last executing test programs: 22m41.603866597s ago: executing program 0 (id=22): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000240)='./file1\x00') sync_file_range(r4, 0x0, 0x0, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc) 22m38.096312116s ago: executing program 0 (id=26): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8822, &(0x7f0000000380)={[{@sb={'sb', 0x3d, 0xf9e}}, {@lazytime}, {@norecovery}, {@usrquota}, {@noacl}, {@bsdgroups}, {@data_ordered}, {@delalloc}, {@jqfmt_vfsv0}]}, 0x1, 0x560, &(0x7f0000001080)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x1) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) fchdir(r6) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)=""/229, 0xe5) 22m35.902938543s ago: executing program 0 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) syz_socket_connect_nvme_tcp() 22m34.783529052s ago: executing program 0 (id=30): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101080) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000080)={0x2, 0x2, 0x0, 0x2, 0xffffffff}) recvmsg(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) 22m33.689450131s ago: executing program 0 (id=32): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x5514, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 22m32.044654634s ago: executing program 0 (id=33): r0 = io_uring_setup(0x2ef1, &(0x7f0000000000)={0x0, 0x3d10, 0x1, 0xfffffffd}) r1 = socket$kcm(0x21, 0x2, 0x2) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0xfffffffd) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) close_range(r0, 0xffffffffffffffff, 0x0) 22m15.322777029s ago: executing program 32 (id=33): r0 = io_uring_setup(0x2ef1, &(0x7f0000000000)={0x0, 0x3d10, 0x1, 0xfffffffd}) r1 = socket$kcm(0x21, 0x2, 0x2) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0xfffffffd) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) close_range(r0, 0xffffffffffffffff, 0x0) 10m42.506761188s ago: executing program 1 (id=1747): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x481, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e7522"], 0x24) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000380)=0x16) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000002300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = epoll_create1(0x80000) fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x5, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000200)=0x41c16f48c89e8235, 0x4) 10m40.650148162s ago: executing program 1 (id=1750): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f", 0xc4, 0xc001, 0x0, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 10m38.300301571s ago: executing program 1 (id=1754): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000000)=0x1, 0x7, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r0, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x40}, 0x4, 0x700000002000000, 0x0, 0x2000000}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x411, &(0x7f0000000000)=ANY=[], 0x1, 0xa2e, &(0x7f0000001540)="$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") sched_setscheduler(0x0, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc0186e86, &(0x7f0000000440)={@desc={0x1, 0x4000, @auto="c51c458e580abf28"}}) bind(0xffffffffffffffff, 0x0, 0x0) 10m37.280500378s ago: executing program 1 (id=1757): r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="13000000070000000c00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX=r0, @ANYRES32], 0x50) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x3, 0x4, 0xf}, 0x3d, [0x200, 0xc95a, 0xfffffff3, 0x8, 0x7d, 0x6, 0x1, 0x3ff, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x80000000, 0x10000, 0xe661, 0x4, 0x1000007, 0x3, 0x10008001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x5000007, 0x103, 0x2, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x5, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x32, 0x1, 0x40], [0x10000007, 0x80010002, 0x12b, 0x8000, 0x0, 0xfffffff3, 0x129432e6, 0x3, 0x7, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x1297, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0x6, 0x4, 0x4, 0x8000, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1004, 0x7ff, 0x5f31, 0x4, 0xefffffff, 0x6, 0x5, 0x9, 0x4, 0x9, 0x8, 0x9, 0x4, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0xe, 0x2009, 0x6, 0x3, 0x4, 0x81, 0x7, 0x7, 0x9, 0x48c93690, 0x2, 0xfc], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0xa, 0x5, 0x7fff, 0x8, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x4, 0x1, 0x800003, 0x10000009, 0x3e7, 0xd, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0xfffffff2, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x8004, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0x80, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x4, 0x0, 0x10006, 0xfffffffb, 0x120000, 0x3, 0x6, 0x0, 0x4, 0x3], [0x3, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x10000000, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x401, 0x104, 0x80000000, 0x5, 0x7fff, 0x1, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8000014c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000003, 0x4, 0x8, 0xffffffff, 0x3, 0x3, 0xffff, 0x1000, 0x8, 0x100, 0x4, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x239c5cd3, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0x9]}, 0x45c) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 10m35.166713594s ago: executing program 1 (id=1760): socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r6, 0xc0345642, &(0x7f0000000bc0)={0x2, "479cdce4cb4c5b12982c63b5f11a484913207e44b4a4cdfbda7acadfc628be0a", 0x2}) sendfile(r5, 0xffffffffffffffff, 0x0, 0x3a) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x0) 10m32.086408778s ago: executing program 1 (id=1763): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 10m16.994359184s ago: executing program 33 (id=1763): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 8m25.8027325s ago: executing program 5 (id=1996): r0 = syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_auto}]}) chroot(&(0x7f0000000000)='./bus\x00') lseek(r0, 0x10, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 8m22.699673193s ago: executing program 5 (id=1998): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0xff) bind$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0xff}, 0xa) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) setsockopt(r5, 0x84, 0x7f, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, 0x0) recvmsg(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 8m18.110610698s ago: executing program 5 (id=2008): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0xa, 0x801, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffc, @local, 0x2}, 0x1c) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, &(0x7f0000000080)=[{0x0}], 0x1, 0x114a, 0x0) socket$inet6(0xa, 0x3, 0x3c) 8m16.936458008s ago: executing program 5 (id=2013): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x481, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000380)=0x16) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000002300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = epoll_create1(0x80000) fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x5, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000200)=0x41c16f48c89e8235, 0x4) 8m14.901538113s ago: executing program 5 (id=2015): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0xa, 0x801, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffc, @local, 0x2}, 0x1c) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, &(0x7f0000000080)=[{0x0}], 0x1, 0x114a, 0x0) socket$inet6(0xa, 0x3, 0x3c) 8m13.825067002s ago: executing program 5 (id=2016): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 7m57.584664446s ago: executing program 34 (id=2016): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 3m46.449688698s ago: executing program 6 (id=2456): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r7, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000340)='btrfs_handle_em_exist\x00', r6, 0x0, 0xfff}, 0x1e) r8 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x0, 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x4}]}, 0x18}, 0x1, 0x500, 0x0, 0x4}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x4e22, @local}, {0x2, 0x0, @empty}, 0x102, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0xfffffffffffffffd, 0x5}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @local}, 0x10) 3m42.22827168s ago: executing program 6 (id=2461): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x481, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e7522"], 0x24) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000380)=0x16) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000002300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = epoll_create1(0x80000) fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x5, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000200)=0x41c16f48c89e8235, 0x4) 3m40.571236633s ago: executing program 6 (id=2465): socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 3m39.70430624s ago: executing program 6 (id=2466): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000f, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") 3m36.852979362s ago: executing program 6 (id=2472): r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="13000000070000000c00", @ANYRES32, @ANYRESHEX=r0, @ANYRES32], 0x50) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x3, 0x4, 0xf}, 0x3d, [0x200, 0xc95a, 0xfffffff3, 0x8, 0x7d, 0x6, 0x1, 0x3ff, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x80000000, 0x10000, 0xe661, 0x4, 0x1000007, 0x3, 0x10008001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x5000007, 0x103, 0x2, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x5, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x32, 0x1, 0x40], [0x10000007, 0x80010002, 0x12b, 0x8000, 0x0, 0xfffffff3, 0x129432e6, 0x3, 0x7, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x1297, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0x6, 0x4, 0x4, 0x8000, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1004, 0x7ff, 0x5f31, 0x4, 0xefffffff, 0x6, 0x5, 0x9, 0x4, 0x9, 0x8, 0x9, 0x4, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0xe, 0x2009, 0x6, 0x3, 0x4, 0x81, 0x7, 0x7, 0x9, 0x48c93690, 0x2, 0xfc], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0xa, 0x5, 0x7fff, 0x8, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x4, 0x1, 0x800003, 0x10000009, 0x3e7, 0xd, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0xfffffff2, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x8004, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0x80, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x4, 0x0, 0x10006, 0xfffffffb, 0x120000, 0x3, 0x6, 0x0, 0x4, 0x3], [0x3, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x10000000, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x401, 0x104, 0x80000000, 0x5, 0x7fff, 0x1, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8000014c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000003, 0x4, 0x8, 0xffffffff, 0x3, 0x3, 0xffff, 0x1000, 0x8, 0x100, 0x4, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x239c5cd3, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0x9]}, 0x45c) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r5, &(0x7f0000000040), 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x3, 0x2, 0x4, 0x4, {0xa, 0x4e24, 0x9, @loopback, 0x5}}}, 0x3a) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f00000003c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 3m34.238416822s ago: executing program 6 (id=2475): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e"], 0x24) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000380)=0x16) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000002300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = epoll_create1(0x80000) fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x5, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000200)=0x41c16f48c89e8235, 0x4) 3m33.578967397s ago: executing program 3 (id=2478): socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 3m31.90667489s ago: executing program 3 (id=2480): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0xff) bind$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0xff}, 0xa) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0xb4}}, 0x0) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980", 0x6) r7 = openat$mice(0xffffffffffffff9c, 0x0, 0x80) ioctl$SNDRV_PCM_IOCTL_PAUSE(r7, 0x40044145, 0x0) recvmsg(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 3m28.963623483s ago: executing program 3 (id=2483): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000f, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$eJzs28tvG8UfAPDvrpP219cvoZRHH0CgICIeSZMW6IEDIJA4gITEpRxDklalboOaINGqgoBQOaJK3BFHJP4CTnBBwAmJK9xRpQrlQuFktPZu/IjtJsGJS/35SNvM7I498/Xs2LM73QAG1lj2TxKxNyJ+jYiRWra5wFjtz82VK7N/rVyZTaJSefOPpFruz5Urs0XR4nV78sx4GpF+ksThNvUuXrp8bqZcnr+Y5yeXzr87uXjp8tNnz8+cmT8zf2H65MkTx6eee3b6mZ7EeVfW1kMfLBw5+Opb116fPXXt7R+/Tor4W+LokbFuBx+rVHpcXX/ta0gnQ31sCBtSioisu4ar438kSlHvvJF45eO+Ng7YUpVch8PLFeAOlkS/WwD0R/FDn13/Ftv2zT7678aLtQugLO6b+VY7MhRp1C6Mhluub3tpLCJOLf/9RbbF1tyHAABo8m02/3mq3fwvjXsbyv0/XxsazddS9kfE3RFxICLuiaiWvS8i7t9g/a2LJGvnP+n1TQW2Ttn87/l8bat5/pcWRUZLeW5fNTOcnD5bnj+WfybjMbwzy091qeO7l3/5rNOxxvlftmX1F3PBvB3Xh3Y2v2ZuZmnm38Tc6MZHEYeG2sWfrK4EJBFxMCIObbKOs098daTTsdb4K0m3d3qhOduDdabKlxGP1/p/OVriLyTd1ycn/xfl+WOTxVmx1k8/X32jU/237v+tlfX/7rbn/2r8o0njeu3ixuu4+tunHa9pJjZ1/td37Mj/vj+ztHRxKmJH8lqt0Y37p+uvLfJF+Sz+8aPtx//+qH8ShyMiO4kfiIgHI+KhvO8ejohHIuJol/h/eOnRdzodux36f66l/0ebi7T0fz2xI1r3tE+Uzn3/TfM71pPr+/47UU2N53vW8/23nnZt7mwGAACA/540IvZGkk6sptN0YqL2f/gPxO60vLC49OTphfcuzNWeERiN4bS401W7H1y7HzqVX9YX+emW/PH8vvHnpV3V/MTsQnmu38HDgNvTYfxnfi/1u3XAlvO8Fgwu4x8Gl/EPg8v4h8HVZvzv6kc7gO3X7vf/w3qyMrKdjQG2Vcv4t+wHA8T1Pwwu4x8GV+P47/r8PXAnWdwVt35IXkJiTSLS26IZvUkkWzwK9vY7wI0n+v3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BAAA///oO+WP") 3m27.356864625s ago: executing program 3 (id=2486): r0 = syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) chroot(&(0x7f0000000000)='./bus\x00') lseek(r0, 0x10, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 3m25.326554811s ago: executing program 3 (id=2489): r0 = syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) chroot(&(0x7f0000000000)='./bus\x00') lseek(r0, 0x10, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 3m20.499361278s ago: executing program 3 (id=2495): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x481, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e7522"], 0x24) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000380)=0x16) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000002300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = epoll_create1(0x80000) fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x5, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 3m19.142994638s ago: executing program 35 (id=2475): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e"], 0x24) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000380)=0x16) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000002300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = epoll_create1(0x80000) fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x5, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000200)=0x41c16f48c89e8235, 0x4) 3m4.917674297s ago: executing program 36 (id=2495): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x481, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e7522"], 0x24) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000380)=0x16) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000002300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = epoll_create1(0x80000) fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x5, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 18.18272561s ago: executing program 9 (id=3201): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) memfd_secret(0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16.944679099s ago: executing program 9 (id=3211): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x8800) 10.083894193s ago: executing program 9 (id=3255): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0xa4, 0x10, 0x503, 0x2000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x8}, @IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}, @IFLA_CARRIER={0x5, 0x21, 0x7}, @IFLA_MAP={0x24, 0xe, {0x7, 0x6, 0x81, 0x7, 0x2, 0x6}}, @IFLA_LINKMODE={0x5, 0x11, 0x5}, @IFLA_PORT_SELF={0x2c, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, 'bond\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9d00b9dab7af4567d565ca0f45e910f0"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xfd}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40210f22fcc1c85a}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f000001f8c0)={'vcan0\x00'}) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x188, &(0x7f0000000080)={0x0, 0xbbca, 0x8, 0x3}, &(0x7f0000000400), &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000012c0)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendfile(r3, r2, 0x0, 0x7ffffffd) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902900003010000000904000000010100000a240100000002010211240600000500000000000000000000000b2407000000002e387cf009040100000102000009040101010102000009050109000000008007250100000000090402000001020000090402010101020000072401000003000e2402030e000000f5138d22419e0905820940", @ANYRESDEC, @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRESHEX=0x0], 0x0) 9.272043358s ago: executing program 4 (id=3260): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) lseek(r0, 0xb9dc, 0x6) 9.126637309s ago: executing program 4 (id=3261): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x58, 0x23b) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7.956824099s ago: executing program 9 (id=3264): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000280)={"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"}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 7.77074468s ago: executing program 9 (id=3265): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) 5.382706948s ago: executing program 7 (id=3271): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000010850000006d00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="18"], 0x50) 5.312510989s ago: executing program 7 (id=3272): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xd8e0}) 5.19852883s ago: executing program 7 (id=3273): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'H'}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) getdents64(r1, &(0x7f00000000c0)=""/4096, 0x1000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r5 = dup(r4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.858773912s ago: executing program 7 (id=3274): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000300)=0x7fffffffffffffff, 0x85, 0x3) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.465936405s ago: executing program 4 (id=3278): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fff, 0x7) 4.306762226s ago: executing program 7 (id=3280): sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40008c0}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 3.485675933s ago: executing program 2 (id=3283): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB], 0x20) getsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept4(r0, 0x0, 0x0, 0x0) 3.271634224s ago: executing program 2 (id=3285): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x210012, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1bb, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x10400, 0x0, 0xfb, 0x0, &(0x7f0000000000)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xf4240}], 0x1, 0x800001, 0x0, 0x0) 3.197045265s ago: executing program 7 (id=3286): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xb, 0xd92, 0x0, 0xfffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) lstat(0x0, 0x0) fsopen(0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='\x00', 0xfffffffffffffd9f, 0x0, 0x0, 0x25) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0xffffec77, @my=0x1}, 0x10) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) 2.906163328s ago: executing program 8 (id=3288): bpf$PROG_LOAD(0x5, 0x0, 0x0) inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) open(0x0, 0x4c37e, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)={0x2040, 0x102, 0x4}, 0x18) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) 2.103862784s ago: executing program 8 (id=3289): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7d37bcf9e433c29", 0x28}], 0x2}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000a00)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) 2.014742044s ago: executing program 2 (id=3290): ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 1.972214945s ago: executing program 8 (id=3291): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1}, 0x24}}, 0x0) 808.961804ms ago: executing program 8 (id=3292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001800ac1414aa08001900ffffffff14"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 801.791444ms ago: executing program 2 (id=3293): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(r1, &(0x7f00000002c0)="23e77c31be9cfb987e811ed3b83e2c34", 0x10, 0x40040080, 0x0, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002bc0)=""/109, 0x6d}], 0x1}, 0x0) 772.167894ms ago: executing program 4 (id=3294): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000f40)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, &(0x7f0000000f80)={0x2020}, 0x2020) 678.552984ms ago: executing program 4 (id=3295): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe800000000000"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6bf00b7100000000000000"], 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mmap(&(0x7f0000539000/0x1000)=nil, 0x1000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r2 = dup(r1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x40000032, r3, 0x0) pipe2(0x0, 0x0) pipe2(0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r8 = openat$cgroup_procs(r6, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000000c0), 0x12) preadv(r8, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) socket$nl_route(0x10, 0x3, 0x0) 672.728545ms ago: executing program 2 (id=3296): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x7, 0x0) 661.035805ms ago: executing program 8 (id=3297): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) memfd_secret(0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 322.523057ms ago: executing program 2 (id=3298): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000001000000bd79000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000100)=0x1ff, 0x4) syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) r3 = io_uring_setup(0x35f3, &(0x7f0000000300)={0x0, 0xaa16, 0x80, 0x0, 0x1dc}) syz_io_uring_setup(0x891, &(0x7f0000000440)={0x0, 0xa7a4, 0x2000, 0x1, 0xbfdffffc, 0x0, r3}, &(0x7f00000000c0), 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x565) 211.534458ms ago: executing program 8 (id=3299): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES16], 0x1c}}, 0x20000010) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x14, 0x0, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="068e9ee03608000000100000200b000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x1000, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="0a000000010001", 0x7) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x15) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r8, 0x10, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4005) 53.468549ms ago: executing program 4 (id=3300): bpf$PROG_LOAD(0x5, 0x0, 0x0) inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) open(0x0, 0x4c37e, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)={0x2040, 0x102, 0x4}, 0x18) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) 0s ago: executing program 9 (id=3301): socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3100490, &(0x7f0000000300)={[{@dioread_lock}, {@usrjquota}, {@quota}, {@norecovery}, {@prjquota}, {@noquota}, {@grpquota}, {@barrier_val}, {@nouser_xattr}, {@dax}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x2000, 0xd000}) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) chdir(&(0x7f0000000540)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) kernel console output (not intermixed with test programs): becomes ready [ 1294.217924][T15076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1294.723105][T14990] device veth0_vlan entered promiscuous mode [ 1294.815395][T14990] device veth1_vlan entered promiscuous mode [ 1294.928712][T10422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1294.953410][T10422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1294.990617][T10422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1295.009184][T10422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1295.032191][T10422] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1295.049509][T10422] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1295.210003][T10422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1295.258991][T10422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1295.358226][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1295.381606][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1295.394658][T14990] device veth0_macvtap entered promiscuous mode [ 1295.416806][T14990] device veth1_macvtap entered promiscuous mode [ 1295.485007][T14990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1295.512367][T14990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.563794][T14990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1295.615629][T14990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.625663][T14990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1295.636935][T14990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.649190][T14990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1295.663403][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1295.673054][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1295.769191][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1295.820386][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1297.611889][T14990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1297.633245][T14990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.663620][T14990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1297.704803][T14990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.730072][T14990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1297.756088][T14990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.769947][T14990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1297.787040][T14990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.802712][T14990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1297.901169][T14990] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.963768][T14990] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.976548][T14990] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.208478][T14990] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.360863][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 1298.360970][ T26] audit: type=1326 audit(1742420027.533:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15378 comm="syz.2.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc0e09169 code=0x7ffc0000 [ 1298.629904][ T26] audit: type=1326 audit(1742420027.533:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15378 comm="syz.2.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7effc0e09169 code=0x7ffc0000 [ 1299.068041][ T26] audit: type=1326 audit(1742420027.533:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15378 comm="syz.2.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc0e09169 code=0x7ffc0000 [ 1299.130043][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1299.168623][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1299.332058][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1299.350895][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1299.360757][ T26] audit: type=1326 audit(1742420027.533:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15378 comm="syz.2.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effc0e09169 code=0x7ffc0000 [ 1300.664575][ T26] audit: type=1326 audit(1742420027.543:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15378 comm="syz.2.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc0e09169 code=0x7ffc0000 [ 1300.690870][ T26] audit: type=1326 audit(1742420027.553:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15378 comm="syz.2.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7effc0e09169 code=0x7ffc0000 [ 1300.765478][ T26] audit: type=1326 audit(1742420027.563:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15378 comm="syz.2.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc0e09169 code=0x7ffc0000 [ 1300.974595][ T26] audit: type=1326 audit(1742420027.603:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15378 comm="syz.2.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7effc0e09169 code=0x7ffc0000 [ 1302.282595][ T26] audit: type=1326 audit(1742420027.603:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15378 comm="syz.2.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc0e09169 code=0x7ffc0000 [ 1302.531967][T15076] device veth0_vlan entered promiscuous mode [ 1302.634505][T15076] device veth1_vlan entered promiscuous mode [ 1302.673372][ T26] audit: type=1326 audit(1742420027.613:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15378 comm="syz.2.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effc0e09169 code=0x7ffc0000 [ 1303.076568][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1303.088831][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1303.387685][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1303.469979][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1303.479028][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1303.711566][T15076] device veth0_macvtap entered promiscuous mode [ 1303.720836][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1304.054548][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1304.164030][T15076] device veth1_macvtap entered promiscuous mode [ 1304.237729][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1304.261639][T10422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1304.284462][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1304.320149][T10422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1304.426737][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1304.732033][T15442] loop7: detected capacity change from 0 to 512 [ 1305.133889][ T4258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1305.160710][ T4258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1305.215011][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1305.339261][T15076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1305.359302][T15076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.387121][T15076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1305.401510][T15076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.421077][T15442] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2580: corrupted inode contents [ 1305.432404][T15076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1305.437672][T15442] EXT4-fs error (device loop7): ext4_dirty_inode:6010: inode #16: comm syz.7.2580: mark_inode_dirty error [ 1305.454223][T15076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.465575][T15442] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2580: corrupted inode contents [ 1305.472902][T15076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1305.502331][T15442] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #16: comm syz.7.2580: mark_inode_dirty error [ 1305.521606][T15076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.551692][T15076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1305.572771][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1305.590308][T15442] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2580: corrupted inode contents [ 1305.618828][T15442] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 1305.628466][T15442] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2580: corrupted inode contents [ 1305.644419][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1305.691068][T15442] EXT4-fs error (device loop7): ext4_truncate:4272: inode #16: comm syz.7.2580: mark_inode_dirty error [ 1305.752617][T15076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1305.773745][T15076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.783793][T15076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1305.879735][T15076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.891080][T15076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1305.903746][T15076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.914232][T15076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1306.571427][T15442] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 1306.583741][T15076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.309455][T15442] EXT4-fs (loop7): 1 truncate cleaned up [ 1307.319027][T15442] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1307.358109][T15076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1307.384081][T15442] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1307.396002][T15076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.416094][T15076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1307.428981][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1307.453716][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1307.534570][T15466] loop8: detected capacity change from 0 to 512 [ 1307.636873][T15076] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.646490][T15076] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.655573][T15076] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.664414][T15076] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.595633][T15466] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1308.766139][T15466] EXT4-fs (loop8): 1 orphan inode deleted [ 1308.779904][T15466] EXT4-fs (loop8): 1 truncate cleaned up [ 1308.785616][T15466] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 1308.830350][T15481] loop7: detected capacity change from 0 to 512 [ 1309.890344][ T4512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1309.909916][ T4512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1309.954755][T15481] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2585: corrupted inode contents [ 1310.020439][T15481] EXT4-fs error (device loop7): ext4_dirty_inode:6010: inode #16: comm syz.7.2585: mark_inode_dirty error [ 1310.104766][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1310.127994][ T4258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.157837][T15491] loop2: detected capacity change from 0 to 512 [ 1310.166843][T15481] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2585: corrupted inode contents [ 1310.206518][ T4258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.252694][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1310.384617][T15481] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #16: comm syz.7.2585: mark_inode_dirty error [ 1310.453462][T15481] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2585: corrupted inode contents [ 1310.471651][T15481] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 1310.484663][T15481] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2585: corrupted inode contents [ 1310.767111][T15481] EXT4-fs error (device loop7): ext4_truncate:4272: inode #16: comm syz.7.2585: mark_inode_dirty error [ 1311.294182][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 1311.300690][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 1311.313749][ T4383] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.348931][T15491] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.2589: corrupted inode contents [ 1311.369868][T15481] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 1311.388543][T15503] device batadv_slave_1 entered promiscuous mode [ 1311.390182][T15491] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #16: comm syz.2.2589: mark_inode_dirty error [ 1311.395219][T15503] device batadv_slave_1 left promiscuous mode [ 1311.440589][T15481] EXT4-fs (loop7): 1 truncate cleaned up [ 1311.474610][T15481] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1311.516082][T15491] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.2589: corrupted inode contents [ 1311.538270][T15491] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.2589: mark_inode_dirty error [ 1311.563370][T15491] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.2589: corrupted inode contents [ 1311.580985][T15481] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1311.609416][ T4383] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.799430][T15491] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 1311.830592][T15491] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.2589: corrupted inode contents [ 1311.835813][ T4383] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.016838][T15491] EXT4-fs error (device loop2): ext4_truncate:4272: inode #16: comm syz.2.2589: mark_inode_dirty error [ 1312.082937][T15514] loop8: detected capacity change from 0 to 512 [ 1312.658396][T15491] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 1312.669162][T15491] EXT4-fs (loop2): 1 truncate cleaned up [ 1312.675849][T15491] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1312.694115][T15491] ext4 filesystem being mounted at /518/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1312.928875][ T4383] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.064032][T15514] EXT4-fs error (device loop8): ext4_do_update_inode:5174: inode #16: comm syz.8.2590: corrupted inode contents [ 1314.468924][T15514] EXT4-fs error (device loop8): ext4_dirty_inode:6010: inode #16: comm syz.8.2590: mark_inode_dirty error [ 1314.679508][T15514] EXT4-fs error (device loop8): ext4_do_update_inode:5174: inode #16: comm syz.8.2590: corrupted inode contents [ 1314.954762][T15514] EXT4-fs error (device loop8): __ext4_ext_dirty:183: inode #16: comm syz.8.2590: mark_inode_dirty error [ 1315.019526][T15514] EXT4-fs error (device loop8): ext4_do_update_inode:5174: inode #16: comm syz.8.2590: corrupted inode contents [ 1315.108024][T15514] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 1315.209287][T15514] EXT4-fs error (device loop8): ext4_do_update_inode:5174: inode #16: comm syz.8.2590: corrupted inode contents [ 1315.429078][T15514] EXT4-fs error (device loop8): ext4_truncate:4272: inode #16: comm syz.8.2590: mark_inode_dirty error [ 1315.480590][T15514] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 1315.955168][T15514] EXT4-fs (loop8): 1 truncate cleaned up [ 1316.349893][T15514] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1316.380258][T15514] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1318.097052][T15567] loop8: detected capacity change from 0 to 512 [ 1319.516798][T15567] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1319.686948][T15567] EXT4-fs (loop8): 1 orphan inode deleted [ 1319.789987][T15567] EXT4-fs (loop8): 1 truncate cleaned up [ 1319.795701][T15567] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 1320.377401][T15596] loop2: detected capacity change from 0 to 512 [ 1320.747302][T15596] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.2605: corrupted inode contents [ 1320.773922][T15596] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #16: comm syz.2.2605: mark_inode_dirty error [ 1320.881998][T15596] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.2605: corrupted inode contents [ 1320.910528][T15596] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.2605: mark_inode_dirty error [ 1320.931506][T15596] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.2605: corrupted inode contents [ 1321.054693][T15596] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 1321.146030][T15596] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.2605: corrupted inode contents [ 1321.258680][T15596] EXT4-fs error (device loop2): ext4_truncate:4272: inode #16: comm syz.2.2605: mark_inode_dirty error [ 1322.121140][T15609] ip6t_rpfilter: unknown options [ 1322.627884][T15596] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 1323.500811][T15596] EXT4-fs (loop2): 1 truncate cleaned up [ 1323.528317][T15596] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1323.543983][T15596] ext4 filesystem being mounted at /520/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1327.715900][T15645] loop2: detected capacity change from 0 to 512 [ 1329.316146][T15645] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.2616: corrupted inode contents [ 1329.499636][T15645] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #16: comm syz.2.2616: mark_inode_dirty error [ 1329.527364][T15645] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.2616: corrupted inode contents [ 1329.551148][T15645] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.2616: mark_inode_dirty error [ 1329.569820][T15645] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.2616: corrupted inode contents [ 1329.597689][T15645] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 1329.617727][T15645] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.2616: corrupted inode contents [ 1329.646267][T15665] loop9: detected capacity change from 0 to 512 [ 1329.675158][T15645] EXT4-fs error (device loop2): ext4_truncate:4272: inode #16: comm syz.2.2616: mark_inode_dirty error [ 1331.214968][T15645] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 1331.401618][T15645] EXT4-fs (loop2): 1 truncate cleaned up [ 1331.414510][T15645] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1331.461209][T15645] ext4 filesystem being mounted at /522/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1331.703391][T15665] EXT4-fs error (device loop9): ext4_do_update_inode:5174: inode #16: comm syz.9.2621: corrupted inode contents [ 1331.856248][T15665] EXT4-fs error (device loop9): ext4_dirty_inode:6010: inode #16: comm syz.9.2621: mark_inode_dirty error [ 1332.189376][T15665] EXT4-fs error (device loop9): ext4_do_update_inode:5174: inode #16: comm syz.9.2621: corrupted inode contents [ 1332.208514][T15665] EXT4-fs error (device loop9): __ext4_ext_dirty:183: inode #16: comm syz.9.2621: mark_inode_dirty error [ 1333.048640][T15665] EXT4-fs error (device loop9): ext4_do_update_inode:5174: inode #16: comm syz.9.2621: corrupted inode contents [ 1333.061818][T15665] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 1333.185148][T15665] EXT4-fs error (device loop9): ext4_do_update_inode:5174: inode #16: comm syz.9.2621: corrupted inode contents [ 1333.242541][T15665] EXT4-fs error (device loop9): ext4_truncate:4272: inode #16: comm syz.9.2621: mark_inode_dirty error [ 1333.340795][T15665] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 1333.600852][T15665] EXT4-fs (loop9): 1 truncate cleaned up [ 1333.606658][T15665] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1333.742336][T15665] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1336.960709][T15719] ip6t_rpfilter: unknown options [ 1337.190748][ T4383] device hsr_slave_0 left promiscuous mode [ 1337.240137][ T4383] device hsr_slave_1 left promiscuous mode [ 1337.300604][ T4383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1337.308200][ T4383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1337.398546][ T4383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1337.499970][ T4383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1337.631134][ T4383] device bridge_slave_1 left promiscuous mode [ 1337.674082][ T4383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.778457][ T4383] device bridge_slave_0 left promiscuous mode [ 1337.810574][ T4383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.930415][ T4383] device veth1_macvtap left promiscuous mode [ 1337.936534][ T4383] device veth0_macvtap left promiscuous mode [ 1337.991597][ T4383] device veth1_vlan left promiscuous mode [ 1337.997463][ T4383] device veth0_vlan left promiscuous mode [ 1340.803641][T15763] ip6t_rpfilter: unknown options [ 1342.954022][ T4383] team0 (unregistering): Port device team_slave_1 removed [ 1343.094790][ T4383] team0 (unregistering): Port device team_slave_0 removed [ 1343.280557][ T4383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1343.379482][ T4383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1343.873357][ T4205] infiniband syz1: ib_query_port failed (-19) [ 1344.207467][T15767] loop8: detected capacity change from 0 to 512 [ 1344.393052][T15767] EXT4-fs error (device loop8): ext4_do_update_inode:5174: inode #16: comm syz.8.2640: corrupted inode contents [ 1344.534286][T15767] EXT4-fs error (device loop8): ext4_dirty_inode:6010: inode #16: comm syz.8.2640: mark_inode_dirty error [ 1344.590020][T15767] EXT4-fs error (device loop8): ext4_do_update_inode:5174: inode #16: comm syz.8.2640: corrupted inode contents [ 1344.660294][T15767] EXT4-fs error (device loop8): __ext4_ext_dirty:183: inode #16: comm syz.8.2640: mark_inode_dirty error [ 1344.692713][T15767] EXT4-fs error (device loop8): ext4_do_update_inode:5174: inode #16: comm syz.8.2640: corrupted inode contents [ 1345.226080][T15767] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 1345.541601][T15767] EXT4-fs error (device loop8): ext4_do_update_inode:5174: inode #16: comm syz.8.2640: corrupted inode contents [ 1345.562074][T15767] EXT4-fs error (device loop8): ext4_truncate:4272: inode #16: comm syz.8.2640: mark_inode_dirty error [ 1345.633506][T15767] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 1345.666707][T15767] EXT4-fs (loop8): 1 truncate cleaned up [ 1345.704374][T15767] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1345.746800][T15767] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1345.884538][ T4383] bond0 (unregistering): Released all slaves [ 1347.183797][ T4238] bond0 speed is unknown, defaulting to 1000 [ 1350.069447][T15815] chnl_net:caif_netlink_parms(): no params data found [ 1351.431588][T15815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.446671][T15815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.450480][ T4204] Bluetooth: hci0: command 0x0409 tx timeout [ 1351.541088][T15815] device bridge_slave_0 entered promiscuous mode [ 1351.560585][T15837] loop7: detected capacity change from 0 to 512 [ 1351.581278][T15815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.639917][T15815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.691101][T15815] device bridge_slave_1 entered promiscuous mode [ 1351.776185][T15837] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2650: corrupted inode contents [ 1351.838543][T15815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1351.873228][T15837] EXT4-fs error (device loop7): ext4_dirty_inode:6010: inode #16: comm syz.7.2650: mark_inode_dirty error [ 1351.923349][T15815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1351.971360][T15837] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2650: corrupted inode contents [ 1352.030617][T15837] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #16: comm syz.7.2650: mark_inode_dirty error [ 1352.072592][T15815] team0: Port device team_slave_0 added [ 1352.090976][T15837] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2650: corrupted inode contents [ 1352.106678][T15815] team0: Port device team_slave_1 added [ 1352.239526][T15815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1352.251848][T15837] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 1352.261268][T15837] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2650: corrupted inode contents [ 1352.289898][T15815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1352.370125][T15837] EXT4-fs error (device loop7): ext4_truncate:4272: inode #16: comm syz.7.2650: mark_inode_dirty error [ 1352.408525][T15837] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 1352.420050][T15815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1352.441042][T15837] EXT4-fs (loop7): 1 truncate cleaned up [ 1352.446761][T15837] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1352.475579][T15815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1352.499853][T15815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1352.517061][T15837] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1352.580636][T15815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1352.853336][T15871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2657'. [ 1353.003250][T15815] device hsr_slave_0 entered promiscuous mode [ 1353.064226][T15815] device hsr_slave_1 entered promiscuous mode [ 1353.539639][ T4207] Bluetooth: hci0: command 0x041b tx timeout [ 1353.907865][T15815] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.204315][T15815] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.411782][T15815] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.667134][T15815] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.855058][T15914] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 1355.389955][T15815] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1355.499298][T15815] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1355.584435][T15815] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1355.600508][ T4207] Bluetooth: hci0: command 0x040f tx timeout [ 1355.639583][T15815] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1355.928824][T15942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2671'. [ 1356.228011][T15947] loop2: detected capacity change from 0 to 7 [ 1356.320344][T15947] Dev loop2: unable to read RDB block 7 [ 1356.325136][T15815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1356.431381][T15947] loop2: AHDI p2 p3 [ 1356.457181][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1356.472416][T15947] loop2: partition table partially beyond EOD, truncated [ 1356.485589][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1356.568604][T15815] 8021q: adding VLAN 0 to HW filter on device team0 [ 1356.587868][T15947] loop2: p2 start 33582693 is beyond EOD, truncated [ 1356.625957][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1356.659484][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1356.790553][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.797699][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1356.842836][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1356.915690][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1356.944817][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1356.994068][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.001280][ T4284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1357.100632][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1357.141791][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1357.182022][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1357.246111][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1357.281441][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1357.355644][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1357.408435][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1357.500450][T15815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1357.584903][T15815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1357.680671][ T4204] Bluetooth: hci0: command 0x0419 tx timeout [ 1357.688065][T15554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1357.712625][T15554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1357.760051][T12720] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1357.809611][T15554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1357.822142][T15982] netlink: 'syz.9.2683': attribute type 27 has an invalid length. [ 1357.857309][T15554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1357.916682][T15554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1358.130813][T12720] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.159183][T12720] usb 9-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 1358.191153][T12720] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.251012][T12720] usb 9-1: config 0 descriptor?? [ 1358.313946][T12720] option 9-1:0.0: GSM modem (1-port) converter detected [ 1358.404923][ T4383] device hsr_slave_0 left promiscuous mode [ 1358.430489][ T4383] device hsr_slave_1 left promiscuous mode [ 1358.539561][ T4204] usb 9-1: USB disconnect, device number 2 [ 1358.549389][ T4383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1358.589644][ T4383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1358.596255][ T4204] option 9-1:0.0: device disconnected [ 1358.639416][ T4383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1358.675494][ T4383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1358.728363][ T4383] device bridge_slave_1 left promiscuous mode [ 1358.760046][ T4383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.794263][ T4383] device bridge_slave_0 left promiscuous mode [ 1358.811508][ T4383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.911358][ T4383] device veth1_macvtap left promiscuous mode [ 1358.917524][ T4383] device veth0_macvtap left promiscuous mode [ 1358.942786][ T4383] device veth1_vlan left promiscuous mode [ 1358.964502][ T4383] device veth0_vlan left promiscuous mode [ 1359.578411][ T4383] team0 (unregistering): Port device team_slave_1 removed [ 1359.625242][ T4383] team0 (unregistering): Port device team_slave_0 removed [ 1359.673897][ T4383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1359.744707][ T4383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1359.896133][T16027] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1360.045388][T16018] mmap: syz.8.2691 (16018) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 1360.174714][ T4383] bond0 (unregistering): Released all slaves [ 1360.354038][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1360.363747][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1360.432948][T15815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1360.869978][ T4384] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1361.142676][ T4384] usb 8-1: Using ep0 maxpacket: 8 [ 1361.277107][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1361.317300][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1361.426312][ T4384] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1361.450346][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1361.466967][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1361.480057][ T4384] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.518009][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1361.525660][ T4384] usb 8-1: Product: syz [ 1361.533786][ T4384] usb 8-1: Manufacturer: syz [ 1361.547125][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1361.555206][ T4384] usb 8-1: SerialNumber: syz [ 1361.580244][ T4384] usb 8-1: config 0 descriptor?? [ 1361.641050][T15815] device veth0_vlan entered promiscuous mode [ 1361.711086][T15815] device veth1_vlan entered promiscuous mode [ 1361.840176][ T4384] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1361.908693][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1361.938878][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1361.964366][T15815] device veth0_macvtap entered promiscuous mode [ 1361.986702][T15815] device veth1_macvtap entered promiscuous mode [ 1362.056587][T15815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.075839][T15815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.100031][T15815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.176008][T15815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.209186][T15815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.231991][T15815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.236213][ T4204] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1362.279450][T15815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1362.298599][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1362.329608][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1362.361709][ T4384] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -32 [ 1362.366117][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1362.385782][ T4384] usb 8-1: USB disconnect, device number 2 [ 1362.407360][T14662] udevd[14662]: setting mode of /dev/bus/usb/008/002 to 020664 failed: No such file or directory [ 1362.439931][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1362.448783][T14662] udevd[14662]: setting owner of /dev/bus/usb/008/002 to uid=0, gid=0 failed: No such file or directory [ 1362.501715][T15815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.519956][ T4204] usb 10-1: Using ep0 maxpacket: 16 [ 1362.522571][T15815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.549856][T15815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.583412][T15815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.589883][T15351] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1362.614174][T15815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.658129][T15815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.677455][ T4204] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1362.706023][ T4204] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1362.709856][T15815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.726720][ T4204] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1362.760085][T15815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.794850][T15815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1362.810903][T16103] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1362.831565][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1362.841374][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1362.865058][T16103] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1362.898882][T15815] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.923809][T15815] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.948016][T15815] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.961015][ T4204] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1362.964189][T15815] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.979809][ T4204] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.010692][ T4204] usb 10-1: Product: syz [ 1363.035531][ T4204] usb 10-1: Manufacturer: syz [ 1363.057714][ T4204] usb 10-1: SerialNumber: syz [ 1363.080393][T15351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.140004][T15351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1363.194178][T16115] trusted_key: encrypted_key: insufficient parameters specified [ 1363.204716][T15351] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1363.235147][T15351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.266273][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.286457][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.296388][T15351] usb 3-1: config 0 descriptor?? [ 1363.308093][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1363.363203][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.387667][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.438842][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1364.347670][T16156] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1364.375497][T16156] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1364.473182][T15351] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 1364.505697][T15351] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 1364.554202][T15351] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 1364.593469][T15351] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 1364.625618][T15351] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 1364.714792][T15351] usb 3-1: USB disconnect, device number 2 [ 1364.983236][ T4204] usb 10-1: 0:2 : does not exist [ 1365.236357][T16168] syz.7.2726 uses obsolete (PF_INET,SOCK_PACKET) [ 1365.250640][ T4204] usb 10-1: USB disconnect, device number 2 [ 1365.549170][T14662] udevd[14662]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1367.029931][T11871] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1367.400369][T11871] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1367.421708][T11871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.477518][T11871] usb 5-1: config 0 descriptor?? [ 1367.540035][ T4205] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1367.553037][T11871] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1367.653903][T11871] dvb_usb_af9015: probe of 5-1:0.0 failed with error -22 [ 1367.767121][T16228] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1367.806264][T16228] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1367.922164][ T4205] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1367.949674][ T4205] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.035915][ T4205] usb 10-1: config 0 descriptor?? [ 1368.630162][ T4205] ath6kl: Unsupported hardware version: 0x0 [ 1368.648186][ T4205] ath6kl: Failed to init ath6kl core: -22 [ 1368.760294][T16246] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2743'. [ 1368.771824][ T4205] ath6kl_usb: probe of 10-1:0.0 failed with error -22 [ 1368.936353][T11206] usb 10-1: USB disconnect, device number 3 [ 1369.469878][T11871] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1369.739887][T11871] usb 8-1: Using ep0 maxpacket: 8 [ 1369.860161][T11871] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1369.925588][T11871] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1369.939824][T11206] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1369.987831][T11871] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1370.083030][T11871] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1370.147536][T11871] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1370.185988][T11871] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.320381][T11206] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1370.328439][T11206] usb 10-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 1370.366077][T11206] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.430273][T11206] usb 10-1: config 0 descriptor?? [ 1370.500061][T11871] usb 8-1: GET_CAPABILITIES returned 0 [ 1370.505617][T11871] usbtmc 8-1:16.0: can't read capabilities [ 1370.739895][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1370.751552][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1370.760648][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1370.770963][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1370.780035][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1370.789101][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1370.798198][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1370.807329][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1370.816457][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1370.825632][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1370.834769][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1370.843844][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1370.852934][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1370.862056][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1370.871345][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1370.880727][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 1371.120228][T11871] usb 8-1: USB disconnect, device number 3 [ 1371.300042][T11206] usbhid 10-1:0.0: can't add hid device: -71 [ 1371.306703][T11206] usbhid: probe of 10-1:0.0 failed with error -71 [ 1371.361961][T11206] usb 10-1: USB disconnect, device number 4 [ 1371.590081][T11871] usb 5-1: USB disconnect, device number 2 [ 1371.770015][ T4238] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1371.920288][T15351] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1372.139877][ T4205] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1372.200174][ T4238] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 1372.208500][T15351] usb 8-1: Using ep0 maxpacket: 8 [ 1372.222681][ T4238] usb 3-1: config 0 has no interface number 0 [ 1372.242218][ T4238] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1372.274332][ T4238] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1372.305103][ T4238] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1372.336294][ T4238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.362421][ T4238] usb 3-1: config 0 descriptor?? [ 1372.389985][ T4205] usb 10-1: Using ep0 maxpacket: 16 [ 1372.394533][T15351] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1372.407736][T15351] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1372.417406][T15351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.446909][T15351] usb 8-1: config 0 descriptor?? [ 1372.510174][ T4205] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1372.564197][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 1372.570623][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 1372.680432][ T4205] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1372.700750][ T4205] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.723500][T15351] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1372.734264][ T4205] usb 10-1: Product: syz [ 1372.743121][ T4205] usb 10-1: Manufacturer: syz [ 1372.764139][ T4205] usb 10-1: SerialNumber: syz [ 1372.802507][ T4205] usb 10-1: config 0 descriptor?? [ 1372.854526][ T4238] logitech-djreceiver 0003:046D:C71B.0002: unknown main item tag 0x0 [ 1372.855261][ T4205] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1372.878425][ T4205] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1372.885381][ T4238] logitech-djreceiver 0003:046D:C71B.0002: unknown main item tag 0x0 [ 1372.903755][ T4238] logitech-djreceiver 0003:046D:C71B.0002: unknown main item tag 0x0 [ 1372.912634][ T4238] logitech-djreceiver 0003:046D:C71B.0002: unknown main item tag 0x0 [ 1372.934510][ T4238] logitech-djreceiver 0003:046D:C71B.0002: unknown main item tag 0x0 [ 1372.957925][ T4238] logitech-djreceiver 0003:046D:C71B.0002: unknown main item tag 0x0 [ 1372.977544][ T4238] logitech-djreceiver 0003:046D:C71B.0002: unknown main item tag 0x0 [ 1373.046391][ T4238] logitech-djreceiver 0003:046D:C71B.0002: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.2-1/input32 [ 1373.117767][ T4238] usb 3-1: USB disconnect, device number 3 [ 1373.224104][ T4208] usb 8-1: USB disconnect, device number 4 [ 1373.427903][T16335] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1373.476988][T16335] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1373.510036][ T4205] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1374.442288][ T4205] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1374.472888][ T4205] em28xx 10-1:0.0: board has no eeprom [ 1374.620011][ T4205] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1374.690511][ T4205] em28xx 10-1:0.0: dvb set to bulk mode. [ 1374.780187][ T4205] usb 10-1: USB disconnect, device number 5 [ 1374.811150][ T4205] em28xx 10-1:0.0: Disconnecting em28xx [ 1374.832084][T12720] em28xx 10-1:0.0: Binding DVB extension [ 1375.021302][T12720] em28xx 10-1:0.0: Registering input extension [ 1375.067644][ T4205] em28xx 10-1:0.0: Closing input extension [ 1375.124432][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1375.124450][ T26] audit: type=1326 audit(1742420104.393:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16362 comm="syz.9.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d549a169 code=0x7ffc0000 [ 1375.247473][ T26] audit: type=1326 audit(1742420104.433:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16362 comm="syz.9.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7ff9d549a169 code=0x7ffc0000 [ 1375.269929][ C0] vkms_vblank_simulate: vblank timer overrun [ 1375.274298][ T4205] em28xx 10-1:0.0: Freeing device [ 1375.406335][ T26] audit: type=1326 audit(1742420104.433:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16362 comm="syz.9.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d549a169 code=0x7ffc0000 [ 1376.532943][T16396] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1376.562282][T16396] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1376.616197][T16403] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2785'. [ 1377.130118][ T4204] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1377.478633][T16417] sctp: [Deprecated]: syz.9.2789 (pid 16417) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1377.478633][T16417] Use struct sctp_sack_info instead [ 1377.530094][ T4204] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.561760][ T4204] usb 5-1: config 0 has no interfaces? [ 1377.790317][ T4204] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1377.820089][ T4204] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.828148][ T4204] usb 5-1: Product: syz [ 1377.863434][ T4204] usb 5-1: Manufacturer: syz [ 1377.909003][ T4204] usb 5-1: SerialNumber: syz [ 1377.917466][ T4204] usb 5-1: config 0 descriptor?? [ 1378.164225][T16445] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2798'. [ 1378.429813][T15351] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1378.535216][ T4204] usb 5-1: USB disconnect, device number 3 [ 1378.857158][T15351] usb 3-1: config 0 has an invalid interface number: 130 but max is 0 [ 1378.873415][T15351] usb 3-1: config 0 has no interface number 0 [ 1378.889580][T15351] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=9e.22 [ 1378.908075][T15351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.936117][T15351] usb 3-1: config 0 descriptor?? [ 1379.003436][T15351] dw2102: su3000_identify_state [ 1379.021961][T15351] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1379.029130][T15351] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1379.037997][T15351] dvb-usb: bulk message failed: -22 (2/0) [ 1379.072252][T15351] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1379.129142][T15351] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-19) [ 1379.227799][T15351] usb 3-1: USB disconnect, device number 4 [ 1379.559837][ T4204] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1379.770292][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 1379.829848][ T4204] usb 5-1: Using ep0 maxpacket: 32 [ 1379.970365][ T4204] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 1380.020069][ T4204] usb 5-1: config 0 has no interface number 0 [ 1380.026241][ T4204] usb 5-1: config 0 interface 29 has no altsetting 0 [ 1380.293740][ T4204] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1380.309907][ T4204] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.318200][ T4204] usb 5-1: Product: syz [ 1380.322667][ T4204] usb 5-1: Manufacturer: syz [ 1380.327380][ T4204] usb 5-1: SerialNumber: syz [ 1380.346406][ T4204] usb 5-1: config 0 descriptor?? [ 1380.600212][ T4204] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1380.830504][ T4204] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 1380.830528][ T4204] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 1380.830568][ T4204] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 1381.003483][ T4204] peak_usb: probe of 5-1:0.29 failed with error -22 [ 1381.036748][ T4204] usb 5-1: USB disconnect, device number 4 [ 1381.456929][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2826'. [ 1381.840108][T16585] netlink: 'syz.4.2829': attribute type 27 has an invalid length. [ 1381.882701][T16580] input: syz0 as /devices/virtual/input/input9 [ 1382.171896][T16593] netlink: 'syz.8.2832': attribute type 3 has an invalid length. [ 1382.279899][T16593] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2832'. [ 1383.221232][ T26] audit: type=1326 audit(1742420112.493:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16615 comm="syz.9.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d549a169 code=0x7ffc0000 [ 1383.308112][ T26] audit: type=1326 audit(1742420112.523:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16615 comm="syz.9.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7ff9d549a169 code=0x7ffc0000 [ 1383.406418][ T26] audit: type=1326 audit(1742420112.523:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16615 comm="syz.9.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d549a169 code=0x7ffc0000 [ 1383.930089][T11871] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1384.302570][T11871] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.309915][ T13] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1384.332032][T11871] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1384.440285][T11871] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1384.442383][ T4204] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1384.459891][T11871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1384.479646][T11871] usb 5-1: SerialNumber: syz [ 1384.726495][ T13] usb 9-1: config 0 has an invalid interface number: 232 but max is 0 [ 1384.742545][ T13] usb 9-1: config 0 has no interface number 0 [ 1384.786798][T11871] usb 5-1: 0:2 : does not exist [ 1384.824568][T11871] usb 5-1: USB disconnect, device number 5 [ 1384.881912][ T4204] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1384.892869][T16684] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 1384.919206][ T4204] usb 3-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0xE1, skipping [ 1384.919473][T14662] udevd[14662]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1384.950289][ T13] usb 9-1: New USB device found, idVendor=0856, idProduct=ac44, bcdDevice=53.4a [ 1384.960070][ T4204] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1384.983484][ T13] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.012097][ T13] usb 9-1: Product: syz [ 1385.019306][ T4204] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1385.041760][ T13] usb 9-1: Manufacturer: syz [ 1385.046433][ T13] usb 9-1: SerialNumber: syz [ 1385.067532][ T4204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.095807][ T13] usb 9-1: config 0 descriptor?? [ 1385.401478][ T4204] ath6kl: Failed to submit usb control message: -71 [ 1385.411516][T16708] capability: warning: `syz.9.2856' uses 32-bit capabilities (legacy support in use) [ 1385.424780][ T4204] ath6kl: unable to send the bmi data to the device: -71 [ 1385.453244][ T4204] ath6kl: Unable to send get target info: -71 [ 1385.478180][ T4204] ath6kl: Failed to init ath6kl core: -71 [ 1385.539986][ T13] mos7840 9-1:0.232: required endpoints missing [ 1385.585007][ T13] usb 9-1: USB disconnect, device number 3 [ 1385.617597][ T4204] ath6kl_usb: probe of 3-1:4.0 failed with error -71 [ 1385.664348][ T4204] usb 3-1: USB disconnect, device number 5 [ 1385.796347][T16724] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2862'. [ 1386.041020][T15351] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1386.119549][T16734] IPVS: Scheduler module ip_vs_ not found [ 1386.300166][T15351] usb 5-1: Using ep0 maxpacket: 32 [ 1386.460260][T15351] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1386.469517][T15351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.530896][T15351] usb 5-1: config 0 descriptor?? [ 1386.612363][T15351] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1387.610399][ T4204] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1387.770850][T16814] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2887'. [ 1387.896747][ T4204] usb 10-1: Using ep0 maxpacket: 16 [ 1387.940174][T15351] gspca_vc032x: reg_w err -71 [ 1387.945045][T15351] gspca_vc032x: I2c Bus Busy Wait 00 [ 1387.955269][T15351] gspca_vc032x: I2c Bus Busy Wait 00 [ 1387.964573][T15351] gspca_vc032x: I2c Bus Busy Wait 00 [ 1387.978061][T15351] gspca_vc032x: I2c Bus Busy Wait 00 [ 1387.994058][T15351] gspca_vc032x: I2c Bus Busy Wait 00 [ 1388.009889][T15351] gspca_vc032x: I2c Bus Busy Wait 00 [ 1388.026357][T15351] gspca_vc032x: I2c Bus Busy Wait 00 [ 1388.043552][T15351] gspca_vc032x: I2c Bus Busy Wait 00 [ 1388.100139][T15351] gspca_vc032x: I2c Bus Busy Wait 00 [ 1388.105670][T15351] gspca_vc032x: I2c Bus Busy Wait 00 [ 1388.126000][T15351] gspca_vc032x: I2c Bus Busy Wait 00 [ 1388.139812][T15351] gspca_vc032x: I2c Bus Busy Wait 00 [ 1388.166600][T15351] gspca_vc032x: I2c Bus Busy Wait 00 [ 1388.180584][T15351] gspca_vc032x: I2c Bus Busy Wait 00 [ 1388.186401][T15351] gspca_vc032x: I2c Bus Busy Wait 00 [ 1388.222519][T15351] gspca_vc032x: I2c Bus Busy Wait 00 [ 1388.230377][ T4204] usb 10-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 1388.256276][ T4204] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.268757][T15351] gspca_vc032x: I2c Bus Busy Wait 00 [ 1388.288650][T15351] gspca_vc032x: I2c Bus Busy Wait 00 [ 1388.296525][ T4204] usb 10-1: Product: syz [ 1388.306738][T15351] gspca_vc032x: Unknown sensor... [ 1388.317172][ T4204] usb 10-1: Manufacturer: syz [ 1388.337150][ T4204] usb 10-1: SerialNumber: syz [ 1388.342810][T15351] vc032x: probe of 5-1:0.0 failed with error -22 [ 1388.385974][ T4204] usb 10-1: config 0 descriptor?? [ 1388.394813][T15351] usb 5-1: USB disconnect, device number 6 [ 1388.463250][ T4204] go7007: probe of 10-1:0.0 failed with error -12 [ 1388.664460][T15351] usb 10-1: USB disconnect, device number 6 [ 1388.855571][T16846] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2893'. [ 1388.939322][ T26] audit: type=1326 audit(1742420118.203:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16853 comm="syz.2.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc0e09169 code=0x7ffc0000 [ 1388.963477][ T26] audit: type=1326 audit(1742420118.233:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16853 comm="syz.2.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc0e09169 code=0x7ffc0000 [ 1389.006644][ T26] audit: type=1326 audit(1742420118.263:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16853 comm="syz.2.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7effc0e09169 code=0x7ffc0000 [ 1389.017551][T16846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1389.083025][ T26] audit: type=1326 audit(1742420118.353:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16853 comm="syz.2.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc0e09169 code=0x7ffc0000 [ 1389.149269][T16861] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 1389.196935][ T26] audit: type=1326 audit(1742420118.353:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16853 comm="syz.2.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc0e09169 code=0x7ffc0000 [ 1389.212449][T16850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1389.351401][T16850] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 1389.354351][ T26] audit: type=1326 audit(1742420118.373:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16853 comm="syz.2.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7effc0e09169 code=0x7ffc0000 [ 1389.428843][T16870] ALSA: mixer_oss: invalid index 20000 [ 1389.432593][T16850] bond1: (slave ipip0): Error -95 calling set_mac_address [ 1389.494530][ T26] audit: type=1326 audit(1742420118.373:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16853 comm="syz.2.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc0e09169 code=0x7ffc0000 [ 1389.632085][ T26] audit: type=1326 audit(1742420118.373:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16853 comm="syz.2.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc0e09169 code=0x7ffc0000 [ 1389.754323][ T26] audit: type=1326 audit(1742420118.383:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16853 comm="syz.2.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7effc0e09169 code=0x7ffc0000 [ 1389.856714][T16884] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2904'. [ 1389.938896][ T26] audit: type=1326 audit(1742420118.403:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16853 comm="syz.2.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc0e09169 code=0x7ffc0000 [ 1389.961331][ C0] vkms_vblank_simulate: vblank timer overrun [ 1390.001190][T12805] Bluetooth: hci3: command 0x0406 tx timeout [ 1391.810016][T12720] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 1392.144149][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2923'. [ 1392.200089][T12720] usb 8-1: config index 0 descriptor too short (expected 6427, got 27) [ 1392.218703][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2923'. [ 1392.219929][T12720] usb 8-1: config 0 has an invalid interface number: 21 but max is 0 [ 1392.295208][T16962] netlink: 'syz.4.2923': attribute type 20 has an invalid length. [ 1392.313572][T12720] usb 8-1: config 0 has no interface number 0 [ 1392.364503][T12720] usb 8-1: config 0 interface 21 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1392.415949][T12720] usb 8-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1392.471784][T12720] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.566514][T12720] usb 8-1: config 0 descriptor?? [ 1392.691129][T16974] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2925'. [ 1392.879975][T12805] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1392.918356][T15351] usb 8-1: USB disconnect, device number 5 [ 1393.310290][T12805] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1393.332887][T12805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.375536][T12805] usb 5-1: config 0 descriptor?? [ 1393.959581][T17005] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1393.990098][T12805] [drm:udl_init] *ERROR* Selecting channel failed [ 1394.040846][T17005] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1394.090004][T12805] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 1394.097668][T12805] [drm] Initialized udl on minor 2 [ 1394.132203][T17008] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1394.260657][T12805] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1394.294414][T12805] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1394.336035][T12805] usb 5-1: USB disconnect, device number 7 [ 1395.491159][T17044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2950'. [ 1396.217053][T17063] netlink: 'syz.8.2955': attribute type 8 has an invalid length. [ 1396.470000][T12805] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1397.791874][T12805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1397.818992][T12805] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1397.843131][T12805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.887624][T12805] usb 5-1: config 0 descriptor?? [ 1397.908008][T17102] device bond_slave_0 entered promiscuous mode [ 1397.915535][T17102] device bond_slave_1 entered promiscuous mode [ 1397.980745][T17102] device macvtap1 entered promiscuous mode [ 1397.995347][T17102] device bond0 entered promiscuous mode [ 1398.015383][ T26] audit: type=1326 audit(1742420127.283:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17097 comm="syz.8.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5549182359 code=0x7ffc0000 [ 1398.050641][T17102] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1398.100338][T17102] device bond0 left promiscuous mode [ 1398.118936][ T26] audit: type=1326 audit(1742420127.303:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17097 comm="syz.8.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5549182359 code=0x7ffc0000 [ 1398.144151][T17102] device bond_slave_0 left promiscuous mode [ 1398.150232][T17102] device bond_slave_1 left promiscuous mode [ 1398.198270][ T26] audit: type=1326 audit(1742420127.303:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17097 comm="syz.8.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5549182359 code=0x7ffc0000 [ 1398.321460][ T26] audit: type=1326 audit(1742420127.303:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17097 comm="syz.8.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5549182359 code=0x7ffc0000 [ 1398.403532][T12805] lg-g15 0003:046D:C222.0003: unbalanced collection at end of report description [ 1398.468545][ T26] audit: type=1326 audit(1742420127.303:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17097 comm="syz.8.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55491e6169 code=0x7ffc0000 [ 1398.559093][T12805] lg-g15: probe of 0003:046D:C222.0003 failed with error -22 [ 1398.589129][ T26] audit: type=1326 audit(1742420127.313:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17097 comm="syz.8.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5549182359 code=0x7ffc0000 [ 1398.639488][T12805] usb 5-1: USB disconnect, device number 8 [ 1398.764709][ T26] audit: type=1326 audit(1742420127.313:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17097 comm="syz.8.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5549182359 code=0x7ffc0000 [ 1398.810045][T15351] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 1398.883225][ T26] audit: type=1326 audit(1742420127.313:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17097 comm="syz.8.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55491e6169 code=0x7ffc0000 [ 1398.986083][ T26] audit: type=1326 audit(1742420127.313:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17097 comm="syz.8.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55491e6169 code=0x7ffc0000 [ 1399.072569][ T26] audit: type=1326 audit(1742420127.313:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17097 comm="syz.8.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55491e6169 code=0x7ffc0000 [ 1399.252267][T15351] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1399.284748][T15351] usb 3-1: config 0 has no interface number 0 [ 1399.321282][T15351] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1399.361714][T15351] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1399.400083][T15351] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1399.439772][T15351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.499352][T15351] usb 3-1: config 0 descriptor?? [ 1399.540288][T17116] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1399.606476][T15351] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1399.831555][T15351] usb 3-1: USB disconnect, device number 6 [ 1401.048955][T17155] netlink: 'syz.2.2991': attribute type 4 has an invalid length. [ 1401.531410][T15351] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1401.950089][T15351] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 1401.965107][T15351] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.997187][T15351] usb 5-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 1402.070999][T15351] usb 5-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1402.071043][T15351] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1402.071081][T15351] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1402.071110][T15351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.100535][T15351] usb 5-1: config 0 descriptor?? [ 1403.543814][ T4205] usb 5-1: USB disconnect, device number 9 [ 1403.711489][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 1403.711509][ T26] audit: type=1326 audit(1742420132.983:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17197 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ec720169 code=0x7ffc0000 [ 1403.836530][ T26] audit: type=1326 audit(1742420133.043:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17197 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f74ec720169 code=0x7ffc0000 [ 1403.864260][T15351] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1403.884626][T15351] Bluetooth: hci1: Injecting HCI hardware error event [ 1403.925476][ T4172] Bluetooth: hci1: hardware error 0x00 [ 1404.047042][ T26] audit: type=1326 audit(1742420133.043:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17197 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ec720169 code=0x7ffc0000 [ 1404.169884][ T26] audit: type=1326 audit(1742420133.043:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17197 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f74ec720169 code=0x7ffc0000 [ 1404.180021][ T4205] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1404.355576][ T26] audit: type=1326 audit(1742420133.043:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17197 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ec720169 code=0x7ffc0000 [ 1404.493651][ T26] audit: type=1326 audit(1742420133.043:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17197 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f74ec720169 code=0x7ffc0000 [ 1404.533817][ T26] audit: type=1326 audit(1742420133.043:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17197 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ec720169 code=0x7ffc0000 [ 1405.370005][ T4205] usb 3-1: Using ep0 maxpacket: 32 [ 1405.490223][ T4205] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1405.498296][ T4205] usb 3-1: config 0 has no interface number 0 [ 1405.526476][ T4205] usb 3-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 1405.559202][ T4205] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1405.731286][ T4205] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1405.750996][ T4205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.759062][ T4205] usb 3-1: Product: syz [ 1405.790096][ T4205] usb 3-1: Manufacturer: syz [ 1405.808023][ T4205] usb 3-1: SerialNumber: syz [ 1405.833512][ T4205] usb 3-1: config 0 descriptor?? [ 1406.009841][T12720] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1406.025461][T17252] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1406.063838][T17252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1406.091012][T17252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1406.132577][T17252] device bridge_slave_0 left promiscuous mode [ 1406.141709][T17252] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.146083][ T4205] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1406.192441][ T4205] cx231xx 3-1:0.1: Failed to read PCB config [ 1406.206689][ T4205] cx231xx: probe of 3-1:0.1 failed with error -71 [ 1406.232255][ T4205] usb 3-1: USB disconnect, device number 7 [ 1406.274873][T17252] device bridge_slave_1 left promiscuous mode [ 1406.296698][T17252] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.335843][T17252] bond0: (slave bond_slave_0): Releasing backup interface [ 1406.372698][T12720] usb 8-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 1406.385442][T12720] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.407723][T12720] usb 8-1: config 0 descriptor?? [ 1406.420680][T17252] bond0: (slave bond_slave_1): Releasing backup interface [ 1406.452163][T12720] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 1406.469425][T12720] dvb-usb: bulk message failed: -22 (3/0) [ 1406.488412][T12720] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1406.510702][T12720] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 1406.519679][T12720] usb 8-1: media controller created [ 1406.541717][T12720] dvb-usb: bulk message failed: -22 (5/0) [ 1406.547652][T12720] dvb-usb: MAC address reading failed. [ 1406.564513][T12720] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1406.586475][T17252] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1406.618298][T12720] dvb-usb: bulk message failed: -22 (6/0) [ 1406.628763][T17252] team0: Port device team_slave_0 removed [ 1406.635556][T12720] dvb-usb: bulk message failed: -22 (6/0) [ 1406.644627][T12720] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 1406.678197][T17252] team0: Failed to send options change via netlink (err -105) [ 1406.691479][T12720] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input10 [ 1406.709988][ T4205] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1406.732450][T17252] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 1406.746753][T12720] dvb-usb: schedule remote query interval to 100 msecs. [ 1406.752931][T17252] team0: Port device team_slave_1 removed [ 1406.755900][T12720] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 1406.775945][T17252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1406.792913][T12720] usb 8-1: USB disconnect, device number 6 [ 1406.797801][T17252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1406.848178][T17252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1406.867261][T17252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1406.876973][T12720] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 1406.922656][T17255] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3032'. [ 1406.950051][ T4205] usb 3-1: Using ep0 maxpacket: 32 [ 1407.223245][ T4205] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1407.232224][ T4205] usb 3-1: config 0 has no interface number 0 [ 1407.238396][ T4205] usb 3-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 1407.249064][ T4205] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1408.140044][ T4205] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1408.149208][ T4205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.194983][ T4205] usb 3-1: Product: syz [ 1408.215013][ T4205] usb 3-1: config 0 descriptor?? [ 1408.240752][ T4205] usb 3-1: can't set config #0, error -71 [ 1408.268623][T17281] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3041'. [ 1408.278683][ T4205] usb 3-1: USB disconnect, device number 8 [ 1408.731065][T17291] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3046'. [ 1408.748408][T17291] 8021q: VLANs not supported on nlmon0 [ 1409.470091][ T4204] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1409.824956][T17306] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3051'. [ 1409.880282][ T4204] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.922324][ T4204] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1409.929895][ T4205] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1409.949892][ T4204] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.978316][ T4204] usb 8-1: config 0 descriptor?? [ 1410.052629][ T4204] pwc: Askey VC010 type 2 USB webcam detected. [ 1410.118142][T17298] chnl_net:caif_netlink_parms(): no params data found [ 1410.240283][ T4205] usb 5-1: Using ep0 maxpacket: 16 [ 1410.349932][T11206] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1410.360972][T17298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.379959][ T4205] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 1410.400462][T17324] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 1410.428487][ T4205] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1410.447238][T17298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.480172][ T4204] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1410.502251][T17298] device bridge_slave_0 entered promiscuous mode [ 1410.521681][T17298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.523417][ T4205] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1410.529508][T17298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.559624][T17298] device bridge_slave_1 entered promiscuous mode [ 1410.580174][ T4204] pwc: recv_control_msg error -32 req 02 val 2700 [ 1410.589113][ T4205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.624640][T17298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.637672][ T4204] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1410.640244][T11206] usb 10-1: Using ep0 maxpacket: 8 [ 1410.662958][T17298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.671126][ T4205] usb 5-1: config 0 descriptor?? [ 1410.700167][ T4204] pwc: recv_control_msg error -32 req 04 val 1000 [ 1410.770169][ T4204] pwc: recv_control_msg error -32 req 04 val 1300 [ 1410.794438][T17298] team0: Port device team_slave_0 added [ 1410.835539][T17298] team0: Port device team_slave_1 added [ 1410.841700][ T4204] pwc: recv_control_msg error -32 req 04 val 1400 [ 1410.899958][ T4204] pwc: recv_control_msg error -32 req 02 val 2000 [ 1410.947679][T17298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1410.955099][ T4204] pwc: recv_control_msg error -32 req 02 val 2100 [ 1410.976706][T11206] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1410.980624][T17298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1411.026998][T11206] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.040011][ T4204] pwc: recv_control_msg error -32 req 04 val 1500 [ 1411.056938][T11206] usb 10-1: Product: syz [ 1411.063517][T12805] Bluetooth: hci4: command 0x0409 tx timeout [ 1411.069800][T11206] usb 10-1: Manufacturer: syz [ 1411.074873][T11206] usb 10-1: SerialNumber: syz [ 1411.090326][T17298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1411.101551][ T4204] pwc: recv_control_msg error -32 req 02 val 2500 [ 1411.121514][T11206] usb 10-1: config 0 descriptor?? [ 1411.129607][T17298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1411.139927][ T4204] pwc: recv_control_msg error -32 req 02 val 2400 [ 1411.169020][T17298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1411.184592][ T4205] kovaplus 0003:1E7D:2D50.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 1411.236271][T17298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1411.380059][T11206] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1411.382050][T17298] device hsr_slave_0 entered promiscuous mode [ 1411.400046][ T4205] kovaplus 0003:1E7D:2D50.0004: couldn't init struct kovaplus_device [ 1411.408236][ T4205] kovaplus 0003:1E7D:2D50.0004: couldn't install mouse [ 1411.419964][ T4204] pwc: recv_control_msg error -71 req 02 val 2900 [ 1411.437391][T17298] device hsr_slave_1 entered promiscuous mode [ 1411.447591][ T4205] kovaplus: probe of 0003:1E7D:2D50.0004 failed with error -71 [ 1411.460240][ T4204] pwc: recv_control_msg error -71 req 02 val 2800 [ 1411.467140][T17298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1411.486407][T17298] Cannot create hsr debugfs directory [ 1411.489371][ T4205] usb 5-1: USB disconnect, device number 10 [ 1411.499623][ T4204] pwc: recv_control_msg error -71 req 04 val 1100 [ 1411.530078][ T4204] pwc: recv_control_msg error -71 req 04 val 1200 [ 1411.578589][ T4204] pwc: Registered as video103. [ 1411.593355][ T4204] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input12 [ 1411.654735][ T4204] usb 8-1: USB disconnect, device number 7 [ 1411.974473][T17298] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.307457][T17298] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.359636][T17343] bridge0: port 3(vlan2) entered blocking state [ 1412.373511][T17343] bridge0: port 3(vlan2) entered disabled state [ 1412.388462][T17343] device vlan2 entered promiscuous mode [ 1412.402528][T17343] device macsec0 entered promiscuous mode [ 1412.409323][T17343] bridge0: port 3(vlan2) entered blocking state [ 1412.415756][T17343] bridge0: port 3(vlan2) entered forwarding state [ 1412.481660][T17298] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.623822][T17298] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.902328][T17357] vxcan1: tx address claim with different name [ 1412.998511][T17298] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1413.038171][T17298] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1413.101394][T17298] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1413.144277][ T4238] Bluetooth: hci4: command 0x041b tx timeout [ 1413.156676][T17298] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1413.289856][ T4205] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1413.315566][T17298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1413.320268][T11206] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -71 [ 1413.353377][T11206] usb 10-1: USB disconnect, device number 7 [ 1413.381534][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1413.401848][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1413.431005][T17298] 8021q: adding VLAN 0 to HW filter on device team0 [ 1413.471579][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1413.487706][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1413.506953][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.514206][ T4239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1413.539897][ T4205] usb 5-1: Using ep0 maxpacket: 32 [ 1413.552405][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1413.568721][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1413.579380][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1413.597616][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.604829][ T4239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1413.623321][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1413.649851][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1413.661419][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1413.673608][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1413.692896][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1413.703042][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1413.743604][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1413.770954][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1413.798548][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1413.820332][ T4205] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1413.835147][T17298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1413.846922][ T4205] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.856977][ T4205] usb 5-1: Product: syz [ 1413.858877][T17298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1413.871672][ T4205] usb 5-1: Manufacturer: syz [ 1413.887536][ T4205] usb 5-1: SerialNumber: syz [ 1413.888222][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1413.920772][ T4205] usb 5-1: config 0 descriptor?? [ 1413.928321][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1414.001735][ T4205] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1414.254571][T15351] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 1414.346753][T17298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1414.356138][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1414.370229][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1414.430472][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1414.447774][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1414.509405][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1414.528820][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1414.543835][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1414.567422][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1414.588411][T17298] device veth0_vlan entered promiscuous mode [ 1414.611580][T17298] device veth1_vlan entered promiscuous mode [ 1414.660743][T15351] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1414.683393][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1414.693901][T15351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.704615][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1414.740818][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1414.751142][T15351] usb 8-1: config 0 descriptor?? [ 1414.759165][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1414.778688][T17298] device veth0_macvtap entered promiscuous mode [ 1414.792157][T15351] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1414.830345][T17298] device veth1_macvtap entered promiscuous mode [ 1414.875384][T17298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1414.887222][T17298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1414.897863][ T4205] gspca_ov534_9: reg_w failed -71 [ 1414.910832][T17298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1414.921621][T17298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1414.931609][T17298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1414.942399][T17298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1414.955022][T17298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1414.969493][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1414.978901][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1414.990866][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1415.000615][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1415.010549][T15351] gp8psk: usb in 128 operation failed. [ 1415.024205][T17298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1415.035504][T17298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.045733][T17298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1415.057099][T17298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.067263][T17298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1415.088376][T17298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.111138][T17298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1415.130340][T17298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.150924][T17298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1415.197602][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1415.208187][T12805] Bluetooth: hci4: command 0x040f tx timeout [ 1415.270089][T15351] gp8psk: usb in 146 operation failed. [ 1415.281911][T15351] gp8psk: failed to get FW version [ 1415.288522][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1415.310062][T15351] gp8psk: usb in 149 operation failed. [ 1415.315787][T15351] gp8psk: failed to get FPGA version [ 1415.362909][T15351] gp8psk: usb in 138 operation failed. [ 1415.373345][T17298] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.417419][T15351] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1415.435653][T17298] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.444823][ T4205] gspca_ov534_9: Unknown sensor 0000 [ 1415.444898][ T4205] ov534_9: probe of 5-1:0.0 failed with error -22 [ 1415.458778][T15351] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1415.621086][T17298] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.676305][T15351] usb 8-1: USB disconnect, device number 8 [ 1415.702072][T17298] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.006659][ T4205] usb 5-1: USB disconnect, device number 11 [ 1416.297868][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1416.350590][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1416.419879][ T4205] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1416.429941][T15527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1416.434581][ T1235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1416.454387][ T1235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1416.519470][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1416.800658][ T4205] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.820064][T15351] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1416.821369][ T4205] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1416.940326][ T4205] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1416.959230][ T4205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1416.984831][ T4205] usb 5-1: SerialNumber: syz [ 1417.090121][T16833] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1417.190047][T15351] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1417.280077][T11871] Bluetooth: hci4: command 0x0419 tx timeout [ 1417.294748][ T4205] usb 5-1: 0:2 : does not exist [ 1417.364158][ T4205] usb 5-1: USB disconnect, device number 12 [ 1417.387273][T15351] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1417.441097][T14662] udevd[14662]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1417.609970][T16833] usb 3-1: config 0 has no interfaces? [ 1417.620013][T15351] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1417.629368][T15351] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.770455][T15351] usb 9-1: config 0 descriptor?? [ 1417.922480][T16833] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1417.959896][T16833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.122112][T16833] usb 3-1: Product: syz [ 1418.127347][T16833] usb 3-1: Manufacturer: syz [ 1418.190080][T16833] usb 3-1: SerialNumber: syz [ 1418.252775][T15351] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 1418.280705][T16833] usb 3-1: config 0 descriptor?? [ 1418.301597][T15351] hid-thrustmaster 0003:044F:B65D.0005: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.8-1/input0 [ 1418.442248][T15351] hid-thrustmaster 0003:044F:B65D.0005: Wrong number of endpoints? [ 1418.509836][ C0] hid-thrustmaster 0003:044F:B65D.0005: URB to get model id failed with error -71 [ 1418.522222][T11871] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1418.591852][T15351] usb 9-1: USB disconnect, device number 4 [ 1418.780346][T11871] usb 10-1: Using ep0 maxpacket: 16 [ 1418.900361][T11871] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1418.924685][T11871] usb 10-1: config 0 has no interface number 0 [ 1419.090083][T11871] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1419.107526][T11871] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.140821][T11871] usb 10-1: Product: syz [ 1419.145365][T11871] usb 10-1: Manufacturer: syz [ 1419.167334][T11871] usb 10-1: SerialNumber: syz [ 1419.191143][T11871] usb 10-1: config 0 descriptor?? [ 1419.242462][T11871] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1419.418091][T17479] netlink: 'syz.8.3111': attribute type 39 has an invalid length. [ 1419.702237][T11871] gspca_spca1528: reg_w err -71 [ 1419.730028][T11871] spca1528: probe of 10-1:0.1 failed with error -71 [ 1419.793242][T11871] usb 10-1: USB disconnect, device number 8 [ 1419.860208][ T4238] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 1420.209589][T17496] netlink: 'syz.8.3117': attribute type 2 has an invalid length. [ 1420.209944][ T4204] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1420.219030][T17496] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3117'. [ 1420.260513][ T4238] usb 8-1: config 0 has no interfaces? [ 1420.311977][ T4284] IPVS: stopping backup sync thread 16861 ... [ 1420.342167][T17498] netlink: 61211 bytes leftover after parsing attributes in process `syz.9.3118'. [ 1420.430731][ T4238] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1420.473900][ T4238] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.513264][ T4238] usb 8-1: Product: syz [ 1420.526708][ T4238] usb 8-1: Manufacturer: syz [ 1420.531424][ T4238] usb 8-1: SerialNumber: syz [ 1420.546622][ T4238] usb 8-1: config 0 descriptor?? [ 1420.581257][ T4204] usb 5-1: Using ep0 maxpacket: 32 [ 1420.731886][ T4204] usb 5-1: config 1 has an invalid descriptor of length 54, skipping remainder of the config [ 1420.757248][ T4204] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1420.799982][ T4204] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1420.837639][ T4204] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 56, changing to 7 [ 1420.866739][ T4204] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8512, setting to 1024 [ 1420.878326][ T4204] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1420.920531][T17506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.928713][T17506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.060051][ T4204] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1421.070670][T17481] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3110'. [ 1421.077317][ T4204] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.093919][ T4204] usb 5-1: Product: syz [ 1421.099987][ T4204] usb 5-1: Manufacturer: syz [ 1421.105226][ T4204] usb 5-1: SerialNumber: syz [ 1421.110201][T17481] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3110'. [ 1421.153162][T17481] device bridge0 entered promiscuous mode [ 1421.182144][T17481] device bridge0 left promiscuous mode [ 1421.291352][ T4284] device hsr_slave_0 left promiscuous mode [ 1421.344679][ T4284] device hsr_slave_1 left promiscuous mode [ 1421.380210][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1421.417194][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1421.443577][ T4204] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 1421.461750][ T4204] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 1421.518471][T17511] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1421.534558][ T4284] device bridge_slave_1 left promiscuous mode [ 1421.547204][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.568707][T17511] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1421.580879][T11206] usb 3-1: USB disconnect, device number 9 [ 1421.663446][ T4204] usb 5-1: USB disconnect, device number 13 [ 1421.698495][ T4284] device bridge_slave_0 left promiscuous mode [ 1421.774434][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.922741][ T4284] device veth1_macvtap left promiscuous mode [ 1421.932450][ T4284] device veth0_macvtap left promiscuous mode [ 1421.968590][ T4284] device veth1_vlan left promiscuous mode [ 1421.982656][ T4284] device veth0_vlan left promiscuous mode [ 1422.208292][T14778] udevd[14778]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1423.019160][ T4284] team0 (unregistering): Port device team_slave_1 removed [ 1423.041302][ T4284] team0 (unregistering): Port device team_slave_0 removed [ 1423.057943][ T4284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1423.074794][ T4284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1423.178423][ T4284] bond0 (unregistering): Released all slaves [ 1423.233793][T17534] netlink: 'syz.8.3130': attribute type 10 has an invalid length. [ 1423.247267][T12805] usb 8-1: USB disconnect, device number 9 [ 1423.272521][T17534] 8021q: adding VLAN 0 to HW filter on device team0 [ 1423.293052][T17534] bond0: (slave team0): Enslaving as an active interface with an up link [ 1423.303502][T17542] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1423.311563][T17542] IPv6: NLM_F_CREATE should be set when creating new route [ 1423.318867][T17542] IPv6: NLM_F_CREATE should be set when creating new route [ 1423.326889][T17534] syz.8.3130 (17534) used greatest stack depth: 19160 bytes left [ 1423.338087][T17544] netlink: 'syz.2.3135': attribute type 10 has an invalid length. [ 1423.645851][T17554] netlink: 55631 bytes leftover after parsing attributes in process `syz.9.3140'. [ 1424.028756][ T4204] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1424.285086][ T4204] usb 3-1: Using ep0 maxpacket: 16 [ 1424.329918][T11871] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1424.430511][ T4204] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 1424.470349][ T4204] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1424.501604][ T4204] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1424.522282][ T4204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.582855][ T4204] usb 3-1: config 0 descriptor?? [ 1424.690056][T11871] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1424.704343][T11871] usb 10-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 1424.734279][T11871] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.748771][T17583] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1424.774347][T11871] usb 10-1: config 0 descriptor?? [ 1424.778011][T17583] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1425.107531][ T4204] kovaplus 0003:1E7D:2D50.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 1425.340044][T11871] usbhid 10-1:0.0: can't add hid device: -71 [ 1425.349233][T11871] usbhid: probe of 10-1:0.0 failed with error -71 [ 1425.418489][T11871] usb 10-1: USB disconnect, device number 9 [ 1425.539936][ T4204] kovaplus 0003:1E7D:2D50.0006: couldn't init struct kovaplus_device [ 1425.548410][ T4204] kovaplus 0003:1E7D:2D50.0006: couldn't install mouse [ 1425.624051][ T4204] kovaplus: probe of 0003:1E7D:2D50.0006 failed with error -71 [ 1425.682229][ T4204] usb 3-1: USB disconnect, device number 10 [ 1425.838318][T17601] netlink: 'syz.7.3158': attribute type 1 has an invalid length. [ 1425.870266][T17601] netlink: 16255 bytes leftover after parsing attributes in process `syz.7.3158'. [ 1427.433782][T17627] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1427.459946][T17627] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1428.579974][T17609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.587482][T17609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.720033][T12805] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1428.989851][T12805] usb 10-1: Using ep0 maxpacket: 8 [ 1429.290945][T12805] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1429.304979][T12805] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.316015][T12805] usb 10-1: Product: syz [ 1429.324963][T12805] usb 10-1: Manufacturer: syz [ 1429.325694][T17609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1429.333187][T12805] usb 10-1: SerialNumber: syz [ 1429.348983][T12805] usb 10-1: config 0 descriptor?? [ 1429.397144][T17609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1429.630136][T12805] usb 10-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1429.916146][T17609] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.925564][T17609] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.935218][T17609] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.946316][T17609] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.880250][ T4205] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1430.939998][T12805] usb write operation failed. (-71) [ 1430.970934][T12805] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1431.090221][T12805] dvbdev: DVB: registering new adapter (Terratec H7) [ 1431.120074][T12805] usb 10-1: media controller created [ 1431.143025][ T4205] usb 3-1: Using ep0 maxpacket: 8 [ 1431.189870][T12805] usb read operation failed. (-71) [ 1431.362041][ T4205] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1431.373814][T12805] usb write operation failed. (-71) [ 1431.435834][ T4205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.451558][T12805] dvb_usb_az6007: probe of 10-1:0.0 failed with error -5 [ 1431.511644][ T4205] usb 3-1: config 0 descriptor?? [ 1431.548183][T12805] usb 10-1: USB disconnect, device number 10 [ 1432.089841][T11206] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1432.329963][T11206] usb 9-1: Using ep0 maxpacket: 32 [ 1432.450891][T11206] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1432.472100][T11206] usb 9-1: config 0 has no interface number 0 [ 1432.507347][T11206] usb 9-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 1432.548073][T11206] usb 9-1: config 0 interface 1 has no altsetting 0 [ 1432.730097][T11206] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1432.768569][T11206] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.797708][T17708] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3197'. [ 1432.848903][T11206] usb 9-1: Product: syz [ 1432.868311][T11206] usb 9-1: Manufacturer: syz [ 1432.887121][T11206] usb 9-1: SerialNumber: syz [ 1433.025513][T11206] usb 9-1: config 0 descriptor?? [ 1433.163452][T17711] netlink: 'syz.9.3199': attribute type 13 has an invalid length. [ 1433.332775][T11206] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1433.420141][T11206] cx231xx 9-1:0.1: Failed to read PCB config [ 1433.426484][T11206] cx231xx: probe of 9-1:0.1 failed with error -71 [ 1433.457026][T11206] usb 9-1: USB disconnect, device number 5 [ 1433.800219][ T4205] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1433.823273][T17711] gretap0: refused to change device tx_queue_len [ 1433.829667][T17711] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1433.831171][ T4205] asix: probe of 3-1:0.0 failed with error -32 [ 1433.879847][T11206] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1434.012712][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 1434.040157][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 1434.129947][T11206] usb 9-1: Using ep0 maxpacket: 32 [ 1434.186362][T17724] netlink: 'syz.4.3203': attribute type 10 has an invalid length. [ 1434.210020][T17724] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3203'. [ 1434.231975][T17724] device batadv0 entered promiscuous mode [ 1434.250075][T11206] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1434.251076][T17724] bridge0: port 1(batadv0) entered blocking state [ 1434.268572][T11206] usb 9-1: config 0 has no interface number 0 [ 1434.270478][T17724] bridge0: port 1(batadv0) entered disabled state [ 1434.278745][T11206] usb 9-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 1434.315679][T17724] bridge0: port 1(batadv0) entered blocking state [ 1434.322773][T17724] bridge0: port 1(batadv0) entered forwarding state [ 1434.337677][T11206] usb 9-1: config 0 interface 1 has no altsetting 0 [ 1434.520869][T11206] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1434.562542][T11206] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.580661][ T1235] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1434.590903][ T1235] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1434.610043][T11206] usb 9-1: Product: syz [ 1434.616685][T11206] usb 9-1: Manufacturer: syz [ 1434.635059][T11206] usb 9-1: SerialNumber: syz [ 1434.651543][T11206] usb 9-1: config 0 descriptor?? [ 1434.822981][T11206] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1434.832533][ T4205] usb 3-1: USB disconnect, device number 11 [ 1434.880370][T11206] cx231xx 9-1:0.1: Failed to read PCB config [ 1434.910161][T11206] cx231xx: probe of 9-1:0.1 failed with error -71 [ 1434.959913][T11206] usb 9-1: USB disconnect, device number 6 [ 1435.015374][T17740] netlink: 'syz.2.3208': attribute type 4 has an invalid length. [ 1435.192839][T17744] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3209'. [ 1435.526866][T17750] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1926430720 (3852861440 ns) > initial count (2369312970 ns). Using initial count to start timer. [ 1435.602461][T17750] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4234274794 (67748396704 ns) > initial count (26801589552 ns). Using initial count to start timer. [ 1437.139931][T12805] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1437.366234][T17790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3225'. [ 1437.419791][T12805] usb 5-1: Using ep0 maxpacket: 16 [ 1437.441943][T17790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3225'. [ 1437.560108][T12805] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1437.637587][T17790] device hsr_slave_0 left promiscuous mode [ 1437.780549][T12805] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1437.809780][T12805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.872195][T12805] usb 5-1: Product: syz [ 1437.880182][T12805] usb 5-1: Manufacturer: syz [ 1437.884851][T12805] usb 5-1: SerialNumber: syz [ 1437.939300][T12805] usb 5-1: config 0 descriptor?? [ 1438.024754][T17798] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3228'. [ 1438.530281][ T26] audit: type=1800 audit(1742420167.793:535): pid=17807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3231" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1438.939865][ T4205] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1439.179840][ T4205] usb 3-1: Using ep0 maxpacket: 8 [ 1439.300462][T12805] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1439.449312][ T4384] usb 5-1: USB disconnect, device number 14 [ 1439.460057][ T4205] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1439.474989][ T4205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.489233][ T4205] usb 3-1: Product: syz [ 1439.493645][ T4205] usb 3-1: Manufacturer: syz [ 1439.498548][ T4205] usb 3-1: SerialNumber: syz [ 1439.522693][ T4205] usb 3-1: config 0 descriptor?? [ 1439.604085][T12805] usb 8-1: Using ep0 maxpacket: 32 [ 1439.745908][T12805] usb 8-1: config 1 has an invalid descriptor of length 54, skipping remainder of the config [ 1439.769509][T12805] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1439.791493][ T4205] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1439.799776][T12805] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1439.822014][T12805] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 56, changing to 7 [ 1439.859232][T12805] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8512, setting to 1024 [ 1439.889772][T12805] usb 8-1: config 1 interface 1 has no altsetting 0 [ 1440.098767][T17841] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3242'. [ 1440.109371][ T4208] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1440.126211][T12805] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1440.135510][T12805] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.161913][T12805] usb 8-1: Product: syz [ 1440.166249][T12805] usb 8-1: Manufacturer: syz [ 1440.190494][T12805] usb 8-1: SerialNumber: syz [ 1440.470192][ T4208] usb 5-1: config 0 has an invalid interface number: 22 but max is 0 [ 1440.504232][ T4208] usb 5-1: config 0 has no interface number 0 [ 1440.521878][T12805] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 1440.535484][T12805] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 1440.670085][ T4208] usb 5-1: New USB device found, idVendor=10b8, idProduct=1fa8, bcdDevice=d4.21 [ 1440.696068][T12805] usb 8-1: USB disconnect, device number 10 [ 1440.699920][ T4208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.729858][ T4208] usb 5-1: Product: syz [ 1440.734164][ T4208] usb 5-1: Manufacturer: syz [ 1440.738887][ T4208] usb 5-1: SerialNumber: syz [ 1440.779566][ T4208] usb 5-1: config 0 descriptor?? [ 1441.025178][T14838] udevd[14838]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1441.049942][ T4208] dvb-usb: found a 'DiBcom NIM8096MD reference design' in warm state. [ 1441.072740][ T4208] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1441.107746][T17848] netlink: 264 bytes leftover after parsing attributes in process `syz.7.3244'. [ 1441.120209][ T4208] dvbdev: DVB: registering new adapter (DiBcom NIM8096MD reference design) [ 1441.143310][ T4208] usb 5-1: media controller created [ 1441.210462][ T4208] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1441.383987][ T4208] DVB: Unable to find symbol dib8000_attach() [ 1441.396349][ T4208] dvb-usb: no frontend was attached by 'DiBcom NIM8096MD reference design' [ 1441.520104][ T4205] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 1441.566906][ T4205] usb 3-1: USB disconnect, device number 12 [ 1441.609869][ T4208] rc_core: IR keymap rc-dib0700-rc5 not found [ 1441.626481][ T4208] Registered IR keymap rc-empty [ 1441.632585][ T4208] dvb-usb: could not initialize remote control. [ 1441.642763][ T4208] dvb-usb: DiBcom NIM8096MD reference design successfully initialized and connected. [ 1441.692175][ T4208] usb 5-1: USB disconnect, device number 15 [ 1441.811239][ T4208] dvb-usb: DiBcom NIM8096MD reference design successfully deinitialized and disconnected. [ 1442.194514][T12805] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1442.576732][ T4208] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1442.789940][T12805] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1442.799310][T12805] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.819962][ T4208] usb 10-1: Using ep0 maxpacket: 32 [ 1442.839875][T16833] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1442.886532][T12805] usb 9-1: Product: syz [ 1442.904696][T12805] usb 9-1: Manufacturer: syz [ 1442.923800][T12805] usb 9-1: SerialNumber: syz [ 1442.940176][ T4208] usb 10-1: config 1 has an invalid descriptor of length 54, skipping remainder of the config [ 1442.942945][T12805] usb 9-1: config 0 descriptor?? [ 1443.000169][ T4208] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1443.022180][T12805] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 007 [ 1443.049822][ T4208] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1443.069175][ T4208] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 56, changing to 7 [ 1443.122605][ T4208] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8512, setting to 1024 [ 1443.140009][T16833] usb 3-1: Using ep0 maxpacket: 16 [ 1443.168364][ T4208] usb 10-1: config 1 interface 1 has no altsetting 0 [ 1443.270150][T16833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1443.305664][T16833] usb 3-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 1443.330005][T16833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.340286][ T4208] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1443.342366][T16833] usb 3-1: config 0 descriptor?? [ 1443.360991][ T4208] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.382564][ T4208] usb 10-1: Product: syz [ 1443.396504][ T4208] usb 10-1: Manufacturer: syz [ 1443.413231][ T4208] usb 10-1: SerialNumber: syz [ 1443.659981][T12805] i2c i2c-1: failure reading functionality [ 1443.704877][T12805] i2c i2c-1: connected i2c-tiny-usb device [ 1443.760476][T12805] usb 9-1: USB disconnect, device number 7 [ 1443.764890][ T4208] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 1443.814691][ T4208] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 1443.836384][T16833] hid-generic 0003:0C70:F003.0007: unknown main item tag 0x6 [ 1443.863619][T16833] hid-generic 0003:0C70:F003.0007: unknown main item tag 0x0 [ 1443.945858][T16833] hid-generic 0003:0C70:F003.0007: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.2-1/input0 [ 1444.059121][ T4208] usb 10-1: USB disconnect, device number 11 [ 1444.066359][T16833] usb 3-1: USB disconnect, device number 13 [ 1444.569894][T11206] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1444.860060][T11206] usb 9-1: Using ep0 maxpacket: 8 [ 1445.080013][ T4205] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1445.140157][T11206] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1445.153891][T11206] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.180420][T11206] usb 9-1: Product: syz [ 1445.196200][T11206] usb 9-1: Manufacturer: syz [ 1445.218403][T11206] usb 9-1: SerialNumber: syz [ 1445.268733][T11206] usb 9-1: config 0 descriptor?? [ 1445.509942][ T4205] usb 3-1: config 0 has no interfaces? [ 1445.540044][T11206] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1445.710116][ T4205] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1445.727810][ T4205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.767632][ T4205] usb 3-1: Product: syz [ 1445.777777][ T4205] usb 3-1: Manufacturer: syz [ 1445.798476][ T4205] usb 3-1: SerialNumber: syz [ 1445.829197][ T4205] usb 3-1: config 0 descriptor?? [ 1446.030112][T17924] device bridge_slave_0 left promiscuous mode [ 1446.048559][T17924] bridge0: port 1(bridge_slave_0) entered disabled state [ 1446.095515][T17924] device bridge_slave_1 left promiscuous mode [ 1446.115526][T17924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.166570][T17924] bond0: (slave bond_slave_0): Releasing backup interface [ 1446.193436][T17924] bond0: (slave bond_slave_1): Releasing backup interface [ 1446.258277][T17924] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1446.305772][T17924] team0: Port device team_slave_0 removed [ 1446.336596][T17924] team0: Failed to send options change via netlink (err -105) [ 1446.385349][T17924] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 1446.414994][T17924] team0: Port device team_slave_1 removed [ 1446.427161][T17924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1446.448609][T17924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1447.331432][ T4384] usb 3-1: USB disconnect, device number 14 [ 1447.460120][T11206] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -71 [ 1447.514149][T11206] usb 9-1: USB disconnect, device number 8 [ 1447.526359][T17940] tipc: Started in network mode [ 1447.547976][T17940] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 1447.581915][T17940] tipc: Enabled bearer , priority 10 [ 1447.705173][T17896] syz.4.3261 (17896): drop_caches: 1 [ 1447.824060][T17945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3277'. [ 1447.907634][T17949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3277'. [ 1448.224687][T17958] netlink: 'syz.8.3279': attribute type 9 has an invalid length. [ 1448.760741][T16833] tipc: Node number set to 10005162 [ 1449.043682][T17968] loop2: detected capacity change from 0 to 64 [ 1449.549870][ T4205] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1449.968457][ T4205] usb 8-1: config 0 has no interfaces? [ 1450.169986][ T4205] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1450.203681][ T4205] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.255171][ T4205] usb 8-1: Product: syz [ 1450.259508][ T4205] usb 8-1: Manufacturer: syz [ 1450.292691][ T4205] usb 8-1: SerialNumber: syz [ 1450.340818][ T4205] usb 8-1: config 0 descriptor?? [ 1450.361776][T17983] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3291'. [ 1450.631549][T17983] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3291'. [ 1452.137565][T18010] usb usb8: usbfs: process 18010 (syz.2.3298) did not claim interface 0 before use [ 1452.334124][T18017] INFO: trying to register non-static key. [ 1452.339984][T18017] The code is fine but needs lockdep annotation, or maybe [ 1452.347106][T18017] you didn't initialize this object before use? [ 1452.353685][T18017] turning off the locking correctness validator. [ 1452.360038][T18017] CPU: 0 PID: 18017 Comm: syz.8.3299 Not tainted 5.15.179-syzkaller #0 [ 1452.360473][T18010] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 1452.368506][T18017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1452.368558][T18017] Call Trace: [ 1452.389897][T18017] [ 1452.392832][T18017] dump_stack_lvl+0x1e3/0x2d0 [ 1452.397591][T18017] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1452.403226][T18017] ? panic+0x860/0x860 [ 1452.407295][T18017] ? __is_module_percpu_address+0x287/0x3c0 [ 1452.413193][T18017] ? is_kernel_percpu_address+0x132/0x150 [ 1452.418919][T18017] assign_lock_key+0x21e/0x230 [ 1452.423684][T18017] ? SOFTIRQ_verbose+0x10/0x10 [ 1452.428568][T18017] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1452.434585][T18017] register_lock_class+0x28a/0x9a0 [ 1452.439727][T18017] ? is_dynamic_key+0x1f0/0x1f0 [ 1452.444579][T18017] ? raw_spin_rq_unlock_irq+0x17/0x80 [ 1452.449972][T18017] __lock_acquire+0xd7/0x1ff0 [ 1452.454648][T18017] ? __lock_acquire+0x1295/0x1ff0 [ 1452.459762][T18017] lock_acquire+0x1db/0x4f0 [ 1452.464263][T18017] ? gsmld_write_wakeup+0x69/0x2e0 [ 1452.469922][T18017] ? read_lock_is_recursive+0x10/0x10 [ 1452.475294][T18017] ? read_lock_is_recursive+0x10/0x10 [ 1452.480766][T18017] ? preempt_schedule_common+0xa6/0xd0 [ 1452.486232][T18017] ? preempt_schedule+0xd9/0xe0 [ 1452.491107][T18017] ? _raw_spin_lock_irqsave+0xac/0x120 [ 1452.496568][T18017] ? lockdep_hardirqs_off+0x70/0x100 [ 1452.501858][T18017] _raw_spin_lock_irqsave+0xd1/0x120 [ 1452.507147][T18017] ? gsmld_write_wakeup+0x69/0x2e0 [ 1452.512263][T18017] ? _raw_spin_lock+0x40/0x40 [ 1452.516962][T18017] ? tty_ldisc_ref+0x18/0x80 [ 1452.521552][T18017] ? __init_ldsem+0x150/0x150 [ 1452.526230][T18017] gsmld_write_wakeup+0x69/0x2e0 [ 1452.531290][T18017] ? gsmld_receive_buf+0x340/0x340 [ 1452.536466][T18017] tty_wakeup+0xb3/0xf0 [ 1452.540654][T18017] tty_port_default_wakeup+0xa8/0x100 [ 1452.546228][T18017] ? gsmld_close+0x120/0x120 [ 1452.550845][T18017] tty_ldisc_hangup+0xd6/0x4b0 [ 1452.555662][T18017] __tty_hangup+0x47a/0x6b0 [ 1452.560175][T18017] tty_ioctl+0x608/0xc50 [ 1452.564418][T18017] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1452.569360][T18017] ? tty_get_icount+0xa0/0xa0 [ 1452.574242][T18017] __se_sys_ioctl+0xf1/0x160 [ 1452.578839][T18017] do_syscall_64+0x3b/0xb0 [ 1452.583261][T18017] ? clear_bhb_loop+0x15/0x70 [ 1452.588023][T18017] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1452.593917][T18017] RIP: 0033:0x7f55491e6169 [ 1452.598341][T18017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1452.617959][T18017] RSP: 002b:00007f554700d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1452.626415][T18017] RAX: ffffffffffffffda RBX: 00007f55493ff160 RCX: 00007f55491e6169 [ 1452.634391][T18017] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 000000000000000c [ 1452.642382][T18017] RBP: 00007f55492672a0 R08: 0000000000000000 R09: 0000000000000000 [ 1452.650355][T18017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1452.658345][T18017] R13: 0000000000000000 R14: 00007f55493ff160 R15: 00007ffd8c38b9c8 [ 1452.666327][T18017] [ 1452.738019][T18019] loop9: detected capacity change from 0 to 256 [ 1452.801271][T18019] exfat: Deprecated parameter 'utf8' [ 1452.819617][T18019] exfat: Deprecated parameter 'namecase' [ 1452.827040][T18019] exfat: Deprecated parameter 'utf8' [ 1452.848387][T18019] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1452.909392][T18019] attempt to access beyond end of device [ 1452.909392][T18019] loop9: rw=524288, want=34359738496, limit=256 [ 1452.982790][T18019] attempt to access beyond end of device [ 1452.982790][T18019] loop9: rw=0, want=34359738496, limit=256 [ 1453.011984][ T4205] usb 8-1: USB disconnect, device number 11 [ 1453.018085][ T26] audit: type=1800 audit(1742420182.283:536): pid=18019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3301" name="file1" dev="loop9" ino=1048660 res=0 errno=0 [ 1454.329936][ T4205] Bluetooth: hci0: command 0x0c20 tx timeout