last executing test programs: 23.439930629s ago: executing program 4 (id=242): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000040000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x806, &(0x7f00000006c0)={[{@rodir}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@utf8}, {@fat=@discard}, {@utf8no}, {@uni_xlateno}, {@fat=@flush}, {@shortname_mixed}, {@shortname_lower}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {@shortname_lower}, {@utf8}]}, 0xfe, 0x2aa, &(0x7f0000000a40)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x8) 20.595727668s ago: executing program 4 (id=248): r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x68, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x2}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x18}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x68}, 0x1, 0xba01}, 0x810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) getsockopt$inet_int(r1, 0x10d, 0xbb, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_usb_connect(0x0, 0x34, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x7c, 0x96, 0x5c, 0x40, 0x2013, 0x251, 0xe86e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "839935191f"}]}}]}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r7, 0x3b89, &(0x7f00000002c0)={0x18, 0x0, r8, r9, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000300)={0x28, 0x2, r9, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x80000000000000}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r7, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x0, 0x0, r9}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x1}], 0x0, 0x0, 0x0, 0x0, 0x2}}) 18.378988851s ago: executing program 4 (id=254): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl(r1, 0x8b01, &(0x7f0000000040)) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) add_key$fscrypt_v1(0x0, &(0x7f00000004c0)={'fscrypt:', @desc4}, &(0x7f0000000700)={0x0, "31e024b5bca2a2ff71cd40050b23b5d9033abd5b12abf8a52ed635d09ee90ee7b5653370953f159266514b3411433a515130a158ba270d263a523fd3b06e6e5c", 0xffffffd8}, 0x48, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="656e633d6f616570a7703a1f9a7089686163287368613235362d6e656f6e2900000000000000000000000000000000000000002707917c000000000000000000000000000000000000000000a66c1fe4d16cc3c2030f62f1287674c0938dc4c45fc6feca85564d1bda1dae1d12ecdeabfaf66e967767cef472f03059d7749f222ddb05ce046f6e5c703aeca428748a24eb0a07d8fda1d9deac2b23f0fe0e2fcac1d7e4c6ca2afd39"], 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000140)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000003c0)={0x0, 0x0}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x4161, 0x0) 17.339733951s ago: executing program 4 (id=258): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000000c0)='./bus\x00', 0x50, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="a60b8f2f94f38c9c515f0a49abc35b272f81737b1b8fb0591ebfcd504abdec6006007f2d3331275784d9e3d3e712d86ca48a7445f18ab74b", @ANYRES64], 0x2, 0x62e, &(0x7f0000000cc0)="$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") msgsnd(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="01000000000000403fb8c90e78b873125d77e6b936625fecc2db581dc0eb8ada77543e4e91fee4b13abee14b684147a56f08a22165df40a5edd18847c8aa714e00d35e1bc4e6d5a76d9c0029accefeb6112e3d07121fe26371a9550a44668a1edf4cbece7fab"], 0x7f, 0x800) msgrcv(0x0, &(0x7f0000001500)={0x0, ""/4096}, 0x1008, 0x2, 0x800) msgrcv(0x0, &(0x7f0000002540)={0x0, ""/22}, 0x1e, 0x2, 0x800) msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) msgrcv(0x0, &(0x7f0000002700)={0x0, ""/206}, 0xd6, 0x3, 0x2000) msgsnd(0x0, 0x0, 0x84, 0x800) r0 = geteuid() syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)={[], [{@uid_gt={'uid>', r0}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, '/dev/input/event#\x00'}}, {@flag='posixacl'}, {@uid_lt}, {@smackfsroot={'smackfsroot', 0x3d, 'audit'}}, {@euid_lt}, {@hash}]}, 0x2, 0x509, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJsnau02bFHoAVOhSCgtarZ1426jqhXKqEKqE6JHDNiROFMWOo9gpTdhDcuSORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokDkYe27vOHyfuNrZ3499PGs178+L53tvRvOf9oswEMLFuRsRBRFyLiHcjYq5zPOls8WZ7a/3cJw/urxw9uL+SRLP5zj+TrL11LHo+0/JM55z5iPjBWxE/6jbEYXv3p4j63v7mcqVS3um0FBvV7WJ9b//ORnV5vbxe3iqVlhaXFl6/+1rp0sb6UvU3H1+PiN//7ssf/fHgWz9pdWu209Y7jsvUHvrMwzgt0xHxvWEEG4OpzniuPc6HH+tDXKY0Ij4XES9n9/9cTGVX87jjl+nbI+wdADAMzeZcNOd66wDAVZdmObAkLXRyAbORpoVCO4f3QtxIK7V64/ZabXdrtZ0rm4+ZdG2jUl7o5ArnYyZZ25guL2blbr1SLp2o342I5yPiZ7nrWb2wUqusjvOLDwBMsGdOrP//ybXXfwDgiss/KubG2Q8AYHTy4+4AADBy1n8AmDz5M0oAwNVm1QeAyWP9B4DJ82nWf89sBICn3vfffru1NY86z79efW9vd7P23p3Vcn2zUN1dKazUdrYL67XaevbMnupF56vUatuLr8bu+8VGud4o1vf271Vru1uNe9lzve+VZ0YyKgDgPM+/9OFfkog4eON6tkXPf/EvXKtfHHbvgGFKx90BYGymxt0BYGxOv+0LmBTy8UDyqHjYczh/qnDSBwOdPvXeUHjy3PriZ8j/A081+X+YXI+X//ddHq4C+X+YXM1m4p3/ADBh5PiB5IL23t8TLDR7KoP9/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACupNlsS9JC5x0fs5GmhULEsxExHzPJ2kalvBARz0XEn3MzuVZ9MSK8NwgAnmbp35PO+79uzb0ye7L1Wu6/uWwfET/+xTs/f3+50dhZjLiW/Ovh8cYHneOlcfQfADhXc6q9L0V01/GuTx7cX+luo+zSx9+JiHw7/lFna7dMx3S2z2e5hhv/Tjr1ttb3lalLiH9wGBFfOGv8SZYbmW917oz4rdjPjjR+eix+mrW1961/i89fQl9g0nzYmn/ePOv+S+Nmtj/7/s9nM9Rn153/jk7Nf+nD+W+qz/x3c9AYr/7hu6cONufabYcRX5qOOOqevGf+6cZP+sR/ZcD4f33xKy/3a2v+MuJWnDX+5FisYqO6Xazv7d/ZqC6vl9fLW6XS0uLSwut3XysVsxx1sZupPu0fb9x+rl/81vhv9Imfv2D8Xx9w/L/637s//Oo58b/5tbOv/wvnxG+tid8YMP7yjd/m+7W14q/2Gf9F1//2gPE/+tv+6oA/CgCMQH1vf3O5UinvDLuQDj9EVkgiDkYwnHYh9+ufvjWqWEMsxJPRDYUnqTDumQkYtkc3/bh7AgAAAAAAAAAAAAAA9DOKPyca9xgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//+Qz09M=") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = getpid() getpriority(0x2, r2) msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000000000000b638221c3117088cdaa93b8832b3584e3f0fd5fb7f8c8069d4b496a5d3f2f5145203b59446d1c1404fd93eca491fedadddc14067f57184b0ed1af4e27ee531cc9c53f1969a355643425529ea4727fd3b60da94366ac7ded0cf66ab4e65fcbafc76e9687fd57e385427c40e370e306eafe84ec9c274de6f46725c7bd02245b212e69e87b1e8f5c440b8e01a9ebe7f9f5d2d42601d66ab79c1be740a53e6588854bd48b1d2a8171b36541af0c5de88210de48d07a03e1909a96dd8f2c711ece08e2507be5341845a2f4399a88dd0be97b5cfd86673c17944db1ab2304aff3736c1a582a99f6cdd1c"], 0x92, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="b2", 0x64}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}], 0x2, 0xc081) socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) msgctl$IPC_RMID(0x0, 0x0) fanotify_init(0x8, 0x8000) 15.885332007s ago: executing program 4 (id=260): r0 = socket(0x2, 0x3, 0xa) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x89) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f00000000c0)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x45d8, 0x4) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000180)=0x5, 0x4) openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) lseek(r2, 0x6, 0x1) 15.543596679s ago: executing program 4 (id=262): r0 = socket(0x2, 0x3, 0xa) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x89) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f00000000c0)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x45d8, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000180)=0x5, 0x4) r2 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$radio(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc04c560f, &(0x7f0000000340)=@multiplanar_overlay={0xac66, 0x43335ad05eaf740b, 0x4, 0x2, 0x4, {0x0, 0x2710}, {0x2, 0x8, 0x5, 0x3, 0x4, 0x5, "30aeb506"}, 0x9, 0x3, {0x0}, 0xfffeffff}) r6 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xffffffff, 0x400, 0x0, 0x2000}, &(0x7f0000000080)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185648, 0x0) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='sysv\x00', 0x1005b, 0x0) lseek(r9, 0x6, 0x1) recvfrom$unix(r0, 0x0, 0x0, 0x12122, 0x0, 0x0) 14.551822376s ago: executing program 3 (id=265): r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x68, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x2}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x18}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x68}, 0x1, 0xba01}, 0x810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) getsockopt$inet_int(r1, 0x10d, 0xbb, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_usb_connect(0x0, 0x34, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x7c, 0x96, 0x5c, 0x40, 0x2013, 0x251, 0xe86e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "839935191f"}]}}]}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r7, 0x3b89, &(0x7f00000002c0)={0x18, 0x0, r8, r9, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000300)={0x28, 0x2, r9, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x80000000000000}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r7, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x0, 0x0, r9}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x1}], 0x0, 0x0, 0x0, 0x0, 0x2}}) 12.040769863s ago: executing program 1 (id=272): r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x2}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x18}}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x6a}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xb22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}, 0x1, 0xba01}, 0x810) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) getsockopt$inet_int(r1, 0x10d, 0xbb, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_usb_connect(0x0, 0x34, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x7c, 0x96, 0x5c, 0x40, 0x2013, 0x251, 0xe86e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "839935191f"}]}}]}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r6, 0x0, 0x0, 0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r9, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r8, 0x3b89, &(0x7f00000002c0)={0x18, 0x0, r10, r11, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000300)={0x28, 0x2, r11, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x80000000000000}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x0, 0x0, r11}) close_range(r7, 0xffffffffffffffff, 0x0) r12 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r12, 0xc0d05605, &(0x7f0000000240)={0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x1}], 0x0, 0x0, 0x0, 0x0, 0x2}}) 10.327990897s ago: executing program 2 (id=275): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000019380)='(\x15^H\\', &(0x7f0000019300)='\x00', 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b", 0x3b, 0x8084, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x61, &(0x7f0000000040)={&(0x7f0000019340)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES64=r1, @ANYBLOB="81ff11efecbaff974c481cca10e46ea1208662cfe7726574617000"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018086dd1700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000040)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x8, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xf}, {0x100000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x10, 0x0, 0x0, 0xfd}]}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="210500000000000000004a00000008000300", @ANYRES32=r9], 0x28}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$setregs(0xd, r10, 0x4059, &(0x7f0000000200)="11a3ab1ef20ef7fde5e6752f0049cd509f860856d7483a70dd400bba0c6d6c2de621f2d673efe6e6300dd206251a56ca18e8247f676d74") ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 9.034120124s ago: executing program 3 (id=277): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x80001) socket$netlink(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f00000005c0), 0x6e, &(0x7f0000000400), 0x0, &(0x7f00000019c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}, @cred={{0x18}}, @rights={{0xc}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x40000023) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040)) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e1f0a00c9000001aaaaaaaaaa50"], 0x22) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 8.751776505s ago: executing program 1 (id=280): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="210500000000000000", @ANYRES32=r2], 0x28}}, 0x0) 8.220096008s ago: executing program 1 (id=281): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 8.15687818s ago: executing program 3 (id=282): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x14, 0x1a, 0xf01, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000140)={0x0, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 8.108076005s ago: executing program 0 (id=283): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl(r1, 0x8b01, &(0x7f0000000040)) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) add_key$fscrypt_v1(0x0, &(0x7f00000004c0)={'fscrypt:', @desc4}, &(0x7f0000000700)={0x0, "31e024b5bca2a2ff71cd40050b23b5d9033abd5b12abf8a52ed635d09ee90ee7b5653370953f159266514b3411433a515130a158ba270d263a523fd3b06e6e5c", 0xffffffd8}, 0x48, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="656e633d6f616570a7703a1f9a7089686163287368613235362d6e656f6e2900000000000000000000000000000000000000002707917c000000000000000000000000000000000000000000a66c1fe4d16cc3c2030f62f1287674c0938dc4c45fc6feca85564d1bda1dae1d12ecdeabfaf66e967767cef472f03059d7749f222ddb05ce046f6e5c703aeca428748a24eb0a07d8fda1d9deac2b23f0fe0e2fcac1d7e4c6ca2afd39"], 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000140)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000003c0)={0x0, &(0x7f0000000400)}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x4161, 0x0) 7.17656452s ago: executing program 1 (id=284): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setsig(0x4203, r1, 0xb, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='wlan1\x00', 0x10) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) 7.175911368s ago: executing program 3 (id=285): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x8000d0, &(0x7f0000000040), 0x11, 0x7d2, &(0x7f0000000340)="$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") ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x31, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x80}, 0x20000}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.057381918s ago: executing program 2 (id=286): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe2$watch_queue(0x0, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004080}, 0x4008844) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001900000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.302624616s ago: executing program 0 (id=287): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x2a, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="67b8ed77ab82513664511ea67d1fcaadffba39938d78be1ff85280771cf63d5f423eadaf2193d1e15762b9fe3a3f3c7d8a18f88d43f98558a0422d07ccaab56ad8ab2b9b747b61f26421cc72cc01f6ca35858dbe4b83312410696970ed243f36e1d5630000000000", @ANYRES32, @ANYRES8, @ANYBLOB="4ae1a945aeb21706957dde351ec8ff116a6b3473e0deff096a7a9960f5281511c5c47eb1c5e81a6f4e6b67d2f104c6f6bd75ba564ea271b90918141ca9ae7ec8ff84f65a8e55ef364ed4b7cda365d2935abbeb15bc14f380d8de399a640bca33e95e253b42ccf675343ce2da37825992301874699273f67b3e31955525703878d46297f48914be3520ae0ff1e18afd8bea2ac8070fedf1312f364323304c89f699f1b79fa834ae4a0303d0aed4146c43a4a0e2c3867144adba2514bfa44470568e04b7f7ed242f22faa1335c5f3f9c151a49b9f400492aed270d726951f9808f13465695b4ae78bf1e6a128ed02cc1ad69065b02e40d4707ff5296a387094ab8f508d10647690f9b8af8258ad2f7d91ba4a4ede6620dc8503e8f6a8a41e5c92940956302a6259132839a3bfbe40c86037740c457a4a91663dbe29eb8018d1a64431406b565db6e9edd275be2e1972868165404eb55b61c9e3bb4a6666fabf1872e84582c08c0d252d33cf30815f79effbb8abaa9cdeb2be24ab58bedb8cdd44e337a45f24c647b5fc3277a7061864f2fe3915ff7b909f1391dc295f0f96d719109d57b4a74fd1c8595984a4d7091831164344646ada99ff84618f0efda712d61cbf8c74a7c74e9f02f0c5b7911c2eaed7658b1b7b127b8bd9ab9c02bafdfb6b80b57a8fc33adf94b80c7a0e0a75c52fcc19bc43f28167b7f34def1a65a8a678cddc3469b0e264610f3e6ce4fcc654d3d226eb096af08f661e967f902d578c3dde4e2b163f0d9324b069df875eca253e1b23e79e12ad7ffeef2482abe03a174dc1833d32a8449e7869e33d36bab788d3607eceac192d8962631ee1f347bf885734ac099b29d6dbdb21c19eac52e6ebd5cf262f7380b08c93dcc6d9ce8302a0964c3393b7f91e85b794db2877df27ec391c4eed19494be1d8577d844231ee04e4fb4d9ebee4ca840400dd48f3956cc00cb4cf4eb385f677ef464cf33ae593bc56d6f8a708913a31fd33529f3277234045e7a40625abe72ef2721c56180ea493abf500d4d3bcc705cd86ca9aba1b5ac6ba1e3d45fb7e924de2981c4ebd12c3153ecee793a6d73d6607f83058cc5bbc7cd0b2dbf87cd0c53d4013607a572933dbbdc41da669dbbdf2af1021dc45842728dde269ed7b1ad1ac659587906496f6c31672809d32d8fa3971e5805d6fbeac54edde27336b737cb50e7d934d65a75f631823fd8f3322ba173201f5678f22c5413291837a6fcbf66befc4186a42baaf798fdf256659d5d9c3a4cd7086981f4b62e80a58790e029a84c365beb6b880a0de307a6cba3366f035cfaadd3ba25bb474965a3b8c441a469477bf5b43bffe448532f4fa421f3f832b9523057d848a6f83a80f82a333e743e856988c017abf5468237d8c032aebe39d2b24f9c35c30739791e51b0050744bdaa799b019aa40e273d74775f1ed3b505aa74c1cb125c63b042b82135bfe81712cea79873f56736e8299903f40a0342f543040d9181b6357e2b3135f39117c5739dc5aac2487338f92b9935cf9a0a5ea7654721f859aea6c269f303ed48fb440b23ccfc4aac318652512ca0290e44dd7edc44cda783a2c0c23353f1ef6ea23a21035d8818594e6bf032f70bca9b96d5f2b1c49939fc90cdfed94a3c6c3890755d8b2d9502c66c23699247b478b21529112fea692f5716019743eaf4918c360e06298de9cd07351e41bb94253d6b62af611b6395df7a696ea2a5469247dd2cfcc26f86bfcc400973b05cfdb933aac527d0b8d31b103d092ab8d84626a954c76cdbbf498b93bf54a356882df73d9e51b084fdb84e2a3bf1710ff28a6862977e3b34fa0e44f57a6c97281db14392bed28c36e603d08b9b679c3a46a3d9654fc876311d64c96f126b006f3e7b3f832f5d88224b096f5564fe1fa39a0e6d9586842e3dd0e70c0dca86dffaae586c3e5bbcd2a48aa6d2890f67f9545d7feb28f61b98b27f124c731a17df7c9f752d578d29816512057a4c719cc0f8ce5896e27b49b19b4c093da0836bfdff6502530f99c7330d7be4336cfdb131714775bbea2fe9e07af8081f3f8acc0c321a83c3e7c3b7d7822648e462bf338a316ad4cccc3a2bc96d5d5dea390b246106a0979df7e53bc9370f478e294e35bfa23002854a14d36d740613be869948170ec07e11c9dfc4cac9d66c1c46b97b9cedbb2ce6bc7e42bbf700f26c89291f3ac53e422f8a5690b0f5862a661c3d2164d1a815db77d0331012a06fc4e73790ae1f721f630b140d0248e46c00ff321aa47a8d8f2b448a741b329ce60b09fa72255d18126e8c683c8ad8b192b31e692d3621b3cf8d2b2672cea04b2319c7f1455023ed6174f62b3811dbb68da4cd2a4f950baed469bf6f539d1e2abdc8c3bfaa95eb92032831eddaf016e36d02974e2a2d67f268ef9c0bded357da782edf9d8304839de89ec92f0d67bcbfc6b0a3e24a8e40860c733189fed8dadfae613db02a23bc29759e67630f1d7a31f696e7cad8223b50dc03d5875a995464a4495595719e52e9e57a375f3ee49c5e7043159d9adf5bf9b40f9effeecaf457bf3a247bd7bc5881e16a511f2da4d75b96d2e7f397c2df0cd1890cb652521f7c46f7a625b1d1c1ce6249853cf804c8e5bb7f02f16248866598c8b8d381e9c1916f00c054d6702da885ccca963af918eaea1146fb6c8218e78174050aa47184e7f5872d8a005653d3f6614cfdb3a8b5a41bafb42f8d8097c6c6c7c3bea26a2e407ffdb6382bbed386ed57981df875e82799132dc1df4d30faff99afb51c17c1feef7acd1d2e25dcbf5ea74b58dd825efdac023d4797d76102891095e5c7bfe7cf0b3acabac2c62eb6b363005b0a64ebe05afbd3d97023f215bf581ab114ab69846e971a52c8d8883da4ec9d9dbb68153898104707c7e3e5c7a4cfaa2140b9dda57db0cde2aaccfadebc9bd355d770f13d3b21f9580608272d4daea47ce89a013445d0dd0b559d6277a9c86e477f8961670a7045dce55302c354ad5d59aa6c0adca442184a087109047762a87c9e4bbf2eaeb5b93cf1c32c5a8e424b0c5232fa0b57743b663531c15a160bca95ba9af8ae4d12c54fefd2ff69af6d32800ec548246903e744ddacf2b62ad2dcd0c0ea4f9b407f30d0dda54c62b232e20d382a11cf32a30ea0e73c6642688c02eb3ff4c953b10de4fa5350d8ab4d8acebd267ecd811774f38398bac5c3767f3ccef6a2767573d964194fcd75021f73d354f8298ea9a91eba7d6f5bb6f53ef046f4a12b8ed78605e544802fcaf12d40f77b7012428d6777aecb0b4a80cd666effb788fd78a45520921770ea520651ee24d12eb250a09f79d1247cc3319dcbb512b39a63ccf8cb2c9ab62e90ee3e7a7f50c9e0d4ee06b06005b77b373de73d8b0d9c3e47007b1fbae0b22a636abd141561964792a27f68d33190f949450ec4e06179b1298d90dd3e67d328143e92e323c21de8d9163fa6f4377620b0a161b234aa2b84d6aa04a36bf4498d64128b7fe3a55dba817cbe9b01d306410a4ed12f7cc81d065115fbe1799e7a22ff24e7b66d96a65cc3dcbedadf98e551a623cf0d9a888166dc23e930cba3800330818b8a393dde3824e2f67229118fd82254625ab890ccc9e15028bcd6df9acb9f55b58feda6620c62297d525422146a5def29987898d5fd53c67770cc84de20db55de9ea0066a524a2f351993ab9b725342486ed9f1f5e566265f03e73a8fe57f628eb7ce922a181c0b31f60c8617f867cc9a61ffe2b6e8ac4d551bec492bec9c8a7f24422758e76b390739cfdea1622b3899207692bc695d4a13b25dd360ba4abc718a8ce85b526a41a74a4021afecd01dca2274f50e108e54988fb34f47bcb5fdba976989ed275f43a97ab02b74543ec4ca6d65dd137a891a4f005c6c701ddfd3ace3593bf381035040547229d1a02e87b75010d33c401b9646af008cec1710812df6e6ab5e660afec887bf2375a2faef35258506953cc5c9f6dab183ccca76c6d631e1be4191d8e556d5b6db8b364e766442083db46736bf54cb4f2762832857006830c28a1ac94a69ede53f5d43392a2353a1c07a3ea64358c4c23cc956efc29dfe6417e23bda0852edda6e40752a009258a8fbd222948c1e738373fec6c473161b2f6550b59f354bcdc0426abe030d75d22b93157db999eb57d96f587386a7fccbbe4248ce1df7ade0ab2900fa70794c5fc90667ab1b4b159550f181b4a34c540709b2811cadcc9b630ad209276ee06025547d9f4ebea7d64bfa18fea6e4380e107c29bd75f33a44dd9039abd7f007e8ea753d5eb59feb2a5793191e08164e3858b1c308e76b9f6df1b3a3f7e0619ee63f81668e04c4c48044465a2549a93cf984f7b5835d59cc1a0cd693fc6a4599c5fb19982cd83735a9339491bb241ba01d881116d83ce89c9b77b480f206042b8782f4bafbc8f8026e4ce357696fd3124d77b6fb790b0a7025a9ed7f13a8f0bb62f3b4f304889de66b7c6b2dc26389945d828241746bf8925a2e621318bd0c67e063250d61a47c17a617529f624513e2ac15d995e660acefb27e0275e1abb5cf16d5bcb328aef57cfb951b3b0f805dfe301bf2f41f83b74d41221c67eae9813dad54e9c09a2e6902e888ac36bea5b2ee05a24cad650b87c5e0a62a9b7a29de7d5985a338931bc007eda2b1f1f3f693619274d2d08fc9f646366b784205ef25e071ac4ec0d4963b032f2040fb5faddd1c354fc96e8eee486d3f3070baae630d74aa5e610b300c78a9cd767946b0dc3ef27c1f370c1a3028788a1b5d6531e9abd3f02d5b4e56f3d32f4b9b04a198038831226e2e522106c6c0892e7059fa645e0937d37e4b373fd4014ad62db94a8a6fc7ed44b2f684dd6df4bc2158f66311d9eed766bf36a8aa2a4d5daa55c59740140dd01025b0272aeee5058b56b0e39c7037364dd653d48da305b375bbcbcbd16e53cd7aed9eef03b74769d5045bb03981f057d917c417b30fd5c0c5961a2eae5d9859dcba3a763a64b4d0a8ca16f4c2b227c03036622a1ea4731dba15820f01d1da4817c7eb07b0126de799cbb2ec646fe0c15c7b3a7caa150cdc865dfaf7a93b7ae87a5fcfdc8162d76739f24a23ce8d3e4289cd69bd4c961eb939496e60939b1c8426881f802447bd875eb0241ea1e427dcf25c95c1b91c53cf1e357b6e4738e42ba2f06335c2924121ff3ffb81f9a26e70a3d4bc57e5cb4605d08995a2a4a0588d2f8901a9910bee0d216a29248f2335c206dddecebc13162850b3131a7fb1f677e97d97739147c5c4122a48cc9b6c9c8fc4cb21781f2d5d32e9e3c020b6aebdaeec494f5edefdc8aea0f4ce74bc8cd047826ef2268de922c4d403c6bf3acedf72da1b8b300f466a0423d9afd73a163dfb7fe91bdff3510acc23482c5c08a55f3d9ac61dc2d60d57f11f2ff72dc4d0e8b005cbf09afc2c0d0302d4da324962a0fbb3509bbd33f7572ff8ee47e379e6e8cfd13bf9fd46844a5f1370b1efd5bd93e18e363274451176c5e3d4c4983f11f4a1275f1b3a402b345f394fa31bb202779cafc2eb5fb8ff52be48613a6a9428a9917963c4f971c5c26162fb9fa95f16d7be391262ab9f520a77758a38f9b0184ab7ee3ab90d223bd96586681a0662819f54f912f70ef7359d3285b6e4fdc652a224d237d38a47c09361c8b3c24b54cc8e0abd17ec283ee0b68ba242de247fc0e6912c38808e33df489fdb593e59e3837914f978f3cf9482a6441ccb67d89929a5453111c3365a5ca31459e870efec48e64e212f1146", @ANYRES16], 0x9, 0x2af, &(0x7f00000001c0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0x3, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount(0x0, 0x0, &(0x7f00000003c0)='incremental-fs\x00', 0x11, 0x0) epoll_create1(0x0) socket(0x0, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x102) pipe2(0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$nfs4(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) 5.823609706s ago: executing program 1 (id=288): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b00011100000009040000019569"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r5, 0x8979) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r6, 0x29, 0x3c, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_disconnect(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x480000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.765016932s ago: executing program 2 (id=289): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "cb96a945ab526fe377145584b62491050e011fd59d1396798a98902d3fafc9e09a29e6671ad9f5f25693b12e5d0ac30e15fd59e58f7200"}, 0x48, 0xfffffffffffffffe) 4.450412398s ago: executing program 3 (id=291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x77) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x20) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000004000000040000000900000000000000261ac0c09d3d6ded080b0e6513be80b91ff2fab5b7e4e5b3d84ab6b9e01c889750a3c8d8dc2e94bb694c3150ab41d9f03d47b27ba26ebdcaf7d00eb3d497e45342444bad8b194f2dc18a3a70043cb45af71dc7290449f30ac8dc3b53c863f07e6aa2d6f1e1b8687355993f33d3a0963b13e88a363f3ebad999e921704a324a78162fc85abbd0bc1a2348c3fe753e489c023c55871be5a54f580b32f18d7ec49dfda3bbec0471fd4b3f07d02b4b14943a7469fb9e74ac", @ANYRES32=r5, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x1e) unshare(0x68040280) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000280)={'raw\x00', 0x0, [0x0, 0x100, 0xb, 0x18000, 0xd]}, &(0x7f0000000380)=0x54) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000008000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000006e0d0000000000000000ea8c1250ec40b579aa268b278da013c9635b3ab91672190a1a6ff316bf050e"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 4.370793957s ago: executing program 2 (id=292): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x80001) socket$netlink(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f00000005c0), 0x6e, &(0x7f0000000400), 0x0, &(0x7f00000019c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}, @cred={{0x18}}, @rights={{0xc}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x40000023) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040)) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e1f0a00c9000001aaaaaaaaaa50"], 0x22) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 4.274450228s ago: executing program 0 (id=293): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="210500000000000000004a000000", @ANYRES32=r2], 0x28}}, 0x0) 3.951875053s ago: executing program 2 (id=294): io_setup(0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b00000000000000001804", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) 3.920578307s ago: executing program 0 (id=295): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.71019836s ago: executing program 0 (id=296): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400100bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000380)=0x3) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0xffff, 0x1, 0x1, 0x800a, 0x5, "5f7300fbffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000006c0)=0x16) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) read$hidraw(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') read(r3, &(0x7f0000001a00)=""/177, 0xb1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e00000000000000000000000000000030030000", @ANYRES32, @ANYBLOB="000000dd000000000000030000000000000098a3c64f6069f6dcb242dcb09a883149c5ca96704664134e3af8e659f61f0ffd06090ad891bd0b9f6e5b1ed39567a8a75fc055af3289436f63", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) 735.534643ms ago: executing program 3 (id=297): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl(r1, 0x8b01, &(0x7f0000000040)) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) add_key$fscrypt_v1(0x0, &(0x7f00000004c0)={'fscrypt:', @desc4}, &(0x7f0000000700)={0x0, "31e024b5bca2a2ff71cd40050b23b5d9033abd5b12abf8a52ed635d09ee90ee7b5653370953f159266514b3411433a515130a158ba270d263a523fd3b06e6e5c", 0xffffffd8}, 0x48, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="656e633d6f616570a7703a1f9a7089686163287368613235362d6e656f6e2900000000000000000000000000000000000000002707917c000000000000000000000000000000000000000000a66c1fe4d16cc3c2030f62f1287674c0938dc4c45fc6feca85564d1bda1dae1d12ecdeabfaf66e967767cef472f03059d7749f222ddb05ce046f6e5c703aeca428748a24eb0a07d8fda1d9deac2b23f0fe0e2fcac1d7e4c6ca2afd39"], 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000140)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000003c0)={0x0, &(0x7f0000000400)}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x4161, 0x0) 579.262025ms ago: executing program 1 (id=298): mknod$loop(0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) readv(r2, &(0x7f0000000240), 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b323675149783ec057ec6d6e8e600b9eced07ddcc56b77d8ea08223"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400007791954223212fe500", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r3, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close(r2) mremap(&(0x7f00004f8000/0x1000)=nil, 0x1000, 0x400d, 0x3, &(0x7f00001f4000/0x4000)=nil) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e44"], 0x47) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) 75.638963ms ago: executing program 2 (id=299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r5, 0xffffffffffffffff, 0x24, 0x7, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0}}, 0x30) sched_setaffinity(r1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r6, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) fcntl$setlease(r8, 0x400, 0x1) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 0s ago: executing program 0 (id=300): sigaltstack(0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00', @ANYRES32, @ANYBLOB="00000000000000000002", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$unix(0x1, 0x2, 0x0) readahead(r1, 0x0, 0xbe) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) semget$private(0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0xe, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts. [ 51.779739][ T5217] cgroup: Unknown subsys name 'net' [ 51.948806][ T5217] cgroup: Unknown subsys name 'cpuset' [ 51.957402][ T5217] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.249090][ T5217] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.820585][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.830947][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.846202][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.886205][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.905569][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.915602][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.945922][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.955710][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.963338][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.975242][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.987865][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.997008][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.025855][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.034268][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.046511][ T5233] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.054206][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.063282][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.070711][ T4622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.071166][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.080709][ T4622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.086485][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.093340][ T4622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.107388][ T5233] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.108802][ T4622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.123516][ T4622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.132267][ T4622] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 57.145934][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.153544][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.161354][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.166901][ T4622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.586686][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 57.597111][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 57.649859][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 57.727977][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 57.747705][ T5238] chnl_net:caif_netlink_parms(): no params data found [ 57.794959][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.802911][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.810646][ T5227] bridge_slave_0: entered allmulticast mode [ 57.818105][ T5227] bridge_slave_0: entered promiscuous mode [ 57.830435][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.837582][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.844993][ T5231] bridge_slave_0: entered allmulticast mode [ 57.851832][ T5231] bridge_slave_0: entered promiscuous mode [ 57.864401][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.871626][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.879022][ T5231] bridge_slave_1: entered allmulticast mode [ 57.885927][ T5231] bridge_slave_1: entered promiscuous mode [ 57.902779][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.912893][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.920328][ T5227] bridge_slave_1: entered allmulticast mode [ 57.929902][ T5227] bridge_slave_1: entered promiscuous mode [ 57.979114][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.986872][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.994016][ T5235] bridge_slave_0: entered allmulticast mode [ 58.000782][ T5235] bridge_slave_0: entered promiscuous mode [ 58.011881][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.035033][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.042413][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.049960][ T5235] bridge_slave_1: entered allmulticast mode [ 58.056967][ T5235] bridge_slave_1: entered promiscuous mode [ 58.064964][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.088756][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.133554][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.154043][ T5231] team0: Port device team_slave_0 added [ 58.163897][ T5231] team0: Port device team_slave_1 added [ 58.175872][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.183010][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.190308][ T5241] bridge_slave_0: entered allmulticast mode [ 58.198328][ T5241] bridge_slave_0: entered promiscuous mode [ 58.224226][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.254772][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.262013][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.269315][ T5241] bridge_slave_1: entered allmulticast mode [ 58.276164][ T5241] bridge_slave_1: entered promiscuous mode [ 58.284424][ T5227] team0: Port device team_slave_0 added [ 58.292883][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.302716][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.310771][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.340132][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.352254][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.359819][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.367240][ T5238] bridge_slave_0: entered allmulticast mode [ 58.373737][ T5238] bridge_slave_0: entered promiscuous mode [ 58.388996][ T5227] team0: Port device team_slave_1 added [ 58.410280][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.419419][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.445848][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.457441][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.464575][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.472212][ T5238] bridge_slave_1: entered allmulticast mode [ 58.478942][ T5238] bridge_slave_1: entered promiscuous mode [ 58.501741][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.514626][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.534546][ T5235] team0: Port device team_slave_0 added [ 58.569528][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.577711][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.604525][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.633300][ T5235] team0: Port device team_slave_1 added [ 58.651247][ T5231] hsr_slave_0: entered promiscuous mode [ 58.657961][ T5231] hsr_slave_1: entered promiscuous mode [ 58.667830][ T5238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.677975][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.684930][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.712859][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.750742][ T5238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.766330][ T5241] team0: Port device team_slave_0 added [ 58.774145][ T5241] team0: Port device team_slave_1 added [ 58.791439][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.798538][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.824781][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.837824][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.844790][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.870747][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.901762][ T5238] team0: Port device team_slave_0 added [ 58.928112][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.935079][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.961362][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.988535][ T5238] team0: Port device team_slave_1 added [ 58.996360][ T5243] Bluetooth: hci0: command tx timeout [ 59.012782][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.022997][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.049363][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.075571][ T5243] Bluetooth: hci1: command tx timeout [ 59.091082][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.098150][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.124156][ T5238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.161894][ T5235] hsr_slave_0: entered promiscuous mode [ 59.168492][ T5235] hsr_slave_1: entered promiscuous mode [ 59.174443][ T5235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.182610][ T5235] Cannot create hsr debugfs directory [ 59.202524][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.211332][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.236534][ T5240] Bluetooth: hci3: command tx timeout [ 59.237984][ T5238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.242993][ T5243] Bluetooth: hci4: command tx timeout [ 59.253193][ T4622] Bluetooth: hci2: command tx timeout [ 59.281092][ T5227] hsr_slave_0: entered promiscuous mode [ 59.288075][ T5227] hsr_slave_1: entered promiscuous mode [ 59.294032][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.301756][ T5227] Cannot create hsr debugfs directory [ 59.383437][ T5241] hsr_slave_0: entered promiscuous mode [ 59.389722][ T5241] hsr_slave_1: entered promiscuous mode [ 59.396080][ T5241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.403663][ T5241] Cannot create hsr debugfs directory [ 59.439657][ T5238] hsr_slave_0: entered promiscuous mode [ 59.446071][ T5238] hsr_slave_1: entered promiscuous mode [ 59.452137][ T5238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.459915][ T5238] Cannot create hsr debugfs directory [ 59.640501][ T5231] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.666156][ T5231] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.689470][ T5231] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.711754][ T5231] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.754052][ T5227] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.767705][ T5227] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.780436][ T5227] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.791767][ T5227] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.860715][ T5235] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.890093][ T5235] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.915303][ T5235] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.924759][ T5235] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.975323][ T5241] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.984928][ T5241] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.022099][ T5241] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.037714][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.050538][ T5241] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.108795][ T5238] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.130233][ T5238] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.138921][ T5238] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.156950][ T5238] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.170480][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.181751][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.241321][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.259528][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.266876][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.304469][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.311616][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.323163][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.330271][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.340939][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.348089][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.391304][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.433159][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.469798][ T5231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.507881][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.545321][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.552514][ T2948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.593971][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.610502][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.617682][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.656375][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.663441][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.673784][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.680953][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.794408][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.826400][ T5238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.851977][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.888769][ T5238] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.948358][ T5227] veth0_vlan: entered promiscuous mode [ 60.955547][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.962687][ T2948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.014844][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.022003][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.041205][ T5227] veth1_vlan: entered promiscuous mode [ 61.075876][ T5243] Bluetooth: hci0: command tx timeout [ 61.113194][ T5231] veth0_vlan: entered promiscuous mode [ 61.150467][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.165591][ T5243] Bluetooth: hci1: command tx timeout [ 61.187277][ T5231] veth1_vlan: entered promiscuous mode [ 61.227971][ T5227] veth0_macvtap: entered promiscuous mode [ 61.240871][ T5227] veth1_macvtap: entered promiscuous mode [ 61.268153][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.278602][ T5231] veth0_macvtap: entered promiscuous mode [ 61.288592][ T5231] veth1_macvtap: entered promiscuous mode [ 61.315565][ T5243] Bluetooth: hci2: command tx timeout [ 61.322814][ T5243] Bluetooth: hci4: command tx timeout [ 61.322825][ T4622] Bluetooth: hci3: command tx timeout [ 61.342534][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.354967][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.378618][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.390336][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.402234][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.423577][ T5227] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.433846][ T5227] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.442766][ T5227] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.451764][ T5227] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.469470][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.481019][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.496251][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.533387][ T5231] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.543240][ T5231] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.558338][ T5231] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.567473][ T5231] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.578922][ T5235] veth0_vlan: entered promiscuous mode [ 61.595269][ T5238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.624130][ T5235] veth1_vlan: entered promiscuous mode [ 61.725270][ T5235] veth0_macvtap: entered promiscuous mode [ 61.752541][ T5235] veth1_macvtap: entered promiscuous mode [ 61.822953][ T5238] veth0_vlan: entered promiscuous mode [ 61.829872][ T1807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.837989][ T5241] veth0_vlan: entered promiscuous mode [ 61.850829][ T1807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.860281][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.872583][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.884132][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.895238][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.907191][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.920352][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.930960][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.941512][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.953014][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.964382][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.975276][ T5241] veth1_vlan: entered promiscuous mode [ 61.984484][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.996412][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.021163][ T5235] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.030357][ T5235] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.039785][ T5235] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.048735][ T5235] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.063625][ T5238] veth1_vlan: entered promiscuous mode [ 62.098320][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.107197][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.126378][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.137413][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.189194][ T5238] veth0_macvtap: entered promiscuous mode [ 62.204305][ T5238] veth1_macvtap: entered promiscuous mode [ 62.223951][ T5241] veth0_macvtap: entered promiscuous mode [ 62.232848][ T5227] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 62.269539][ T5241] veth1_macvtap: entered promiscuous mode [ 62.306497][ T2948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.314359][ T2948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.338801][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.351820][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.363882][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.374550][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.385226][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.397517][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.409383][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.451173][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.473753][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.500616][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.512013][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.522235][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.532813][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.542761][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.553694][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.566242][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.598036][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.615938][ T5311] loop0: detected capacity change from 0 to 1024 [ 62.628137][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.655267][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.673685][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.801526][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.812437][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.823970][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.861950][ T5238] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.871156][ T5238] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.882918][ T5238] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.891920][ T5318] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.892211][ T5238] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.940937][ T5319] /dev/loop0: Can't open blockdev [ 63.031857][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.043748][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.060345][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.072272][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.082988][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.097038][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.138582][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.155838][ T5243] Bluetooth: hci0: command tx timeout [ 63.168006][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.188812][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.201206][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.210371][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.227081][ T5241] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.238086][ T5243] Bluetooth: hci1: command tx timeout [ 63.244599][ T5241] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.255954][ T5241] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.265183][ T5241] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.436932][ T5243] Bluetooth: hci4: command tx timeout [ 63.443008][ T5243] Bluetooth: hci2: command tx timeout [ 63.453358][ T5243] Bluetooth: hci3: command tx timeout [ 63.821364][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.836701][ T2948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.844574][ T2948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.866951][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.981331][ T1807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.981662][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.001157][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.014131][ T1807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.169072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.184424][ T5331] netlink: 216 bytes leftover after parsing attributes in process `syz.2.9'. [ 64.206275][ T5331] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9'. [ 64.285876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.306663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.449152][ T5337] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.519001][ T5339] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.630808][ T5344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13'. [ 64.654843][ T5309] IPVS: starting estimator thread 0... [ 64.700839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 64.775674][ T5349] IPVS: using max 24 ests per chain, 57600 per kthread [ 64.863104][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 64.885860][ T5356] loop2: detected capacity change from 0 to 1024 [ 64.936007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.159816][ T5360] /dev/loop2: Can't open blockdev [ 65.455681][ T4622] Bluetooth: hci0: command tx timeout [ 65.461923][ T4622] Bluetooth: hci1: command tx timeout [ 65.475486][ T4622] Bluetooth: hci3: command tx timeout [ 65.481665][ T4622] Bluetooth: hci2: command tx timeout [ 65.491089][ T4622] Bluetooth: hci4: command tx timeout [ 65.519977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.622349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.876407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 65.954145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 65.963143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 67.013072][ T5383] fuse: Bad value for 'fd' [ 69.056712][ T5281] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.136448][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.225529][ T5281] usb 1-1: Using ep0 maxpacket: 32 [ 69.244088][ T5281] usb 1-1: descriptor type invalid, skip [ 69.261277][ T5281] usb 1-1: config 1 interface 0 altsetting 252 bulk endpoint 0x1 has invalid maxpacket 16 [ 69.305765][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.325565][ T5281] usb 1-1: config 1 interface 0 has no altsetting 0 [ 69.332605][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 69.496930][ T5281] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 69.521882][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 70.202232][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.215671][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.223979][ T5281] usb 1-1: Product: syz [ 70.232565][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.244295][ T5281] usb 1-1: Manufacturer: syz [ 70.253930][ T5281] usb 1-1: SerialNumber: syz [ 70.258713][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.304089][ T9] usb 4-1: config 0 descriptor?? [ 70.325864][ T5414] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 70.340180][ T5418] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 70.350464][ T5425] netlink: 'syz.1.36': attribute type 4 has an invalid length. [ 70.767502][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 70.781162][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 70.800936][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 70.817035][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 70.834423][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 70.847606][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 70.867343][ T9] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 70.902721][ T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 71.042521][ T9] usb 4-1: USB disconnect, device number 2 [ 71.114201][ T5443] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 71.193047][ T5444] netlink: 44 bytes leftover after parsing attributes in process `syz.1.41'. [ 71.221715][ T5444] netlink: 43 bytes leftover after parsing attributes in process `syz.1.41'. [ 71.257498][ T5444] netlink: 'syz.1.41': attribute type 6 has an invalid length. [ 71.283686][ T5444] netlink: 43 bytes leftover after parsing attributes in process `syz.1.41'. [ 71.667734][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.674396][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.011088][ T5450] netlink: 'syz.3.43': attribute type 11 has an invalid length. [ 72.022402][ T5450] netlink: 134672 bytes leftover after parsing attributes in process `syz.3.43'. [ 73.536773][ T5515] overlayfs: failed to resolve './file0': -2 [ 73.899401][ T5524] netlink: 'syz.3.51': attribute type 1 has an invalid length. [ 73.907286][ T5524] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.51'. [ 74.359880][ T5279] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.090783][ T5542] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 75.099796][ T5542] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 75.216988][ T5279] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 75.228712][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 75.239999][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 75.251847][ T5279] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.265947][ T5279] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.275084][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.294358][ T5279] usb 2-1: config 0 descriptor?? [ 75.300005][ T5527] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 75.684338][ T5551] overlayfs: failed to resolve './file0': -2 [ 75.723279][ T5279] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 75.735267][ T5279] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 75.742917][ T5279] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 75.750796][ T5279] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 75.758363][ T5279] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 75.766626][ T5279] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 75.775204][ T5279] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 75.793496][ T5279] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 76.022104][ T5281] usb 2-1: USB disconnect, device number 2 [ 76.130271][ T5558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 76.279792][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 76.447057][ T5243] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 76.455626][ T5243] Bluetooth: hci1: Injecting HCI hardware error event [ 76.464885][ T4622] Bluetooth: hci1: hardware error 0x00 [ 76.493976][ T5278] usb 1-1: USB disconnect, device number 2 [ 76.857656][ T25] cfg80211: failed to load regulatory.db [ 76.955282][ T5571] warning: `syz.2.69' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.033241][ T5568] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 77.056791][ T5568] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 78.172354][ T5243] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 78.182712][ T5243] CPU: 0 UID: 0 PID: 5243 Comm: kworker/u9:6 Not tainted 6.12.0-rc1-next-20241003-syzkaller #0 [ 78.193088][ T5243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 78.203145][ T5243] Workqueue: hci0 hci_rx_work [ 78.207838][ T5243] Call Trace: [ 78.211109][ T5243] [ 78.214029][ T5243] dump_stack_lvl+0x241/0x360 [ 78.218710][ T5243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.223912][ T5243] ? __pfx__printk+0x10/0x10 [ 78.228498][ T5243] ? __kmalloc_cache_noprof+0x243/0x390 [ 78.234134][ T5243] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 78.239429][ T5243] sysfs_create_dir_ns+0x2ce/0x3a0 [ 78.243105][ T5587] loop1: detected capacity change from 0 to 8 [ 78.244547][ T5243] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 78.251282][ T5587] ======================================================= [ 78.251282][ T5587] WARNING: The mand mount option has been deprecated and [ 78.251282][ T5587] and is ignored by this kernel. Remove the mand [ 78.251282][ T5587] option from the mount to silence this warning. [ 78.251282][ T5587] ======================================================= [ 78.256225][ T5243] kobject_add_internal+0x435/0x8d0 [ 78.256266][ T5243] kobject_add+0x152/0x220 [ 78.256292][ T5243] ? do_raw_spin_unlock+0x13c/0x8b0 [ 78.291261][ C1] vkms_vblank_simulate: vblank timer overrun [ 78.296440][ T5243] ? device_add+0x3e7/0xbf0 [ 78.316614][ T5243] ? __pfx_kobject_add+0x10/0x10 [ 78.321555][ T5243] ? _raw_spin_unlock+0x28/0x50 [ 78.326400][ T5243] ? get_device_parent+0x165/0x410 [ 78.331614][ T5243] device_add+0x4e5/0xbf0 [ 78.335938][ T5243] hci_conn_add_sysfs+0xe8/0x200 [ 78.340867][ T5243] le_conn_complete_evt+0xc9f/0x12e0 [ 78.346252][ T5243] ? trace_contention_end+0x3c/0x120 [ 78.351553][ T5243] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 78.357262][ T5243] ? __mutex_unlock_slowpath+0x21d/0x750 [ 78.362881][ T5243] ? __copy_skb_header+0x437/0x5b0 [ 78.368012][ T5243] ? skb_pull_data+0x112/0x230 [ 78.372865][ T5243] hci_le_enh_conn_complete_evt+0x185/0x420 [ 78.378779][ T5243] hci_event_packet+0xa55/0x1540 [ 78.383804][ T5243] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 78.389184][ T5243] ? __pfx_hci_event_packet+0x10/0x10 [ 78.394551][ T5243] ? set_iso_socket_func+0x330/0x3c0 [ 78.399829][ T5243] ? kcov_remote_start+0x97/0x7d0 [ 78.404853][ T5243] hci_rx_work+0x3fe/0xd80 [ 78.409267][ T5243] ? process_scheduled_works+0x976/0x1850 [ 78.415071][ T5243] process_scheduled_works+0xa63/0x1850 [ 78.420628][ T5243] ? __pfx_process_scheduled_works+0x10/0x10 [ 78.426625][ T5243] ? assign_work+0x364/0x3d0 [ 78.431223][ T5243] worker_thread+0x870/0xd30 [ 78.435820][ T5243] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 78.441711][ T5243] ? __kthread_parkme+0x169/0x1d0 [ 78.446735][ T5243] ? __pfx_worker_thread+0x10/0x10 [ 78.451858][ T5243] kthread+0x2f0/0x390 [ 78.455921][ T5243] ? __pfx_worker_thread+0x10/0x10 [ 78.461029][ T5243] ? __pfx_kthread+0x10/0x10 [ 78.465609][ T5243] ret_from_fork+0x4b/0x80 [ 78.470133][ T5243] ? __pfx_kthread+0x10/0x10 [ 78.474710][ T5243] ret_from_fork_asm+0x1a/0x30 [ 78.479497][ T5243] [ 78.485592][ T5243] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 78.499712][ T5243] Bluetooth: hci0: failed to register connection device [ 78.519768][ T5585] SQUASHFS error: Unable to read inode 0xa7 [ 78.596052][ T4622] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 78.604115][ T5591] loop2: detected capacity change from 0 to 512 [ 78.616670][ T5281] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.646119][ T5591] EXT4-fs (loop2): Test dummy encryption mode enabled [ 78.663980][ T5591] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #12: comm syz.2.75: corrupted in-inode xattr: invalid ea_ino [ 78.682500][ T5591] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.75: couldn't read orphan inode 12 (err -117) [ 78.702133][ T5591] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.778810][ T5281] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 78.790364][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.814304][ T5281] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 78.830812][ T5281] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 78.911106][ T5281] usb 1-1: Manufacturer: syz [ 78.961414][ T5281] usb 1-1: config 0 descriptor?? [ 79.037365][ T5281] rc_core: IR keymap rc-hauppauge not found [ 79.047968][ T5281] Registered IR keymap rc-empty [ 79.060161][ T5281] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 79.089070][ T5281] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 79.158804][ T4622] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 79.168547][ T4622] Bluetooth: hci4: Injecting HCI hardware error event [ 79.178914][ T4622] Bluetooth: hci4: hardware error 0x00 [ 79.425718][ T5278] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.445767][ T5599] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 79.523587][ T5599] EXT4-fs error (device loop2): ext4_add_entry:2437: inode #2: comm syz.2.75: Directory hole found for htree leaf block 0 [ 79.587236][ T5278] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.617232][ T5278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 79.641711][ T5602] EXT4-fs error (device loop2): ext4_add_entry:2437: inode #2: comm syz.2.75: Directory hole found for htree leaf block 0 [ 79.650245][ T5278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 79.759593][ T5278] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.847762][ T5278] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.953575][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.199694][ T5278] usb 2-1: config 0 descriptor?? [ 80.289752][ T5595] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 80.515609][ T5243] Bluetooth: hci0: command tx timeout [ 80.564063][ T5235] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 81.142228][ T5278] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 81.195071][ T5278] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 81.212964][ T5278] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 81.238432][ T5278] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 81.284655][ T5278] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 81.316625][ T4622] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 81.334629][ T5278] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 81.377414][ T5278] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 81.422498][ T5278] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 81.476417][ T5609] loop4: detected capacity change from 0 to 2048 [ 81.532417][ T5609] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 81.541936][ T5278] usb 2-1: USB disconnect, device number 3 [ 81.563763][ T5609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.793024][ T5619] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 81.848151][ T5619] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 81.869025][ T5609] kvm: emulating exchange as write [ 82.059760][ T25] usb 1-1: USB disconnect, device number 3 [ 82.080107][ T5630] bridge0: port 3(vlan2) entered blocking state [ 82.124408][ T5630] bridge0: port 3(vlan2) entered disabled state [ 82.172123][ T5632] loop2: detected capacity change from 0 to 1024 [ 82.186848][ T5630] vlan2: entered allmulticast mode [ 82.417730][ T5639] /dev/loop2: Can't open blockdev [ 82.492237][ T5630] vlan2: left allmulticast mode [ 82.588051][ T5241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.230697][ T5281] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.764268][ T5649] netlink: 'syz.1.89': attribute type 11 has an invalid length. [ 83.784548][ T5649] netlink: 134672 bytes leftover after parsing attributes in process `syz.1.89'. [ 83.892649][ T5281] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 83.911825][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 83.923234][ T5281] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.951240][ T5281] usb 4-1: string descriptor 0 read error: -22 [ 83.966379][ T5281] usb 4-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 83.978720][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.008811][ T5281] usb 4-1: config 0 descriptor?? [ 84.031506][ T5281] em28xx 4-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 84.061172][ T5281] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 84.076674][ T5660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.90'. [ 84.269404][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 84.661498][ T5651] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 84.681684][ T5651] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 84.704341][ T5651] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 84.717584][ T5651] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 84.740538][ T5651] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 84.748030][ T5651] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 84.759142][ T5651] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 84.772718][ T5651] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 84.780998][ T5651] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 84.789607][ T5651] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 84.866656][ T5281] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 84.874539][ T5281] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 84.884734][ T5281] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 84.904580][ T5281] em28xx 4-1:0.0: No AC97 audio processor [ 84.932682][ T5680] loop1: detected capacity change from 0 to 1024 [ 84.939451][ T5281] usb 4-1: USB disconnect, device number 3 [ 84.973990][ T5281] em28xx 4-1:0.0: Disconnecting em28xx [ 85.013001][ T5281] em28xx 4-1:0.0: Freeing device [ 85.099785][ T938] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 85.525653][ T5278] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.608542][ T938] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.621988][ T938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 85.669187][ T938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 85.688290][ T938] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.707554][ T938] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.725153][ T938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.757411][ T5278] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 85.807210][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.812169][ T938] usb 1-1: config 0 descriptor?? [ 85.820878][ T5278] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 85.836443][ T5676] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 85.880992][ T5278] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 85.904950][ T5278] usb 5-1: Manufacturer: syz [ 85.956988][ T5243] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.973199][ T5278] usb 5-1: config 0 descriptor?? [ 86.015524][ T5280] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.070646][ T5692] netlink: 'syz.1.97': attribute type 1 has an invalid length. [ 86.091452][ T5692] netlink: 'syz.1.97': attribute type 4 has an invalid length. [ 86.105649][ T5278] rc_core: IR keymap rc-hauppauge not found [ 86.111681][ T5278] Registered IR keymap rc-empty [ 86.142901][ T5278] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 86.157428][ T5692] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.97'. [ 86.191170][ T5280] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 86.203625][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.250999][ T5280] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 86.251403][ T5278] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 86.262977][ T938] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 86.308612][ T5280] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 86.327731][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 86.334880][ T5683] netlink: 28 bytes leftover after parsing attributes in process `syz.4.95'. [ 86.345649][ T938] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 86.358126][ T5280] usb 4-1: Manufacturer: syz [ 86.367432][ T938] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 86.376196][ T5280] usb 4-1: config 0 descriptor?? [ 86.385742][ T938] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 86.400480][ T938] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 86.482323][ T5280] rc_core: IR keymap rc-hauppauge not found [ 86.511051][ T5280] Registered IR keymap rc-empty [ 86.540569][ T5280] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 86.552738][ T938] usb 1-1: USB disconnect, device number 4 [ 86.671646][ T5280] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input7 [ 86.755637][ T5243] Bluetooth: hci2: command 0x0c1a tx timeout [ 86.792648][ T5281] usb 5-1: USB disconnect, device number 2 [ 86.835770][ T5243] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.755805][ T938] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.017697][ T938] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 88.030672][ T938] usb 5-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.057612][ T5243] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.075705][ T938] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 88.086008][ T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.101678][ T5714] loop2: detected capacity change from 0 to 8 [ 89.020671][ T938] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 89.033547][ T5713] SQUASHFS error: Unable to read inode 0xa7 [ 89.065538][ T4622] Bluetooth: hci3: command 0x0c1a tx timeout [ 89.072293][ T5243] Bluetooth: hci2: command 0x0c1a tx timeout [ 89.462179][ T938] usb 5-1: USB disconnect, device number 3 [ 89.620122][ T5727] loop2: detected capacity change from 0 to 1024 [ 89.688562][ T5729] overlayfs: missing 'lowerdir' [ 90.217896][ T5716] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 90.230352][ T5716] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 90.278752][ T5716] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 90.307468][ T5716] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 90.470544][ T5737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.111'. [ 91.175639][ T5280] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 91.486864][ T4622] Bluetooth: hci0: command 0x0c1a tx timeout [ 91.519336][ T5280] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.532007][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 92.227409][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 92.238773][ T5280] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.252234][ T5280] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.268535][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.285579][ T4622] Bluetooth: hci2: command 0x0c1a tx timeout [ 92.317324][ T5280] usb 1-1: config 0 descriptor?? [ 92.331449][ T5735] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 92.373290][ T4622] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.435990][ T5280] usbhid 1-1:0.0: can't add hid device: -71 [ 93.442827][ T5280] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 93.464317][ T5280] usb 1-1: USB disconnect, device number 5 [ 93.563351][ T4622] Bluetooth: hci0: command 0x0c1a tx timeout [ 93.822722][ T5772] loop1: detected capacity change from 0 to 1024 [ 94.435896][ T4622] Bluetooth: hci3: command 0x0c1a tx timeout [ 94.651857][ T5309] usb 4-1: USB disconnect, device number 4 [ 94.712816][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 94.883012][ T5783] bridge0: port 3(vlan2) entered blocking state [ 94.907718][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 94.928694][ T9] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 94.941993][ T5783] bridge0: port 3(vlan2) entered disabled state [ 94.947945][ T9] usb 5-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 94.961422][ T5783] vlan2: entered allmulticast mode [ 94.978630][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 94.979169][ T5783] vlan2: left allmulticast mode [ 94.997840][ T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.40 [ 95.007582][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.016698][ T9] usb 5-1: Product: syz [ 95.021085][ T9] usb 5-1: Manufacturer: syz [ 95.026331][ T9] usb 5-1: SerialNumber: syz [ 95.040767][ T5778] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 95.125668][ T5281] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.175596][ T5280] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 95.300581][ T5281] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 95.317355][ T5281] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.332807][ T5281] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 95.342919][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.352954][ T5280] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 95.370303][ T5281] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 95.394730][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 95.415345][ T5280] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.440307][ T5280] usb 4-1: string descriptor 0 read error: -22 [ 95.446809][ T5280] usb 4-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 95.455994][ T5280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.516701][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 95.532021][ T5280] usb 4-1: config 0 descriptor?? [ 95.537801][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 95.562527][ T9] usb 5-1: USB disconnect, device number 4 [ 95.693493][ T5280] em28xx 4-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 95.705364][ T5280] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 95.751915][ T5780] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 95.766342][ T5281] usb 2-1: USB disconnect, device number 4 [ 96.016479][ T938] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 96.125862][ T5280] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 96.132225][ T5280] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 96.140895][ T5280] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 96.156804][ T5280] em28xx 4-1:0.0: No AC97 audio processor [ 96.175496][ T938] usb 1-1: Using ep0 maxpacket: 32 [ 96.196426][ T5280] usb 4-1: USB disconnect, device number 5 [ 96.204532][ T938] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.221730][ T5280] em28xx 4-1:0.0: Disconnecting em28xx [ 96.227590][ T938] usb 1-1: config 0 has no interfaces? [ 96.235562][ T938] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 96.248306][ T5280] em28xx 4-1:0.0: Freeing device [ 96.256313][ T938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.272179][ T938] usb 1-1: config 0 descriptor?? [ 96.335627][ T5795] Zero length message leads to an empty skb [ 96.346439][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 96.362441][ T5795] input: syz0 as /devices/virtual/input/input10 [ 96.460256][ T5797] loop2: detected capacity change from 0 to 512 [ 96.516126][ T4622] Bluetooth: hci3: command 0x0c1a tx timeout [ 96.534035][ T938] usb 1-1: USB disconnect, device number 6 [ 96.551883][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.564251][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 96.575999][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 96.588686][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.603350][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.612946][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.703254][ T25] usb 5-1: config 0 descriptor?? [ 96.740119][ T5793] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 97.180632][ T25] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 97.208663][ T25] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.217068][ T25] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.226972][ T25] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 97.240920][ T25] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 97.609537][ T25] usb 5-1: USB disconnect, device number 5 [ 97.746810][ T5808] loop3: detected capacity change from 0 to 1024 [ 97.907708][ T5811] loop0: detected capacity change from 0 to 1024 [ 98.647344][ T4622] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.443143][ T5830] netlink: 'syz.1.139': attribute type 11 has an invalid length. [ 99.489748][ T5830] netlink: 134672 bytes leftover after parsing attributes in process `syz.1.139'. [ 100.315878][ T938] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 100.575644][ T938] usb 5-1: Using ep0 maxpacket: 32 [ 100.594392][ T938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.605697][ T938] usb 5-1: config 0 has no interfaces? [ 100.621037][ T938] usb 5-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 100.630973][ T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.813187][ T938] usb 5-1: config 0 descriptor?? [ 101.404442][ T5280] usb 5-1: USB disconnect, device number 6 [ 101.478539][ T5855] loop1: detected capacity change from 0 to 512 [ 102.765987][ T5278] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 103.189730][ T5278] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.234373][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 103.264974][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 103.747791][ T5278] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.785922][ T5278] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.811211][ T5879] loop1: detected capacity change from 0 to 512 [ 103.819413][ T5278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.830561][ T5879] EXT4-fs (loop1): Test dummy encryption mode enabled [ 103.851661][ T5278] usb 1-1: config 0 descriptor?? [ 103.857514][ T5863] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 103.869585][ T5879] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #12: comm syz.1.153: corrupted in-inode xattr: invalid ea_ino [ 103.953290][ T5879] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.153: couldn't read orphan inode 12 (err -117) [ 104.104125][ T5879] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.202459][ T1850] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 104.405154][ T5278] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 104.651362][ T1850] usb 4-1: Using ep0 maxpacket: 32 [ 104.656618][ T5278] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 104.664554][ T5278] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 104.676751][ T5278] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 104.691798][ T1850] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.702989][ T1850] usb 4-1: config 0 has no interfaces? [ 104.708663][ T1850] usb 4-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 104.717901][ T1850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.727141][ T5278] usb 1-1: USB disconnect, device number 7 [ 104.757561][ T1850] usb 4-1: config 0 descriptor?? [ 104.816984][ T5893] EXT4-fs error (device loop1): ext4_add_entry:2437: inode #2: comm syz.1.153: Directory hole found for htree leaf block 0 [ 104.885742][ T5893] EXT4-fs error (device loop1): ext4_add_entry:2437: inode #2: comm syz.1.153: Directory hole found for htree leaf block 0 [ 104.905864][ T5894] loop2: detected capacity change from 0 to 1024 [ 105.263320][ T5900] /dev/loop2: Can't open blockdev [ 105.996048][ T5309] usb 4-1: USB disconnect, device number 6 [ 106.261857][ T5907] loop2: detected capacity change from 0 to 512 [ 108.262887][ T5231] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 108.947517][ T5926] bridge0: port 3(vlan2) entered blocking state [ 108.953873][ T5926] bridge0: port 3(vlan2) entered disabled state [ 108.981668][ T5926] vlan2: entered allmulticast mode [ 109.043261][ T5926] vlan2: left allmulticast mode [ 109.305545][ T5309] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 109.496949][ T5309] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 109.517822][ T5309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 109.528952][ T5278] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 109.576290][ T5309] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 109.621529][ T5309] usb 2-1: string descriptor 0 read error: -22 [ 109.628390][ T5309] usb 2-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 109.655740][ T5309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.686708][ T5309] usb 2-1: config 0 descriptor?? [ 109.698597][ T5280] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.719118][ T5278] usb 4-1: not running at top speed; connect to a high speed hub [ 109.734018][ T5309] em28xx 2-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 109.748931][ T5278] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 109.765089][ T5278] usb 4-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 109.782681][ T5309] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 109.791412][ T5278] usb 4-1: config 1 interface 0 has no altsetting 0 [ 109.810141][ T5278] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.40 [ 109.821701][ T5278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.832212][ T5278] usb 4-1: Product: syz [ 109.838019][ T5278] usb 4-1: Manufacturer: syz [ 109.842935][ T5278] usb 4-1: SerialNumber: syz [ 109.867962][ T5938] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 109.905786][ T5280] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 109.919801][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 109.945597][ T5922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 109.982967][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 109.994330][ T5281] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 110.033555][ T5280] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.067316][ T5280] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.082611][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.112887][ T5280] usb 3-1: config 0 descriptor?? [ 110.126104][ T5940] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 110.177780][ T5281] usb 1-1: Using ep0 maxpacket: 16 [ 110.208138][ T5281] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.221571][ T5281] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 110.253092][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.290868][ T5281] usb 1-1: config 0 descriptor?? [ 110.306201][ T5309] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 110.316629][ T5281] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 110.333073][ T5309] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 110.351642][ T5278] usbhid 4-1:1.0: can't add hid device: -71 [ 110.365318][ T5309] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 110.374790][ T5278] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 110.383681][ T5309] em28xx 2-1:0.0: No AC97 audio processor [ 110.416502][ T5278] usb 4-1: USB disconnect, device number 7 [ 110.438494][ T5309] usb 2-1: USB disconnect, device number 5 [ 110.446044][ T5309] em28xx 2-1:0.0: Disconnecting em28xx [ 110.473850][ T5309] em28xx 2-1:0.0: Freeing device [ 110.533567][ T5944] input: syz0 as /devices/virtual/input/input12 [ 110.566339][ T5280] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 110.590081][ T5280] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 110.591568][ T1850] usb 1-1: USB disconnect, device number 8 [ 110.599507][ T4670] bcm5974 1-1:0.0: could not read from device [ 110.632654][ T5280] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 110.641493][ T4670] bcm5974 1-1:0.0: could not read from device [ 110.650849][ T5563] bcm5974 1-1:0.0: could not read from device [ 110.667278][ T4670] bcm5974 1-1:0.0: could not read from device [ 110.689728][ T5280] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 110.816406][ T5280] usb 3-1: USB disconnect, device number 2 [ 111.011733][ T29] audit: type=1326 audit(1727985113.617:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.3.172" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b08f7dff9 code=0x0 [ 111.226302][ T938] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 111.535733][ T938] usb 2-1: Using ep0 maxpacket: 32 [ 111.542897][ T938] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.563913][ T938] usb 2-1: config 0 has no interfaces? [ 112.257520][ T938] usb 2-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 112.266685][ T938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.277148][ T938] usb 2-1: config 0 descriptor?? [ 112.346802][ T5961] loop2: detected capacity change from 0 to 512 [ 112.371160][ T5961] EXT4-fs (loop2): Test dummy encryption mode enabled [ 112.843073][ T5961] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #12: comm syz.2.175: corrupted in-inode xattr: invalid ea_ino [ 113.037681][ T5281] usb 2-1: USB disconnect, device number 6 [ 113.116219][ T5961] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.175: couldn't read orphan inode 12 (err -117) [ 113.126843][ T5971] random: crng reseeded on system resumption [ 113.168264][ T5961] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.516742][ T5980] bridge0: port 3(vlan2) entered blocking state [ 113.567543][ T5982] EXT4-fs error (device loop2): ext4_add_entry:2437: inode #2: comm syz.2.175: Directory hole found for htree leaf block 0 [ 113.586930][ T5980] bridge0: port 3(vlan2) entered disabled state [ 113.622938][ T5980] vlan2: entered allmulticast mode [ 113.694636][ T5980] vlan2: left allmulticast mode [ 113.765552][ T5982] EXT4-fs error (device loop2): ext4_add_entry:2437: inode #2: comm syz.2.175: Directory hole found for htree leaf block 0 [ 113.783035][ T5987] loop0: detected capacity change from 0 to 256 [ 115.125522][ T5278] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 115.290569][ T5278] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 115.311743][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 115.333397][ T5278] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.361832][ T5278] usb 5-1: string descriptor 0 read error: -22 [ 115.369262][ T5278] usb 5-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 115.385630][ T5278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.408030][ T5278] usb 5-1: config 0 descriptor?? [ 115.432681][ T5278] em28xx 5-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 115.461995][ T5278] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 115.484122][ T5235] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 116.506619][ T5977] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 116.576047][ T6008] usb usb1: usbfs: process 6008 (syz.0.184) did not claim interface 0 before use [ 116.768667][ T5278] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 116.775312][ T5278] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 116.783830][ T5278] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 116.791189][ T5278] em28xx 5-1:0.0: No AC97 audio processor [ 116.826812][ T5278] usb 5-1: USB disconnect, device number 7 [ 116.826969][ T938] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 116.833325][ T5278] em28xx 5-1:0.0: Disconnecting em28xx [ 117.045335][ T5278] em28xx 5-1:0.0: Freeing device [ 117.148203][ T938] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 117.328008][ T938] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.399675][ T938] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 117.408821][ T938] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 117.425871][ T29] audit: type=1326 audit(1727985120.017:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.191" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72a1d7dff9 code=0x0 [ 117.571921][ T6025] loop2: detected capacity change from 0 to 1024 [ 117.592327][ T938] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 117.601709][ T938] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 117.609827][ T938] usb 4-1: Product: syz [ 117.613999][ T938] usb 4-1: Manufacturer: syz [ 117.734120][ T938] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 117.842742][ T6027] loop0: detected capacity change from 0 to 8 [ 118.761034][ T6026] SQUASHFS error: Unable to read inode 0xa7 [ 119.066547][ T5309] usb 4-1: USB disconnect, device number 8 [ 119.118058][ T6036] loop0: detected capacity change from 0 to 512 [ 119.139072][ T6036] EXT4-fs (loop0): Test dummy encryption mode enabled [ 119.156144][ T5280] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 119.164899][ T6036] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #12: comm syz.0.195: corrupted in-inode xattr: invalid ea_ino [ 119.185246][ T6036] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.195: couldn't read orphan inode 12 (err -117) [ 119.197724][ T6039] loop2: detected capacity change from 0 to 256 [ 119.322564][ T5280] usb 5-1: Using ep0 maxpacket: 16 [ 119.353769][ T6036] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.373695][ T5280] usb 5-1: config 0 has no interfaces? [ 119.415566][ T5280] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 119.424699][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.433508][ T5280] usb 5-1: Product: syz [ 119.630701][ T5280] usb 5-1: Manufacturer: syz [ 119.657749][ T5280] usb 5-1: SerialNumber: syz [ 120.500836][ T5280] usb 5-1: config 0 descriptor?? [ 120.992517][ T5309] usb 5-1: USB disconnect, device number 8 [ 121.216925][ T6060] EXT4-fs error (device loop0): ext4_add_entry:2437: inode #2: comm syz.0.195: Directory hole found for htree leaf block 0 [ 121.342840][ T6059] EXT4-fs error (device loop0): ext4_add_entry:2437: inode #2: comm syz.0.195: Directory hole found for htree leaf block 0 [ 122.298360][ T6075] overlayfs: missing 'workdir' [ 122.374382][ T6076] usb usb1: usbfs: process 6076 (syz.3.202) did not claim interface 0 before use [ 122.607809][ T6080] bridge0: port 3(vlan2) entered blocking state [ 122.630866][ T6080] bridge0: port 3(vlan2) entered disabled state [ 122.645829][ T6080] vlan2: entered allmulticast mode [ 122.664882][ T6080] vlan2: left allmulticast mode [ 122.983802][ T5227] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 123.006897][ T938] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 123.070814][ T6085] loop3: detected capacity change from 0 to 8 [ 123.164626][ T6085] SQUASHFS error: Unable to read inode 0xa7 [ 123.364889][ T938] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 123.406625][ T938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 123.472095][ T938] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.583094][ T938] usb 5-1: string descriptor 0 read error: -22 [ 123.619111][ T938] usb 5-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 123.697588][ T938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.729426][ T938] usb 5-1: config 0 descriptor?? [ 123.748113][ T938] em28xx 5-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 123.764263][ T938] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 123.790081][ T6087] loop0: detected capacity change from 0 to 1024 [ 124.363287][ T6078] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.435865][ T938] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 124.443206][ T938] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 124.461327][ T938] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 124.483069][ T938] em28xx 5-1:0.0: No AC97 audio processor [ 124.499738][ T6094] loop0: detected capacity change from 0 to 1024 [ 124.659620][ T938] usb 5-1: USB disconnect, device number 9 [ 124.668374][ T938] em28xx 5-1:0.0: Disconnecting em28xx [ 124.765496][ T6098] /dev/loop0: Can't open blockdev [ 125.615350][ T938] em28xx 5-1:0.0: Freeing device [ 125.703263][ T5280] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 126.231608][ T5280] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 126.241100][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.262943][ T5280] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 126.279211][ T5280] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 126.307789][ T5280] usb 4-1: Manufacturer: syz [ 126.314300][ T5280] usb 4-1: config 0 descriptor?? [ 126.446274][ T5280] rc_core: IR keymap rc-hauppauge not found [ 126.543174][ T5280] Registered IR keymap rc-empty [ 126.551638][ T5280] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 126.566268][ T5280] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 126.581532][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 127.300247][ T6096] netlink: 28 bytes leftover after parsing attributes in process `syz.3.211'. [ 127.941699][ T6118] overlayfs: missing 'workdir' [ 127.968875][ T9] usb 4-1: USB disconnect, device number 9 [ 128.178888][ T6129] loop4: detected capacity change from 0 to 1024 [ 128.933928][ T6136] netlink: 'syz.3.222': attribute type 1 has an invalid length. [ 128.947454][ T6136] netlink: 'syz.3.222': attribute type 4 has an invalid length. [ 128.958439][ T6136] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.222'. [ 129.749054][ T6142] loop4: detected capacity change from 0 to 256 [ 129.792219][ T6142] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.912617][ T6149] bridge0: port 3(vlan2) entered blocking state [ 129.928310][ T6149] bridge0: port 3(vlan2) entered disabled state [ 129.952072][ T6149] vlan2: entered allmulticast mode [ 129.979457][ T6149] vlan2: left allmulticast mode [ 130.325561][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 130.526169][ T5280] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 130.912435][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 130.927305][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.959736][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 130.969016][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.993823][ T9] usb 3-1: config 0 descriptor?? [ 131.004706][ T9] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input14 [ 131.023417][ T5281] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 131.131471][ T5280] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 131.205681][ T5281] usb 1-1: device descriptor read/64, error -71 [ 131.245642][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 131.256999][ T5280] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.274902][ T5280] usb 4-1: string descriptor 0 read error: -22 [ 131.282036][ T5280] usb 4-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 131.291613][ T5280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.733500][ T6145] input: syz0 as /devices/virtual/input/input15 [ 131.947340][ T5279] usb 3-1: USB disconnect, device number 3 [ 131.976784][ T4670] bcm5974 3-1:0.0: could not read from device [ 131.987045][ T5245] bcm5974 3-1:0.0: could not read from device [ 132.054336][ T5280] usb 4-1: config 0 descriptor?? [ 132.062528][ T5280] em28xx 4-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 132.071717][ T5280] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 132.185519][ T5281] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 132.475477][ T5281] usb 1-1: device descriptor read/64, error -71 [ 132.503142][ T6146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.572554][ T6176] loop1: detected capacity change from 0 to 1024 [ 132.596231][ T5281] usb usb1-port1: attempt power cycle [ 132.922607][ T5280] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 133.210630][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.218852][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.346046][ T6185] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 133.895005][ T5280] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 133.940306][ T5280] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 133.947801][ T5280] em28xx 4-1:0.0: No AC97 audio processor [ 134.030522][ T5280] usb 4-1: USB disconnect, device number 10 [ 134.553560][ T5280] em28xx 4-1:0.0: Disconnecting em28xx [ 134.565201][ T5280] em28xx 4-1:0.0: Freeing device [ 135.876137][ T6216] loop4: detected capacity change from 0 to 256 [ 135.948220][ T6216] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.996689][ T938] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 136.011630][ T6220] usb usb1: usbfs: process 6220 (syz.1.236) did not claim interface 0 before use [ 136.017585][ T6219] loop2: detected capacity change from 0 to 256 [ 136.295721][ T938] usb 4-1: Using ep0 maxpacket: 16 [ 136.312119][ T938] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.382334][ T938] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 136.509992][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.614016][ T938] usb 4-1: config 0 descriptor?? [ 136.733305][ T938] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16 [ 136.944814][ T6215] input: syz0 as /devices/virtual/input/input17 [ 137.057783][ T4670] bcm5974 4-1:0.0: could not read from device [ 137.071154][ T938] usb 4-1: USB disconnect, device number 11 [ 137.184110][ T5245] bcm5974 4-1:0.0: could not read from device [ 137.746038][ T6237] bridge0: port 3(vlan2) entered blocking state [ 137.763631][ T6237] bridge0: port 3(vlan2) entered disabled state [ 137.833367][ T6237] vlan2: entered allmulticast mode [ 138.071978][ T6237] vlan2: left allmulticast mode [ 138.126309][ T5281] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 138.255643][ T938] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 138.288237][ T5281] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 138.306301][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 138.324220][ T5281] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 138.411887][ T5281] usb 5-1: string descriptor 0 read error: -22 [ 138.421464][ T5281] usb 5-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 138.438705][ T938] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 138.448023][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.459376][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.473750][ T5281] usb 5-1: config 0 descriptor?? [ 138.483191][ T5281] em28xx 5-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 138.493195][ T938] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 138.503467][ T5281] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 138.510574][ T938] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 138.519532][ T938] usb 4-1: Manufacturer: syz [ 138.528624][ T938] usb 4-1: config 0 descriptor?? [ 138.605666][ T938] rc_core: IR keymap rc-hauppauge not found [ 138.637104][ T938] Registered IR keymap rc-empty [ 138.651697][ T938] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 138.667050][ T938] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input18 [ 138.768940][ T6235] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 138.965797][ T5281] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 138.975818][ T5281] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 138.991546][ T5281] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 139.006487][ T5281] em28xx 5-1:0.0: No AC97 audio processor [ 139.020740][ T5281] usb 5-1: USB disconnect, device number 10 [ 139.039876][ T5281] em28xx 5-1:0.0: Disconnecting em28xx [ 139.048615][ T5281] em28xx 5-1:0.0: Freeing device [ 139.636460][ T4622] Bluetooth: hci2: command 0x0c1a tx timeout [ 140.038798][ T4622] Bluetooth: hci3: command 0x0c1a tx timeout [ 140.865123][ T6269] loop4: detected capacity change from 0 to 1024 [ 141.048271][ T6271] loop0: detected capacity change from 0 to 1024 [ 141.359919][ T6274] /dev/loop0: Can't open blockdev [ 143.423991][ T1850] usb 4-1: USB disconnect, device number 12 [ 143.676825][ T6295] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.263'. [ 143.807105][ T6299] bridge0: port 3(vlan2) entered blocking state [ 143.845954][ T6299] bridge0: port 3(vlan2) entered disabled state [ 143.913370][ T6299] vlan2: entered allmulticast mode [ 143.986390][ T6299] vlan2: left allmulticast mode [ 144.155753][ T5280] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 144.332461][ T5280] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 144.352242][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 144.370955][ T5280] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.427265][ T5280] usb 4-1: string descriptor 0 read error: -22 [ 144.434725][ T5280] usb 4-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 144.490951][ T5280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.525034][ T5280] usb 4-1: config 0 descriptor?? [ 144.548451][ T5280] em28xx 4-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 144.585707][ T5280] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 146.001586][ T6311] loop0: detected capacity change from 0 to 1024 [ 146.238329][ T6296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.306672][ T5280] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 146.314939][ T5280] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 146.781729][ T5280] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 146.793444][ T5280] em28xx 4-1:0.0: No AC97 audio processor [ 146.967642][ T5280] usb 4-1: USB disconnect, device number 13 [ 146.973999][ T5280] em28xx 4-1:0.0: Disconnecting em28xx [ 146.986112][ T5280] em28xx 4-1:0.0: Freeing device [ 147.085627][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 147.881836][ T6329] loop0: detected capacity change from 0 to 256 [ 148.018194][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 148.918525][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 148.930164][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.968331][ T9] usb 2-1: string descriptor 0 read error: -22 [ 148.974617][ T9] usb 2-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 149.025282][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.048053][ T6335] netlink: 'syz.2.275': attribute type 11 has an invalid length. [ 149.065509][ T9] usb 2-1: config 0 descriptor?? [ 149.089375][ T6335] netlink: 134672 bytes leftover after parsing attributes in process `syz.2.275'. [ 149.113876][ T9] em28xx 2-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 149.131513][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 149.237711][ T6345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.275'. [ 149.336930][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 149.351441][ T4622] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 149.373710][ T9] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 149.399371][ T9] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 149.416974][ T9] em28xx 2-1:0.0: No AC97 audio processor [ 149.432175][ T9] usb 2-1: USB disconnect, device number 7 [ 149.443082][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 149.954164][ T9] em28xx 2-1:0.0: Freeing device [ 151.796706][ T6364] loop3: detected capacity change from 0 to 2048 [ 152.238180][ T6364] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 152.401428][ T6364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.425059][ T6379] loop0: detected capacity change from 0 to 256 [ 153.435644][ T938] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 153.643479][ T938] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 153.663936][ T938] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.702212][ T938] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 153.735591][ T938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.784627][ T5238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.967830][ T938] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 154.026982][ T4622] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 154.049788][ T5240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.061710][ T5240] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.070653][ T5240] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.078739][ T5240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.088307][ T5240] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.099230][ T5240] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.127267][ T6397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.293'. [ 154.295189][ T6400] loop3: detected capacity change from 0 to 2048 [ 154.373929][ T6400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.834430][ T9] usb 2-1: USB disconnect, device number 8 [ 157.111420][ T5240] Bluetooth: hci5: command tx timeout [ 157.364551][ T5238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.169126][ T9] ================================================================== [ 158.177229][ T9] BUG: KFENCE: memory corruption in ctrl_dumppolicy_done+0x5f/0x70 [ 158.177229][ T9] [ 158.187303][ T9] Corrupted memory at 0xffff88823bfda470 [ 0x80 0x53 0x1f 0x8d 0xff 0xff 0xff 0xff 0xb0 0x00 0x00 0x00 0x00 0x00 0x00 0x00 ] (in kfence-#236): [ 158.201970][ T9] ctrl_dumppolicy_done+0x5f/0x70 [ 158.207001][ T9] genl_done+0x136/0x210 [ 158.211245][ T9] netlink_sock_destruct+0x82/0x270 [ 158.216445][ T9] __sk_destruct+0x58/0x5f0 [ 158.220965][ T9] process_scheduled_works+0xa63/0x1850 [ 158.226521][ T9] worker_thread+0x870/0xd30 [ 158.231120][ T9] kthread+0x2f0/0x390 [ 158.235188][ T9] ret_from_fork+0x4b/0x80 [ 158.239612][ T9] ret_from_fork_asm+0x1a/0x30 [ 158.244380][ T9] [ 158.246701][ T9] kfence-#236: 0xffff88823bfda000-0xffff88823bfda46f, size=1136, cache=kmalloc-2k [ 158.246701][ T9] [ 158.258072][ T9] allocated by task 6420 on cpu 1 at 157.458234s (0.799836s ago): [ 158.265899][ T9] krealloc_noprof+0xd6/0x2e0 [ 158.270582][ T9] netlink_policy_dump_add_policy+0x2a2/0x980 [ 158.276657][ T9] ctrl_dumppolicy_start+0x6d6/0xca0 [ 158.281942][ T9] genl_start+0x4d6/0x6d0 [ 158.286271][ T9] __netlink_dump_start+0x45c/0x790 [ 158.291456][ T9] genl_rcv_msg+0x88c/0xec0 [ 158.295950][ T9] netlink_rcv_skb+0x1e3/0x430 [ 158.300701][ T9] genl_rcv+0x28/0x40 [ 158.304667][ T9] netlink_unicast+0x7f6/0x990 [ 158.309419][ T9] netlink_sendmsg+0x8e4/0xcb0 [ 158.314173][ T9] __sock_sendmsg+0x221/0x270 [ 158.318840][ T9] ____sys_sendmsg+0x52a/0x7e0 [ 158.323602][ T9] __sys_sendmsg+0x292/0x380 [ 158.328190][ T9] do_syscall_64+0xf3/0x230 [ 158.332687][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.338577][ T9] [ 158.340888][ T9] freed by task 9 on cpu 0 at 158.169080s (0.171807s ago): [ 158.348081][ T9] ctrl_dumppolicy_done+0x5f/0x70 [ 158.353087][ T9] genl_done+0x136/0x210 [ 158.357321][ T9] netlink_sock_destruct+0x82/0x270 [ 158.362507][ T9] __sk_destruct+0x58/0x5f0 [ 158.366999][ T9] process_scheduled_works+0xa63/0x1850 [ 158.372620][ T9] worker_thread+0x870/0xd30 [ 158.377198][ T9] kthread+0x2f0/0x390 [ 158.381261][ T9] ret_from_fork+0x4b/0x80 [ 158.385672][ T9] ret_from_fork_asm+0x1a/0x30 [ 158.390508][ T9] [ 158.392818][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.12.0-rc1-next-20241003-syzkaller #0 [ 158.402782][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 158.412828][ T9] Workqueue: events netlink_sock_destruct_work [ 158.419000][ T9] ================================================================== [ 158.427045][ T9] Kernel panic - not syncing: KFENCE: panic_on_warn set ... [ 158.434738][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.12.0-rc1-next-20241003-syzkaller #0 [ 158.444727][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 158.454770][ T9] Workqueue: events netlink_sock_destruct_work [ 158.460928][ T9] Call Trace: [ 158.464197][ T9] [ 158.467122][ T9] dump_stack_lvl+0x241/0x360 [ 158.471796][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.476986][ T9] ? __pfx__printk+0x10/0x10 [ 158.481582][ T9] ? __pfx_netlink_sock_destruct_work+0x10/0x10 [ 158.487818][ T9] ? vscnprintf+0x5d/0x90 [ 158.492139][ T9] panic+0x349/0x880 [ 158.496029][ T9] ? check_panic_on_warn+0x21/0xb0 [ 158.501145][ T9] ? __pfx_panic+0x10/0x10 [ 158.505559][ T9] ? _printk+0xd5/0x120 [ 158.509718][ T9] ? __pfx__printk+0x10/0x10 [ 158.514304][ T9] ? __pfx__printk+0x10/0x10 [ 158.518895][ T9] check_panic_on_warn+0x86/0xb0 [ 158.523825][ T9] kfence_report_error+0x998/0xd10 [ 158.528931][ T9] ? mark_lock+0x9a/0x360 [ 158.533256][ T9] ? __pfx_kfence_report_error+0x10/0x10 [ 158.538959][ T9] ? check_canary+0x82b/0x920 [ 158.543626][ T9] ? kfence_guarded_free+0x24f/0x4f0 [ 158.548911][ T9] ? kfree+0x21c/0x420 [ 158.552972][ T9] ? ctrl_dumppolicy_done+0x5f/0x70 [ 158.558158][ T9] ? genl_done+0x136/0x210 [ 158.562564][ T9] ? netlink_sock_destruct+0x82/0x270 [ 158.567927][ T9] ? __sk_destruct+0x58/0x5f0 [ 158.572596][ T9] ? process_scheduled_works+0xa63/0x1850 [ 158.578312][ T9] ? worker_thread+0x870/0xd30 [ 158.583068][ T9] ? kthread+0x2f0/0x390 [ 158.587300][ T9] ? ret_from_fork+0x4b/0x80 [ 158.591882][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 158.596843][ T9] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 158.602296][ T9] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 158.608186][ T9] ? lockdep_hardirqs_on+0x99/0x150 [ 158.613378][ T9] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 158.619265][ T9] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 158.625592][ T9] check_canary+0x82b/0x920 [ 158.630097][ T9] kfence_guarded_free+0x24f/0x4f0 [ 158.635202][ T9] ? ctrl_dumppolicy_done+0x5f/0x70 [ 158.640394][ T9] kfree+0x21c/0x420 [ 158.644280][ T9] ? ctrl_dumppolicy_done+0x41/0x70 [ 158.649474][ T9] ctrl_dumppolicy_done+0x5f/0x70 [ 158.654492][ T9] genl_done+0x136/0x210 [ 158.658811][ T9] ? __pfx_genl_done+0x10/0x10 [ 158.663568][ T9] netlink_sock_destruct+0x82/0x270 [ 158.668760][ T9] ? __pfx_netlink_sock_destruct+0x10/0x10 [ 158.674557][ T9] __sk_destruct+0x58/0x5f0 [ 158.679065][ T9] ? __sk_free+0x333/0x460 [ 158.683476][ T9] ? process_scheduled_works+0x976/0x1850 [ 158.689189][ T9] process_scheduled_works+0xa63/0x1850 [ 158.694745][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 158.700723][ T9] ? assign_work+0x364/0x3d0 [ 158.705316][ T9] worker_thread+0x870/0xd30 [ 158.709917][ T9] ? __kthread_parkme+0x169/0x1d0 [ 158.714940][ T9] ? __pfx_worker_thread+0x10/0x10 [ 158.720046][ T9] kthread+0x2f0/0x390 [ 158.724104][ T9] ? __pfx_worker_thread+0x10/0x10 [ 158.729209][ T9] ? __pfx_kthread+0x10/0x10 [ 158.733789][ T9] ret_from_fork+0x4b/0x80 [ 158.738201][ T9] ? __pfx_kthread+0x10/0x10 [ 158.742781][ T9] ret_from_fork_asm+0x1a/0x30 [ 158.747547][ T9] [ 158.750794][ T9] Kernel Offset: disabled [ 158.755465][ T9] Rebooting in 86400 seconds..