last executing test programs: 13m55.52151742s ago: executing program 32 (id=40): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x10, 0x7, 0x8, 0x1, {{0x1d, 0x4, 0x0, 0x8, 0x74, 0x67, 0x0, 0xe, 0x2d, 0x0, @local, @private=0xa010102, {[@cipso={0x86, 0x1e, 0xffffffffffffffff, [{0x2, 0x2}, {0x7, 0x12, "6db886b842873ae61a8f3472e7e86b96"}, {0x5, 0x2}, {0x5, 0x2}]}, @timestamp_addr={0x44, 0x14, 0xf, 0x1, 0xc, [{@multicast1, 0x1}, {@loopback, 0xdf}]}, @ssrr={0x89, 0x1f, 0x9b, [@local, @private=0xa010101, @loopback, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x2c}, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}, @generic={0x44, 0x8, "b78156648352"}]}}}}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 13m44.724065684s ago: executing program 33 (id=67): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000300)={0x7, 0xffffffffffffff98, 0x5, 0x7, 0x6, 0x8, 0x8, 0x3}, &(0x7f0000000100)={0x4, 0x100000001, 0x200, 0x9, 0x7, 0x7, 0x7ff, 0x1}, &(0x7f0000000140)={0x80000004, 0x0, 0x7, 0x100000000, 0x7f, 0xea2, 0xf39c, 0x9e8b}, 0x0, &(0x7f00000003c0)={0x0}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000180)=0xc) sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r7 = socket$vsock_stream(0x28, 0x1, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r8, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x2c}, 0x1, 0x900, 0x0, 0x8441}, 0x4000000) getsockname(r7, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xfffffe5e}, {0x1c, 0x2, {{0x0, 0x3, 0x0, 0x1, 0x1000, 0x7}}}}]}, 0x4c}}, 0x0) 12m45.558140971s ago: executing program 34 (id=183): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x100, 0x0) 10m7.571585842s ago: executing program 7 (id=94): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000950000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) timer_create(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) 10m3.889407319s ago: executing program 6 (id=526): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(0x0, 0x6000000, 0x10401) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$usbmon(&(0x7f0000000180), 0x5c, 0x3a540) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x1c9243, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x7fff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="41ec33fed941782c7a127a2e16f2e983de9493f4a40ac937f7c8ec6b3a1d2ff489fc1d1ba6e325f4cce3d9e16851b0c9893413cef8cb106c1ea96a019d024aabca6f9658f65cf1c26ec23c"], 0x1c}}, 0x0) 10m2.553675202s ago: executing program 6 (id=531): socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}]}) 10m2.315808633s ago: executing program 7 (id=533): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015"], 0x3c}}, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8bf97452bfd95983"], 0x28}, 0x1, 0x0, 0x0, 0x40082}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) close_range(r2, r1, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x85}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, 0x0, &(0x7f0000000600), 0x80, r3, 0x0, 0x7}, 0x38) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180), 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r4, 0x58, &(0x7f0000000300)}, 0x10) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r7) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r8, 0x341, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c090}, 0x14) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r6, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40) 10m1.652459679s ago: executing program 6 (id=535): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 10m1.16460416s ago: executing program 6 (id=537): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000180)) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r5, 0x0, 0x0) 10m0.599060532s ago: executing program 7 (id=540): gettid() syz_mount_image$ext4(&(0x7f0000001040)='ext2\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f0000001080)={[{@bsdgroups}]}, 0xfe, 0x494, &(0x7f0000000840)="$eJzs3M1vFOUfAPDvTFugvLU/foiCoFU0El9aWlA5eFCjiQdNTPSAx9oWRBZqaE2ENFqNwaMh8W48mvgXePNi1IMx8aqJR0NCtDGheKqZnRm6bHf7RtuF7ueTLPs8M8/0eb4z8+w+Mw+zAbStvuyfJGJnRPwWET159tYCffnb7MzUyI2ZqZEk5ube+Cuplrs+MzVSFi2321FkjqQR6adJPJ8srHfi4qWzw5XK2IUiPzB57r2BiYuXnjpzbvj02Omx80MnThw/NvjsM0NPr0mcWVzXD3w4fnD/K29deW3k5JW3f/wma9a+Q/n62jiWdKNBQA30ZXvt77mq+nWPrqDtd4NdNemks4UNYUU6IiI7XF3V/t8THTF/8Hri5U9a2jhgXWXfTVubr56eAzaxJFrdAqA1yi/67Pq3fG3Q0OOOcO2FiC1FenZmamT2ZvydkRbLu9ax/r6IODn975fZK1Z6HwIAYBWqY5snG43/0thXfc/nOnYXcyi9EfG/iNgTEf+PiL0RcU9Etey9EXFfvvFczzLr76vLLxz/pFcbtnmNZOO/52rGfrM18RdvvR1Fblc1/q7k1JnK2NFinxyJrq1ZfnCROr576dfPm62rHf9lr6z+cixYNOBqZ90NutHhyeG12gnXPo440Nko/uTmTEB2BuyPiAMr+9O7oztPnHn864PNCi0d/yLWYJ5p7quIx/LjPx118ZeSxecnB7ZFZezoQHlWLPTTL5dfb1b/bcW/BrLjv/3W87+uRM8/ST5f2xWVytiFiZXXcfn3z5pe06z2/N+SvFmds/75nXzZB8OTkxcGI7Ykr1bz5TVddfnQ/LZlviyfxX/kcOP+v6fYJov//ojITuJDEfFARDxYtP2hiHg4Ig4vEv8PLz7y7iLxJ5FES4//aMPPv5vnf29SO1+/ikTH2e+/bTZjvrzjfzymq5+1uern3xKW28Db3H0AAABwV0gjYmckaX+e7tsZadrfn/8f/r2xPa2MT0w+cWr8/fOj+TMCvdGVlne6emruhw4m08VfzPNDxb3icv2x4r7xFx3d1Xz/yHhltMWxQ7vbcWv/j7L/Z/7saHXrgHXneS1oX/X9P21RO4CNt5zvf9cCsDk16P/drWgHsPFc/0P7atT/P6rLG//D5rSw///R4CfrgM3I+B/al/4P7Uv/h7Z0O8/1L5FIm1dRPiyw+iq2LfsJ/3VOdEXEHdCMylj5ixfrWVd3zC+JtOUht1Ei6zEbW+n8b6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADczf4LAAD//3344cc=") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getrusage(0x0, &(0x7f0000000180)) 9m59.561035931s ago: executing program 6 (id=541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1807000000060000000000000000020000000ac81e9b8b923706e71277a2f9e0d60d000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304000000ffffca88faca"], 0xdd12}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08000, &(0x7f00000001c0)={[{@acl}, {@user_xattr}]}, 0xfc, 0x480, &(0x7f0000000840)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5}}, @TCA_HTB_INIT={0x6a, 0x2, {0x3, 0x9, 0x6}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000001440), 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 9m58.95040207s ago: executing program 7 (id=543): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0xfffffffd, 0x3, {0xa, 0x4e24, 0x3, @loopback, 0x3}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000005280)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) kcmp(0x0, r1, 0x3, r7, r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x8, 0x5, 0x0, @private1, @empty, 0x700, 0x20, 0x416, 0x10000}}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0xe5, 0xe0, 0x0, 0x0}) 9m56.50433199s ago: executing program 6 (id=546): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1}) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") 9m53.348418206s ago: executing program 7 (id=552): syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$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") socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 9m41.210232319s ago: executing program 35 (id=546): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1}) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") 9m37.230945071s ago: executing program 36 (id=552): syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$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") socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7m2.432220086s ago: executing program 1 (id=884): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xfffffe43, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={0x0, r2, 0x0, 0x1000}, 0x18) ppoll(0x0, 0x4a, 0x0, &(0x7f0000000240)={[0x6]}, 0x8) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000400000002"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r5}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00'}) select(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x8840) 7m0.677931164s ago: executing program 1 (id=890): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$eJzs3T1sG2UfAPD/neO3X3nf9JXeVwLUoQKkIlV1kn5AYWpXRKVKHZBYIHLcqIoTV7EDTZQh3StEBwSoS9lgYAQxMCAWRlYWEDNSRSOQmg5g5K80TZzglDouud9POvuee87+P8+d/499pzs5gMw62nhII56OiItJxMi6uqFoVx5trbe6slS8v7JUTKJev/RLEklE3FtZKnbWT9rPhyJiOSKeiohv8hHH081xqwuL0xPlcmmuXR6tzVwdrS4snrgyMzFVmirNnnrp5TNnT58ZPzm+/mX36+tL+Z319caPN9+98d2rt29++tmR5eL7E0mci+F23fp+PE6tbZKPcxuWn+5HsAFKBt0AHkmuneeNVPp/jESunfXd1Ed2tWlAn9X3RdSBjErkP2RU53dA4/i3M+3m748751sHII24q+2pVTPUOjcR+5vHJgd/TR46Mmkcbx7ezYayJy1fj4ixoaHNn/+k/fl7dGOPo4H01dfnWztq8/5P18af6DL+DHfOnf5NnfFvddP49yB+bovx72KPMX5/46ePtox/PeKZrvGTtfhJl/hpRLzVY/xbr395dqu6+scRx6J7/I5k+/PDo5evlEtjrceuMb46duSV7fp/cIv4rXO2+5tfM922f5fT2l198e3nzy5vE/+F57bf/922/4GIeK/H+P+998lrW9XduZ7cbfwK2On+TyIft3uM/+K5oz/0uCoAAAAAAAAAALADafNatiQtrM2naaHQuof3f3EwLVeqteOXK/Ozk61r3g5HPu1caTXSKieN8nj7etxO+eSG8qlcO2DuQLNcKFbKkwPuOwAAAAAAAAAAAAAAAAAAADwpDm24//+3XPP+/41/Vw3sVVv/5Tew18l/yK6H8z8ZWDuA3ef7HzKrLv8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/AAAAAAAAAAAAAAAAAAAAAAAAAADoi4sXLjSm+v2VpWKjPDm0MD9defvEZKk6XZiZLxaKlbmrhalKZapcKhQrM3/1fkmlcnUsZuevjdZK1dpodWHxzZnK/GznP0VL+b73CAAAAAAAAAAAAAAAAAAAAP55hptTkhYiIm3Op2mhEPHviDicRHL5Srk0FhH/iYjvc/l9jfL4oBsNAAAAAAAAAAAAAAAAAAAAe0x1YXF6olwuzWVkZmgnK0fE8uNtRuMdd/yqfHtfPSnb0EwWZgY8MAEAAAAAAAAAAAAAAAAAQAY9uOm311f80d8GAQAAAAAAAAAAAAAAAAAAQCalPycR0ZiOjTw/vLH2X8lqrvkcEe/cuvTBtYlabW68sfzu2vLah+3lJwfRfqBXnTzt5DEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQHVhcXqiXC7N9XFm0H0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBR/BgAA///eANcP") open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40) 6m59.26154243s ago: executing program 1 (id=892): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x37, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x12, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x40000000004) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x33) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006300)={0x2020}, 0x2020) 6m56.740419521s ago: executing program 1 (id=895): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x37, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r5, 0x0, 0x40000) 6m52.787333011s ago: executing program 1 (id=903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) 6m50.774305044s ago: executing program 1 (id=906): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') unshare(0x22020600) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r4, 0x3) listen(r5, 0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004040) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@data_writeback}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x1, 0x241, &(0x7f0000000540)="$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") 6m34.244475645s ago: executing program 37 (id=906): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') unshare(0x22020600) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r4, 0x3) listen(r5, 0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004040) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@data_writeback}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x1, 0x241, &(0x7f0000000540)="$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") 6m19.589407572s ago: executing program 5 (id=958): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f0000002080)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=']) 6m15.835454344s ago: executing program 5 (id=962): llistxattr(&(0x7f0000003080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)=""/91, 0x5b) 6m15.045505219s ago: executing program 5 (id=966): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015"], 0x3c}}, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8bf97452bfd95983"], 0x28}, 0x1, 0x0, 0x0, 0x40082}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) close_range(r2, r1, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x85}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, 0x0, &(0x7f0000000600), 0x80, r3, 0x0, 0x7}, 0x38) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180), 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r4, 0x58, &(0x7f0000000300)}, 0x10) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r7) sendmsg$TIPC_NL_PUBL_GET(r7, 0x0, 0x14) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r6, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40) 6m12.153964182s ago: executing program 5 (id=971): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) 6m8.308116775s ago: executing program 5 (id=981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) uname(&(0x7f00000001c0)=""/62) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30454070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x6, 0x9, {0x9, 0x11, "46ff4490d70a1e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRAWPHYS(r3, 0x4004480d, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 6m1.392579666s ago: executing program 5 (id=993): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) 5m46.035762091s ago: executing program 38 (id=993): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) 5.948988647s ago: executing program 4 (id=2401): ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f0000000240)={&(0x7f0000000580)={{@host, 0x5}, {@hyper, 0x1ff}, 0x400, "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"}, 0x418, 0x7}) r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) 5.128041533s ago: executing program 8 (id=2411): socket$packet(0x11, 0x2, 0x300) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffd, 0x2, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x0, 0x10, 0x8, {0x8, 0x4, "c46c32155d69"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.741733475s ago: executing program 0 (id=2431): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'bond0\x00'}) 3.698140988s ago: executing program 3 (id=2432): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @remote, @multicast2}, &(0x7f00000003c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x29, 0x9, 0xa3, 0x10001, 0x24, @dev={0xfe, 0x80, '\x00', 0x10}, @empty, 0x700, 0x7800, 0x3, 0x7}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000600)={@private1, 0x0}, &(0x7f0000000640)=0x14) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="00082dbd7000ffdbdf251600000005000200000000002800018008000100", @ANYRES64=r9, @ANYBLOB="08000300020000001400020076657468305f766972745f77696669002c000180080003000200000008000100", @ANYRES32=r5, @ANYBLOB="080003000200000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="faff000000000000000000faffffff", @ANYRES32=r10, @ANYBLOB="14000200697036746e6c300000000000000000001400020076657468305f746f5f62617461647600080003000100000008000100", @ANYRES32=r12, @ANYBLOB="0500040000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x90}, 0x20040000) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00'}, 0x18) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r14 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0xa4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xb2, 0x5800, 0x8, 0x0, 0x1be, 0x80000001, 0x3}}, {0xa, 0x2, [0x0, 0xd6, 0x6d8]}}, {{0x1c, 0x1, {0x7, 0x5, 0x800f, 0xfffffa99, 0x2, 0x400, 0x4, 0x5}}, {0xe, 0x2, [0x5, 0x81, 0xfff4, 0x3, 0x2]}}, {{0x1c, 0x1, {0x80, 0x3, 0x7, 0xc, 0x1, 0x173e5a4d, 0x2, 0x3}}, {0xa, 0x2, [0x6, 0x1, 0x67]}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40840}, 0x0) r15 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000021401002abd700001dcdf2508000100000000000900020073799d31000000008ad95e999e8e24"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 3.586031665s ago: executing program 0 (id=2435): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 3.368270349s ago: executing program 0 (id=2437): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x0, 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$ppp(r0, &(0x7f0000000300)="5af9", 0x2) 3.31354236s ago: executing program 2 (id=2439): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020a10100000005000800000000", @ANYRES8=r0], 0x7c}}, 0x0) 3.12733739s ago: executing program 0 (id=2441): socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, 0x0, 0x4a}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000700)={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000300)={r2, 0x400}, 0x8) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x1, r3, 0x1, 0x7}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x12, 0x0, 0x0, 0x0, 0x8000006, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1b, 0x1f}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) 3.114914994s ago: executing program 2 (id=2442): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x38, &(0x7f0000001640)=""/170, &(0x7f0000001700)=0xaa) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2083, 0x501c6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x2}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40050}, 0x4000880) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r3, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r0, &(0x7f00000030c0)=""/4117, 0x1015, 0x1, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001d80)={'geneve0\x00', &(0x7f0000001d40)=@ethtool_cmd={0xa}}) sendmsg$802154_raw(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008081}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000001030101000002000000000000000000"], 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x0) connect$netrom(r8, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2, 0x0}}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000010000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r12, @ANYBLOB="080003"], 0x44}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@getchain={0x34, 0x66, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xf, 0x1}, {0xc, 0xe}, {0x4, 0x4}}, [{0x8, 0xb, 0x1d98ddb0}, {0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8401) 2.856530505s ago: executing program 0 (id=2443): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88821000000140012800b0001", @ANYRES32], 0x44}}, 0x8000) 1.98111431s ago: executing program 4 (id=2444): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001c00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x30, 0x4044000}, 0x4000041) 1.954417039s ago: executing program 2 (id=2445): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.839846567s ago: executing program 9 (id=2446): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008500000075000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 1.660637754s ago: executing program 8 (id=2447): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000c140), r1) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r1) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0103000000000000000005"], 0x34}}, 0x0) 1.636812948s ago: executing program 4 (id=2448): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000039000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 1.627240689s ago: executing program 2 (id=2449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r1, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.463255633s ago: executing program 9 (id=2450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 1.446839616s ago: executing program 8 (id=2451): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001400030500008000ffdbdf250207", @ANYRES32, @ANYBLOB="080002007f00000114000600ff030000ff"], 0x50}, 0x1, 0x0, 0x0, 0xc090}, 0x0) 1.401273523s ago: executing program 4 (id=2452): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0cfebdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27f", 0x88}], 0x1}, 0x0) 1.400333506s ago: executing program 2 (id=2453): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x8}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$ppp(r0, &(0x7f0000000300)="5af9", 0x2) 1.23212664s ago: executing program 4 (id=2454): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, 0x0, 0x0) 1.212780131s ago: executing program 9 (id=2455): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020a101000000050008000000000006", @ANYRES8=r0], 0x7c}}, 0x0) 1.181309204s ago: executing program 8 (id=2456): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x240}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x64, 0x64, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x64}}, 0x48010) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.044540642s ago: executing program 3 (id=2457): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0x98}}, 0x0) 1.012936575s ago: executing program 2 (id=2458): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000010000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1c0, 0x12, 0x600, 0x0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @inet=@rpfilter={{0x28}, {0x397d920994752ccb}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x1, 0x1}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r9, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) 969.416594ms ago: executing program 4 (id=2459): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 857.148957ms ago: executing program 8 (id=2460): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001a000100000000000000000081"], 0x30}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) 783.454327ms ago: executing program 9 (id=2461): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1f}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x19}}}, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x48}, 0x94) 783.207478ms ago: executing program 3 (id=2462): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000070000000100010009000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 520.604258ms ago: executing program 3 (id=2463): socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='inet_sk_error_report\x00', r0}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 520.250172ms ago: executing program 8 (id=2464): syz_open_procfs(0x0, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) 503.672553ms ago: executing program 9 (id=2465): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000a700000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 348.734465ms ago: executing program 3 (id=2466): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x29, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x3, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x7f) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r2], 0x20}}, 0x0) 86.087477ms ago: executing program 9 (id=2467): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc40102030109021200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 42.429443ms ago: executing program 3 (id=2468): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x2}, 0x94) 0s ago: executing program 0 (id=2469): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) kernel console output (not intermixed with test programs): : new high-speed USB device number 13 using dummy_hcd [ 700.337408][ T55] usb 3-1: device descriptor read/8, error -71 [ 700.539017][ T55] usb usb3-port1: unable to enumerate USB device [ 701.392367][T10900] loop9: detected capacity change from 0 to 256 [ 703.031093][ T8678] team0 (unregistering): Port device team_slave_1 removed [ 703.179741][ T8678] team0 (unregistering): Port device team_slave_0 removed [ 703.519869][T10914] overlayfs: missing 'lowerdir' [ 704.206251][T10689] team0: Port device team_slave_0 added [ 704.306257][T10689] team0: Port device team_slave_1 added [ 704.655886][T10689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.703426][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.832170][T10689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.999242][T10926] ip6t_rpfilter: unknown options [ 705.786257][T10689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.793420][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.852176][T10689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.180355][T10540] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 706.250357][T10689] hsr_slave_0: entered promiscuous mode [ 706.278234][T10689] hsr_slave_1: entered promiscuous mode [ 706.327558][T10689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 706.358211][T10689] Cannot create hsr debugfs directory [ 706.555423][T10540] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 706.602168][T10540] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 706.749863][T10512] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 706.784746][T10540] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 706.926884][T10512] usb 10-1: Using ep0 maxpacket: 32 [ 706.946445][T10512] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.972806][T10512] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.018730][T10512] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 707.050475][T10512] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.102172][T10512] usb 10-1: config 0 descriptor?? [ 707.142342][T10512] hub 10-1:0.0: USB hub found [ 707.359569][T10512] hub 10-1:0.0: 1 port detected [ 707.631582][T10540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.820723][T10540] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.949290][ T7423] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.956490][ T7423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.029945][ T5937] usb 10-1: USB disconnect, device number 5 [ 708.030502][T10512] hub 10-1:0.0: hub_ext_port_status failed (err = -71) [ 708.068161][ T7424] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.075355][ T7424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.161271][T10943] loop2: detected capacity change from 0 to 40427 [ 708.244439][T10943] F2FS-fs (loop2): build fault injection rate: 771 [ 708.270964][T10943] F2FS-fs (loop2): invalid crc value [ 708.320288][T10967] warning: `syz.8.1111' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 708.453845][T10540] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 708.497408][T10540] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 708.620145][T10943] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 708.693429][T10689] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 708.852929][T10689] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 709.834702][T10689] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 709.935554][T10689] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 712.050803][ T5845] syz-executor: attempt to access beyond end of device [ 712.050803][ T5845] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 712.075999][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 712.076054][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 712.076077][ T5845] Call Trace: [ 712.076089][ T5845] [ 712.076109][ T5845] dump_stack_lvl+0x16c/0x1f0 [ 712.076177][ T5845] f2fs_handle_critical_error+0x621/0x9f0 [ 712.076229][ T5845] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.076277][ T5845] ? f2fs_build_fault_attr+0x53/0x1f0 [ 712.076330][ T5845] f2fs_write_end_io+0x785/0xc20 [ 712.076388][ T5845] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 712.076448][ T5845] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.076507][ T5845] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 712.076558][ T5845] bio_endio+0x70d/0x850 [ 712.076606][ T5845] submit_bio_noacct+0x56d/0x1eb0 [ 712.076671][ T5845] __submit_merged_bio+0x33c/0x770 [ 712.076730][ T5845] __submit_merged_write_cond+0x319/0x3f0 [ 712.076798][ T5845] f2fs_write_cache_pages+0x2067/0x2570 [ 712.076911][ T5845] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 712.076982][ T5845] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.077028][ T5845] ? __lock_acquire+0x622/0x1c90 [ 712.077112][ T5845] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.077268][ T5845] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.077323][ T5845] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.077380][ T5845] f2fs_write_data_pages+0x4ad/0xd90 [ 712.077451][ T5845] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 712.077508][ T5845] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.077569][ T5845] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.077622][ T5845] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 712.077686][ T5845] do_writepages+0x27a/0x600 [ 712.077758][ T5845] ? __pfx_do_writepages+0x10/0x10 [ 712.077818][ T5845] ? do_raw_spin_unlock+0x172/0x230 [ 712.077864][ T5845] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.077910][ T5845] ? _raw_spin_unlock+0x28/0x50 [ 712.077969][ T5845] filemap_fdatawrite_wbc+0x104/0x160 [ 712.078039][ T5845] __filemap_fdatawrite_range+0xb2/0xf0 [ 712.078088][ T5845] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 712.078213][ T5845] ? find_held_lock+0x2b/0x80 [ 712.078267][ T5845] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.078313][ T5845] ? do_raw_spin_unlock+0x172/0x230 [ 712.078358][ T5845] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.078413][ T5845] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 712.078503][ T5845] block_operations+0x2a3/0xfd0 [ 712.078562][ T5845] ? __pfx_stack_trace_save+0x10/0x10 [ 712.078624][ T5845] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.078678][ T5845] ? __pfx_block_operations+0x10/0x10 [ 712.078810][ T5845] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.078856][ T5845] ? down_write+0x14d/0x200 [ 712.078892][ T5845] ? __pfx_down_write+0x10/0x10 [ 712.078931][ T5845] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.078976][ T5845] ? rcu_is_watching+0x12/0xc0 [ 712.079035][ T5845] f2fs_write_checkpoint+0x2b8/0x4c60 [ 712.079115][ T5845] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.079161][ T5845] ? kfree+0x2b4/0x4d0 [ 712.079190][ T5845] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.079236][ T5845] ? lockdep_hardirqs_on+0x7c/0x110 [ 712.079290][ T5845] ? f2fs_stop_gc_thread+0x79/0xd0 [ 712.079329][ T5845] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.079389][ T5845] kill_f2fs_super+0x3c2/0x470 [ 712.079452][ T5845] ? __pfx_kill_f2fs_super+0x10/0x10 [ 712.079512][ T5845] ? lockdep_hardirqs_on+0x7c/0x110 [ 712.079591][ T5845] deactivate_locked_super+0xc1/0x1a0 [ 712.079635][ T5845] deactivate_super+0xde/0x100 [ 712.079677][ T5845] cleanup_mnt+0x225/0x450 [ 712.079725][ T5845] task_work_run+0x150/0x240 [ 712.079771][ T5845] ? __pfx_task_work_run+0x10/0x10 [ 712.079810][ T5845] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.079860][ T5845] ? __pfx___x64_sys_umount+0x10/0x10 [ 712.079919][ T5845] exit_to_user_mode_loop+0xeb/0x110 [ 712.079968][ T5845] do_syscall_64+0x3f6/0x4c0 [ 712.080033][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.080072][ T5845] RIP: 0033:0x7f4bb8b8fc57 [ 712.080101][ T5845] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 712.080143][ T5845] RSP: 002b:00007fff57d93ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 712.080178][ T5845] RAX: 0000000000000000 RBX: 00007f4bb8c10925 RCX: 00007f4bb8b8fc57 [ 712.080203][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff57d93ba0 [ 712.080226][ T5845] RBP: 00007fff57d93ba0 R08: 0000000000000000 R09: 0000000000000000 [ 712.080249][ T5845] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff57d94c30 [ 712.080273][ T5845] R13: 00007f4bb8c10925 R14: 00000000000aca58 R15: 00007fff57d94c70 [ 712.080328][ T5845] [ 712.552752][T10689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.838958][ T5845] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 713.603139][T10540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.700092][T10689] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.852432][ T6379] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.859660][ T6379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.973111][ T6379] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.980334][ T6379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.043319][T11015] loop9: detected capacity change from 0 to 512 [ 714.177810][T10689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 714.220519][T11015] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.352204][T11015] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 714.479049][T11015] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.1122: corrupted inode contents [ 714.630169][T11015] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #2: comm syz.9.1122: mark_inode_dirty error [ 714.777915][T11015] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.1122: corrupted inode contents [ 714.861594][T11015] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.1122: mark_inode_dirty error [ 715.534762][ T9089] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.666950][T10689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 715.839091][T11056] loop8: detected capacity change from 0 to 16 [ 715.911096][T11056] erofs (device loop8): mounted with root inode @ nid 36. [ 719.350863][T10540] veth0_vlan: entered promiscuous mode [ 723.135687][T10689] veth0_vlan: entered promiscuous mode [ 723.186130][T10689] veth1_vlan: entered promiscuous mode [ 723.262139][T10540] veth1_vlan: entered promiscuous mode [ 723.479608][T10689] veth0_macvtap: entered promiscuous mode [ 723.588611][T10689] veth1_macvtap: entered promiscuous mode [ 723.620974][T10540] veth0_macvtap: entered promiscuous mode [ 723.653649][T10540] veth1_macvtap: entered promiscuous mode [ 723.716025][T10689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.750004][T10540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.782816][T10689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.829090][T10540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.847860][T10689] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.869022][T10689] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.892417][T10689] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.901196][T10689] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.946648][T10540] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.966360][T10540] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.988733][T10540] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.997529][T10540] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.134605][T11093] ip6t_rpfilter: unknown options [ 726.353112][ T5831] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 726.853545][ T8678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.359072][ T5831] usb 3-1: config 0 has no interfaces? [ 727.376019][ T8678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.585250][ T5831] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 727.698633][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 727.871550][ T5831] usb 3-1: Product: syz [ 727.875792][ T5831] usb 3-1: Manufacturer: syz [ 727.897759][ T8698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.093693][ T5831] usb 3-1: SerialNumber: syz [ 728.203389][ T5831] usb 3-1: config 0 descriptor?? [ 728.208573][ T8698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.115467][ T5831] usb 3-1: USB disconnect, device number 14 [ 729.309567][ T5864] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 729.321617][ T5864] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 729.332255][ T5864] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 729.373498][ T5864] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 729.382915][ T5864] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 730.011745][ T8695] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.441513][ T8695] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.750071][T11181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1151'. [ 730.847911][T11182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1151'. [ 730.946886][T11157] loop2: detected capacity change from 0 to 40427 [ 731.014901][ T8695] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.084241][T11157] F2FS-fs (loop2): invalid crc value [ 731.485417][T11157] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 731.493206][ T55] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 731.549121][ T8695] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.636325][ T5850] Bluetooth: hci6: command tx timeout [ 731.724727][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 731.756610][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 35, changing to 7 [ 732.818958][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 41963, setting to 1024 [ 733.863818][ T5850] Bluetooth: hci6: command tx timeout [ 733.949514][ T55] usb 1-1: string descriptor 0 read error: -71 [ 733.956017][ T55] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 733.967553][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.016657][ T55] usb 1-1: config 0 descriptor?? [ 734.022307][ T55] usb 1-1: can't set config #0, error -71 [ 734.030027][ T55] usb 1-1: USB disconnect, device number 2 [ 734.134919][ T5831] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 734.377815][ T5831] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 734.393673][ T5831] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 734.422347][ T5831] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 734.480996][ T5831] usb 10-1: Product: syz [ 734.486414][ T5831] usb 10-1: Manufacturer: syz [ 734.491508][ T5831] usb 10-1: SerialNumber: syz [ 734.550082][T11152] chnl_net:caif_netlink_parms(): no params data found [ 734.874877][ T8695] bridge_slave_1: left allmulticast mode [ 734.883153][ T8695] bridge_slave_1: left promiscuous mode [ 734.912435][ T8695] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.937178][ T8695] bridge_slave_0: left allmulticast mode [ 734.942865][ T8695] bridge_slave_0: left promiscuous mode [ 734.971691][ T8695] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.062865][ T5850] Bluetooth: hci6: command tx timeout [ 736.676294][T11244] loop2: detected capacity change from 0 to 256 [ 737.067677][ T5937] usb 10-1: USB disconnect, device number 6 [ 737.241982][ T8695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.274725][ T8695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.295401][ T8695] bond0 (unregistering): Released all slaves [ 738.075913][ T8695] hsr_slave_0: left promiscuous mode [ 738.347671][ T5850] Bluetooth: hci6: command tx timeout [ 738.811361][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1170'. [ 738.841980][ T8695] hsr_slave_1: left promiscuous mode [ 738.869968][ T8695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 738.903087][ T8695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.931483][T11277] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1170'. [ 739.112920][ T8695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.168313][ T8695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.251069][ T8695] veth1_macvtap: left promiscuous mode [ 739.263222][ T8695] veth0_macvtap: left promiscuous mode [ 739.272117][ T8695] veth1_vlan: left promiscuous mode [ 739.281200][ T8695] veth0_vlan: left promiscuous mode [ 739.888679][ T5831] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 740.079252][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 740.097759][ T5831] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 740.108297][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.411331][ T5831] pvrusb2: Hardware description: Terratec Grabster AV400 [ 740.418434][ T5831] pvrusb2: ********** [ 740.426177][ T5831] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 740.456670][ T5831] pvrusb2: Important functionality might not be entirely working. [ 740.546024][ T5831] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 740.793669][ T5831] pvrusb2: ********** [ 740.957711][ T2336] pvrusb2: Invalid write control endpoint [ 741.199780][ T2336] pvrusb2: Invalid write control endpoint [ 741.207307][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 741.219528][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 741.228447][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 741.238894][ T2336] pvrusb2: Device being rendered inoperable [ 741.254064][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 741.261843][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 741.278417][T11291] pvrusb2: Attempted to execute control transfer when device not ok [ 741.290055][ T5831] usb 3-1: USB disconnect, device number 15 [ 741.304168][ T2336] pvrusb2: Attached sub-driver cx25840 [ 741.321453][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 741.332553][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 741.679525][ T8695] team0 (unregistering): Port device team_slave_1 removed [ 741.730111][ T8695] team0 (unregistering): Port device team_slave_0 removed [ 742.745628][T11152] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.756973][T11152] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.785518][T11152] bridge_slave_0: entered allmulticast mode [ 742.809569][T11152] bridge_slave_0: entered promiscuous mode [ 742.839158][T11152] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.846703][T11152] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.865661][T11152] bridge_slave_1: entered allmulticast mode [ 742.876332][T11152] bridge_slave_1: entered promiscuous mode [ 744.079734][T11152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.207518][T11152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.311885][T11152] team0: Port device team_slave_0 added [ 746.345615][T11152] team0: Port device team_slave_1 added [ 746.473549][ T55] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 746.666531][ T55] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 746.695698][T11152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.729072][T11152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.766859][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.795832][T11152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.809027][T11152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.816043][T11152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.881802][T11152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.657004][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.682449][ T55] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 747.697100][ T55] usb 1-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 747.706851][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.726365][ T55] usb 1-1: config 0 descriptor?? [ 747.837155][T11399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1196'. [ 747.894699][T11401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1196'. [ 748.039699][T11152] hsr_slave_0: entered promiscuous mode [ 748.055720][T11152] hsr_slave_1: entered promiscuous mode [ 748.081284][T11379] loop9: detected capacity change from 0 to 40427 [ 748.091745][T11152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 748.104755][T11152] Cannot create hsr debugfs directory [ 748.145089][T11379] F2FS-fs (loop9): invalid crc value [ 748.271287][ T55] input: HID 28bd:0935 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0935.0003/input/input6 [ 748.408704][ T55] uclogic 0003:28BD:0935.0003: input,hidraw0: USB HID v10.40 Mouse [HID 28bd:0935] on usb-dummy_hcd.0-1/input0 [ 749.422665][ T55] usb 1-1: USB disconnect, device number 3 [ 749.666914][T11412] fido_id[11412]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 749.689205][T11419] netlink: 'syz.0.1202': attribute type 21 has an invalid length. [ 749.704199][T11420] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 749.710972][T11420] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 749.795363][T11420] vhci_hcd vhci_hcd.0: Device attached [ 749.802988][T11419] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1202'. [ 749.847379][T11426] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(6) [ 749.853963][T11426] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 749.897549][T11420] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(5) [ 749.904128][T11420] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 749.974799][T11426] vhci_hcd vhci_hcd.0: Device attached [ 749.989265][ T5937] vhci_hcd: vhci_device speed not set [ 749.995306][T11419] netlink: 'syz.0.1202': attribute type 5 has an invalid length. [ 750.014673][T11432] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(11) [ 750.021325][T11432] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 750.042088][T11420] vhci_hcd vhci_hcd.0: Device attached [ 750.050321][T11419] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1202'. [ 750.059728][T11432] vhci_hcd vhci_hcd.0: Device attached [ 750.079378][T11433] vhci_hcd: connection closed [ 750.079806][T11428] vhci_hcd: connection closed [ 750.082050][T11430] vhci_hcd: connection closed [ 750.089657][T11421] vhci_hcd: connection closed [ 750.095437][ T5937] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 750.146120][ T8674] vhci_hcd: stop threads [ 750.173785][ T8674] vhci_hcd: release socket [ 750.185959][T11422] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 750.193646][ T8674] vhci_hcd: disconnect device [ 750.220320][ T8674] vhci_hcd: stop threads [ 750.238943][ T8674] vhci_hcd: release socket [ 750.259881][ T8674] vhci_hcd: disconnect device [ 750.300208][ T8674] vhci_hcd: stop threads [ 750.304515][ T8674] vhci_hcd: release socket [ 750.330861][ T8674] vhci_hcd: disconnect device [ 750.344034][ T8674] vhci_hcd: stop threads [ 750.348325][ T8674] vhci_hcd: release socket [ 750.624228][ T8674] vhci_hcd: disconnect device [ 750.706031][T11440] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1208'. [ 752.910262][T11462] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1215'. [ 752.969615][T11463] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1215'. [ 753.088831][ T55] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 753.262259][ T55] usb 3-1: Using ep0 maxpacket: 8 [ 753.277682][T11152] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 753.299354][ T55] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 753.332302][ T55] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 753.334386][T11152] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 753.366372][ T55] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 753.422241][ T55] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 753.455431][T11152] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 753.483777][ T55] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 753.492888][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.516584][T11152] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 753.794692][ T55] usb 3-1: GET_CAPABILITIES returned 0 [ 753.800266][ T55] usbtmc 3-1:16.0: can't read capabilities [ 753.987399][T11152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.041587][ T5852] usb 3-1: USB disconnect, device number 16 [ 754.198084][T11152] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.229480][ T8676] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.236717][ T8676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.294456][ T7414] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.301699][ T7414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.794222][ T5937] vhci_hcd: vhci_device speed not set [ 756.253737][T11512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1231'. [ 756.279202][T11512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1231'. [ 756.537071][T11518] loop0: detected capacity change from 0 to 512 [ 756.569851][T11518] EXT4-fs: Ignoring removed i_version option [ 756.594367][T11518] EXT4-fs: Ignoring removed mblk_io_submit option [ 756.627169][T11518] ext4: Unknown parameter 'seclabel' [ 756.640238][T11152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.990677][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 757.597683][ T8674] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.950835][ T9] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 757.993538][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.039982][ T9] usb 3-1: config 0 descriptor?? [ 758.055205][ T8674] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.283544][ T8674] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.396388][T11541] input: syz0 as /devices/virtual/input/input7 [ 758.913899][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 759.069119][ T8674] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.099797][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 759.525929][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 759.641581][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 759.980252][ T9] asix 3-1:0.0 eth13: register 'asix' at usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet, aa:aa:aa:aa:aa:bb [ 760.149242][ T9] usb 3-1: USB disconnect, device number 17 [ 760.191587][ T9] asix 3-1:0.0 eth13: unregister 'asix' usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet [ 760.437494][ T8674] bridge_slave_1: left allmulticast mode [ 760.462496][ T8674] bridge_slave_1: left promiscuous mode [ 760.494631][ T8674] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.556393][ T8674] bridge_slave_0: left allmulticast mode [ 760.567617][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 760.578497][ T8674] bridge_slave_0: left promiscuous mode [ 760.578699][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 760.597536][ T8674] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.740762][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 760.759185][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 760.777947][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 760.892370][ T5831] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 761.141458][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.173800][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.220407][ T5831] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 761.277199][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.323777][ T5831] usb 1-1: config 0 descriptor?? [ 761.808192][ T5831] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x3 [ 761.886828][ T5831] hid-picolcd 0003:04D8:C002.0004: No report with id 0x11 found [ 762.558123][ T8674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.587069][ T8674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.618200][ T8674] bond0 (unregistering): Released all slaves [ 762.848923][ T5852] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 762.920521][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 762.984168][T11152] veth0_vlan: entered promiscuous mode [ 762.998466][ T5850] Bluetooth: hci3: command tx timeout [ 763.038734][ T5852] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 763.067145][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.093480][T11152] veth1_vlan: entered promiscuous mode [ 763.111638][ T5852] usb 3-1: Product: syz [ 763.125941][ T5852] usb 3-1: Manufacturer: syz [ 763.139917][ T5852] usb 3-1: SerialNumber: syz [ 763.158924][ T5831] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 763.163940][ T5852] usb 3-1: config 0 descriptor?? [ 763.208403][ T5852] hub 3-1:0.0: bad descriptor, ignoring hub [ 763.225808][ T5852] hub 3-1:0.0: probe with driver hub failed with error -5 [ 763.250930][ T5852] f81232 3-1:0.0: f81534a converter detected [ 763.332496][ T5831] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.388333][ T5831] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 763.411435][ T5831] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.430498][ T5852] usb 3-1: f81534a converter now attached to ttyUSB0 [ 763.440487][ T8674] hsr_slave_0: left promiscuous mode [ 763.455466][ T8674] hsr_slave_1: left promiscuous mode [ 763.475997][ T5831] usb 10-1: config 0 descriptor?? [ 763.481999][ T8674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.501253][ T8674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.514856][ T8674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 763.535408][ T8674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.668802][ T8674] veth1_macvtap: left promiscuous mode [ 763.688479][ T8674] veth0_macvtap: left promiscuous mode [ 763.699849][ T8674] veth1_vlan: left promiscuous mode [ 763.710345][ T8674] veth0_vlan: left promiscuous mode [ 763.749142][ T5937] usb 3-1: USB disconnect, device number 18 [ 763.767787][ T5852] usb 1-1: USB disconnect, device number 4 [ 763.768165][ T5831] usbhid 10-1:0.0: can't add hid device: -71 [ 763.790626][ T5937] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 763.824422][ T5937] f81232 3-1:0.0: device disconnected [ 763.831527][ T5831] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 763.893964][ T5831] usb 10-1: USB disconnect, device number 7 [ 764.021568][T11628] loop0: detected capacity change from 0 to 256 [ 764.358846][ T5831] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 764.965060][T11633] loop2: detected capacity change from 0 to 256 [ 765.254416][ T5850] Bluetooth: hci3: command tx timeout [ 765.382707][ T5831] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 765.668183][ T5831] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 765.678797][ T5831] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.690783][ T5831] usb 10-1: config 0 descriptor?? [ 765.705638][ T5831] hub 10-1:0.0: USB hub found [ 766.019916][ T5831] hub 10-1:0.0: 1 port detected [ 766.896482][ T5952] hub 10-1:0.0: hub_ext_port_status failed (err = -71) [ 766.904204][ T5831] usb 10-1: USB disconnect, device number 8 [ 766.975411][ T5852] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 767.020249][ T8674] team0 (unregistering): Port device team_slave_1 removed [ 767.069123][ T8674] team0 (unregistering): Port device team_slave_0 removed [ 767.154103][ T5852] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.164495][ T5852] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 767.173884][ T5852] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 767.184547][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.204349][ T5852] usb 1-1: config 0 descriptor?? [ 767.224463][ T5852] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 767.244349][ T5852] dvb-usb: bulk message failed: -22 (3/0) [ 767.263126][ T5852] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 767.277626][ T5852] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 767.284961][ T5852] usb 1-1: media controller created [ 767.294695][ T5852] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 767.315426][ T5852] dvb-usb: bulk message failed: -22 (6/0) [ 767.323079][ T5852] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 767.362292][ T5852] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 767.384896][ T5852] dvb-usb: schedule remote query interval to 150 msecs. [ 767.391893][ T5852] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 767.451926][ T5850] Bluetooth: hci3: command tx timeout [ 767.557691][ T5852] dvb-usb: bulk message failed: -22 (1/0) [ 767.583160][ T5852] dvb-usb: error while querying for an remote control event. [ 767.594174][ T9] usb 1-1: USB disconnect, device number 5 [ 767.691277][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 768.393312][T11152] veth0_macvtap: entered promiscuous mode [ 768.600612][T11152] veth1_macvtap: entered promiscuous mode [ 768.849490][T11152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.945116][T11152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.089420][T11152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.134835][T11152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.143602][T11152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.177537][T11152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.303595][T11575] chnl_net:caif_netlink_parms(): no params data found [ 769.669443][ T5850] Bluetooth: hci3: command tx timeout [ 770.048606][ T6027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.075047][T11575] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.152567][T11695] ip6t_rpfilter: unknown options [ 770.902921][ T6027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.911267][T11575] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.918675][T11575] bridge_slave_0: entered allmulticast mode [ 770.979413][T11575] bridge_slave_0: entered promiscuous mode [ 771.024305][T11575] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.067445][T11575] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.109139][T11575] bridge_slave_1: entered allmulticast mode [ 771.274535][T11575] bridge_slave_1: entered promiscuous mode [ 771.747547][T11575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.792156][T11575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.887092][ T6028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.927086][ T6028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.050376][T11717] syz.0.1270 uses obsolete (PF_INET,SOCK_PACKET) [ 772.254272][T11575] team0: Port device team_slave_0 added [ 772.290527][T11575] team0: Port device team_slave_1 added [ 772.364198][ T5831] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 772.570429][ T5831] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 772.595618][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.631358][ T5831] usb 3-1: config 0 descriptor?? [ 772.774823][T11575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.788512][T11734] loop4: detected capacity change from 0 to 256 [ 772.801836][T11575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.847961][T11734] exfat: Deprecated parameter 'utf8' [ 772.853498][T11734] exfat: Deprecated parameter 'namecase' [ 772.902849][ T5831] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 772.991883][T11575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.031139][T11734] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 773.090576][T11575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.154069][T11575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.218189][ T5831] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 773.227146][ T5831] [drm] Initialized udl on minor 2 [ 773.276887][T11575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.623925][ T5831] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 773.668327][ T5831] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 773.696105][ T5937] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 773.727384][ T5831] usb 3-1: USB disconnect, device number 19 [ 773.747592][ T5937] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 773.987190][T11575] hsr_slave_0: entered promiscuous mode [ 774.027992][T11575] hsr_slave_1: entered promiscuous mode [ 774.055779][T11575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 774.076989][T11575] Cannot create hsr debugfs directory [ 774.247068][ T5852] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 774.459677][ T5852] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.485307][ T5852] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 774.565716][ T5852] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 774.574949][ T5852] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.685963][ T5852] usb 10-1: config 0 descriptor?? [ 774.768343][ T5852] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 775.959695][ T5852] usb 10-1: USB disconnect, device number 9 [ 776.556563][T11784] loop2: detected capacity change from 0 to 256 [ 778.343816][T10512] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 778.675079][T11804] loop2: detected capacity change from 0 to 256 [ 778.841931][T10512] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 778.928008][T10512] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.010123][T10512] usb 1-1: Product: syz [ 779.048305][T10512] usb 1-1: Manufacturer: syz [ 779.052957][T10512] usb 1-1: SerialNumber: syz [ 779.114219][T10512] usb 1-1: config 0 descriptor?? [ 779.163649][T10512] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 779.869840][T11575] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 780.030093][T11575] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 780.155635][T11575] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 780.242337][T11575] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 780.525363][T10512] gspca_sonixj: reg_w1 err -71 [ 780.616950][T10512] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 780.690264][T10512] usb 1-1: USB disconnect, device number 6 [ 780.960763][T11575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.130489][T11845] ptrace attach of ""[11846] was attempted by "./syz-executor exec"[11845] [ 781.228485][T11575] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.341359][ T8678] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.348679][ T8678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.402378][T11849] loop4: detected capacity change from 0 to 512 [ 781.462137][T11849] EXT4-fs: Ignoring removed i_version option [ 781.500571][T11849] EXT4-fs: Ignoring removed mblk_io_submit option [ 781.526765][T11849] ext4: Unknown parameter 'seclabel' [ 782.176387][ T6028] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.183652][ T6028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.590492][T11836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1295'. [ 785.319855][T11575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.237681][T11932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1321'. [ 786.759888][T11939] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.767999][T11939] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.340769][T11939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 787.409589][T11939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 787.740148][T11939] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.766545][T11939] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.785349][T11939] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.828614][T11939] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.020785][T11972] tipc: Failed to remove unknown binding: 66,1,1/0:3838939095/3838939097 [ 788.053706][T11972] tipc: Failed to remove unknown binding: 66,1,1/0:3838939095/3838939097 [ 788.078655][T11972] tipc: Failed to remove unknown binding: 66,1,1/0:3838939095/3838939097 [ 788.835044][T11575] veth0_vlan: entered promiscuous mode [ 789.031453][T11575] veth1_vlan: entered promiscuous mode [ 789.160172][T11575] veth0_macvtap: entered promiscuous mode [ 789.213368][T11575] veth1_macvtap: entered promiscuous mode [ 789.244586][T12005] netlink: 'syz.0.1338': attribute type 1 has an invalid length. [ 789.313423][T11575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.318638][T12005] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1338'. [ 789.353914][T11575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.392977][T12009] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1328'. [ 789.407011][T11575] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.450971][T11575] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.473702][T11575] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.494634][T11575] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.593968][ C1] Unknown status report in ack skb [ 789.977243][ T7418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.005696][ T7418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.124005][ T8674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.154375][ T8674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.270191][ T5937] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 790.489072][ T5937] usb 1-1: Using ep0 maxpacket: 16 [ 790.562891][ T5937] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 791.003240][ T5937] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 791.034980][ T5937] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 791.050504][ T5937] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 791.058762][ T5937] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 791.086261][ T5937] usb 1-1: config 0 has no interface number 0 [ 791.092442][ T5937] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 791.094078][T12033] Driver unsupported XDP return value 0 on prog (id 651) dev N/A, expect packet loss! [ 791.114737][ T5937] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 791.124622][ T5937] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 791.146780][ T5937] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 791.183072][ T5937] usb 1-1: config 0 interface 125 has no altsetting 0 [ 791.213042][ T5937] usb 1-1: config 0 interface 125 has no altsetting 2 [ 791.248137][ T5937] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 791.307791][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.354709][ T5937] usb 1-1: Product: syz [ 791.358953][ T5937] usb 1-1: Manufacturer: syz [ 791.401051][ T5937] usb 1-1: SerialNumber: syz [ 791.403477][T12041] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1235'. [ 791.441372][ T5937] usb 1-1: config 0 descriptor?? [ 791.446224][T12041] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1235'. [ 791.477243][ T5937] usb 1-1: selecting invalid altsetting 2 [ 791.510369][T12041] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1235'. [ 791.553905][T12041] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1235'. [ 791.892209][T12051] loop4: detected capacity change from 0 to 512 [ 791.946954][T12051] EXT4-fs: Ignoring removed i_version option [ 791.997124][T12051] EXT4-fs: Ignoring removed mblk_io_submit option [ 792.005068][T12053] netlink: 'syz.3.1352': attribute type 10 has an invalid length. [ 792.073406][T12051] ext4: Unknown parameter 'seclabel' [ 792.102070][T12053] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1352'. [ 792.159977][T12057] ip6t_rpfilter: unknown options [ 792.428015][T12053] team0: entered promiscuous mode [ 792.644401][ C1] usb 1-1: async_complete: urb error -71 [ 792.664790][ T5937] get_1284_register: usb error -71 [ 792.670062][ T5937] uss720 1-1:0.125: probe with driver uss720 failed with error -71 [ 792.937659][T12053] bridge0: port 1(team0) entered blocking state [ 792.971550][ T5937] usb 1-1: USB disconnect, device number 7 [ 793.077564][T12053] bridge0: port 1(team0) entered disabled state [ 793.150992][T12053] team0: entered allmulticast mode [ 793.607192][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1354'. [ 794.178555][T12079] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1356'. [ 795.358741][T12109] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1366'. [ 795.377677][ C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff888035997400: rx timeout, send abort [ 795.468844][T12114] loop9: detected capacity change from 0 to 512 [ 795.477360][T12114] EXT4-fs: Ignoring removed i_version option [ 795.483402][T12114] EXT4-fs: Ignoring removed mblk_io_submit option [ 795.511943][T12114] ext4: Unknown parameter 'seclabel' [ 795.923852][ C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff888035997400: abort rx timeout. Force session deactivation [ 796.406755][T10512] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 796.641712][T10512] usb 5-1: Using ep0 maxpacket: 16 [ 796.674399][T10512] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 796.717355][T10512] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 796.744047][T10512] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 796.773168][T10512] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 796.783888][T10512] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 796.802056][T10512] usb 5-1: config 0 has no interface number 0 [ 796.808263][T10512] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 796.890602][T10512] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 796.933009][T10512] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 796.984203][T10512] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 797.041524][T10512] usb 5-1: config 0 interface 125 has no altsetting 0 [ 797.065081][T10512] usb 5-1: config 0 interface 125 has no altsetting 2 [ 797.126744][T10512] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 797.157216][T10512] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.197690][T10512] usb 5-1: Product: syz [ 797.219147][T10512] usb 5-1: Manufacturer: syz [ 797.246585][T10512] usb 5-1: SerialNumber: syz [ 797.297338][T10512] usb 5-1: config 0 descriptor?? [ 797.366059][T10512] usb 5-1: selecting invalid altsetting 2 [ 798.555496][T10512] get_1284_register timeout [ 798.560917][ C0] usb 5-1: async_complete: urb error -104 [ 798.571687][T10512] uss720 5-1:0.125: probe with driver uss720 failed with error -5 [ 799.527999][T10512] usb 5-1: USB disconnect, device number 3 [ 800.012413][T12170] loop2: detected capacity change from 0 to 512 [ 800.060011][T12170] EXT4-fs: Ignoring removed i_version option [ 800.115897][T12170] EXT4-fs: Ignoring removed mblk_io_submit option [ 800.169880][T12170] ext4: Unknown parameter 'seclabel' [ 802.048380][T12186] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.088996][T12186] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.422431][T12186] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.677775][ T9] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 803.767881][T12186] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.922017][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 803.948456][ T9] usb 10-1: config index 0 descriptor too short (expected 16456, got 72) [ 803.971197][ T9] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 804.001493][ T9] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 804.029051][ T9] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 804.040288][T12238] netlink: 'syz.8.1404': attribute type 39 has an invalid length. [ 804.070587][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 804.138711][ T9] usb 10-1: config 0 has no interface number 0 [ 804.144981][ T9] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 804.157648][T12238] veth0_macvtap: left promiscuous mode [ 804.237640][ T9] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 804.296445][ T9] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 804.351223][ T9] usb 10-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 804.427508][ T9] usb 10-1: config 0 interface 125 has no altsetting 0 [ 804.438799][T12186] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.478011][ T9] usb 10-1: config 0 interface 125 has no altsetting 2 [ 804.502890][ T9] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 804.542162][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.579737][T12186] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.595542][ T9] usb 10-1: Product: syz [ 804.614712][ T9] usb 10-1: Manufacturer: syz [ 804.638306][ T9] usb 10-1: SerialNumber: syz [ 804.677942][ T9] usb 10-1: config 0 descriptor?? [ 804.706512][T12186] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.720172][ T9] usb 10-1: selecting invalid altsetting 2 [ 804.821240][T12186] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.221725][T12221] loop2: detected capacity change from 0 to 40427 [ 805.284287][T12221] F2FS-fs (loop2): invalid crc value [ 805.331787][T12255] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1409'. [ 805.608979][ C0] usb 10-1: async_complete: urb error -71 [ 805.636266][ T9] get_1284_register: usb error -71 [ 805.641598][ T9] uss720 10-1:0.125: probe with driver uss720 failed with error -71 [ 805.749759][ T9] usb 10-1: USB disconnect, device number 10 [ 805.840361][T12221] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 806.311029][T12274] Bluetooth: MGMT ver 1.23 [ 807.187712][T12288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1418'. [ 807.326284][T12291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1418'. [ 807.870162][T12289] 8021q: adding VLAN 0 to HW filter on device bond2 [ 807.891438][T12289] bond1: (slave bond2): Enslaving as an active interface with an up link [ 807.942629][T12291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 808.138246][ T5952] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 808.356834][ T5952] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 808.386355][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.414220][ T5952] usb 5-1: Product: syz [ 808.450951][ T5952] usb 5-1: Manufacturer: syz [ 808.477515][ T5952] usb 5-1: SerialNumber: syz [ 808.499821][ T5952] usb 5-1: config 0 descriptor?? [ 808.523087][ T5952] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 808.932050][ T5864] Bluetooth: hci5: command 0x0406 tx timeout [ 808.954221][T12323] netlink: 'syz.9.1427': attribute type 3 has an invalid length. [ 809.411743][ T5952] gspca_sonixj: reg_r err -32 [ 809.435358][ T5952] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 809.492236][ T5952] usb 5-1: USB disconnect, device number 4 [ 809.563071][T12349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1431'. [ 809.614166][T12349] netlink: 'syz.2.1431': attribute type 1 has an invalid length. [ 809.661982][T12349] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1431'. [ 813.705603][ T7380] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 813.967116][ T7380] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 813.987590][ T7380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.031250][T12415] syzkaller0: entered promiscuous mode [ 814.046337][ T7380] usb 3-1: Product: syz [ 814.050696][T12415] syzkaller0: entered allmulticast mode [ 814.056468][ T7380] usb 3-1: Manufacturer: syz [ 814.070223][ T7380] usb 3-1: SerialNumber: syz [ 814.101788][ T5937] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 814.115233][ T7380] usb 3-1: config 0 descriptor?? [ 814.159943][ T7380] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 814.310501][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.354321][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.432383][ T5937] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 814.474623][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.500834][ T5937] usb 1-1: config 0 descriptor?? [ 815.136835][ T7380] gspca_sonixj: reg_r err -32 [ 815.141720][ T7380] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 815.168562][ T7380] usb 3-1: USB disconnect, device number 20 [ 816.167112][T12448] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1464'. [ 816.939939][ T5937] usbhid 1-1:0.0: can't add hid device: -71 [ 816.964854][ T5937] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 817.021091][ T5937] usb 1-1: USB disconnect, device number 8 [ 819.786350][T12509] veth0_to_team: entered promiscuous mode [ 819.825240][T12509] veth0_to_team: entered allmulticast mode [ 821.860995][ T5850] Bluetooth: hci3: command tx timeout [ 823.595572][T12551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1491'. [ 823.868275][T12563] bridge_slave_0: left allmulticast mode [ 823.951231][T12563] bridge_slave_0: left promiscuous mode [ 824.008719][T12563] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.584591][T12563] bridge_slave_1: left allmulticast mode [ 824.776746][T12563] bridge_slave_1: left promiscuous mode [ 824.947860][T12563] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.070693][T12563] bond0: (slave bond_slave_0): Releasing backup interface [ 825.142865][T12587] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1499'. [ 825.164752][T12563] bond0: (slave bond_slave_1): Releasing backup interface [ 825.378671][T12563] team0: Port device team_slave_0 removed [ 825.453271][T12563] team0: Port device team_slave_1 removed [ 825.470098][T12563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 825.478539][T12563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.493242][T12563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 825.504030][T12563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.140601][T12602] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1505'. [ 826.334220][T12610] loop9: detected capacity change from 0 to 256 [ 827.277821][T12620] loop4: detected capacity change from 0 to 256 [ 829.976151][T12661] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1522'. [ 833.335054][T12724] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1541'. [ 833.409936][T12724] vlan0: entered promiscuous mode [ 833.426054][T12724] batadv0: entered promiscuous mode [ 833.941614][ T5852] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 834.138856][ T5852] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 834.172010][ T5852] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 834.217683][ T5852] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 834.272062][ T5852] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 834.304078][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 834.354588][ T5852] usb 1-1: Product: syz [ 834.377853][ T5852] usb 1-1: Manufacturer: syz [ 834.400664][ T5852] usb 1-1: SerialNumber: syz [ 834.659785][T12755] loop9: detected capacity change from 0 to 256 [ 834.683634][ T5852] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 835.084707][ T5852] usb 1-1: USB disconnect, device number 9 [ 835.166527][ T5852] usblp0: removed [ 837.170669][T12798] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 838.196155][ T5831] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 838.402545][ T5831] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 838.683012][ T5831] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 838.709657][ T5831] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 838.733777][ T5831] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 838.773013][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 839.037068][ T5831] usb 5-1: Product: syz [ 839.181469][ T5831] usb 5-1: Manufacturer: syz [ 839.367041][ T5831] usb 5-1: SerialNumber: syz [ 839.755726][ T5831] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 840.084436][ T5831] usb 5-1: USB disconnect, device number 5 [ 840.094114][ T5831] usblp0: removed [ 841.170490][T12851] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1576'. [ 841.214833][T12851] netlink: 'syz.9.1576': attribute type 1 has an invalid length. [ 841.266972][T12851] netlink: 208 bytes leftover after parsing attributes in process `syz.9.1576'. [ 842.105883][T12878] netlink: 'syz.2.1583': attribute type 1 has an invalid length. [ 842.162405][T12878] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1583'. [ 842.596643][T12889] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1588'. [ 843.851522][T10512] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 844.082318][T10512] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 844.146508][T10512] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 844.209808][T10512] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 844.257554][T12919] tipc: Started in network mode [ 844.262813][T12919] tipc: Node identity ac14140f, cluster identity 4711 [ 844.274371][T12919] tipc: New replicast peer: 0.0.255.255 [ 844.283142][T12919] tipc: Enabled bearer , priority 10 [ 844.309402][T10512] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 844.343608][T10512] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 844.372802][T10512] usb 10-1: Product: syz [ 844.382905][T10512] usb 10-1: Manufacturer: syz [ 844.393498][T10512] usb 10-1: SerialNumber: syz [ 844.668053][T10512] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 844.984809][ T7380] usb 10-1: USB disconnect, device number 11 [ 845.053177][ T7380] usblp0: removed [ 845.478468][ T5937] tipc: Node number set to 2886997007 [ 847.549781][T13004] ip6t_rpfilter: unknown options [ 848.515039][T12996] sctp: failed to load transform for md5: -2 [ 848.654238][T13017] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1620'. [ 848.911846][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 849.142991][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 849.186215][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 849.234138][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 849.305725][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 849.358621][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 849.377614][ T9] usb 5-1: Product: syz [ 849.382555][ T9] usb 5-1: Manufacturer: syz [ 849.387185][ T9] usb 5-1: SerialNumber: syz [ 849.412007][T13035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1627'. [ 849.646426][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 849.911437][ T9] usb 5-1: USB disconnect, device number 6 [ 849.972680][ T9] usblp0: removed [ 850.891190][T13075] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1638'. [ 851.552086][T13085] syzkaller0: entered promiscuous mode [ 851.583255][T13085] syzkaller0: entered allmulticast mode [ 852.083472][T10512] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 852.265151][T10512] usb 3-1: device descriptor read/64, error -71 [ 852.558111][T10512] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 852.738136][T10512] usb 3-1: device descriptor read/64, error -71 [ 852.893961][T10512] usb usb3-port1: attempt power cycle [ 853.280753][T10512] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 853.328616][T10512] usb 3-1: device descriptor read/8, error -71 [ 853.607077][T10512] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 853.649848][T10512] usb 3-1: device descriptor read/8, error -71 [ 853.791129][T10512] usb usb3-port1: unable to enumerate USB device [ 856.223915][T13178] ip6t_rpfilter: unknown options [ 856.972037][T13181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1665'. [ 857.877596][ T9] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 858.099566][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 858.144951][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.161989][ T9] usb 3-1: Product: syz [ 858.177800][ T9] usb 3-1: Manufacturer: syz [ 858.182672][ T9] usb 3-1: SerialNumber: syz [ 858.202763][ T9] usb 3-1: config 0 descriptor?? [ 858.212881][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 858.662030][ T9] gspca_sonixj: reg_r err -32 [ 858.666852][ T9] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 859.374380][T10512] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 860.361494][T10512] usb 1-1: device descriptor read/64, error -71 [ 860.592247][T13244] ip6t_rpfilter: unknown options [ 861.405456][T10512] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 861.428300][ T5937] usb 3-1: USB disconnect, device number 25 [ 861.564387][T13255] netlink: 256 bytes leftover after parsing attributes in process `syz.8.1682'. [ 861.587351][T10512] usb 1-1: device descriptor read/64, error -71 [ 861.721941][T10512] usb usb1-port1: attempt power cycle [ 862.030564][T13270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1688'. [ 862.115168][T10512] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 862.180067][T10512] usb 1-1: device descriptor read/8, error -71 [ 862.341620][T13281] loop4: detected capacity change from 0 to 256 [ 862.485285][T10512] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 862.522712][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 862.537425][T10512] usb 1-1: device descriptor read/8, error -32 [ 862.608652][T13276] syzkaller0: entered promiscuous mode [ 862.635204][T13276] syzkaller0: entered allmulticast mode [ 862.676919][T10512] usb usb1-port1: unable to enumerate USB device [ 863.335895][T13304] ip6t_rpfilter: unknown options [ 863.375362][ T5937] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 863.672196][ T5864] Bluetooth: hci6: command 0x0406 tx timeout [ 863.995857][ T5937] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 864.039995][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.088759][ T5937] usb 3-1: Product: syz [ 864.145525][ T5937] usb 3-1: Manufacturer: syz [ 864.150188][ T5937] usb 3-1: SerialNumber: syz [ 864.197247][ T5937] usb 3-1: config 0 descriptor?? [ 864.216838][ T5937] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 864.882006][ T5937] gspca_sonixj: reg_r err -32 [ 864.887566][ T5937] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 864.926455][T13319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1704'. [ 866.056766][T10512] usb 3-1: USB disconnect, device number 26 [ 866.515911][T10512] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 866.665255][T10512] usb 3-1: device descriptor read/64, error -71 [ 866.922753][T10512] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 867.097277][T10512] usb 3-1: device descriptor read/64, error -71 [ 867.272317][T10512] usb usb3-port1: attempt power cycle [ 868.397511][T10512] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 868.470461][T10512] usb 3-1: device descriptor read/8, error -71 [ 868.574020][T13368] loop0: detected capacity change from 0 to 512 [ 868.622751][T13368] EXT4-fs: Ignoring removed i_version option [ 868.628798][T13368] EXT4-fs: Ignoring removed mblk_io_submit option [ 868.707458][T13368] ext4: Unknown parameter 'seclabel' [ 868.785723][T10512] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 868.842273][T10512] usb 3-1: device descriptor read/8, error -71 [ 868.993419][T10512] usb usb3-port1: unable to enumerate USB device [ 869.747759][T13386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1722'. [ 869.969111][T13392] loop8: detected capacity change from 0 to 256 [ 871.101896][T13357] loop4: detected capacity change from 0 to 40427 [ 871.152768][T13357] F2FS-fs (loop4): invalid crc value [ 871.755720][T13432] netlink: 'syz.0.1734': attribute type 1 has an invalid length. [ 871.785541][T13432] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1734'. [ 872.192435][ T5962] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 872.357102][ T5962] usb 3-1: device descriptor read/64, error -71 [ 872.662752][ T5962] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 872.876522][ T5962] usb 3-1: device descriptor read/64, error -71 [ 872.998269][ T5962] usb usb3-port1: attempt power cycle [ 873.582277][ T5962] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 873.636641][ T5962] usb 3-1: device descriptor read/8, error -71 [ 873.957863][ T5962] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 874.051141][ T5962] usb 3-1: device descriptor read/8, error -71 [ 874.170202][T13483] netlink: 'syz.4.1750': attribute type 1 has an invalid length. [ 874.193551][ T5962] usb usb3-port1: unable to enumerate USB device [ 874.199632][T13483] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1750'. [ 876.433262][T13518] ip6t_rpfilter: unknown options [ 876.789271][T13527] loop2: detected capacity change from 0 to 256 [ 878.245488][T13562] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1774'. [ 879.160374][T13577] ip6t_rpfilter: unknown options [ 880.145055][T13610] loop9: detected capacity change from 0 to 512 [ 880.202186][T13610] EXT4-fs: Ignoring removed i_version option [ 880.208233][T13610] EXT4-fs: Ignoring removed mblk_io_submit option [ 880.285554][T13610] ext4: Unknown parameter 'seclabel' [ 881.053832][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1792'. [ 882.673358][T13655] ip6t_rpfilter: unknown options [ 882.960390][T13664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1804'. [ 883.004734][T13664] netlink: 'syz.4.1804': attribute type 1 has an invalid length. [ 883.007856][T13607] loop2: detected capacity change from 0 to 40427 [ 883.036645][T13664] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1804'. [ 883.081081][T13607] F2FS-fs (loop2): invalid crc value [ 883.575694][T13675] loop9: detected capacity change from 0 to 512 [ 883.629053][T13675] EXT4-fs: Ignoring removed i_version option [ 883.666448][T13675] EXT4-fs: Ignoring removed mblk_io_submit option [ 883.738265][T13675] ext4: Unknown parameter 'seclabel' [ 884.594260][T13691] netlink: 'syz.0.1810': attribute type 1 has an invalid length. [ 884.646940][T13691] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1810'. [ 885.914285][T13706] syzkaller0: entered promiscuous mode [ 885.993881][T13706] syzkaller0: entered allmulticast mode [ 886.304977][T13724] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1820'. [ 886.397791][T13724] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1820'. [ 886.827791][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 887.001598][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 887.033846][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 887.065777][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 887.114630][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 887.139365][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 887.158550][ T9] usb 3-1: Product: syz [ 887.178508][ T9] usb 3-1: Manufacturer: syz [ 887.199020][ T9] usb 3-1: SerialNumber: syz [ 887.464894][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 887.714389][ T5831] usb 3-1: USB disconnect, device number 35 [ 887.841462][T13749] netlink: 'syz.0.1826': attribute type 1 has an invalid length. [ 887.875361][ T5831] usblp0: removed [ 888.075450][T13749] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1826'. [ 889.536569][T13760] loop0: detected capacity change from 0 to 40427 [ 889.575760][T13760] F2FS-fs (loop0): invalid crc value [ 889.800656][T13760] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 890.154210][T13776] loop2: detected capacity change from 0 to 256 [ 892.633782][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 892.813332][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 892.828316][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 892.845180][T13791] loop2: detected capacity change from 0 to 512 [ 892.852805][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 892.872939][T13791] EXT4-fs: Ignoring removed i_version option [ 892.891424][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 892.916022][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 892.926822][T13791] EXT4-fs: Ignoring removed mblk_io_submit option [ 892.934790][ T9] usb 1-1: Product: syz [ 892.952353][ T9] usb 1-1: Manufacturer: syz [ 892.957429][T13791] ext4: Unknown parameter 'seclabel' [ 892.963460][ T9] usb 1-1: SerialNumber: syz [ 893.222440][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 893.992377][ T5937] usb 1-1: USB disconnect, device number 14 [ 894.098265][ T5937] usblp0: removed [ 895.037616][T13824] loop4: detected capacity change from 0 to 256 [ 897.052298][ T7380] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 897.068023][ T5937] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 897.411913][ T5937] usb 1-1: device descriptor read/64, error -71 [ 897.528741][ T7380] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.588611][ T7380] usb 5-1: config 0 has no interfaces? [ 897.612842][ T7380] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 897.656460][ T7380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.689336][ T7380] usb 5-1: Product: syz [ 897.704496][ T7380] usb 5-1: Manufacturer: syz [ 897.734532][ T7380] usb 5-1: SerialNumber: syz [ 897.818594][ T7380] usb 5-1: config 0 descriptor?? [ 897.828439][ T5937] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 897.876966][T13820] loop8: detected capacity change from 0 to 40427 [ 897.940618][T13820] F2FS-fs (loop8): invalid crc value [ 898.246295][ T5937] usb 1-1: device descriptor read/64, error -71 [ 898.389198][ T5937] usb usb1-port1: attempt power cycle [ 898.423258][T13873] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1861'. [ 898.480819][T13873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1861'. [ 898.791329][ T5937] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 898.849929][ T5937] usb 1-1: device descriptor read/8, error -71 [ 899.139142][ T5937] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 899.197188][ T5937] usb 1-1: device descriptor read/8, error -71 [ 899.346878][ T5937] usb usb1-port1: unable to enumerate USB device [ 899.496561][ T5962] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 899.702223][ T5962] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 899.734306][ T5962] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 899.756159][ T5962] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 899.783427][ T5962] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 899.831342][T10512] usb 5-1: USB disconnect, device number 7 [ 899.861103][ T5962] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 899.891592][ T5962] usb 10-1: Product: syz [ 899.895878][ T5962] usb 10-1: Manufacturer: syz [ 899.900585][ T5962] usb 10-1: SerialNumber: syz [ 900.223726][ T5962] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 900.258487][T13906] loop0: detected capacity change from 0 to 256 [ 900.951548][ T5962] usb 10-1: USB disconnect, device number 12 [ 901.178592][T13920] loop2: detected capacity change from 0 to 512 [ 901.252997][T13920] EXT4-fs: Ignoring removed i_version option [ 901.293488][ T5962] usblp0: removed [ 901.299565][T13920] EXT4-fs: Ignoring removed mblk_io_submit option [ 901.358686][T13920] ext4: Unknown parameter 'seclabel' [ 903.312699][ T5952] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 903.493084][ T5952] usb 3-1: device descriptor read/64, error -71 [ 903.793173][ T5952] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 903.804722][T13930] loop9: detected capacity change from 0 to 40427 [ 903.855054][T13930] F2FS-fs (loop9): invalid crc value [ 903.964773][ T5952] usb 3-1: device descriptor read/64, error -71 [ 904.108804][ T5952] usb usb3-port1: attempt power cycle [ 904.424637][T13930] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 904.593731][ T5952] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 904.651187][ T5952] usb 3-1: device descriptor read/8, error -71 [ 905.228938][ T5952] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 905.316799][ T5952] usb 3-1: device descriptor read/8, error -71 [ 905.472733][ T5952] usb usb3-port1: unable to enumerate USB device [ 906.077834][T13981] ip6t_rpfilter: unknown options [ 907.252272][T14014] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1895'. [ 908.033747][T14036] loop9: detected capacity change from 0 to 256 [ 909.074919][ T5852] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 909.137090][T14050] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1904'. [ 909.278244][ T5852] usb 5-1: device descriptor read/64, error -71 [ 909.592010][ T5852] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 909.774460][ T5852] usb 5-1: device descriptor read/64, error -71 [ 909.938452][ T5852] usb usb5-port1: attempt power cycle [ 910.329684][ T5852] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 910.384778][ T5852] usb 5-1: device descriptor read/8, error -71 [ 910.657287][ T5852] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 910.733853][ T5852] usb 5-1: device descriptor read/8, error -71 [ 910.860668][ T5852] usb usb5-port1: unable to enumerate USB device [ 911.321587][ T7380] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 911.450399][T14095] loop4: detected capacity change from 0 to 256 [ 911.733445][ T7380] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 911.794184][ T7380] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 911.906066][ T7380] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 912.744981][ T7380] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 912.755247][ T7380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 912.779950][ T7380] usb 1-1: Product: syz [ 912.784152][ T7380] usb 1-1: Manufacturer: syz [ 912.795200][ T7380] usb 1-1: SerialNumber: syz [ 913.052177][ T7380] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 913.080473][T14107] loop4: detected capacity change from 0 to 512 [ 913.134203][T14107] EXT4-fs: Ignoring removed i_version option [ 913.165236][T14107] EXT4-fs: Ignoring removed mblk_io_submit option [ 913.205643][T14107] ext4: Unknown parameter 'seclabel' [ 913.427910][T10512] usb 1-1: USB disconnect, device number 19 [ 913.471390][T10512] usblp0: removed [ 915.469369][ T7380] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 915.530143][T14150] loop4: detected capacity change from 0 to 256 [ 915.671168][ T7380] usb 3-1: device descriptor read/64, error -71 [ 915.961609][T14153] ip6t_rpfilter: unknown options [ 916.582966][T14162] netlink: 'syz.8.1936': attribute type 39 has an invalid length. [ 916.873424][ T7380] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 916.982428][T14159] raw_sendmsg: syz.9.1937 forgot to set AF_INET. Fix it! [ 917.039423][ T7380] usb 3-1: device descriptor read/64, error -71 [ 917.157562][ T7380] usb usb3-port1: attempt power cycle [ 917.178724][T14178] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1941'. [ 917.573972][ T7380] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 917.642601][ T7380] usb 3-1: device descriptor read/8, error -71 [ 917.846816][ T55] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 917.916187][ T7380] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 917.980194][ T7380] usb 3-1: device descriptor read/8, error -71 [ 918.056659][ T55] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 918.088624][ T55] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 918.129417][ T55] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 918.264955][T14205] ip6t_rpfilter: unknown options [ 918.421349][ T7380] usb usb3-port1: unable to enumerate USB device [ 919.409255][ T55] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 919.422176][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 919.434221][ T55] usb 1-1: Product: syz [ 919.438416][ T55] usb 1-1: Manufacturer: syz [ 919.443039][ T55] usb 1-1: SerialNumber: syz [ 919.492668][T14222] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 919.669576][ T7380] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 919.711061][ T55] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 919.883603][T14232] netlink: 'syz.2.1958': attribute type 39 has an invalid length. [ 919.886177][ T7380] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.928662][T14232] veth0_macvtap: left promiscuous mode [ 919.937022][ T7380] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.958379][ T7380] usb 10-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 919.967539][ T7380] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.991025][ T7380] usb 10-1: config 0 descriptor?? [ 920.106585][ T5831] usb 1-1: USB disconnect, device number 20 [ 920.156928][ T5831] usblp0: removed [ 920.479726][ T7380] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x3 [ 920.818755][ T7380] hid-picolcd 0003:04D8:C002.0005: No report with id 0x11 found [ 921.433658][ T7380] usb 10-1: USB disconnect, device number 13 [ 922.513671][T14270] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1966'. [ 923.165157][ T9] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 923.224591][T14269] syzkaller0: entered promiscuous mode [ 923.288224][T14269] syzkaller0: entered allmulticast mode [ 923.379298][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 923.420219][ T9] usb 10-1: config index 0 descriptor too short (expected 16456, got 72) [ 923.443171][ T9] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 923.485800][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 923.536975][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 923.579964][ T9] usb 10-1: config 0 has no interface number 0 [ 923.590833][ T9] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 923.650143][ T9] usb 10-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 923.707964][ T9] usb 10-1: config 0 interface 125 has no altsetting 0 [ 923.726714][ T9] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 923.737052][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.762878][ T9] usb 10-1: Product: syz [ 923.783895][ T9] usb 10-1: Manufacturer: syz [ 923.806633][ T9] usb 10-1: SerialNumber: syz [ 923.829041][ T9] usb 10-1: config 0 descriptor?? [ 924.384481][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 924.620771][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 924.636321][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 924.661778][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 924.677914][T14298] netlink: 'syz.8.1977': attribute type 39 has an invalid length. [ 924.707920][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 924.717797][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 924.730884][ T9] usb 5-1: Product: syz [ 924.739168][ T9] usb 5-1: Manufacturer: syz [ 924.744048][ T9] usb 5-1: SerialNumber: syz [ 924.997709][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 925.321451][ T5937] usb 10-1: USB disconnect, device number 14 [ 925.400773][ T7380] usb 5-1: USB disconnect, device number 12 [ 926.391720][ T7380] usblp0: removed [ 926.704690][ T5937] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 926.889484][ T5937] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.919356][ T5937] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.947830][ T5937] usb 10-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 926.977924][ T5937] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.998279][ T5937] usb 10-1: config 0 descriptor?? [ 927.458702][ T5937] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x3 [ 927.570210][ T5937] hid-picolcd 0003:04D8:C002.0006: No report with id 0x11 found [ 927.664384][T10512] usb 10-1: USB disconnect, device number 15 [ 929.218323][T14343] loop8: detected capacity change from 0 to 256 [ 930.996558][T14358] netlink: 'syz.9.1995': attribute type 39 has an invalid length. [ 931.049890][T14357] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 931.182816][T14358] veth0_macvtap: left promiscuous mode [ 934.533551][T14410] syzkaller0: entered promiscuous mode [ 934.539596][T14410] syzkaller0: entered allmulticast mode [ 934.770505][T14422] netlink: 'syz.3.2017': attribute type 39 has an invalid length. [ 937.311339][T14422] veth0_macvtap: left promiscuous mode [ 937.932991][T14465] loop8: detected capacity change from 0 to 256 [ 938.003752][ T5962] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 938.192632][ T5962] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 938.292402][ T5962] usb 10-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 938.351672][ T5962] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.190290][ T5962] usb 10-1: Product: syz [ 939.196661][ T5962] usb 10-1: Manufacturer: syz [ 939.208009][ T5962] usb 10-1: SerialNumber: syz [ 939.222593][ T5962] usb 10-1: config 0 descriptor?? [ 939.841847][T14500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2037'. [ 939.903984][T14500] netlink: 'syz.0.2037': attribute type 1 has an invalid length. [ 939.952278][T14500] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2037'. [ 940.423997][T14511] netlink: 'syz.3.2040': attribute type 39 has an invalid length. [ 941.098079][ T5962] usb 10-1: USB disconnect, device number 16 [ 941.654821][T14530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2048'. [ 941.826485][T14530] vlan2: entered promiscuous mode [ 941.906948][T14530] gretap0: entered promiscuous mode [ 943.133075][T14549] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2054'. [ 943.143579][T14554] loop0: detected capacity change from 0 to 256 [ 943.185201][T14549] netlink: 'syz.8.2054': attribute type 1 has an invalid length. [ 943.260926][T14549] netlink: 208 bytes leftover after parsing attributes in process `syz.8.2054'. [ 943.595544][T14569] netlink: 'syz.4.2060': attribute type 39 has an invalid length. [ 944.356209][T14569] veth0_macvtap: left promiscuous mode [ 947.152125][T14620] loop9: detected capacity change from 0 to 256 [ 949.747670][T14639] netlink: 'syz.8.2083': attribute type 39 has an invalid length. [ 950.725823][ T5831] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 950.933155][ T5831] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 950.959104][ T5831] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 950.994260][ T5831] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 951.017909][ T5831] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 951.039488][ T5831] usb 10-1: Manufacturer: syz [ 951.063813][ T5831] usb 10-1: config 0 descriptor?? [ 951.437559][ T7380] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 952.273902][ T7380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.468380][ T7380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.502123][ T7380] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 952.526528][ T7380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.561086][ T7380] usb 1-1: config 0 descriptor?? [ 952.883019][T14685] netlink: 'syz.2.2100': attribute type 12 has an invalid length. [ 953.023279][ T7380] usbhid 1-1:0.0: can't add hid device: -71 [ 953.030721][ T7380] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 953.050410][ T7380] usb 1-1: USB disconnect, device number 21 [ 953.643325][T10512] usb 10-1: USB disconnect, device number 17 [ 954.452581][T14712] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2111'. [ 955.147282][T14718] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2114'. [ 955.436677][T14718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2114'. [ 955.598458][T14729] ip6t_rpfilter: unknown options [ 956.487893][T10512] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 956.704027][T10512] usb 10-1: Using ep0 maxpacket: 8 [ 956.725145][T10512] usb 10-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 956.765199][T10512] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 956.827825][T10512] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.929627][T14740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2122'. [ 956.993391][T14743] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2124'. [ 957.571446][T14757] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2125'. [ 958.165553][T14773] ip6t_rpfilter: unknown options [ 958.321087][T14777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2138'. [ 958.546294][T14781] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2139'. [ 958.698843][ T5852] usb 10-1: USB disconnect, device number 18 [ 960.386538][T14811] vlan3: entered promiscuous mode [ 960.398789][T14811] vlan2: entered promiscuous mode [ 960.409429][T14811] gretap0: entered promiscuous mode [ 960.414934][T14815] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2155'. [ 960.646511][ T5831] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 960.805839][T14823] syzkaller0: entered promiscuous mode [ 960.812432][ T5937] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 960.820115][ T5831] usb 10-1: Using ep0 maxpacket: 8 [ 960.827456][T14823] syzkaller0: entered allmulticast mode [ 960.828426][ T5831] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 961.101001][ T5831] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.121893][ T5831] pvrusb2: Hardware description: Terratec Grabster AV400 [ 961.129062][ T5831] pvrusb2: ********** [ 961.133059][ T5831] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 961.148855][ T5831] pvrusb2: Important functionality might not be entirely working. [ 961.156690][ T5831] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 961.180972][ T5831] pvrusb2: ********** [ 961.202630][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 961.215036][ T5937] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 961.229796][ T5937] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 961.238248][ T5937] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 961.251595][ T5937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 961.266275][ T5937] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 961.283846][ T5937] usb 3-1: config 0 has no interface number 0 [ 961.305392][ T5937] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 961.320925][ T5937] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 961.346965][ T2336] pvrusb2: Invalid write control endpoint [ 961.365429][ T5937] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 961.376034][ T5937] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 961.389393][ T5937] usb 3-1: config 0 interface 125 has no altsetting 0 [ 961.407010][ T5937] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 961.416946][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.425165][ T5937] usb 3-1: Product: syz [ 961.429904][ T5937] usb 3-1: Manufacturer: syz [ 961.434593][ T5937] usb 3-1: SerialNumber: syz [ 961.449419][ T5937] usb 3-1: config 0 descriptor?? [ 961.488007][ T2336] pvrusb2: Invalid write control endpoint [ 961.495778][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 961.515391][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 961.529970][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 961.541469][ T2336] pvrusb2: Device being rendered inoperable [ 961.549337][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 961.557709][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 961.572195][ T2336] pvrusb2: Attached sub-driver cx25840 [ 961.580908][ T5936] usb 10-1: USB disconnect, device number 19 [ 961.588020][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 961.598275][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 961.900724][T14832] netlink: 'syz.3.2162': attribute type 39 has an invalid length. [ 962.980235][T14851] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2169'. [ 963.672167][ T5852] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 963.702122][T14871] netlink: 92 bytes leftover after parsing attributes in process `syz.9.2176'. [ 963.818358][ T5937] usb 3-1: USB disconnect, device number 44 [ 963.863059][T14874] loop0: detected capacity change from 0 to 512 [ 963.940776][T14874] EXT4-fs: Ignoring removed i_version option [ 963.987003][T14874] EXT4-fs: Ignoring removed mblk_io_submit option [ 964.016042][T14874] ext4: Unknown parameter 'seclabel' [ 964.087390][T14879] netlink: 'syz.9.2178': attribute type 39 has an invalid length. [ 964.826422][ T5852] usb 5-1: Using ep0 maxpacket: 8 [ 964.833573][ T5852] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 964.843119][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.869973][ T5852] pvrusb2: Hardware description: Terratec Grabster AV400 [ 964.877079][ T5852] pvrusb2: ********** [ 965.230789][ T5852] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 965.285338][ T5852] pvrusb2: Important functionality might not be entirely working. [ 965.333259][ T5852] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 966.224545][ T5852] pvrusb2: ********** [ 966.234006][ T2336] pvrusb2: Invalid write control endpoint [ 966.429416][ T2336] pvrusb2: Invalid write control endpoint [ 966.436663][ T5937] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 966.458091][ T7380] usb 5-1: USB disconnect, device number 13 [ 966.469071][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 966.482454][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 966.490877][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 966.508390][ T2336] pvrusb2: Device being rendered inoperable [ 966.514491][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 966.522450][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 966.542934][ T2336] pvrusb2: Attached sub-driver cx25840 [ 966.552167][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 966.573288][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 966.625141][ T5937] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.644626][ T5937] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.689657][ T5937] usb 10-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 966.719511][ T5937] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.780023][T14918] netlink: 'syz.0.2194': attribute type 39 has an invalid length. [ 967.008518][ T5937] usb 10-1: config 0 descriptor?? [ 967.105077][T14923] loop0: detected capacity change from 0 to 512 [ 967.127181][T14923] EXT4-fs: Ignoring removed i_version option [ 967.142534][T14923] EXT4-fs: Ignoring removed mblk_io_submit option [ 967.171889][T14923] ext4: Unknown parameter 'seclabel' [ 967.438417][T14928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2197'. [ 967.461114][ C1] raw-gadget.1 gadget.9: ignoring, device is not running [ 967.469533][T14928] netlink: 'syz.4.2197': attribute type 1 has an invalid length. [ 967.469872][ T5937] usbhid 10-1:0.0: can't add hid device: -71 [ 967.477367][T14928] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2197'. [ 967.488643][ T5937] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 967.554549][ T5937] usb 10-1: USB disconnect, device number 20 [ 970.850096][ T7380] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 971.102184][T10512] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 971.128137][T14969] loop2: detected capacity change from 0 to 512 [ 971.151254][T14969] EXT4-fs: Ignoring removed i_version option [ 971.171912][T14969] EXT4-fs: Ignoring removed mblk_io_submit option [ 971.194896][T14969] ext4: Unknown parameter 'seclabel' [ 971.305368][T10512] usb 10-1: Using ep0 maxpacket: 8 [ 971.327644][T10512] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 971.362219][T10512] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.381420][T14973] ip6t_rpfilter: unknown options [ 971.442190][T10512] pvrusb2: Hardware description: Terratec Grabster AV400 [ 971.467095][T14975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2213'. [ 971.483909][T10512] pvrusb2: ********** [ 971.506414][T10512] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 971.543563][T10512] pvrusb2: Important functionality might not be entirely working. [ 971.552149][ T7380] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 971.552213][ T7380] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 971.552254][ T7380] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 971.553599][ T7380] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 972.101613][ T7380] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 972.137495][ T7380] usb 5-1: Manufacturer: syz [ 972.177634][ T7380] usb 5-1: config 0 descriptor?? [ 972.349235][T10512] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 972.362090][T10512] pvrusb2: ********** [ 972.375124][ T2336] pvrusb2: Invalid write control endpoint [ 972.602293][T10512] usb 10-1: USB disconnect, device number 21 [ 972.611150][ T2336] pvrusb2: Invalid write control endpoint [ 972.616898][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 972.661373][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 972.672514][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 972.705469][ T2336] pvrusb2: Device being rendered inoperable [ 972.727180][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 972.734281][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 972.769170][ T2336] pvrusb2: Attached sub-driver cx25840 [ 972.787818][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 972.819329][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 973.066564][T14996] netlink: 'syz.2.2218': attribute type 39 has an invalid length. [ 973.893527][T15014] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2228'. [ 974.105722][ T5937] usb 5-1: USB disconnect, device number 14 [ 975.189702][T15034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2234'. [ 975.386818][T15040] netlink: 'syz.9.2238': attribute type 1 has an invalid length. [ 975.684233][T15051] netlink: 'syz.4.2241': attribute type 39 has an invalid length. [ 975.808488][T15055] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2245'. [ 977.976042][ T5852] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 978.149615][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.165164][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.178795][T15099] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2264'. [ 978.207353][ T5852] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 978.249447][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.280577][T15107] netlink: 'syz.9.2266': attribute type 39 has an invalid length. [ 978.300283][ T5852] usb 3-1: config 0 descriptor?? [ 979.323599][ T5937] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 979.718677][ T5937] usb 1-1: Using ep0 maxpacket: 8 [ 979.744608][ T5937] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 979.773697][ T5852] usbhid 3-1:0.0: can't add hid device: -71 [ 979.781217][ T5852] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 979.789378][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.834764][ T5852] usb 3-1: USB disconnect, device number 45 [ 979.873538][ T5937] pvrusb2: Hardware description: Terratec Grabster AV400 [ 979.897182][ T5937] pvrusb2: ********** [ 979.917087][ T5937] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 979.953683][ T5937] pvrusb2: Important functionality might not be entirely working. [ 979.961524][ T5937] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 980.013185][ T5937] pvrusb2: ********** [ 980.049070][ T2336] pvrusb2: Invalid write control endpoint [ 980.321315][ T5937] usb 1-1: USB disconnect, device number 22 [ 980.536788][ T2336] pvrusb2: Invalid write control endpoint [ 980.568036][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 980.595833][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 980.623375][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 980.648533][ T2336] pvrusb2: Device being rendered inoperable [ 980.665967][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 980.691298][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 980.721169][ T2336] pvrusb2: Attached sub-driver cx25840 [ 980.748487][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 980.798182][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 981.054054][T15144] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2277'. [ 981.107443][T15144] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2277'. [ 981.900588][T15158] netlink: 'syz.4.2288': attribute type 39 has an invalid length. [ 983.357448][T15178] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.380391][ T7380] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 983.576674][T15178] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.608579][ T7380] usb 1-1: Using ep0 maxpacket: 8 [ 983.625250][ T7380] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 983.657495][ T7380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.682879][ T7380] pvrusb2: Hardware description: Terratec Grabster AV400 [ 983.693997][ T7380] pvrusb2: ********** [ 983.696022][ T55] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 983.698476][ T7380] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 983.716123][ T7380] pvrusb2: Important functionality might not be entirely working. [ 983.748835][ T7380] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 983.774468][ T7380] pvrusb2: ********** [ 983.790778][T15178] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.868084][ T55] usb 10-1: Using ep0 maxpacket: 16 [ 983.876103][ T55] usb 10-1: config index 0 descriptor too short (expected 16456, got 72) [ 983.894429][ T2336] pvrusb2: Invalid write control endpoint [ 983.906518][ T55] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 983.929771][ T55] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 983.949388][ T55] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.984749][ T55] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 983.990168][T15178] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.015521][ T55] usb 10-1: config 0 has no interface number 0 [ 984.032569][ T55] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 984.058771][ T2336] pvrusb2: Invalid write control endpoint [ 984.076438][ T55] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 984.095217][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 984.114146][T10512] usb 1-1: USB disconnect, device number 23 [ 984.123214][ T55] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 984.134195][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 984.155696][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 984.166169][ T55] usb 10-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 984.187391][ T2336] pvrusb2: Device being rendered inoperable [ 984.190508][T15200] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 984.193343][ T55] usb 10-1: config 0 interface 125 has no altsetting 0 [ 984.221327][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 984.240404][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 984.266717][ T55] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 984.276925][ T2336] pvrusb2: Attached sub-driver cx25840 [ 984.282417][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 984.303571][ T55] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.326256][ T55] usb 10-1: Product: syz [ 984.330622][ T55] usb 10-1: Manufacturer: syz [ 984.354560][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 984.364027][ T55] usb 10-1: SerialNumber: syz [ 984.375178][ T55] usb 10-1: config 0 descriptor?? [ 984.438364][T15178] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.463908][T15178] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.483612][T15178] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.552266][T15178] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.207653][ T5937] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 986.332886][T15246] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.378976][ T55] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 986.380717][ T5937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.509547][T15246] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.581805][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 986.619938][ T5937] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 986.680629][ T7380] usb 10-1: USB disconnect, device number 22 [ 986.727657][ T5937] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 986.774366][ T5937] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 986.808866][ T5937] usb 5-1: Manufacturer: syz [ 986.812029][T10512] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 986.825009][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.837527][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.847512][ T55] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 986.849650][T15246] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.856611][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.868484][ T5937] usb 5-1: config 0 descriptor?? [ 986.886620][ T55] usb 1-1: config 0 descriptor?? [ 987.077079][T10512] usb 3-1: Using ep0 maxpacket: 8 [ 987.324596][T10512] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 987.563672][T10512] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.781776][T15246] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.792176][ T55] usbhid 1-1:0.0: can't add hid device: -71 [ 987.798400][ T55] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 987.812608][T10512] pvrusb2: Hardware description: Terratec Grabster AV400 [ 987.819662][T10512] pvrusb2: ********** [ 987.828006][T10512] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 987.838703][ T55] usb 1-1: USB disconnect, device number 24 [ 987.844821][T10512] pvrusb2: Important functionality might not be entirely working. [ 987.853276][T10512] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 987.864859][T10512] pvrusb2: ********** [ 988.055288][ T2336] pvrusb2: Invalid write control endpoint [ 988.138869][ T2336] pvrusb2: Invalid write control endpoint [ 988.153531][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 988.172002][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 988.180501][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 988.190628][ T2336] pvrusb2: Device being rendered inoperable [ 988.202110][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 988.209415][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 988.218164][ T2336] pvrusb2: Attached sub-driver cx25840 [ 988.223794][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 988.235445][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 988.260337][T15274] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2331'. [ 988.275839][T10512] usb 3-1: USB disconnect, device number 46 [ 988.292060][T15274] netlink: 256 bytes leftover after parsing attributes in process `syz.9.2331'. [ 988.386734][T15276] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2333'. [ 989.898670][ T5937] usb 5-1: USB disconnect, device number 15 [ 990.066128][T15302] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2345'. [ 990.660345][T15325] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2355'. [ 990.864245][T15330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2357'. [ 990.880010][T10512] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 991.155796][T10512] usb 1-1: Using ep0 maxpacket: 8 [ 991.214623][T10512] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 991.244576][T10512] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.840927][T10512] pvrusb2: Hardware description: Terratec Grabster AV400 [ 991.910124][T10512] pvrusb2: ********** [ 991.942094][T10512] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 992.016752][T10512] pvrusb2: Important functionality might not be entirely working. [ 992.074076][T15246] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.083424][T10512] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 992.192054][T15246] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.224754][T15246] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.357878][T10512] pvrusb2: ********** [ 992.363983][ T2336] pvrusb2: Invalid write control endpoint [ 992.443538][T15246] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.533151][T15359] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2362'. [ 992.594585][T10512] usb 1-1: USB disconnect, device number 25 [ 992.596147][ T2336] pvrusb2: Invalid write control endpoint [ 992.629729][T15359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2362'. [ 992.639429][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 992.691020][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 992.723211][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 992.780107][ T2336] pvrusb2: Device being rendered inoperable [ 992.820772][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 992.870359][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 992.926210][ T2336] pvrusb2: Attached sub-driver cx25840 [ 992.931736][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 992.952332][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 993.469378][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2372'. [ 994.118161][T15381] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.239706][T15381] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.502397][T15381] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.634726][ T5936] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 995.705251][T15381] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.834353][ T5936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.859752][ T5936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 995.871140][ T5936] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 995.887808][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.908347][ T5936] usb 1-1: config 0 descriptor?? [ 996.061452][T15381] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.120584][T15381] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.170683][T15381] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.224442][T15381] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.256569][T15416] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2387'. [ 996.342827][ T55] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 996.586859][ T5936] usbhid 1-1:0.0: can't add hid device: -71 [ 996.614901][ T5936] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 996.653835][ T55] usb 3-1: Using ep0 maxpacket: 8 [ 996.663827][ T55] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 996.665081][ T5936] usb 1-1: USB disconnect, device number 26 [ 996.672869][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.703365][ T55] pvrusb2: Hardware description: Terratec Grabster AV400 [ 996.745193][ T55] pvrusb2: ********** [ 996.776054][ T55] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 996.803159][ T55] pvrusb2: Important functionality might not be entirely working. [ 996.811000][ T55] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 996.873115][ T55] pvrusb2: ********** [ 997.230442][ T2336] pvrusb2: Invalid write control endpoint [ 997.245808][T15439] netlink: 'syz.8.2396': attribute type 1 has an invalid length. [ 997.270057][T15439] netlink: 208 bytes leftover after parsing attributes in process `syz.8.2396'. [ 998.044833][ T7380] usb 3-1: USB disconnect, device number 47 [ 998.288686][ T2336] pvrusb2: Invalid write control endpoint [ 998.294466][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 998.304095][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 998.312722][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 998.324222][ T2336] pvrusb2: Device being rendered inoperable [ 998.330231][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 998.339093][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 998.354938][ T2336] pvrusb2: Attached sub-driver cx25840 [ 998.360890][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 998.390297][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 998.575266][T15456] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2402'. [ 998.726548][ T5831] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 998.915637][ T5831] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 998.962364][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 999.003604][ T5831] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 999.022939][ T5831] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 999.034718][ T5831] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 999.043380][T15474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2407'. [ 999.052734][ T5831] usb 5-1: Manufacturer: syz [ 999.067509][ T5831] usb 5-1: config 0 descriptor?? [ 999.410939][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.460975][T15489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2415'. [ 999.856223][T15503] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2421'. [ 1000.277046][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.651861][T15527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2432'. [ 1000.673534][T15529] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2433'. [ 1000.688455][T15529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2433'. [ 1000.699373][T15529] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2433'. [ 1000.794945][T15532] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1001.364202][T15551] netlink: 'syz.2.2442': attribute type 1 has an invalid length. [ 1002.214390][ T55] usb 5-1: USB disconnect, device number 16 [ 1002.288925][T15557] __nla_validate_parse: 3 callbacks suppressed [ 1002.288954][T15557] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2443'. [ 1002.415558][T15557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2443'. [ 1002.901716][T15571] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2450'. [ 1002.929300][T15576] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2451'. [ 1003.327335][T15581] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2455'. [ 1003.543925][T15592] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2460'. [ 1004.348589][T15610] [ 1004.351659][T15610] ============================= [ 1004.356597][T15610] WARNING: suspicious RCU usage [ 1004.361685][T15610] 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 Not tainted [ 1004.368827][T15610] ----------------------------- [ 1004.373963][T15610] net/core/netclassid_cgroup.c:23 suspicious rcu_dereference_check() usage! [ 1004.383166][T15610] [ 1004.383166][T15610] other info that might help us debug this: [ 1004.383166][T15610] [ 1004.393855][T15610] [ 1004.393855][T15610] rcu_scheduler_active = 2, debug_locks = 1 [ 1004.402209][T15610] 1 lock held by syz.0.2469/15610: [ 1004.407378][T15610] #0: ffffffff8e5c4500 (rcu_read_lock_trace){....}-{0:0}, at: bpf_prog_test_run_syscall+0x344/0x780 [ 1004.418512][T15610] [ 1004.418512][T15610] stack backtrace: [ 1004.424481][T15610] CPU: 0 UID: 0 PID: 15610 Comm: syz.0.2469 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 1004.424534][T15610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1004.424557][T15610] Call Trace: [ 1004.424570][T15610] [ 1004.424584][T15610] dump_stack_lvl+0x16c/0x1f0 [ 1004.424651][T15610] lockdep_rcu_suspicious+0x166/0x260 [ 1004.424723][T15610] task_cls_state+0x1c9/0x1f0 [ 1004.424766][T15610] bpf_get_cgroup_classid_curr+0x1a/0x60 [ 1004.424824][T15610] ? sched_clock+0x38/0x60 [ 1004.424876][T15610] bpf_prog_841aec7193f618b3+0x1b/0x21 [ 1004.424910][T15610] bpf_prog_test_run_syscall+0x5b3/0x780 [ 1004.424959][T15610] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1004.425009][T15610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.425057][T15610] ? fput+0x70/0xf0 [ 1004.425113][T15610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.425160][T15610] ? __bpf_prog_get+0x97/0x2a0 [ 1004.425228][T15610] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1004.425271][T15610] __sys_bpf+0x1488/0x4d80 [ 1004.425328][T15610] ? __pfx___sys_bpf+0x10/0x10 [ 1004.425394][T15610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.425443][T15610] ? do_futex+0x122/0x350 [ 1004.425506][T15610] ? __pfx_do_futex+0x10/0x10 [ 1004.425596][T15610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.425651][T15610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.425698][T15610] ? xfd_validate_state+0x61/0x180 [ 1004.425770][T15610] __x64_sys_bpf+0x78/0xc0 [ 1004.425820][T15610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.425867][T15610] ? lockdep_hardirqs_on+0x7c/0x110 [ 1004.425927][T15610] do_syscall_64+0xcd/0x4c0 [ 1004.426001][T15610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.426041][T15610] RIP: 0033:0x7f1bac98e929 [ 1004.426074][T15610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1004.426114][T15610] RSP: 002b:00007f1bad87c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1004.426151][T15610] RAX: ffffffffffffffda RBX: 00007f1bacbb5fa0 RCX: 00007f1bac98e929 [ 1004.426178][T15610] RDX: 0000000000000039 RSI: 0000200000000500 RDI: 000000000000000a [ 1004.426203][T15610] RBP: 00007f1baca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1004.426227][T15610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1004.426262][T15610] R13: 0000000000000000 R14: 00007f1bacbb5fa0 R15: 00007ffcdb20c2b8 [ 1004.426315][T15610] [ 1004.793368][T15613] ip6t_rpfilter: unknown options [ 1005.215645][ T5831] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 1005.795348][ T5831] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.814384][ T5831] usb 10-1: config 0 has no interfaces? [ 1005.828683][ T5831] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1005.846247][ T5831] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.854371][ T5831] usb 10-1: Product: syz [ 1005.878676][ T5831] usb 10-1: Manufacturer: syz [ 1005.883393][ T5831] usb 10-1: SerialNumber: syz [ 1005.903409][ T5831] usb 10-1: config 0 descriptor?? [ 1007.521453][ T9] usb 10-1: USB disconnect, device number 23