] usb usb6-port1: attempt power cycle [ 852.743114][ T5677] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 852.809491][ T5677] usb 6-1: no configurations [ 852.830725][ T5677] usb 6-1: can't read configurations, error -22 [ 852.990880][ T5677] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 853.046397][ T5677] usb 6-1: no configurations [ 853.080371][ T5677] usb 6-1: can't read configurations, error -22 [ 853.110071][ T5677] usb usb6-port1: unable to enumerate USB device [ 853.386269][T11361] syzkaller0: entered promiscuous mode [ 853.415906][T11361] syzkaller0: entered allmulticast mode [ 862.020627][ T8390] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 862.204891][ T8390] usb 10-1: no configurations [ 862.222478][ T8390] usb 10-1: can't read configurations, error -22 [ 862.395571][ T8390] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 862.584271][ T8390] usb 10-1: no configurations [ 862.610970][ T8390] usb 10-1: can't read configurations, error -22 [ 862.634601][ T8390] usb usb10-port1: attempt power cycle [ 863.022144][ T8390] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 863.097983][ T8390] usb 10-1: no configurations [ 863.129008][ T8390] usb 10-1: can't read configurations, error -22 [ 863.316269][ T8390] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 863.354792][ T8390] usb 10-1: no configurations [ 863.369371][ T8390] usb 10-1: can't read configurations, error -22 [ 863.398077][ T8390] usb usb10-port1: unable to enumerate USB device [ 868.441482][ T5677] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 868.475739][T11507] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1470'. [ 868.670746][ T5677] usb 2-1: no configurations [ 868.685739][ T5677] usb 2-1: can't read configurations, error -22 [ 868.861168][ T5677] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 869.058633][ T5677] usb 2-1: no configurations [ 869.093341][ T5677] usb 2-1: can't read configurations, error -22 [ 869.140008][ T5677] usb usb2-port1: attempt power cycle [ 869.544976][ T5677] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 869.628174][ T5677] usb 2-1: no configurations [ 869.676198][ T5677] usb 2-1: can't read configurations, error -22 [ 869.861497][ T5677] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 869.925218][ T5677] usb 2-1: no configurations [ 869.950077][ T5677] usb 2-1: can't read configurations, error -22 [ 869.975386][ T5677] usb usb2-port1: unable to enumerate USB device [ 870.499645][T11535] tipc: Enabled bearer , priority 0 [ 870.649034][T11532] tipc: Disabling bearer [ 872.826715][T11566] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1484'. [ 873.207576][T11575] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1486'. [ 874.964176][ T5677] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 875.078827][T11592] tipc: Enabled bearer , priority 0 [ 875.136378][ T5677] usb 8-1: no configurations [ 875.144696][ T5677] usb 8-1: can't read configurations, error -22 [ 875.217786][T11587] tipc: Disabling bearer [ 875.300506][ T5677] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 875.493008][ T5677] usb 8-1: no configurations [ 875.513533][ T5677] usb 8-1: can't read configurations, error -22 [ 875.541434][ T5677] usb usb8-port1: attempt power cycle [ 875.831737][T11605] syzkaller0: entered promiscuous mode [ 875.863050][T11605] syzkaller0: entered allmulticast mode [ 875.915323][ T5677] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 875.979177][ T5677] usb 8-1: no configurations [ 875.999419][ T5677] usb 8-1: can't read configurations, error -22 [ 876.182528][ T5677] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 876.248162][ T5677] usb 8-1: no configurations [ 876.276426][ T5677] usb 8-1: can't read configurations, error -22 [ 876.299526][ T5677] usb usb8-port1: unable to enumerate USB device [ 876.849300][T11621] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1500'. [ 877.717884][T11629] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1502'. [ 878.925665][T11643] tipc: Enabled bearer , priority 0 [ 879.031548][T11638] tipc: Disabling bearer [ 879.770632][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.777250][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 880.047596][T11657] syzkaller0: entered promiscuous mode [ 880.053465][T11657] syzkaller0: entered allmulticast mode [ 881.571919][ T8390] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 881.758841][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1520'. [ 881.779158][ T8390] usb 10-1: no configurations [ 881.813276][ T8390] usb 10-1: can't read configurations, error -22 [ 882.004327][ T8390] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 882.242687][ T8390] usb 10-1: no configurations [ 882.264480][ T8390] usb 10-1: can't read configurations, error -22 [ 882.321053][ T8390] usb usb10-port1: attempt power cycle [ 882.513637][T11690] tipc: Enabled bearer , priority 0 [ 882.594212][T11689] tipc: Disabling bearer [ 882.720541][ T8390] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 882.771988][ T8390] usb 10-1: no configurations [ 882.791421][ T8390] usb 10-1: can't read configurations, error -22 [ 882.961487][ T8390] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 883.006736][ T8390] usb 10-1: no configurations [ 883.031016][ T8390] usb 10-1: can't read configurations, error -22 [ 883.054895][ T8390] usb usb10-port1: unable to enumerate USB device [ 883.541912][T11701] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1526'. [ 884.384179][T11711] syzkaller0: entered promiscuous mode [ 884.425096][T11711] syzkaller0: entered allmulticast mode [ 885.458239][T11728] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1534'. [ 885.929057][T11734] tipc: Enabled bearer , priority 0 [ 886.504879][T11727] tipc: Disabling bearer [ 887.781994][ T5677] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 888.017316][ T5677] usb 10-1: no configurations [ 888.035083][ T5677] usb 10-1: can't read configurations, error -22 [ 888.192360][ T5677] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 888.411182][ T5677] usb 10-1: no configurations [ 888.426601][ T5677] usb 10-1: can't read configurations, error -22 [ 888.461056][ T5677] usb usb10-port1: attempt power cycle [ 888.855322][ T5677] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 888.887058][T11770] syzkaller0: entered promiscuous mode [ 888.924681][ T5677] usb 10-1: no configurations [ 888.931839][T11770] syzkaller0: entered allmulticast mode [ 888.939572][ T5677] usb 10-1: can't read configurations, error -22 [ 889.093976][ T5677] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 889.169770][ T5677] usb 10-1: no configurations [ 889.183012][ T5677] usb 10-1: can't read configurations, error -22 [ 889.206143][ T5677] usb usb10-port1: unable to enumerate USB device [ 890.028654][T11793] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1551'. [ 890.071426][T11794] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1552'. [ 891.336241][T11801] syzkaller0: entered promiscuous mode [ 891.357041][T11801] syzkaller0: entered allmulticast mode [ 894.351129][T11845] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1564'. [ 894.640941][ T5593] Bluetooth: hci0: command 0x040f tx timeout [ 894.644708][ T5591] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 895.475720][ T8390] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 895.550620][ T5677] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 895.688943][ T8390] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 895.716047][ T8390] usb 8-1: can't read configurations, error -61 [ 895.745334][ T5677] usb 6-1: Using ep0 maxpacket: 16 [ 895.807584][ T5677] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.847420][ T5677] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.862996][ T8390] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 895.887840][ T5677] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 895.924097][ T5677] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.958161][ T5677] usb 6-1: config 0 descriptor?? [ 896.090541][ T8390] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 896.113985][ T8390] usb 8-1: can't read configurations, error -61 [ 896.140087][ T8390] usb usb8-port1: attempt power cycle [ 896.483006][ T5677] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 896.527028][T11864] syzkaller0: entered promiscuous mode [ 896.544222][ T8390] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 896.563243][T11864] syzkaller0: entered allmulticast mode [ 896.634921][ T8390] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 896.679195][ T8390] usb 8-1: can't read configurations, error -61 [ 896.743483][ T5677] usb 6-1: USB disconnect, device number 39 [ 896.840932][ T8390] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 896.932932][ T8390] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 896.959635][ T8390] usb 8-1: can't read configurations, error -61 [ 896.986693][ T8390] usb usb8-port1: unable to enumerate USB device [ 897.782425][T11872] syzkaller0: entered promiscuous mode [ 897.793153][T11872] syzkaller0: entered allmulticast mode [ 898.749921][T11882] syzkaller0: entered promiscuous mode [ 898.795357][T11882] syzkaller0: entered allmulticast mode [ 899.178883][T11893] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1578'. [ 901.182366][ T5741] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 901.411057][ T5741] usb 2-1: Using ep0 maxpacket: 16 [ 901.449846][T11910] syzkaller0: entered promiscuous mode [ 901.472276][ T5741] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.486471][T11910] syzkaller0: entered allmulticast mode [ 901.536663][ T5741] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.576138][ T5741] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 901.601875][ T5741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.659824][ T5741] usb 2-1: config 0 descriptor?? [ 901.760800][T10634] Bluetooth: hci0: command 0x040f tx timeout [ 901.767462][ T5591] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 901.852501][ T24] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 902.069050][ T24] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 902.099203][ T24] usb 9-1: can't read configurations, error -61 [ 902.134678][ T5741] usbhid 2-1:0.0: can't add hid device: -71 [ 902.157585][ T5741] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 902.217592][ T5741] usb 2-1: USB disconnect, device number 48 [ 902.243097][ T24] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 902.478373][ T24] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 902.525351][ T24] usb 9-1: can't read configurations, error -61 [ 902.570023][ T24] usb usb9-port1: attempt power cycle [ 902.930969][ T24] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 902.994773][ T24] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 903.028751][ T24] usb 9-1: can't read configurations, error -61 [ 903.210468][ T24] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 903.265362][T11925] syzkaller0: entered promiscuous mode [ 903.291638][ T24] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 903.319527][T11925] syzkaller0: entered allmulticast mode [ 903.328226][ T24] usb 9-1: can't read configurations, error -61 [ 903.365746][ T24] usb usb9-port1: unable to enumerate USB device [ 903.420922][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1592'. [ 904.064085][T11937] fuse: Bad value for 'group_id' [ 904.103117][T11937] fuse: Bad value for 'group_id' [ 904.334452][T11940] syzkaller0: entered promiscuous mode [ 904.353700][T11940] syzkaller0: entered allmulticast mode [ 905.770719][ T24] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 905.875860][T11953] syzkaller0: entered promiscuous mode [ 905.888607][T11953] syzkaller0: entered allmulticast mode [ 905.950566][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 905.983304][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.027661][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 906.074625][ T24] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 906.132591][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.195492][ T24] usb 10-1: config 0 descriptor?? [ 906.681042][ T24] usbhid 10-1:0.0: can't add hid device: -71 [ 906.707417][ T24] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 906.768192][ T24] usb 10-1: USB disconnect, device number 34 [ 907.071015][T11966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1604'. [ 907.521733][ T5593] Bluetooth: hci0: command 0x040f tx timeout [ 907.528305][ T5591] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 907.952779][ T5741] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 908.158700][ T5741] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 908.198292][T11976] syzkaller0: entered promiscuous mode [ 908.216332][ T5741] usb 10-1: can't read configurations, error -61 [ 908.241273][T11976] syzkaller0: entered allmulticast mode [ 908.377797][ T5741] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 908.610511][ T5741] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 908.631098][ T5741] usb 10-1: can't read configurations, error -61 [ 908.658437][ T5741] usb usb10-port1: attempt power cycle [ 909.050727][ T5741] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 909.103784][ T5741] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 909.139374][ T5741] usb 10-1: can't read configurations, error -61 [ 909.221230][T11987] syzkaller0: entered promiscuous mode [ 909.248623][T11987] syzkaller0: entered allmulticast mode [ 909.302516][ T5741] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 909.387909][ T5741] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 909.429677][ T5741] usb 10-1: can't read configurations, error -61 [ 909.464466][ T5741] usb usb10-port1: unable to enumerate USB device [ 910.075548][T11999] fuse: Bad value for 'group_id' [ 910.104416][T11999] fuse: Bad value for 'group_id' [ 911.429234][T12011] syzkaller0: entered promiscuous mode [ 911.461134][T12011] syzkaller0: entered allmulticast mode [ 911.697429][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1617'. [ 911.872579][ T24] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 912.086611][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 912.116763][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.179271][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.206482][ T24] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 912.248070][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.299953][ T24] usb 8-1: config 0 descriptor?? [ 912.800655][ T24] usbhid 8-1:0.0: can't add hid device: -71 [ 912.831199][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 912.909380][ T24] usb 8-1: USB disconnect, device number 38 [ 913.176048][T12027] syzkaller0: entered promiscuous mode [ 913.212268][T12027] syzkaller0: entered allmulticast mode [ 914.201644][T12032] syzkaller0: entered promiscuous mode [ 914.228693][T12032] syzkaller0: entered allmulticast mode [ 914.961467][ T5591] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 914.968181][ T5593] Bluetooth: hci0: command 0x040f tx timeout [ 915.451234][ T5741] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 915.644533][ T5741] usb 10-1: config 0 has no interfaces? [ 915.681237][ T5741] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 915.763362][ T5741] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 915.795418][ T5741] usb 10-1: Product: syz [ 915.813911][ T5741] usb 10-1: Manufacturer: syz [ 915.877125][ T5741] usb 10-1: config 0 descriptor?? [ 916.162661][T12052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.208522][T12052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.325764][ T24] usb 10-1: USB disconnect, device number 39 [ 917.087850][T12068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1631'. [ 917.798695][T12070] syzkaller0: entered promiscuous mode [ 917.820417][T12070] syzkaller0: entered allmulticast mode [ 918.260548][ T5741] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 918.450921][ T5741] usb 6-1: Using ep0 maxpacket: 16 [ 918.452987][T12082] syzkaller0: entered promiscuous mode [ 918.463112][T12082] syzkaller0: entered allmulticast mode [ 918.486635][ T5741] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.543873][ T5741] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.578823][ T5741] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 918.631356][ T5741] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.692874][ T5741] usb 6-1: config 0 descriptor?? [ 919.181288][ T5741] usbhid 6-1:0.0: can't add hid device: -71 [ 919.230450][ T5741] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 919.285202][ T5741] usb 6-1: USB disconnect, device number 40 [ 919.914904][T12096] syzkaller0: entered promiscuous mode [ 919.924258][T12096] syzkaller0: entered allmulticast mode [ 920.927624][ T24] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 921.138965][ T24] usb 8-1: config 0 has no interfaces? [ 921.191464][ T24] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 921.267172][ T24] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 921.321300][ T24] usb 8-1: Product: syz [ 921.342346][ T24] usb 8-1: Manufacturer: syz [ 921.526861][ T24] usb 8-1: config 0 descriptor?? [ 922.068625][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1645'. [ 922.459397][T12113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.493334][T12113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.831840][ T5741] usb 8-1: USB disconnect, device number 39 [ 923.209240][T12126] syzkaller0: entered promiscuous mode [ 923.248406][T12126] syzkaller0: entered allmulticast mode [ 923.326733][T12133] fuse: Bad value for 'group_id' [ 923.332602][T12133] fuse: Bad value for 'group_id' [ 924.720661][ T5593] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 924.720875][ T5591] Bluetooth: hci0: command 0x040f tx timeout [ 924.785341][T12139] syzkaller0: entered promiscuous mode [ 924.793645][T12139] syzkaller0: entered allmulticast mode [ 924.878196][ T5741] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 925.053990][ T5741] usb 6-1: Using ep0 maxpacket: 16 [ 925.098335][ T5741] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.141448][ T5741] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.201139][ T5741] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 925.241538][ T5741] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.288047][ T5741] usb 6-1: config 0 descriptor?? [ 925.752103][T12154] syzkaller0: entered promiscuous mode [ 925.760990][ T5741] usbhid 6-1:0.0: can't add hid device: -71 [ 925.767852][T12154] syzkaller0: entered allmulticast mode [ 925.783780][ T5741] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 925.830543][ T5741] usb 6-1: USB disconnect, device number 41 [ 927.658639][T12173] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1658'. [ 929.045069][ T24] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 929.227246][ T24] usb 6-1: config 0 has no interfaces? [ 929.265666][ T24] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 929.304191][ T24] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 929.338704][ T24] usb 6-1: Product: syz [ 929.371640][ T24] usb 6-1: Manufacturer: syz [ 929.406039][ T24] usb 6-1: config 0 descriptor?? [ 929.709799][T12185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.786625][T12185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.813129][T12201] fuse: Bad value for 'group_id' [ 929.838756][T12201] fuse: Bad value for 'group_id' [ 930.071476][ T24] usb 6-1: USB disconnect, device number 42 [ 931.552102][T12213] syzkaller0: entered promiscuous mode [ 931.566031][T12213] syzkaller0: entered allmulticast mode [ 932.349612][T12230] syzkaller0: entered promiscuous mode [ 932.355790][T12230] syzkaller0: entered allmulticast mode [ 933.450922][ T5591] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 933.465111][ T5591] Bluetooth: hci0: command 0x040f tx timeout [ 933.573719][T12245] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1673'. [ 935.304785][T12258] fuse: Bad value for 'group_id' [ 935.323365][T12258] fuse: Bad value for 'group_id' [ 935.765788][T12257] syzkaller0: entered promiscuous mode [ 935.783506][T12257] syzkaller0: entered allmulticast mode [ 935.935477][ T8390] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 936.134534][ T8390] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 936.157932][ T8390] usb 10-1: config 0 has no interfaces? [ 936.183311][ T8390] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 936.230054][ T8390] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 936.271654][ T8390] usb 10-1: Product: syz [ 936.291309][ T8390] usb 10-1: Manufacturer: syz [ 936.320736][ T8390] usb 10-1: config 0 descriptor?? [ 936.682394][ T8390] usb 10-1: USB disconnect, device number 40 [ 937.129877][T12268] syzkaller0: entered promiscuous mode [ 937.137434][T12268] syzkaller0: entered allmulticast mode [ 938.055808][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1686'. [ 939.039119][T12282] syzkaller0: entered promiscuous mode [ 939.092491][T12282] syzkaller0: entered allmulticast mode [ 941.210573][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.217182][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.417697][T12318] syzkaller0: entered promiscuous mode [ 941.488934][T12318] syzkaller0: entered allmulticast mode [ 941.505795][ T8390] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 941.702851][ T8390] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 941.746916][ T8390] usb 6-1: config 0 has no interfaces? [ 941.798457][ T8390] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 941.824776][ T8390] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 941.848659][ T8390] usb 6-1: Product: syz [ 941.875649][ T8390] usb 6-1: Manufacturer: syz [ 941.927175][ T8390] usb 6-1: config 0 descriptor?? [ 942.350625][ T24] usb 6-1: USB disconnect, device number 43 [ 942.490519][ T5593] Bluetooth: hci0: command 0x040f tx timeout [ 942.497418][ T5591] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 944.227534][T12347] syzkaller0: entered promiscuous mode [ 944.239357][T12347] syzkaller0: entered allmulticast mode [ 945.718446][T12366] syzkaller0: entered promiscuous mode [ 945.731080][T12366] syzkaller0: entered allmulticast mode [ 946.231572][ T24] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 946.440057][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.502200][ T24] usb 9-1: config 0 has no interfaces? [ 946.541826][ T24] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 946.590514][ T24] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 946.626269][ T24] usb 9-1: Product: syz [ 946.641235][ T24] usb 9-1: Manufacturer: syz [ 946.701909][ T24] usb 9-1: config 0 descriptor?? [ 947.047297][T12379] syzkaller0: entered promiscuous mode [ 947.074449][T12379] syzkaller0: entered allmulticast mode [ 947.127338][ T24] usb 9-1: USB disconnect, device number 28 [ 949.282637][ T5593] Bluetooth: hci0: command 0x040f tx timeout [ 949.289202][ T5591] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 949.339893][T12408] syzkaller0: entered promiscuous mode [ 949.346263][T12408] syzkaller0: entered allmulticast mode [ 950.596816][T12423] syzkaller0: entered promiscuous mode [ 950.613836][T12423] syzkaller0: entered allmulticast mode [ 951.803095][ T8390] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 952.021978][ T8390] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 952.066222][ T8390] usb 9-1: config 0 has no interfaces? [ 952.108196][ T8390] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 952.150732][ T8390] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 952.204390][ T8390] usb 9-1: Product: syz [ 952.225333][ T8390] usb 9-1: Manufacturer: syz [ 952.261629][ T8390] usb 9-1: config 0 descriptor?? [ 952.549843][T12448] fuse: Unknown parameter 'grou00000000000000000000' [ 952.566879][T12435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.638244][T12435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.688282][T12440] syzkaller0: entered promiscuous mode [ 952.734469][T12440] syzkaller0: entered allmulticast mode [ 952.833620][ T8390] usb 9-1: USB disconnect, device number 29 [ 956.946693][T12509] fuse: Unknown parameter 'grou00000000000000000000' [ 957.619798][T12517] binder_alloc: 12514: binder_alloc_buf, no vma [ 957.920578][ T5593] Bluetooth: hci0: command 0x040f tx timeout [ 957.929052][ T5591] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 958.463842][T12526] fuse: Bad value for 'fd' [ 958.469725][T12527] loop5: detected capacity change from 0 to 128 [ 958.523418][ T24] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 958.526758][T12527] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 958.628479][T12527] hpfs: filesystem error: improperly stopped [ 958.667101][T12527] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 958.698927][T12527] hpfs: You really don't want any checks? You are crazy... [ 958.739193][T12527] hpfs: hpfs_map_sector(): read error [ 958.746223][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 958.769479][T12527] hpfs: code page support is disabled [ 958.799299][ T24] usb 10-1: config 0 has no interfaces? [ 958.814975][T12527] hpfs: hpfs_map_4sectors(): unaligned read [ 958.839185][ T24] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 958.860753][T12527] hpfs: hpfs_map_4sectors(): unaligned read [ 958.893494][ T24] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 958.898053][T12527] hpfs: filesystem error: unable to find root dir [ 958.932596][ T24] usb 10-1: Product: syz [ 958.957024][ T24] usb 10-1: Manufacturer: syz [ 958.985403][ T24] usb 10-1: config 0 descriptor?? [ 959.304805][T12523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.356417][T12523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.171183][ T8390] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 960.404351][ T8390] usb 2-1: unable to get BOS descriptor or descriptor too short [ 960.444854][ T8390] usb 2-1: config index 0 descriptor too short (expected 8032, got 96) [ 960.482519][ T8390] usb 2-1: config 1 has too many interfaces: 191, using maximum allowed: 32 [ 960.519055][ T8390] usb 2-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 960.520857][ T24] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 960.555977][ T8390] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 191 [ 960.617797][ T8390] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 960.634907][ T8390] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.666534][ T8390] usb 2-1: Product: syz [ 960.673612][ T8390] usb 2-1: Manufacturer: syz [ 960.678998][ T8390] usb 2-1: SerialNumber: syz [ 960.711309][T12546] fuse: Unknown parameter 'grou00000000000000000000' [ 960.731716][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 960.752332][ T24] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 960.762942][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 960.775751][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 960.806558][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 26232, setting to 64 [ 960.819174][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 960.834289][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 960.850070][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.927098][ T24] usbtmc 6-1:16.0: bulk endpoints not found [ 961.073904][T12540] loop1: detected capacity change from 0 to 512 [ 961.087012][T12540] EXT4-fs: Ignoring removed mblk_io_submit option [ 961.112874][T12540] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 961.183146][T12540] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1754: bg 0: block 384: padding at end of block bitmap is not set [ 961.250761][T12540] loop1: lost filesystem error report for type 5 error -117 [ 961.260254][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 961.274663][ C0] EXT4-fs (loop1): initial error at time 1778962129: ext4_validate_block_bitmap:441 [ 961.284579][ C0] EXT4-fs (loop1): last error at time 1778962129: ext4_validate_block_bitmap:441 [ 961.344424][T12540] EXT4-fs (loop1): Remounting filesystem read-only [ 961.433240][T12540] EXT4-fs (loop1): 1 truncate cleaned up [ 961.487339][T12540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 961.614879][ T24] usb 10-1: USB disconnect, device number 41 [ 961.661102][ T8390] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 962.086448][T12556] binder_alloc: 12554: binder_alloc_buf, no vma [ 962.405340][ T8390] usb 2-1: USB disconnect, device number 49 [ 962.522552][ T5586] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.114896][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 963.347458][T12570] loop1: detected capacity change from 0 to 128 [ 963.492509][T12570] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 963.542261][T12570] hpfs: filesystem error: improperly stopped [ 963.603568][T12570] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 963.639172][T12570] hpfs: You really don't want any checks? You are crazy... [ 963.680049][ T5741] usb 6-1: USB disconnect, device number 44 [ 963.684299][T12570] hpfs: hpfs_map_sector(): read error [ 963.739414][T12570] hpfs: code page support is disabled [ 963.770743][T12570] hpfs: hpfs_map_4sectors(): unaligned read [ 963.806991][T12570] hpfs: hpfs_map_4sectors(): unaligned read [ 963.858888][T12572] fuse: Bad value for 'fd' [ 963.864139][T12570] hpfs: filesystem error: unable to find root dir [ 964.694418][T12583] fuse: Unknown parameter 'group_i00000000000000000000' [ 965.220997][ T24] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 965.410391][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 965.467946][ T24] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 965.499193][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.551542][ T24] usb 8-1: config 0 descriptor?? [ 965.580627][ T5677] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 965.751016][ T5741] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 965.784180][ T5677] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 965.795496][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 965.821259][ T24] usb 8-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 965.830534][ T5677] usb 10-1: config 0 has no interfaces? [ 965.838472][ T24] usb 8-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 965.867093][ T5677] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 965.883249][ T5677] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 965.910535][ T5677] usb 10-1: Product: syz [ 965.915056][ T5677] usb 10-1: Manufacturer: syz [ 965.937459][ T5677] usb 10-1: config 0 descriptor?? [ 965.938283][ T5741] usb 9-1: unable to get BOS descriptor or descriptor too short [ 965.956649][ T5741] usb 9-1: config index 0 descriptor too short (expected 8032, got 96) [ 965.975203][ T5741] usb 9-1: config 1 has too many interfaces: 191, using maximum allowed: 32 [ 966.030010][ T5741] usb 9-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 966.062828][ T5741] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 191 [ 966.091552][ T5741] usb 9-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 966.129066][ T5741] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.160555][ T5741] usb 9-1: Product: syz [ 966.173455][ T5741] usb 9-1: Manufacturer: syz [ 966.189613][ T5741] usb 9-1: SerialNumber: syz [ 966.201111][T12587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.256960][T12587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.480730][ T5593] Bluetooth: hci0: command 0x040f tx timeout [ 966.487250][ T5591] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 966.642658][T12591] loop8: detected capacity change from 0 to 512 [ 966.709105][T12591] EXT4-fs: Ignoring removed mblk_io_submit option [ 966.763521][T12591] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 966.857175][T12591] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1772: bg 0: block 384: padding at end of block bitmap is not set [ 966.970728][T12591] loop8: lost filesystem error report for type 5 error -117 [ 966.976696][T12591] EXT4-fs (loop8): Remounting filesystem read-only [ 966.984555][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 966.984650][ C1] EXT4-fs (loop8): initial error at time 1778962134: ext4_validate_block_bitmap:441 [ 966.984773][ C1] EXT4-fs (loop8): last error at time 1778962134: ext4_validate_block_bitmap:441 [ 967.107782][T12591] EXT4-fs (loop8): 1 truncate cleaned up [ 967.118124][T12591] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 967.156903][T12601] binder_alloc: 12599: binder_alloc_buf, no vma [ 967.315498][ T5741] usb 9-1: 1:1: cannot set freq 48000 to ep 0x1 [ 967.677322][ T5741] usb 9-1: USB disconnect, device number 30 [ 968.165494][ T7221] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.307477][ T9855] udevd[9855]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 968.703786][ T5741] usb 10-1: USB disconnect, device number 42 [ 969.027465][T12614] loop1: detected capacity change from 0 to 128 [ 969.105130][T12614] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 969.155539][T12614] hpfs: filesystem error: improperly stopped [ 969.185126][T12614] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 969.228143][T12614] hpfs: You really don't want any checks? You are crazy... [ 969.251499][T12614] hpfs: hpfs_map_sector(): read error [ 969.262549][T12614] hpfs: code page support is disabled [ 969.274886][T12614] hpfs: hpfs_map_4sectors(): unaligned read [ 969.305236][T12614] hpfs: hpfs_map_4sectors(): unaligned read [ 969.329365][T12614] hpfs: filesystem error: unable to find root dir [ 969.962579][T12622] fuse: Bad value for 'fd' [ 969.992381][T12623] fuse: Unknown parameter 'group_i00000000000000000000' [ 970.002767][T12625] fuse: Unknown parameter 'grou00000000000000000000' [ 970.530577][ T5741] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 970.690800][ T5741] usb 6-1: Using ep0 maxpacket: 32 [ 970.717802][ T5741] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 970.744304][ T5741] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.769389][ T5741] usb 6-1: config 0 descriptor?? [ 971.034266][ T5741] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 971.484902][ T5677] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 971.678420][ T5677] usb 2-1: unable to get BOS descriptor or descriptor too short [ 971.711387][ T5677] usb 2-1: config index 0 descriptor too short (expected 8032, got 96) [ 971.748830][ T5677] usb 2-1: config 1 has too many interfaces: 191, using maximum allowed: 32 [ 971.760700][ T8054] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 971.836403][ T5677] usb 2-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 971.877705][ T5677] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 191 [ 971.928290][ T5677] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 971.950823][ T5677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.966980][ T8054] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 971.996140][ T5677] usb 2-1: Product: syz [ 972.004350][ T8054] usb 10-1: config 0 has no interfaces? [ 972.026021][ T8054] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 972.037368][ T5677] usb 2-1: Manufacturer: syz [ 972.037475][ T5677] usb 2-1: SerialNumber: syz [ 972.100896][ T8054] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 972.135728][ T8054] usb 10-1: Product: syz [ 972.148327][ T8054] usb 10-1: Manufacturer: syz [ 972.200781][ T8054] usb 10-1: config 0 descriptor?? [ 972.401045][T12637] loop1: detected capacity change from 0 to 512 [ 972.455931][T12637] EXT4-fs: Ignoring removed mblk_io_submit option [ 972.497620][T12641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.512949][T12637] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 972.535085][T12641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.608060][T12637] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1787: bg 0: block 384: padding at end of block bitmap is not set [ 972.646873][T12637] loop1: lost filesystem error report for type 5 error -117 [ 972.648761][T12637] EXT4-fs (loop1): Remounting filesystem read-only [ 972.656470][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 972.656560][ C0] EXT4-fs (loop1): initial error at time 1778962140: ext4_validate_block_bitmap:441 [ 972.656678][ C0] EXT4-fs (loop1): last error at time 1778962140: ext4_validate_block_bitmap:441 [ 972.802115][T12637] EXT4-fs (loop1): 1 truncate cleaned up [ 972.825573][T12637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 972.972720][ T5677] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 973.278695][T12654] loop8: detected capacity change from 0 to 128 [ 973.357086][T12654] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 973.400852][T12654] hpfs: filesystem error: improperly stopped [ 973.420584][T12654] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 973.445487][T12654] hpfs: You really don't want any checks? You are crazy... [ 973.510836][T12654] hpfs: hpfs_map_sector(): read error [ 973.537740][T12654] hpfs: code page support is disabled [ 973.538997][T12656] fuse: Unknown parameter 'group_i00000000000000000000' [ 973.569099][T12654] hpfs: hpfs_map_4sectors(): unaligned read [ 973.589311][T12654] hpfs: hpfs_map_4sectors(): unaligned read [ 973.637600][T12654] hpfs: filesystem error: unable to find root dir [ 973.655822][ T5677] usb 2-1: USB disconnect, device number 50 [ 973.739241][ T5586] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.000670][ T5593] Bluetooth: hci0: command 0x040f tx timeout [ 974.011805][ T5591] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 974.344843][ T6207] udevd[6207]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 974.898179][ T5677] usb 10-1: USB disconnect, device number 43 [ 974.933786][T12664] fuse: Unknown parameter 'grou00000000000000000000' [ 975.384014][T12669] fuse: Bad value for 'fd' [ 976.576617][ T8054] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 976.782111][ T8054] usb 2-1: Using ep0 maxpacket: 32 [ 976.822581][ T8054] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 976.856534][ T8054] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.924196][ T8054] usb 2-1: config 0 descriptor?? [ 977.122850][ T5677] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 977.224873][T12679] syzkaller0: entered promiscuous mode [ 977.226793][ T8054] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 977.261054][T12679] syzkaller0: entered allmulticast mode [ 977.380061][T12695] loop7: detected capacity change from 0 to 128 [ 977.451440][T12693] loop9: detected capacity change from 0 to 512 [ 977.477258][T12695] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 977.477509][T12697] fuse: Unknown parameter 'group_id00000000000000000000' [ 977.508470][T12693] EXT4-fs: Ignoring removed mblk_io_submit option [ 977.546843][T12693] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 977.569863][T12695] hpfs: filesystem error: improperly stopped [ 977.587496][T12695] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 977.649705][T12693] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1805: bg 0: block 384: padding at end of block bitmap is not set [ 977.686255][T12695] hpfs: You really don't want any checks? You are crazy... [ 977.723397][T12693] loop9: lost filesystem error report for type 5 error -117 [ 977.725151][T12693] EXT4-fs (loop9): Remounting filesystem read-only [ 977.732985][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 977.733075][ C1] EXT4-fs (loop9): initial error at time 1778962145: ext4_validate_block_bitmap:441 [ 977.733194][ C1] EXT4-fs (loop9): last error at time 1778962145: ext4_validate_block_bitmap:441 [ 977.766267][T12695] hpfs: hpfs_map_sector(): read error [ 977.770000][T12693] EXT4-fs (loop9): 1 truncate cleaned up [ 977.781664][T12693] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 977.806848][ T5677] usb 10-1: unable to get BOS descriptor or descriptor too short [ 977.815860][T12695] hpfs: code page support is disabled [ 977.822264][T12695] hpfs: hpfs_map_4sectors(): unaligned read [ 977.850988][ T5677] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 977.860668][T12695] hpfs: hpfs_map_4sectors(): unaligned read [ 977.871364][ T5677] usb 10-1: can't read configurations, error -71 [ 977.878461][T12695] hpfs: filesystem error: unable to find root dir [ 978.593975][ T8390] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 978.727446][ T7641] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 978.799404][ T8390] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 978.851044][ T8390] usb 9-1: config 0 has no interfaces? [ 978.895306][ T8390] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 978.937868][ T8390] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 978.972895][ T8390] usb 9-1: Product: syz [ 978.996055][ T8390] usb 9-1: Manufacturer: syz [ 979.074548][ T8390] usb 9-1: config 0 descriptor?? [ 979.374069][T12714] fuse: Unknown parameter 'grou00000000000000000000' [ 979.402010][T12701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.461567][T12701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.247909][T12724] fuse: Invalid rootmode [ 982.670659][ T5677] usb 9-1: USB disconnect, device number 31 [ 983.289886][T12742] fuse: Unknown parameter 'group_id00000000000000000000' [ 983.925523][T12747] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1820'. [ 984.003581][T12752] loop5: detected capacity change from 0 to 128 [ 984.094839][T12752] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 984.137113][T12752] hpfs: filesystem error: improperly stopped [ 984.153068][ T8390] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 984.165729][T12752] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 984.192404][T12752] hpfs: You really don't want any checks? You are crazy... [ 984.230819][T12752] hpfs: hpfs_map_sector(): read error [ 984.260855][T12752] hpfs: code page support is disabled [ 984.284668][T12752] hpfs: hpfs_map_4sectors(): unaligned read [ 984.314720][T12752] hpfs: hpfs_map_4sectors(): unaligned read [ 984.341487][ T8390] usb 9-1: Using ep0 maxpacket: 32 [ 984.367553][T12752] hpfs: filesystem error: unable to find root dir [ 984.398986][ T8390] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 984.440651][ T8390] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.507468][ T8390] usb 9-1: config 0 descriptor?? [ 984.721348][T12756] binder: BINDER_SET_CONTEXT_MGR already set [ 984.758033][T12756] binder: 12755:12756 ioctl 4018620d 80000100 returned -16 [ 984.789161][ T8390] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 985.249364][T12762] fuse: Unknown parameter 'group_i00000000000000000000' [ 985.859981][T12768] fuse: Invalid rootmode [ 986.972919][T12754] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 989.058694][T12788] fuse: Unknown parameter 'group_i00000000000000000000' [ 989.076204][T12754] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 989.586066][T12754] usb 10-1: config 0 has no interfaces? [ 989.600562][T12754] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 989.602111][T12792] loop7: detected capacity change from 0 to 128 [ 989.614817][T12754] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 989.626878][T12754] usb 10-1: Product: syz [ 989.634874][T12754] usb 10-1: Manufacturer: syz [ 989.655925][T12754] usb 10-1: config 0 descriptor?? [ 989.719340][T12792] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 989.768997][T12792] hpfs: filesystem error: improperly stopped [ 989.818898][T12792] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 989.853436][T12792] hpfs: You really don't want any checks? You are crazy... [ 989.902833][T12792] hpfs: hpfs_map_sector(): read error [ 989.933750][T12792] hpfs: code page support is disabled [ 989.964981][T12792] hpfs: hpfs_map_4sectors(): unaligned read [ 990.000834][T12754] usb 10-1: can't set config #0, error -71 [ 990.027674][T12792] hpfs: hpfs_map_4sectors(): unaligned read [ 990.058050][T12754] usb 10-1: USB disconnect, device number 46 [ 990.076823][T12792] hpfs: filesystem error: unable to find root dir [ 990.220902][T12792] hpfs: hpfs_map_4sectors(): unaligned read [ 990.264566][T12792] hpfs: hpfs_map_sector(): read error [ 990.588583][T12798] binder: BINDER_SET_CONTEXT_MGR already set [ 990.629371][T12798] binder: 12797:12798 ioctl 4018620d 80000100 returned -16 [ 991.069974][T12804] fuse: Unknown parameter 'group_i00000000000000000000' [ 991.823364][T12815] fuse: Invalid rootmode [ 991.990726][T12754] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 992.183311][T12754] usb 10-1: Using ep0 maxpacket: 8 [ 992.208110][T12754] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 992.222194][T12754] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 992.244497][T12754] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 992.275582][T12754] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 992.313785][T12754] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 992.327736][T12754] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 992.350030][T12754] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 992.362140][T12754] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.830557][T12754] usb 10-1: usb_control_msg returned -32 [ 992.888145][T12754] usbtmc 10-1:16.0: can't read capabilities [ 995.173934][T12830] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1847'. [ 995.359850][T12830] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1847'. [ 995.634551][T12835] fuse: Unknown parameter 'group_i00000000000000000000' [ 995.697467][T12754] usb 10-1: USB disconnect, device number 47 [ 996.158735][T12841] loop9: detected capacity change from 0 to 128 [ 996.206992][T12841] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 996.233160][T12841] hpfs: filesystem error: improperly stopped [ 996.255381][T12841] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 996.274755][T12841] hpfs: You really don't want any checks? You are crazy... [ 996.294956][T12841] hpfs: hpfs_map_sector(): read error [ 996.312378][T12841] hpfs: code page support is disabled [ 996.325542][T12841] hpfs: hpfs_map_4sectors(): unaligned read [ 996.379080][T12841] hpfs: hpfs_map_4sectors(): unaligned read [ 996.402508][T12841] hpfs: filesystem error: unable to find root dir [ 996.488332][T12841] hpfs: hpfs_map_4sectors(): unaligned read [ 996.514886][T12841] hpfs: hpfs_map_sector(): read error [ 997.023859][T12849] binder: BINDER_SET_CONTEXT_MGR already set [ 997.073160][T12849] binder: 12848:12849 ioctl 4018620d 80000100 returned -16 [ 997.318455][T12853] fuse: Unknown parameter 'group_i00000000000000000000' [ 997.644729][T12861] fuse: Bad value for 'rootmode' [ 997.990526][ T5677] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 998.150884][ T5677] usb 10-1: Using ep0 maxpacket: 32 [ 998.184397][ T5677] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 998.215281][ T5677] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.272345][ T5677] usb 10-1: config 0 descriptor?? [ 999.022970][T12871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1862'. [ 999.049447][T12871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1862'. [ 999.143425][ T5677] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1001.279460][T12880] fuse: Unknown parameter 'group_i00000000000000000000' [ 1002.136585][T12886] loop7: detected capacity change from 0 to 128 [ 1002.209386][T12886] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1002.254401][T12886] hpfs: filesystem error: improperly stopped [ 1002.299924][T12886] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1002.357031][T12886] hpfs: You really don't want any checks? You are crazy... [ 1002.418017][T12886] hpfs: hpfs_map_sector(): read error [ 1002.455191][T12886] hpfs: code page support is disabled [ 1002.499686][T12886] hpfs: hpfs_map_4sectors(): unaligned read [ 1002.524738][T12886] hpfs: hpfs_map_4sectors(): unaligned read [ 1002.574379][T12886] hpfs: filesystem error: unable to find root dir [ 1002.663010][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.674495][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.773665][T12886] hpfs: hpfs_map_4sectors(): unaligned read [ 1002.817963][T12886] hpfs: hpfs_map_sector(): read error [ 1003.087266][T12903] fuse: Unknown parameter 'group_id00000000000000000000' [ 1003.484821][T12907] fuse: Bad value for 'fd' [ 1003.751365][T12910] fuse: Bad value for 'rootmode' [ 1003.873618][T12911] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1873'. [ 1003.948218][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1873'. [ 1006.354056][T12929] fuse: Unknown parameter 'group_id00000000000000000000' [ 1008.673105][T12951] fuse: Bad value for 'fd' [ 1008.986092][T12953] fuse: Unknown parameter 'group_id00000000000000000000' [ 1009.154643][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1887'. [ 1009.194199][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1887'. [ 1009.495759][T12962] fuse: Bad value for 'rootmode' [ 1009.805525][T12968] fuse: Unknown parameter 'group_id00000000000000000000' [ 1013.830469][T12995] fuse: Bad value for 'fd' [ 1014.626730][T13002] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1902'. [ 1014.693359][T13004] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1902'. [ 1014.990652][T13007] fuse: Unknown parameter 'group_id00000000000000000000' [ 1015.712719][T13013] fuse: Unknown parameter 'group_id00000000000000000000' [ 1016.377197][T13018] binder: BINDER_SET_CONTEXT_MGR already set [ 1016.393191][T13018] binder: 13016:13018 ioctl 4018620d 80000100 returned -16 [ 1018.472566][T13029] loop1: detected capacity change from 0 to 128 [ 1018.614909][T13029] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1018.739840][T13029] hpfs: filesystem error: improperly stopped [ 1018.797800][T13029] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1018.816634][T13031] fuse: Bad value for 'fd' [ 1018.885157][T13029] hpfs: You really don't want any checks? You are crazy... [ 1018.946811][T13029] hpfs: hpfs_map_sector(): read error [ 1019.009562][T13029] hpfs: code page support is disabled [ 1019.067170][T13029] hpfs: hpfs_map_4sectors(): unaligned read [ 1019.108950][T13029] hpfs: hpfs_map_4sectors(): unaligned read [ 1019.184518][T13029] hpfs: filesystem error: unable to find root dir [ 1020.475297][T13043] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1916'. [ 1020.578120][T13043] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1916'. [ 1021.091579][T13056] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1917'. [ 1021.799717][T13064] fuse: Bad value for 'user_id' [ 1021.887651][T13064] fuse: Bad value for 'user_id' [ 1022.625160][T13073] fuse: Bad value for 'fd' [ 1027.006549][T13103] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1930'. [ 1027.035340][T13105] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1932'. [ 1027.099367][T13107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1930'. [ 1028.223570][T13097] syzkaller0: entered promiscuous mode [ 1028.229199][T13097] syzkaller0: entered allmulticast mode [ 1028.244764][ T5677] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1028.263158][ T24] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1028.306579][ T8054] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1028.328079][ T5741] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1028.346236][ T8390] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1028.424795][ T8054] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1028.441803][ T8390] dvb_usb_az6027 9-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1028.453297][ T5741] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1028.535885][ T5741] usb 6-1: USB disconnect, device number 45 [ 1028.551152][ T8390] usb 9-1: USB disconnect, device number 32 [ 1028.584569][ T8054] usb 2-1: USB disconnect, device number 51 [ 1028.640552][ T5677] dvb_usb_az6027 10-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1028.675894][ T24] dvb_usb_az6027 8-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1028.818486][ T24] usb 8-1: USB disconnect, device number 40 [ 1028.832007][ T5677] usb 10-1: USB disconnect, device number 48 [ 1029.392334][T13116] fuse: Bad value for 'user_id' [ 1029.441812][T13116] fuse: Bad value for 'user_id' [ 1029.780619][T13122] fuse: Bad value for 'fd' [ 1030.490663][ T24] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1030.683369][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 1030.733234][ T24] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 1030.785969][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1030.841785][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1030.892171][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1031.598007][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1031.613824][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1031.627234][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1032.666378][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.152548][ T24] usb 8-1: usb_control_msg returned -32 [ 1033.227059][ T24] usbtmc 8-1:16.0: can't read capabilities [ 1034.877308][ T8054] usb 8-1: USB disconnect, device number 41 [ 1035.075581][T13146] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1035.206042][T13168] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1946'. [ 1035.239533][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1945'. [ 1035.361810][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1945'. [ 1036.602237][T13185] fuse: Invalid rootmode [ 1036.697847][T13187] loop5: detected capacity change from 0 to 128 [ 1036.793588][T13187] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1036.850456][ T8054] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1036.873445][T13187] hpfs: filesystem error: improperly stopped [ 1036.938347][T13187] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1036.997600][T13187] hpfs: You really don't want any checks? You are crazy... [ 1037.021162][T13187] hpfs: hpfs_map_sector(): read error [ 1037.043077][T13187] hpfs: code page support is disabled [ 1037.062024][ T8054] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.107195][T13187] hpfs: hpfs_map_4sectors(): unaligned read [ 1037.131934][ T8054] usb 9-1: config 0 has no interfaces? [ 1037.148275][T13187] hpfs: hpfs_map_4sectors(): unaligned read [ 1037.173277][ T8054] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1037.193234][T13187] hpfs: filesystem error: unable to find root dir [ 1037.211554][ T8054] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1037.240079][ T8054] usb 9-1: Product: syz [ 1037.260318][ T8054] usb 9-1: Manufacturer: syz [ 1037.275481][ T8054] usb 9-1: config 0 descriptor?? [ 1037.585905][T13186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.632275][T13186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.730885][ T8054] usb 9-1: USB disconnect, device number 33 [ 1039.571804][ T8054] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1039.926008][ T5593] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1039.933901][ T5593] Bluetooth: hci0: command 0x040f tx timeout [ 1040.047087][T13208] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1958'. [ 1040.194910][T13209] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1958'. [ 1040.660338][ T8054] usb 8-1: Using ep0 maxpacket: 8 [ 1040.688939][ T8054] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 1040.697535][ T8054] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1040.712337][ T8054] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1041.067040][ T8054] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1041.100444][ T8054] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1041.130472][ T8054] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1041.197727][ T8054] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1041.229878][ T8054] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.505977][ T8054] usb 8-1: can't set config #16, error -71 [ 1041.586893][ T8054] usb 8-1: USB disconnect, device number 42 [ 1041.878777][T13229] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1961'. [ 1043.199312][T13242] fuse: Unknown parameter 'user_id00000000000000000000' [ 1043.296138][T13245] fuse: Invalid rootmode [ 1043.315311][T13246] loop8: detected capacity change from 0 to 128 [ 1043.403318][T13246] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1043.433189][T13246] hpfs: filesystem error: improperly stopped [ 1043.466798][T13246] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1043.488734][T13246] hpfs: You really don't want any checks? You are crazy... [ 1043.551519][T13246] hpfs: hpfs_map_sector(): read error [ 1043.582134][T13246] hpfs: code page support is disabled [ 1043.614236][T13246] hpfs: hpfs_map_4sectors(): unaligned read [ 1043.649755][T13246] hpfs: hpfs_map_4sectors(): unaligned read [ 1043.678356][T13246] hpfs: filesystem error: unable to find root dir [ 1044.261603][ T8054] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1044.419058][T13260] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1970'. [ 1044.443990][T13260] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1970'. [ 1044.480957][ T8054] usb 6-1: Using ep0 maxpacket: 8 [ 1044.505164][ T8054] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 1044.510822][ T24] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1044.533202][ T8054] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1044.569399][ T8054] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1044.606426][ T8054] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1044.640694][ T8054] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1044.670054][ T8054] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1044.717712][ T8054] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1044.756824][ T8054] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.293072][ T8054] usb 6-1: usb_control_msg returned -32 [ 1045.376089][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.397142][ T8054] usbtmc 6-1:16.0: can't read capabilities [ 1045.420346][ T24] usb 2-1: config 0 has no interfaces? [ 1045.443748][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1046.419291][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1046.503955][ T24] usb 2-1: Product: syz [ 1046.538206][ T24] usb 2-1: Manufacturer: syz [ 1046.659456][ T24] usb 2-1: config 0 descriptor?? [ 1046.720428][ T5591] Bluetooth: hci0: command 0x040f tx timeout [ 1046.726743][ T5593] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1047.134239][T13258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.266510][T13258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.414660][ T8054] usb 6-1: USB disconnect, device number 46 [ 1047.664869][ T24] usb 2-1: USB disconnect, device number 52 [ 1048.499272][T13286] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1976'. [ 1049.245459][T13296] fuse: Invalid rootmode [ 1049.903597][T13301] loop7: detected capacity change from 0 to 128 [ 1049.965165][T13301] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1049.999101][T13303] fuse: Unknown parameter 'user_id00000000000000000000' [ 1050.023977][T13301] hpfs: filesystem error: improperly stopped [ 1050.056379][T13301] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1050.078603][T13301] hpfs: You really don't want any checks? You are crazy... [ 1050.109243][T13301] hpfs: hpfs_map_sector(): read error [ 1050.140796][T13301] hpfs: code page support is disabled [ 1050.153660][T13301] hpfs: hpfs_map_4sectors(): unaligned read [ 1050.195889][T13301] hpfs: hpfs_map_4sectors(): unaligned read [ 1050.235846][T13301] hpfs: filesystem error: unable to find root dir [ 1050.657812][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1982'. [ 1050.726243][T13310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1982'. [ 1051.121174][ T24] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1051.300807][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 1051.347968][ T24] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 1051.390568][ T24] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1051.442931][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1051.469157][ T24] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1051.499937][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1051.520690][ T24] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1051.570491][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1987'. [ 1051.580569][ T24] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1051.596596][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.959896][ T24] usb 9-1: usb_control_msg returned -32 [ 1051.998492][ T24] usbtmc 9-1:16.0: can't read capabilities [ 1052.062826][ T24] usb 9-1: USB disconnect, device number 34 [ 1052.101036][ T8054] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1052.319145][ T8054] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.366735][ T8054] usb 8-1: config 0 has no interfaces? [ 1052.405747][ T8054] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1052.440424][ T8054] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1052.488461][ T8054] usb 8-1: Product: syz [ 1052.510955][T13330] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1990'. [ 1052.520350][ T8054] usb 8-1: Manufacturer: syz [ 1052.565209][ T8054] usb 8-1: config 0 descriptor?? [ 1052.881269][T13333] fuse: Bad value for 'rootmode' [ 1052.928140][T13321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.965130][T13321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.124209][ T8054] usb 8-1: USB disconnect, device number 43 [ 1054.132792][T13349] fuse: Unknown parameter 'user_id00000000000000000000' [ 1054.507795][T13362] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1997'. [ 1054.576794][T13363] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1997'. [ 1054.733373][T13362] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1997'. [ 1057.455601][T13393] fuse: Bad value for 'fd' [ 1062.020856][T13460] fuse: Bad value for 'fd' [ 1064.104202][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.116508][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.676149][T13497] binder: 13496:13497 ioctl 4018620d 0 returned -22 [ 1065.486772][T13507] fuse: Invalid rootmode [ 1065.687590][T13511] fuse: Bad value for 'fd' [ 1066.758205][T13524] syzkaller0: entered promiscuous mode [ 1066.812797][T13524] syzkaller0: entered allmulticast mode [ 1067.494490][T13545] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2047'. [ 1068.052621][T13549] binder: 13548:13549 ioctl 4018620d 0 returned -22 [ 1069.645555][T13572] fuse: Invalid rootmode [ 1069.865224][T13576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2056'. [ 1071.203903][T13599] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2062'. [ 1072.078627][T13609] binder: 13607:13609 ioctl 4018620d 0 returned -22 [ 1074.239920][T13639] fuse: Invalid rootmode [ 1075.068964][T13655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2078'. [ 1075.219384][T13652] syzkaller0: entered promiscuous mode [ 1075.261020][T13652] syzkaller0: entered allmulticast mode [ 1075.547405][T13658] binder: BINDER_SET_CONTEXT_MGR already set [ 1075.565279][T13658] binder: 13657:13658 ioctl 4018620d 80000100 returned -16 [ 1077.819419][ T9834] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1077.868658][ T9834] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.285588][T13700] fuse: Bad value for 'rootmode' [ 1078.439003][T13706] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2091'. [ 1079.356253][T13719] binder: BINDER_SET_CONTEXT_MGR already set [ 1079.394472][T13719] binder: 13718:13719 ioctl 4018620d 80000100 returned -16 [ 1080.044463][T13727] tipc: Disabling bearer [ 1081.543763][T13741] syzkaller0: entered promiscuous mode [ 1081.575440][T13741] syzkaller0: entered allmulticast mode [ 1082.115504][T13764] fuse: Bad value for 'rootmode' [ 1083.333308][T13774] binder: BINDER_SET_CONTEXT_MGR already set [ 1083.365570][T13774] binder: 13771:13774 ioctl 4018620d 80000100 returned -16 [ 1084.440466][ T24] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1084.485412][T13791] netlink: 'syz.1.2117': attribute type 3 has an invalid length. [ 1084.524414][T13791] netlink: 'syz.1.2117': attribute type 29 has an invalid length. [ 1084.559407][T13791] netlink: 4708 bytes leftover after parsing attributes in process `syz.1.2117'. [ 1084.613852][ T24] usb 8-1: device descriptor read/64, error -71 [ 1084.898509][ T24] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1085.070571][ T24] usb 8-1: device descriptor read/64, error -71 [ 1085.191620][ T24] usb usb8-port1: attempt power cycle [ 1085.434474][T13796] syzkaller0: entered promiscuous mode [ 1085.446414][T13796] syzkaller0: entered allmulticast mode [ 1085.531283][T13801] ===================================================== [ 1085.538765][T13801] BUG: KMSAN: uninit-value in ieee802154_hdr_push+0x9a4/0xa30 [ 1085.547477][T13801] ieee802154_hdr_push+0x9a4/0xa30 [ 1085.552937][T13801] ieee802154_header_create+0x854/0xb90 [ 1085.558782][T13801] dgram_sendmsg+0xb55/0x16f0 [ 1085.563995][T13801] ieee802154_sock_sendmsg+0x91/0xe0 [ 1085.569632][T13801] ____sys_sendmsg+0xf37/0xfd0 [ 1085.574894][T13801] ___sys_sendmsg+0x271/0x3b0 [ 1085.579754][T13801] __sys_sendmsg+0x1aa/0x300 [ 1085.584859][T13801] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1085.591295][T13801] ia32_sys_call+0x1e4a/0x4360 [ 1085.595518][ T24] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1085.596323][T13801] __do_fast_syscall_32+0x180/0x460 [ 1085.610699][T13801] do_fast_syscall_32+0x37/0x80 [ 1085.615772][T13801] do_SYSENTER_32+0x1f/0x30 [ 1085.620688][T13801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1085.630279][T13801] [ 1085.632706][T13801] Uninit was stored to memory at: [ 1085.637949][T13801] ieee802154_hdr_push+0x99d/0xa30 [ 1085.646101][T13801] ieee802154_header_create+0x854/0xb90 [ 1085.652286][T13801] dgram_sendmsg+0xb55/0x16f0 [ 1085.657189][T13801] ieee802154_sock_sendmsg+0x91/0xe0 [ 1085.662761][T13801] ____sys_sendmsg+0xf37/0xfd0 [ 1085.667718][T13801] ___sys_sendmsg+0x271/0x3b0 [ 1085.672800][T13801] __sys_sendmsg+0x1aa/0x300 [ 1085.677581][T13801] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1085.683497][T13801] ia32_sys_call+0x1e4a/0x4360 [ 1085.688533][T13801] __do_fast_syscall_32+0x180/0x460 [ 1085.691803][ T24] usb 8-1: device descriptor read/8, error -71 [ 1085.694081][T13801] do_fast_syscall_32+0x37/0x80 [ 1085.705273][T13801] do_SYSENTER_32+0x1f/0x30 [ 1085.709982][T13801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1085.716704][T13801] [ 1085.719123][T13801] Local variable hdr created at: [ 1085.724286][T13801] ieee802154_header_create+0x4e/0xb90 [ 1085.733063][T13801] dgram_sendmsg+0xb55/0x16f0 [ 1085.738036][T13801] [ 1085.742246][T13801] CPU: 0 UID: 0 PID: 13801 Comm: syz.1.2120 Not tainted syzkaller #0 PREEMPT(full) [ 1085.752075][T13801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1085.762516][T13801] ===================================================== [ 1085.769589][T13801] Disabling lock debugging due to kernel taint [ 1085.882769][T13801] Kernel panic - not syncing: kmsan.panic set ... [ 1085.889463][T13801] CPU: 0 UID: 0 PID: 13801 Comm: syz.1.2120 Tainted: G B syzkaller #0 PREEMPT(full) [ 1085.900609][T13801] Tainted: [B]=BAD_PAGE [ 1085.904857][T13801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1085.915090][T13801] Call Trace: [ 1085.918496][T13801] [ 1085.921529][T13801] __dump_stack+0x26/0x30 [ 1085.926068][T13801] dump_stack_lvl+0x50/0x1c0 [ 1085.930864][T13801] ? dump_stack+0x12/0x25 [ 1085.935395][T13801] dump_stack+0x1e/0x25 [ 1085.939739][T13801] vpanic+0x7b4/0x1430 [ 1085.944040][T13801] panic+0x15d/0x160 [ 1085.948177][T13801] kmsan_report+0x31a/0x320 [ 1085.952890][T13801] ? __msan_warning+0x1b/0x30 [ 1085.957772][T13801] ? ieee802154_hdr_push+0x9a4/0xa30 [ 1085.963243][T13801] ? ieee802154_header_create+0x854/0xb90 [ 1085.969185][T13801] ? dgram_sendmsg+0xb55/0x16f0 [ 1085.974348][T13801] ? ieee802154_sock_sendmsg+0x91/0xe0 [ 1085.980167][T13801] ? ____sys_sendmsg+0xf37/0xfd0 [ 1085.985304][T13801] ? ___sys_sendmsg+0x271/0x3b0 [ 1085.990363][T13801] ? __sys_sendmsg+0x1aa/0x300 [ 1085.995334][T13801] ? __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1086.001294][T13801] ? ia32_sys_call+0x1e4a/0x4360 [ 1086.006447][T13801] ? __do_fast_syscall_32+0x180/0x460 [ 1086.012042][T13801] ? do_fast_syscall_32+0x37/0x80 [ 1086.017379][T13801] ? do_SYSENTER_32+0x1f/0x30 [ 1086.022253][T13801] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1086.029054][T13801] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1086.035757][T13801] ? ___sys_sendmsg+0x271/0x3b0 [ 1086.040888][T13801] ? __sys_sendmsg+0x1aa/0x300 [ 1086.045856][T13801] ? kmsan_get_metadata+0xf1/0x160 [ 1086.051271][T13801] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1086.057860][T13801] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1086.064139][T13801] ? kmsan_get_metadata+0xf1/0x160 [ 1086.069472][T13801] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1086.075927][T13801] ? kmsan_get_metadata+0xf1/0x160 [ 1086.081283][T13801] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 1086.087841][T13801] ? kmsan_get_metadata+0xf1/0x160 [ 1086.093192][T13801] __msan_warning+0x1b/0x30 [ 1086.097908][T13801] ieee802154_hdr_push+0x9a4/0xa30 [ 1086.103280][T13801] ? __msan_memcpy+0x105/0x1c0 [ 1086.109206][T13801] ieee802154_header_create+0x854/0xb90 [ 1086.115017][T13801] ? kmsan_get_metadata+0xf1/0x160 [ 1086.120366][T13801] dgram_sendmsg+0xb55/0x16f0 [ 1086.125280][T13801] ? __pfx_ieee802154_header_create+0x10/0x10 [ 1086.135982][T13801] ? __pfx_dgram_sendmsg+0x10/0x10 [ 1086.141338][T13801] ieee802154_sock_sendmsg+0x91/0xe0 [ 1086.146813][T13801] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 1086.153004][T13801] ____sys_sendmsg+0xf37/0xfd0 [ 1086.158022][T13801] ___sys_sendmsg+0x271/0x3b0 [ 1086.162895][T13801] ? kmsan_get_metadata+0xf1/0x160 [ 1086.168254][T13801] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1086.174298][T13801] ? __rcu_read_unlock+0x6c/0xd0 [ 1086.179482][T13801] ? __fget_files+0x3b4/0x4a0 [ 1086.184372][T13801] ? __fget_files+0x3b9/0x4a0 [ 1086.189229][T13801] ? kmsan_get_metadata+0xf1/0x160 [ 1086.194565][T13801] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1086.200613][T13801] __sys_sendmsg+0x1aa/0x300 [ 1086.205435][T13801] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1086.211202][T13801] ia32_sys_call+0x1e4a/0x4360 [ 1086.216171][T13801] __do_fast_syscall_32+0x180/0x460 [ 1086.221577][T13801] do_fast_syscall_32+0x37/0x80 [ 1086.226608][T13801] do_SYSENTER_32+0x1f/0x30 [ 1086.231301][T13801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1086.238435][T13801] RIP: 0023:0xf7f7700c [ 1086.242641][T13801] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1086.262411][T13801] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1086.270991][T13801] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000380 [ 1086.279082][T13801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1086.287160][T13801] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1086.295239][T13801] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1086.303578][T13801] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1086.311701][T13801] [ 1086.315003][T13801] Kernel Offset: disabled [ 1086.319391][T13801] Rebooting in 86400 seconds..