last executing test programs: 5m34.185532532s ago: executing program 0 (id=293): r0 = syz_clone(0x880, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @multicast1}], 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) 5m32.434366518s ago: executing program 0 (id=295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r3 = msgget(0x0, 0x28c) msgctl$IPC_RMID(r3, 0x0) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TCXONC(0xffffffffffffffff, 0x4b3a, 0x2) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x2c, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) 5m24.374702451s ago: executing program 0 (id=310): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) listxattr(0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000200)) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) writev(r4, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000440)}, {&(0x7f00000005c0)="6656ed884ceee7c0", 0x8}], 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x1b, 0x8, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRES16, @ANYRES8], 0x8, 0xb3, &(0x7f0000000140)="$eJzs1jFKBDEUBuB/o67a7AUsvMGcYT2KbLl2UykDcyKvMkeYG1jY2kQyjoKVYCOy3wd5SQgPUvzFm96eb/a7pI5JrbVuk1zn49w/Ph3vH/ptjmdZXOTT5VfhXyvrukpyu0tKSV7u2ktLQqZW5tfhMG9aKobD9+7+/E8+DQAA/EpJt+z79b5J1/3YNBr7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNPxHgAA//85kBh3") bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r0, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010022, 0x0) write(r0, &(0x7f0000000000)="2e000300010000", 0x7) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) 5m21.516319445s ago: executing program 0 (id=314): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5m20.302740552s ago: executing program 0 (id=319): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_mrelease(0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 5m18.783069339s ago: executing program 0 (id=321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef0001000000002c"], 0x66) 5m2.905885309s ago: executing program 32 (id=321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef0001000000002c"], 0x66) 47.790271778s ago: executing program 5 (id=968): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000002280)={0x0, 0x1, 0x40}) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x80003, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x78}}, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@reiserfs_4={0x10, 0x4, {0x5, 0x2, 0x5, 0x3}}, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newtaction={0x6c, 0x30, 0xb25, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 43.719955794s ago: executing program 5 (id=975): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x0, 0x48, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfffffffd, 0x80, 0x0, 0x10}, &(0x7f0000000240), &(0x7f0000000040)) 42.763592382s ago: executing program 5 (id=978): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac93666cbfce317f4d89438ada20492c7e787769ae367b057e255f9fc7fcd3678acf258357e1e5a90d17a85ed2bb685014e05fe9dd53656818b650ff91"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x4, 0x8}, {0x6, 0xff, 0x6ef0}}}}, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/74, 0x4a}], 0x3a}, 0x2043) 40.643019182s ago: executing program 5 (id=981): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f00000015c0)={0xff75, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x2000000) socket$inet_tcp(0x2, 0x1, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 35.982630058s ago: executing program 2 (id=986): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) writev(r3, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000bc0)="d18a876f8f46c153dde8db040cc7e763ba2fab29aca1a1a2e0ab17dfd1fbfa6955b751ed697ff263589987f3de711efae8e2342b2846c1c9d8febaecb3aef2d7650869408a287d92d06f5d660a68f3f0a39e926d8dbd6f8d9de335fe4c520feaffc62c3435ab43a2f77234987d3b1130d31bd78fb28883050a1b8dd4ea2cdc62703eb86600dba7da620ad621c21b75893f334cfc82a3931e8cf3dfa12d31fa32797f5a940475fd8947bde48c8126a44eb9d229126e34e0d8aace15047ccd5bd0932270c88dac48e0bbb2af55a35efca697fe5435b19f827cf2d9337109", 0xdd}, {&(0x7f0000000200)="a9e47d4ed965685b48214fff756364b93155b267f07697b50eede6ed45f973d3da857dba0deed519dc9a7267b99f19a1b4", 0x31}, {&(0x7f0000000140)}], 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 35.931539419s ago: executing program 5 (id=987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000500)={0x0, 0x302, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, r4, 0xc8036ab6d6cbef07}, 0x14}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x7, [@enum={0x1, 0x7, 0x0, 0x6, 0x4, [{0xf, 0xfffff000}, {0x0, 0x998}, {0x3, 0xa}, {0xd, 0xfb8}, {0x4, 0x1ff}, {0x0, 0x10000}, {0x10, 0x4}]}, @enum={0x5}]}, {0x0, [0x61, 0x4f, 0x0, 0x30, 0x5f]}}, &(0x7f00000006c0)=""/145, 0x6f, 0x91, 0x1, 0x8001, 0x0, @void, @value}, 0x28) socket$can_j1939(0x1d, 0x2, 0x7) process_vm_readv(0x0, &(0x7f0000000ac0)=[{&(0x7f0000000040)=""/3, 0x3}, {&(0x7f00000007c0)=""/221, 0xdd}, {&(0x7f00000008c0)=""/165, 0xa5}, {&(0x7f0000000980)=""/91, 0x5b}, {&(0x7f0000000a00)=""/153, 0x99}], 0x5, &(0x7f0000000b80)=[{&(0x7f0000000b40)=""/7, 0x7}], 0x1, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b05, &(0x7f0000000040)={'wlan0\x00'}) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r9, 0xa, 0x13) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) 34.5883662s ago: executing program 5 (id=990): socket$nl_netfilter(0x10, 0x3, 0xc) mount$bind(0x0, 0x0, 0x0, 0x1adc51, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x44, r1, 0x101, 0x1, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @chandef_params]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x200008c4) open_tree(0xffffffffffffff9c, 0x0, 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000580)) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04004220"], 0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r5}, 0x38) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c90010000c0005001740080000"], 0x15) 34.332014398s ago: executing program 2 (id=992): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac93666cbfce317f4d89438ada20492c7e787769ae367b057e255f9fc7fcd3678acf258357e1e5a90d17a85ed2bb685014e05fe9dd53656818b650ff91"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x4, 0x8}, {0x6, 0xff, 0x6ef0}}}}, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/74, 0x4a}], 0x3a}, 0x2043) 33.017335067s ago: executing program 2 (id=995): openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x8082, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x50}}, 0x0) r4 = socket(0x28, 0x5, 0x0) connect(r4, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000906011200000000000000000200ffff"], 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2e}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xc8}}, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r6, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x3, @broadcast}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80000}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000280)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0x12) io_submit(0x0, 0x0, &(0x7f0000000640)) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r9, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 31.803568242s ago: executing program 2 (id=997): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_mrelease(0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 29.517707984s ago: executing program 2 (id=1000): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="d6fbc84400000f0004000000d60eaa37e06cfb", 0x13) r1 = accept4(r0, 0x0, 0x0, 0x80000) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8f07, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x1, 0x10}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000e40)={&(0x7f0000000d40)=[0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0], &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x9, 0x1, 0x4}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000f00)={&(0x7f0000000e80)=[0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0], 0x3, 0x0, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000f80)={0x4, 0x0, &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0]}) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = dup(0xffffffffffffffff) write$FUSE_INIT(r4, &(0x7f0000000080)={0x4f}, 0xfffffdef) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8001, 0x400000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7fe, 0x2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x20000000000]}) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) 28.310448213s ago: executing program 2 (id=1003): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x0, 0x48, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfffffffd, 0x80, 0x0, 0x10}, &(0x7f0000000240), &(0x7f0000000040)) 18.388336355s ago: executing program 33 (id=990): socket$nl_netfilter(0x10, 0x3, 0xc) mount$bind(0x0, 0x0, 0x0, 0x1adc51, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x44, r1, 0x101, 0x1, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @chandef_params]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x200008c4) open_tree(0xffffffffffffff9c, 0x0, 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000580)) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04004220"], 0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r5}, 0x38) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c90010000c0005001740080000"], 0x15) 12.618798901s ago: executing program 34 (id=1003): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x0, 0x48, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfffffffd, 0x80, 0x0, 0x10}, &(0x7f0000000240), &(0x7f0000000040)) 9.819549754s ago: executing program 3 (id=1038): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) writev(r3, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000bc0)="d18a876f8f46c153dde8db040cc7e763ba2fab29aca1a1a2e0ab17dfd1fbfa6955b751ed697ff263589987f3de711efae8e2342b2846c1c9d8febaecb3aef2d7650869408a287d92d06f5d660a68f3f0a39e926d8dbd6f8d9de335fe4c520feaffc62c3435ab43a2f77234987d3b1130d31bd78fb28883050a1b8dd4ea2cdc62703eb86600dba7da620ad621c21b75893f334cfc82a3931e8cf3dfa12d31fa32797f5a940475fd8947bde48c8126a44eb9d229126e34e0d8aace15047ccd5bd0932270c88dac48e0bbb2af55a35efca697fe5435b19f827cf2d9337109", 0xdd}, {&(0x7f0000000200)="a9e47d4ed965685b48214fff756364b93155b267f07697b50eede6ed45f973d3da857dba0deed519dc9a7267b99f19a1b4", 0x31}, {&(0x7f0000000140)}], 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x0, 0x0, 0xff, 0x1}, 0x20) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 8.748190041s ago: executing program 4 (id=1041): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x8000000004) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "1e8f42c4dc2a3e796da2f28d7772670f214e81d0dce26121c380f2eeb013f16afd00"}, 0x48, 0xfffffffffffffffb) acct(&(0x7f0000000180)='./file0\x00') keyctl$unlink(0x9, r4, 0xfffffffffffffffb) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340), 0x1a1402, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000a00)=0x40000) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) 7.369041125s ago: executing program 1 (id=1042): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000), 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x9, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x20002048) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40804) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000280)={0x7ff0000000000, r1, 0x1}) ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f0000000400)={0x4, @output={0x0, 0x1, {0x5, 0x5}, 0xc, 0x12}}) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) r7 = socket$inet(0x2, 0x3, 0xed) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000240)) setsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000080)={@remote, @local}, 0xc) read(0xffffffffffffffff, &(0x7f0000001480)=""/213, 0xd5) statx(0xffffffffffffffff, &(0x7f00000005c0)='.\x00', 0x0, 0x0, &(0x7f0000000100)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) 7.368479395s ago: executing program 4 (id=1043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0xa, 0x2, 0x1, 0x0, 'redir\x00'}, @NFTA_LOG_PREFIX={0xa, 0x2, 0x1, 0x0, '-,!]@\x00'}, @NFTA_LOG_QTHRESHOLD={0x6}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, 'syz2\x00'}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x6}, @NFTA_LOG_PREFIX={0xa, 0x2, 0x1, 0x0, 'redir\x00'}, @NFTA_LOG_SNAPLEN={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xd4}}, 0x0) 6.985386229s ago: executing program 1 (id=1044): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000000c0)={0x4000f, 0x2, 0x200, 0x800, 0x1, '\x00', 0x5, 0x8}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x47, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[], 0x104}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x33}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x2c}}, 0x0) 6.964194245s ago: executing program 4 (id=1045): bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) r3 = open(0x0, 0x40a80, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x48, 0x0, 0x0, 0x0, 0xffffffffffffff37, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x940e, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0xb, @vbi={0x38305543}}) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$inet6(0xa, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000440), 0x3, 0xe0802) ioctl$BLKREPORTZONE(r6, 0xc0101282, 0x0) 5.66477605s ago: executing program 1 (id=1046): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x8082, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x28, 0x5, 0x0) connect(r7, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x80) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000906011200000000000000000200ffff"], 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2e}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xc8}}, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r9, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r9, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x3, @broadcast}, 0x10) io_setup(0x5, &(0x7f0000000080)=0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) r12 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000280)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000200), 0x12) io_submit(r10, 0x4, &(0x7f0000000640)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x7ff, r9, &(0x7f0000000100)="0cbc5e404245d6126d11b1ea92f9fe3616f7fe6eee66950e62d7c0a27d3080c053c324d96ff663f3dc3796b6dee53cc1b3e4d422d7579dee72df9bb7fc2dc2a84a", 0x41, 0x9, 0x0, 0x1, r11}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x820a, 0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x7, 0x0, 0x0, r1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x8, r8, &(0x7f0000002040)="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", 0xbfd, 0x9, 0x0, 0x2, r13}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0xfa57, r9, &(0x7f0000000440), 0x0, 0x2, 0x0, 0x2, r1}]) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 5.571890271s ago: executing program 3 (id=1047): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000100), 0x8) r1 = getpid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x61b, &(0x7f0000000980)="$eJzs3c9vVNUeAPDvvf1J+96bQl7eExfSxBhIlJYWMMSYCHtC8MfOVaWFIIUSWqNFEkuCGxPjxoWJKxfif6Ekbl24My7cuDIkxBgWYoiMuTNzy3Q6U6btTKfMfD7Jpefc27nnzGS+fM+cnnsngJ41nv2TRuyPiKtJRKHqWH9UDo6Xf+/+HzfOZVsSxeKbvydx46NkpfpcSeXnaOXBfxci+TGN2Ne3vt3F5euXZubn565V6pNLl69OLi5fP3zx8syFuQtzV6Zfnj5x/NjxE1NHtvX80qry6Vvvvl/45MzbX3/5MJn65pczSZyMR5W+Zc+r9rFD22o5e83Go1j2oHp/9rqe2Oa5d4s/C/n75LGkdge71vnK+3EgIv4fheiretcX4uPXO9o5oK2KSeQ5Cug5yZbif7j1HQF2WD4OyD/b1/scvF7a5lEJsBPunSpPAJRjfyAi8vjvL88NxnBpbmDkfrJmnieJiO3NzJVlbfzw/Zlb2RYN5uFWmVeCllq5mc/31eb/pBSbYzFcqo3cT9eEX1q1Zfvf2GL74zX15sYfQCus3IyIZyr5fzA2Ff/jVfH/zhbbF/8AAAAAAADQOndORcRL9db/pavrfwbrrP8ZjYiTLWj/yX//S+9WCkkLmgOq3DsV8Wrd9b+ra3zH+iq1f5fWAwwk5y/Ozx2JiP9ExKEYGMrqUzXnrV4hfPjTfV80ar96/V+2Ze3nawErZ7rbn6yN/tmZpZlWPHfodfduRjxbWv97oLJn7fqfLP8ndfJ/Ft9Xm2xj3wu3zzY69uT4B9ql+FXEwbr5/3HCTTa+P8dkaTwwmY8K1nvuw8++bdS++IfOyfL/yMbxP5RU369ncXPnH4yIo8v9xUbHmxr/19yIJxv/DyZv9eXnz3wws7R0bSpiMDm9fv/05voM3SqPhzxesvg/9PzG83+r4/+qONwTEStNtvm/R6O/Njom/0PnZPE/u3H+H1ub/zdfmL499l2j9s82lf+PlXL6ocoe839Qbf39OJoN0I50FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACecmlE/CuSdGK1nKYTExGjEfHfGEnnFxaXXjy/8N6V2exY6fv/0/ybfgvlepJ///9YVX26pn40IvZGxOd9e0r1iXML87OdfvIAAAAAAAAAAAAAAAAAAACwS4yWrvkvDtVe/5/5ra/TvQParr/yU7xD7+nf8iOLQy3tCLDjth7/wNOu+fgfaGs/gJ3XOP4fPCyW7Gh3gB1k/A+9a4vx788F0AXkf+hVTc7pDbe7H0AnyP8AAAAAANBV9h6483MSESuv7CltmcHKMYv9obulne4A0DHW8ELv6l/odA+ATvEZH0hWS3/Vvdi/8er/pD0dAgAAAAAAAAAAAADWObjf9f/Qqza+/t/afuhmG1z/Xy/43S4Aukjjr/6Q+6Hb+YwPPa1YaCLbu/4fAAAAAAAAAAAAAHaB4euXZubn564tLj99hdc2/J18YfKu6OrjwsrMruhGSwuP2nPmgYho3Ql/Giq/H3bFK/aEQn4Ljg52o1P/IQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALX+CQAA//9DtyKW") sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0xba, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000540)={{{@in=@initdev, @in6=@private1}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 5.342336813s ago: executing program 4 (id=1048): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b14, &(0x7f0000000040)) 4.364157516s ago: executing program 1 (id=1049): socket$netlink(0x10, 0x3, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f00000029c0)={0x2, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000933f708f5e74f853495a322ecd8dd5f8939bc09c11cc0c40ef94fc97d7f656d3dd731acd19dd9f660b45a183d1c6227134f84d24621e66ffc11b200dc50b7a15f24dbcea002c45eb37f777a50396ea9b10af2de2d8d6d8dedb171ea1163204ad4dd550616c9545b9728f594c05af7c3088007607a9e05966fa5fceb6c38cdb5706a36d1b39e45e260c", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.712934904s ago: executing program 3 (id=1050): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000280)) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x0, 0x1f8, 0xfeffffff, 0x1f8, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev, 'pimreg\x00'}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x2200, {0x0, @local, @local, @gre_key, @icmp_id}}}}, {{@ip={@private, @dev, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$rds(r0, &(0x7f00000009c0)={&(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, &(0x7f0000001300)}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, 0x0, 0x8051) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0x100000000000000}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x48801}, 0x800) sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0xf52723b5c78531bb}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x161580, 0x0) ioctl$IOC_PR_RELEASE(r7, 0x401070ca, &(0x7f0000000500)={0x0, 0x6}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 3.054185281s ago: executing program 1 (id=1051): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) dup3(r4, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) r7 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x800000, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0)='btrfs\x00', 0x0, 0x0) write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0x78) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) getpeername$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x6) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYRESOCT]) socketpair$unix(0x1, 0x2, 0x0, 0x0) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendfile(r5, r6, 0x0, 0x8) fcntl$addseals(r6, 0x409, 0x0) 2.109181334s ago: executing program 3 (id=1052): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x8000000004) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "1e8f42c4dc2a3e796da2f28d7772670f214e81d0dce26121c380f2eeb013f16afd00"}, 0x48, 0xfffffffffffffffb) acct(&(0x7f0000000180)='./file0\x00') keyctl$unlink(0x9, r4, 0xfffffffffffffffb) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340), 0x1a1402, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000a00)=0x40000) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) 2.078258863s ago: executing program 1 (id=1053): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000), 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x9, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x20002048) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40804) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000280)={0x7ff0000000000, r1, 0x1}) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000400)={0x4, @output={0x0, 0x1, {0x5, 0x5}, 0xc, 0x12}}) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) r6 = socket$inet(0x2, 0x3, 0xed) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000240)) setsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000080)={@remote, @local}, 0xc) read(0xffffffffffffffff, &(0x7f0000001480)=""/213, 0xd5) statx(0xffffffffffffffff, &(0x7f00000005c0)='.\x00', 0x0, 0x0, &(0x7f0000000100)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) 1.432739475s ago: executing program 3 (id=1054): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000000c0)={0x4000f, 0x2, 0x200, 0x800, 0x1, '\x00', 0x5, 0x8}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x47, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[], 0x104}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x33}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x2c}}, 0x0) 1.187520256s ago: executing program 4 (id=1055): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) writev(r3, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000bc0)="d18a876f8f46c153dde8db040cc7e763ba2fab29aca1a1a2e0ab17dfd1fbfa6955b751ed697ff263589987f3de711efae8e2342b2846c1c9d8febaecb3aef2d7650869408a287d92d06f5d660a68f3f0a39e926d8dbd6f8d9de335fe4c520feaffc62c3435ab43a2f77234987d3b1130d31bd78fb28883050a1b8dd4ea2cdc62703eb86600dba7da620ad621c21b75893f334cfc82a3931e8cf3dfa12d31fa32797f5a940475fd8947bde48c8126a44eb9d229126e34e0d8aace15047ccd5bd0932270c88dac48e0bbb2af55a35efca697fe5435b19f827cf2d9337109", 0xdd}, {&(0x7f0000000200)="a9e47d4ed965685b48214fff756364b93155b267f07697b50eede6ed45f973d3da857dba0deed519dc9a7267b99f19a1b4", 0x31}, {&(0x7f0000000140)}], 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x0, 0x0, 0xff, 0x1}, 0x20) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 33.246185ms ago: executing program 3 (id=1056): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_coalesce={0xe}}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x200002, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) 0s ago: executing program 4 (id=1057): io_setup(0x3, &(0x7f0000000000)) timerfd_create(0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x1, &(0x7f0000000100), 0x4) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000300), 0x0) getsockopt$inet_int(r6, 0x10d, 0xaf, &(0x7f0000000080), 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8001}, 0x8) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x4}) kernel console output (not intermixed with test programs): 2][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.761144][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.772206][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.784140][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.757696][ T5853] Bluetooth: hci0: command tx timeout [ 62.763239][ T5853] Bluetooth: hci1: command tx timeout [ 62.769058][ T5853] Bluetooth: hci2: command tx timeout [ 62.774621][ T5853] Bluetooth: hci3: command tx timeout [ 62.780139][ T5853] Bluetooth: hci4: command tx timeout [ 63.076725][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.088019][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.098271][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.109183][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.119318][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.130391][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.140804][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.151529][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.165010][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.172440][ T51] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 63.194874][ T5858] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.203622][ T5858] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.212976][ T5858] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.228702][ T5858] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.273933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.344226][ T51] usb 2-1: Using ep0 maxpacket: 16 [ 63.370472][ T51] usb 2-1: New USB device found, idVendor=1608, idProduct=0303, bcdDevice=a1.cb [ 63.379125][ T5935] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 63.391425][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.392970][ T2129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.406113][ T51] usb 2-1: Product: syz [ 63.412327][ T2129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.490040][ T51] usb 2-1: Manufacturer: syz [ 63.522943][ T51] usb 2-1: SerialNumber: syz [ 63.844902][ T51] usb 2-1: config 0 descriptor?? [ 63.942117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 63.954353][ T51] io_ti 2-1:0.0: required endpoints missing [ 63.997906][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.018360][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.170814][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.186679][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.273884][ T51] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 64.290022][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.299773][ T5945] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.319140][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.447642][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.467791][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.490312][ T51] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 64.605457][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.867258][ T5158] Bluetooth: hci4: command tx timeout [ 64.873514][ T5158] Bluetooth: hci3: command tx timeout [ 64.880010][ T5853] Bluetooth: hci2: command tx timeout [ 64.885016][ T5856] Bluetooth: hci1: command tx timeout [ 64.890431][ T5853] Bluetooth: hci0: command tx timeout [ 64.930898][ T51] usb 4-1: config 0 descriptor?? [ 65.121656][ T5952] vivid-004: ================= START STATUS ================= [ 65.176418][ T5925] usb 2-1: USB disconnect, device number 2 [ 65.238196][ T5952] vivid-004: Radio HW Seek Mode: Bounded [ 65.252716][ T5952] vivid-004: Radio Programmable HW Seek: false [ 65.274116][ T5952] vivid-004: RDS Rx I/O Mode: Block I/O [ 65.290889][ T5952] vivid-004: Generate RBDS Instead of RDS: false [ 65.354652][ T5952] vivid-004: RDS Reception: true [ 65.379066][ T5952] vivid-004: RDS Program Type: 0 inactive [ 65.406914][ T5952] vivid-004: RDS PS Name: inactive [ 65.412288][ T5952] vivid-004: RDS Radio Text: inactive [ 65.418522][ T5952] vivid-004: RDS Traffic Announcement: false inactive [ 65.426024][ T5952] vivid-004: RDS Traffic Program: false inactive [ 65.432632][ T5952] vivid-004: RDS Music: false inactive [ 65.439450][ T5952] vivid-004: ================== END STATUS ================== [ 65.647716][ T5960] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 66.666815][ T51] zydacron 0003:13EC:0006.0001: unknown main item tag 0x0 [ 66.693860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.725141][ T51] zydacron 0003:13EC:0006.0001: unknown main item tag 0x0 [ 66.751326][ T51] zydacron 0003:13EC:0006.0001: unknown main item tag 0x0 [ 67.213714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 67.299321][ T51] zydacron 0003:13EC:0006.0001: unknown main item tag 0x0 [ 67.306814][ T51] zydacron 0003:13EC:0006.0001: item fetching failed at offset 4/5 [ 67.319429][ T51] zydacron 0003:13EC:0006.0001: parse failed [ 67.326681][ T51] zydacron 0003:13EC:0006.0001: probe with driver zydacron failed with error -22 [ 67.744002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.964012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 67.984266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.003414][ T2146] usb 4-1: USB disconnect, device number 2 [ 68.804565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.812892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.821596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.150350][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 72.020363][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.027104][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.272518][ T5925] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.433779][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 73.530174][ T5925] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.558044][ T5925] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.596809][ T5925] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.626641][ T5925] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.798603][ T5925] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 73.807794][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.670055][ T5925] usb 5-1: GET_CAPABILITIES returned 0 [ 75.676438][ T5925] usbtmc 5-1:16.0: can't read capabilities [ 76.984632][ T5925] usb 5-1: USB disconnect, device number 2 [ 78.664943][ T6045] loop4: detected capacity change from 0 to 1024 [ 79.568551][ T2129] hfsplus: b-tree write err: -5, ino 4 [ 81.199898][ T29] audit: type=1326 audit(1730544980.337:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 81.230923][ T29] audit: type=1326 audit(1730544980.337:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 81.253571][ T29] audit: type=1326 audit(1730544980.337:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f869357d0b0 code=0x7ffc0000 [ 81.276467][ T29] audit: type=1326 audit(1730544980.337:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f869357ff47 code=0x7ffc0000 [ 81.298451][ T29] audit: type=1326 audit(1730544980.337:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 81.320463][ T29] audit: type=1326 audit(1730544980.337:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f869357ff47 code=0x7ffc0000 [ 81.343422][ T29] audit: type=1326 audit(1730544980.337:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f869357d3aa code=0x7ffc0000 [ 81.365567][ T29] audit: type=1326 audit(1730544980.337:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 81.388407][ T29] audit: type=1326 audit(1730544980.337:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 81.410542][ T29] audit: type=1326 audit(1730544980.337:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 81.930687][ T25] cfg80211: failed to load regulatory.db [ 89.681959][ T6134] VFS: could not find a valid V7 on nullb0. [ 89.689976][ T6134] netlink: 92 bytes leftover after parsing attributes in process `syz.4.52'. [ 90.562328][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 90.562347][ T29] audit: type=1326 audit(1730544990.017:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 90.599318][ T29] audit: type=1326 audit(1730544990.017:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 91.204288][ T5922] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.396552][ T6154] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 91.795902][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.823875][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.843837][ T5922] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 91.855764][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.195516][ T5922] usb 1-1: config 0 descriptor?? [ 92.802131][ T5922] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 92.810359][ T5922] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 92.831822][ T5922] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 92.843583][ T5922] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 93.800952][ T5922] zydacron 0003:13EC:0006.0002: item fetching failed at offset 4/5 [ 93.809812][ T5922] zydacron 0003:13EC:0006.0002: parse failed [ 93.816039][ T5922] zydacron 0003:13EC:0006.0002: probe with driver zydacron failed with error -22 [ 94.083422][ T5922] usb 1-1: USB disconnect, device number 2 [ 94.494057][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.723923][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 94.749518][ T8] usb 3-1: New USB device found, idVendor=1608, idProduct=0303, bcdDevice=a1.cb [ 95.123747][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.652351][ T8] usb 3-1: Product: syz [ 96.133536][ T8] usb 3-1: Manufacturer: syz [ 96.409318][ T8] usb 3-1: SerialNumber: syz [ 96.507761][ T8] usb 3-1: config 0 descriptor?? [ 96.515783][ T8] usb 3-1: can't set config #0, error -71 [ 96.548354][ T8] usb 3-1: USB disconnect, device number 2 [ 101.168533][ T6226] vivid-002: ================= START STATUS ================= [ 101.176575][ T6226] vivid-002: Radio HW Seek Mode: Bounded [ 101.182470][ T6226] vivid-002: Radio Programmable HW Seek: false [ 101.190666][ T6226] vivid-002: RDS Rx I/O Mode: Block I/O [ 101.197191][ T6226] vivid-002: Generate RBDS Instead of RDS: false [ 101.204368][ T6226] vivid-002: RDS Reception: true [ 101.209575][ T6226] vivid-002: RDS Program Type: 0 inactive [ 102.231721][ T6226] vivid-002: RDS PS Name: inactive [ 102.243252][ T6226] vivid-002: RDS Radio Text: inactive [ 102.249385][ T6226] vivid-002: RDS Traffic Announcement: false inactive [ 102.441553][ T6226] vivid-002: RDS Traffic Program: false inactive [ 102.452816][ T6226] vivid-002: RDS Music: false inactive [ 102.460213][ T6226] vivid-002: ================== END STATUS ================== [ 105.173881][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.343893][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 105.354612][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.388925][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.414541][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.455650][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.487025][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.519070][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.236034][ T8] usb 3-1: GET_CAPABILITIES returned 0 [ 106.273327][ T8] usbtmc 3-1:16.0: can't read capabilities [ 106.465255][ T5922] usb 3-1: USB disconnect, device number 3 [ 106.703933][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.967030][ T8] usb 2-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 107.005425][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.709980][ T8] usb 2-1: config 0 descriptor?? [ 107.717870][ T8] usb-storage 2-1:0.0: USB Mass Storage device detected [ 107.805578][ T6276] loop4: detected capacity change from 0 to 1024 [ 108.110188][ T6280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.119979][ T6280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.172391][ T5922] usb 2-1: USB disconnect, device number 3 [ 108.749521][ T3519] hfsplus: b-tree write err: -5, ino 4 [ 109.028458][ T6292] VFS: could not find a valid V7 on nullb0. [ 109.050636][ T6292] netlink: 92 bytes leftover after parsing attributes in process `syz.4.89'. [ 109.072681][ T29] audit: type=1326 audit(1730545008.597:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 109.135550][ T29] audit: type=1326 audit(1730545008.597:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 112.173816][ T5893] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.323738][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 112.341738][ T5893] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.351790][ T5893] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.362063][ T5893] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.372180][ T5893] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.390407][ T5893] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.409748][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.631182][ T5893] usb 2-1: GET_CAPABILITIES returned 0 [ 112.647197][ T5893] usbtmc 2-1:16.0: can't read capabilities [ 112.843994][ T5893] usb 2-1: USB disconnect, device number 4 [ 113.082257][ T6329] VFS: could not find a valid V7 on nullb0. [ 113.091441][ T6329] netlink: 92 bytes leftover after parsing attributes in process `syz.0.109'. [ 113.119334][ T29] audit: type=1326 audit(1730545012.647:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6f17e719 code=0x7ffc0000 [ 113.181003][ T29] audit: type=1326 audit(1730545012.647:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6f17e719 code=0x7ffc0000 [ 114.269024][ T6335] loop1: detected capacity change from 0 to 1024 [ 115.692704][ T6348] netlink: 16 bytes leftover after parsing attributes in process `syz.4.106'. [ 116.831212][ T6365] VFS: could not find a valid V7 on nullb0. [ 116.840284][ T6365] netlink: 92 bytes leftover after parsing attributes in process `syz.4.108'. [ 116.889731][ T29] audit: type=1326 audit(1730545016.387:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.4.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 116.925077][ T29] audit: type=1326 audit(1730545016.387:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.4.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 116.948325][ T5938] hfsplus: b-tree write err: -5, ino 4 [ 120.325060][ T6404] VFS: could not find a valid V7 on nullb0. [ 120.334137][ T6404] netlink: 92 bytes leftover after parsing attributes in process `syz.1.118'. [ 120.444424][ T29] audit: type=1326 audit(1730545019.887:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 120.565101][ T29] audit: type=1326 audit(1730545019.887:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 121.244431][ T6409] loop2: detected capacity change from 0 to 1024 [ 123.325526][ T12] hfsplus: b-tree write err: -5, ino 4 [ 129.093273][ T6466] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.386972][ T6475] binder: 6465:6475 ioctl 4018620d 0 returned -22 [ 130.918069][ T6478] loop3: detected capacity change from 0 to 1024 [ 131.625715][ T6478] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 131.765036][ T6478] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 131.784225][ T6478] EXT4-fs (loop3): invalid journal inode [ 131.790025][ T6478] EXT4-fs (loop3): can't get journal size [ 132.073894][ T5854] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 132.596693][ T6478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.637034][ T6478] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.783856][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.790270][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.822235][ T5854] usb 2-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 133.831456][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.841708][ T5854] usb 2-1: config 0 descriptor?? [ 133.859306][ T5854] usb-storage 2-1:0.0: USB Mass Storage device detected [ 134.308966][ T6485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.317632][ T6485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.338934][ T5854] usb 2-1: USB disconnect, device number 5 [ 134.461683][ T6510] VFS: could not find a valid V7 on nullb0. [ 134.501269][ T6510] netlink: 92 bytes leftover after parsing attributes in process `syz.0.147'. [ 134.690616][ T29] audit: type=1326 audit(1730545034.217:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6f17e719 code=0x7ffc0000 [ 134.931030][ T29] audit: type=1326 audit(1730545034.217:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6f17e719 code=0x7ffc0000 [ 134.953182][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.658743][ T6535] binder: 6529:6535 ioctl 4018620d 0 returned -22 [ 140.497290][ T6542] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 140.505509][ T6542] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 140.514254][ T6542] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 140.522080][ T6542] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 141.752094][ T6547] loop3: detected capacity change from 0 to 1024 [ 142.246264][ T6547] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 142.255946][ T6547] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 142.267494][ T6547] EXT4-fs (loop3): invalid journal inode [ 142.273241][ T6547] EXT4-fs (loop3): can't get journal size [ 142.454961][ T6547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.468878][ T6547] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.760844][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 143.927053][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 143.969180][ T6573] ipip0: entered promiscuous mode [ 144.323785][ T6569] ceph: No mds server is up or the cluster is laggy [ 144.364516][ T5854] libceph: connect (1)[c::]:6789 error -101 [ 144.375633][ T5854] libceph: mon0 (1)[c::]:6789 connect error [ 144.899426][ T5854] libceph: connect (1)[c::]:6789 error -101 [ 144.905874][ T5854] libceph: mon0 (1)[c::]:6789 connect error [ 145.509958][ T5854] libceph: connect (1)[c::]:6789 error -101 [ 145.533922][ T5854] libceph: mon0 (1)[c::]:6789 connect error [ 145.566056][ T8] usb 2-1: device not accepting address 6, error -71 [ 147.435195][ T6590] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 147.442976][ T6590] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 147.451411][ T6590] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 147.459243][ T6590] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 149.993780][ T5917] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 150.825788][ T5917] usb 2-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 150.841758][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.854829][ T5917] usb 2-1: config 0 descriptor?? [ 150.868232][ T5917] usb-storage 2-1:0.0: USB Mass Storage device detected [ 153.750984][ T6647] VFS: could not find a valid V7 on nullb0. [ 153.760931][ T6647] netlink: 92 bytes leftover after parsing attributes in process `syz.3.181'. [ 153.795198][ T29] audit: type=1326 audit(1730545053.317:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294917e719 code=0x7ffc0000 [ 153.871276][ T29] audit: type=1326 audit(1730545053.317:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294917e719 code=0x7ffc0000 [ 154.199645][ T6653] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 154.207491][ T6653] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 154.215805][ T6653] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 154.223516][ T6653] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 157.600630][ T25] usb 2-1: USB disconnect, device number 8 [ 157.671954][ T6675] VFS: could not find a valid V7 on nullb0. [ 157.679613][ T6675] netlink: 92 bytes leftover after parsing attributes in process `syz.0.187'. [ 157.717327][ T29] audit: type=1326 audit(1730545057.227:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6f17e719 code=0x7ffc0000 [ 157.783902][ T29] audit: type=1326 audit(1730545057.227:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6f17e719 code=0x7ffc0000 [ 158.377943][ T6681] loop0: detected capacity change from 0 to 1024 [ 158.484254][ T6681] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 158.494012][ T6681] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 158.511668][ T6681] EXT4-fs (loop0): invalid journal inode [ 158.517510][ T6681] EXT4-fs (loop0): can't get journal size [ 158.668917][ T6681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 158.682596][ T6681] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.867480][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 159.880164][ T6691] ipip0: entered promiscuous mode [ 160.101305][ T6688] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 165.374011][ T5922] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 165.484451][ T6738] VFS: could not find a valid V7 on nullb0. [ 165.497882][ T6738] netlink: 92 bytes leftover after parsing attributes in process `syz.2.203'. [ 165.525470][ T29] audit: type=1326 audit(1730545065.047:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1077e719 code=0x7ffc0000 [ 165.561701][ T5922] usb 1-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 165.582285][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.602884][ T5922] usb 1-1: config 0 descriptor?? [ 165.610548][ T29] audit: type=1326 audit(1730545065.047:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1077e719 code=0x7ffc0000 [ 165.633018][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.651926][ T5922] usb-storage 1-1:0.0: USB Mass Storage device detected [ 165.931820][ T6742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.967107][ T6742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.163547][ T6731] loop3: detected capacity change from 0 to 32768 [ 166.854893][ T6729] delete_channel: no stack [ 167.062964][ T5854] usb 1-1: USB disconnect, device number 3 [ 171.270953][ T6792] loop0: detected capacity change from 0 to 1024 [ 171.296503][ T6792] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 171.308268][ T6792] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 171.321365][ T6792] EXT4-fs (loop0): invalid journal inode [ 171.327246][ T6792] EXT4-fs (loop0): can't get journal size [ 171.359170][ T6792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 171.373720][ T6792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.952842][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 172.110784][ T6796] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 172.853989][ T5917] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 174.410653][ T5917] usb 1-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 174.419922][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.430816][ T5917] usb 1-1: config 0 descriptor?? [ 174.450886][ T5917] usb-storage 1-1:0.0: USB Mass Storage device detected [ 174.941476][ T6824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.950988][ T6824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.192137][ T6826] loop3: detected capacity change from 0 to 40427 [ 175.203329][ T6826] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 175.211282][ T6826] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 175.224100][ T6826] F2FS-fs (loop3): invalid crc value [ 175.275628][ T6826] F2FS-fs (loop3): Found nat_bits in checkpoint [ 175.462934][ T6826] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 175.470549][ T6826] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 175.941617][ T6836] loop2: detected capacity change from 0 to 1024 [ 175.949130][ T6836] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 175.958826][ T6836] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 175.972936][ T6836] EXT4-fs (loop2): invalid journal inode [ 175.978836][ T6836] EXT4-fs (loop2): can't get journal size [ 175.989411][ T6836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 176.002622][ T6836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.315394][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.228'. [ 176.342179][ T6845] ipip0: entered promiscuous mode [ 176.499564][ T6842] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 176.673763][ T5890] usb 1-1: USB disconnect, device number 4 [ 180.529641][ T6872] loop4: detected capacity change from 0 to 1024 [ 180.588221][ T6875] loop2: detected capacity change from 0 to 1024 [ 180.596635][ T6875] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 180.606895][ T6875] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 180.618071][ T6875] EXT4-fs (loop2): invalid journal inode [ 180.624084][ T6875] EXT4-fs (loop2): can't get journal size [ 181.045388][ T6875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.059150][ T6875] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.567971][ T6863] Bluetooth: hci0: command 0x0406 tx timeout [ 181.568364][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 181.574236][ T6863] Bluetooth: hci2: command 0x0406 tx timeout [ 181.581004][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 181.586673][ T6863] Bluetooth: hci4: command 0x0406 tx timeout [ 181.622063][ T3519] hfsplus: b-tree write err: -5, ino 4 [ 181.767232][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 181.924642][ T6885] ceph: No mds server is up or the cluster is laggy [ 181.931864][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 181.938424][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 182.181599][ T6891] loop4: detected capacity change from 0 to 1024 [ 182.189899][ T6891] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 182.200806][ T6891] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 182.215356][ T6891] EXT4-fs (loop4): invalid journal inode [ 182.221094][ T6891] EXT4-fs (loop4): can't get journal size [ 182.248855][ T6891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.262891][ T6891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.673219][ T6897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.240'. [ 182.703580][ T6897] ipip0: entered promiscuous mode [ 182.867904][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 182.937512][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 183.032565][ T6894] ceph: No mds server is up or the cluster is laggy [ 184.543922][ T5893] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 186.352407][ T5893] usb 5-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 186.361812][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.391334][ T5893] usb 5-1: config 0 descriptor?? [ 186.414816][ T5893] usb-storage 5-1:0.0: USB Mass Storage device detected [ 186.713161][ T6905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.713306][ T6905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.723857][ T5854] usb 5-1: USB disconnect, device number 3 [ 187.527319][ T6934] loop1: detected capacity change from 0 to 1024 [ 188.473868][ T3519] hfsplus: b-tree write err: -5, ino 4 [ 192.282781][ T6963] VFS: could not find a valid V7 on nullb0. [ 192.290269][ T6963] netlink: 92 bytes leftover after parsing attributes in process `syz.4.256'. [ 192.505982][ T29] audit: type=1326 audit(1730545091.827:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 192.604194][ T29] audit: type=1326 audit(1730545091.827:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 192.862816][ T6972] VFS: could not find a valid V7 on nullb0. [ 192.871449][ T6972] netlink: 92 bytes leftover after parsing attributes in process `syz.1.259'. [ 193.005972][ T29] audit: type=1326 audit(1730545092.417:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6969 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 193.164037][ T29] audit: type=1326 audit(1730545092.417:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6969 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 194.531408][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.537854][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.681168][ T6985] loop0: detected capacity change from 0 to 1024 [ 195.414722][ T6991] hfsplus: xattr searching failed [ 196.226566][ T5937] hfsplus: b-tree write err: -5, ino 4 [ 197.193610][ T7014] VFS: could not find a valid V7 on nullb0. [ 197.201079][ T7014] netlink: 92 bytes leftover after parsing attributes in process `syz.4.271'. [ 197.224720][ T29] audit: type=1326 audit(1730545096.747:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 198.383837][ T29] audit: type=1326 audit(1730545096.747:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 200.908349][ T7043] loop1: detected capacity change from 0 to 1024 [ 200.929302][ T7043] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 200.939009][ T7043] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 200.950407][ T7043] EXT4-fs (loop1): invalid journal inode [ 200.956338][ T7043] EXT4-fs (loop1): can't get journal size [ 201.157629][ T7043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 201.171866][ T7043] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.663138][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.278'. [ 201.725325][ T7051] ipip0: entered promiscuous mode [ 201.978194][ T7049] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 202.661736][ T7054] loop1: detected capacity change from 0 to 1024 [ 204.601300][ T63] hfsplus: b-tree write err: -5, ino 4 [ 204.711477][ T7066] loop3: detected capacity change from 0 to 40427 [ 204.725908][ T7066] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 204.733731][ T7066] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 204.756677][ T7066] F2FS-fs (loop3): invalid crc value [ 205.065113][ T7081] netlink: 92 bytes leftover after parsing attributes in process `syz.0.284'. [ 205.804375][ T29] audit: type=1326 audit(1730545104.607:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7065 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6f17e719 code=0x7ffc0000 [ 206.151495][ T7066] F2FS-fs (loop3): Found nat_bits in checkpoint [ 206.173801][ T29] audit: type=1326 audit(1730545104.607:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7065 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6f17e719 code=0x7ffc0000 [ 207.898992][ T7066] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 207.906172][ T7066] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 211.901480][ T7116] loop1: detected capacity change from 0 to 64 [ 212.607136][ T7116] Bluetooth: MGMT ver 1.23 [ 214.092781][ T7135] loop1: detected capacity change from 0 to 64 [ 219.963840][ T7175] loop0: detected capacity change from 0 to 64 [ 222.269903][ T7186] loop2: detected capacity change from 0 to 64 [ 223.434845][ T7196] loop1: detected capacity change from 0 to 1024 [ 225.522571][ T5937] hfsplus: b-tree write err: -5, ino 4 [ 228.380621][ T7235] loop4: detected capacity change from 0 to 40427 [ 228.981720][ T7235] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 228.989795][ T7235] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 229.012424][ T7235] F2FS-fs (loop4): invalid crc value [ 229.062536][ T7235] F2FS-fs (loop4): Found nat_bits in checkpoint [ 229.118034][ T7235] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 229.125211][ T7235] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 230.313843][ T5922] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 231.987967][ T7268] loop2: detected capacity change from 0 to 1024 [ 233.971084][ T7284] loop7: detected capacity change from 0 to 16384 [ 234.009948][ T2131] hfsplus: b-tree write err: -5, ino 4 [ 234.655444][ T7279] Invalid logical block size (1) [ 234.697287][ T7294] netlink: 92 bytes leftover after parsing attributes in process `syz.1.338'. [ 234.713339][ T29] audit: type=1326 audit(1730545134.237:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 234.788987][ T29] audit: type=1326 audit(1730545134.237:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 236.521112][ T7307] loop2: detected capacity change from 0 to 40427 [ 236.535789][ T7307] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 236.543627][ T7307] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 236.560128][ T7307] F2FS-fs (loop2): invalid crc value [ 237.941546][ T7307] F2FS-fs (loop2): Found nat_bits in checkpoint [ 237.997167][ T7307] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 238.004470][ T7307] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 241.267068][ T7344] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 242.512969][ T5158] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 242.524963][ T5158] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 242.536249][ T5158] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 242.545905][ T5158] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 242.555649][ T5158] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 242.563030][ T5158] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 242.845447][ T7362] loop2: detected capacity change from 0 to 1024 [ 243.015905][ T7362] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 243.025653][ T7362] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 243.046566][ T7362] EXT4-fs (loop2): invalid journal inode [ 243.052374][ T7362] EXT4-fs (loop2): can't get journal size [ 243.079003][ T7362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 243.092632][ T7362] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.899106][ T7368] loop3: detected capacity change from 0 to 40427 [ 243.944680][ T7368] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 243.952535][ T7368] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 244.010410][ T7368] F2FS-fs (loop3): invalid crc value [ 244.112733][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 244.120248][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 244.134171][ T7368] F2FS-fs (loop3): Found nat_bits in checkpoint [ 244.168582][ T7372] ceph: No mds server is up or the cluster is laggy [ 244.264838][ T7368] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 244.272119][ T7368] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 244.707337][ T5158] Bluetooth: hci5: command tx timeout [ 245.023810][ T5917] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 245.157784][ T5917] usb 5-1: device descriptor read/64, error -71 [ 245.453983][ T5917] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 245.887886][ T5917] usb 5-1: device descriptor read/64, error -71 [ 246.054207][ T5917] usb usb5-port1: attempt power cycle [ 246.313267][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'. [ 247.063957][ T5158] Bluetooth: hci5: command tx timeout [ 247.114322][ T5917] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 247.366561][ T7401] VFS: could not find a valid V7 on nullb0. [ 247.374198][ T7401] netlink: 92 bytes leftover after parsing attributes in process `syz.2.364'. [ 247.865280][ T29] audit: type=1326 audit(1730545146.917:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1077e719 code=0x7ffc0000 [ 248.063936][ T29] audit: type=1326 audit(1730545146.917:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1077e719 code=0x7ffc0000 [ 248.075163][ T5917] usb 5-1: device descriptor read/8, error -71 [ 248.206980][ T29] audit: type=1326 audit(1730545147.457:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 248.277237][ T29] audit: type=1326 audit(1730545147.457:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 248.353287][ T29] audit: type=1326 audit(1730545147.647:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 249.403872][ T5158] Bluetooth: hci5: command tx timeout [ 249.415230][ T7351] chnl_net:caif_netlink_parms(): no params data found [ 249.431553][ T29] audit: type=1326 audit(1730545147.647:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 249.785707][ T29] audit: type=1326 audit(1730545147.647:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe08177d0b0 code=0x7ffc0000 [ 250.107470][ T29] audit: type=1326 audit(1730545147.647:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 250.212459][ T29] audit: type=1326 audit(1730545147.647:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 250.303136][ T29] audit: type=1326 audit(1730545147.647:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 251.447885][ T8] IPVS: starting estimator thread 0... [ 251.460374][ T7428] Invalid logical block size (1) [ 251.484760][ T5158] Bluetooth: hci5: command tx timeout [ 251.501137][ T7429] block device autoloading is deprecated and will be removed. [ 251.580774][ T7365] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.646920][ T7434] IPVS: using max 33 ests per chain, 79200 per kthread [ 252.637997][ T7365] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.700524][ T7351] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.708495][ T7351] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.721570][ T7351] bridge_slave_0: entered allmulticast mode [ 252.787590][ T7351] bridge_slave_0: entered promiscuous mode [ 252.915726][ T7365] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.926717][ T5922] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 252.943100][ T7351] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.952259][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.960782][ T7351] bridge_slave_1: entered allmulticast mode [ 252.978941][ T7351] bridge_slave_1: entered promiscuous mode [ 253.018283][ T7365] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.065924][ T5922] usb 5-1: device descriptor read/64, error -71 [ 253.140349][ T7351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.209651][ T7453] VFS: could not find a valid V7 on nullb0. [ 253.220471][ T7453] netlink: 92 bytes leftover after parsing attributes in process `syz.3.378'. [ 253.388290][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 253.388469][ T29] audit: type=1326 audit(1730545152.777:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294917e719 code=0x7ffc0000 [ 253.848225][ T7351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.862961][ T29] audit: type=1326 audit(1730545152.777:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294917e719 code=0x7ffc0000 [ 253.945110][ T5922] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 254.853859][ T5922] usb 5-1: device descriptor read/64, error -71 [ 254.872496][ T7351] team0: Port device team_slave_0 added [ 254.910448][ T7351] team0: Port device team_slave_1 added [ 254.964003][ T5922] usb usb5-port1: attempt power cycle [ 256.036598][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.043009][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.774445][ T7365] bridge_slave_1: left allmulticast mode [ 258.884201][ T7471] netlink: 84 bytes leftover after parsing attributes in process `syz.1.383'. [ 259.553898][ T7365] bridge_slave_1: left promiscuous mode [ 259.560653][ T7365] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.672128][ T7365] bridge_slave_0: left allmulticast mode [ 259.688645][ T7365] bridge_slave_0: left promiscuous mode [ 259.706373][ T7365] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.738386][ T7478] Invalid logical block size (1) [ 260.142128][ T7483] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 260.150029][ T7483] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 260.158408][ T7483] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 260.166246][ T7483] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 262.732192][ T7365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.748807][ T7365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.771698][ T7365] bond0 (unregistering): Released all slaves [ 262.896086][ T7500] VFS: could not find a valid V7 on nullb0. [ 262.906519][ T7500] netlink: 92 bytes leftover after parsing attributes in process `syz.2.392'. [ 263.458883][ T7351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.538177][ T29] audit: type=1326 audit(1730545162.457:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1077e719 code=0x7ffc0000 [ 263.567199][ T7351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.595509][ T29] audit: type=1326 audit(1730545162.457:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1077e719 code=0x7ffc0000 [ 263.618035][ T7351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.639593][ T7351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.646990][ T7351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.673806][ T5917] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 263.681649][ T7351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.724534][ T7351] hsr_slave_0: entered promiscuous mode [ 263.731213][ T7351] hsr_slave_1: entered promiscuous mode [ 263.765112][ T7351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.777263][ T7351] Cannot create hsr debugfs directory [ 263.834565][ T5917] usb 4-1: device descriptor read/64, error -71 [ 264.104133][ T5917] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 264.503989][ T5917] usb 4-1: device descriptor read/64, error -71 [ 264.634257][ T5917] usb usb4-port1: attempt power cycle [ 265.453818][ T5917] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 266.028056][ T7518] random: crng reseeded on system resumption [ 266.681092][ T5917] usb 4-1: device descriptor read/8, error -71 [ 267.071409][ T7365] hsr_slave_0: left promiscuous mode [ 267.107012][ T7365] hsr_slave_1: left promiscuous mode [ 267.125902][ T7365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.144642][ T7365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.165160][ T7365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.181344][ T7365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.260636][ T7365] veth1_macvtap: left promiscuous mode [ 267.280682][ T7365] veth0_macvtap: left promiscuous mode [ 267.341662][ T7553] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 267.349824][ T7553] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 267.358285][ T7553] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 267.366220][ T7553] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 267.388122][ T7365] veth1_vlan: left promiscuous mode [ 267.408057][ T7365] veth0_vlan: left promiscuous mode [ 267.662651][ T7555] loop2: detected capacity change from 0 to 1024 [ 267.675235][ T7555] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 267.684965][ T7555] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 267.697009][ T7555] EXT4-fs (loop2): invalid journal inode [ 267.702779][ T7555] EXT4-fs (loop2): can't get journal size [ 267.770457][ T7555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 267.785598][ T7555] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.506510][ T7564] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 269.440103][ T7365] team0 (unregistering): Port device team_slave_1 removed [ 269.496593][ T7365] team0 (unregistering): Port device team_slave_0 removed [ 269.603870][ T5917] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 269.745806][ T5917] usb 5-1: device descriptor read/64, error -71 [ 269.989776][ T5917] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 270.030800][ T7565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'. [ 270.323619][ T5917] usb 5-1: device descriptor read/64, error -71 [ 270.585243][ T5917] usb usb5-port1: attempt power cycle [ 271.064374][ T5917] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 271.122982][ T5917] usb 5-1: device descriptor read/8, error -71 [ 271.354066][ T7598] loop1: detected capacity change from 0 to 1024 [ 271.425447][ T7598] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 271.435217][ T7598] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 271.451137][ T7598] EXT4-fs (loop1): invalid journal inode [ 271.456910][ T7598] EXT4-fs (loop1): can't get journal size [ 271.472747][ T5917] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 271.482060][ T7598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 271.495778][ T7598] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.567505][ T5917] usb 5-1: device descriptor read/8, error -71 [ 271.689308][ T5917] usb usb5-port1: unable to enumerate USB device [ 272.093390][ T7605] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 272.239716][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.417'. [ 272.267066][ T7351] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 272.693629][ T7618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.703121][ T7618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.829960][ T7351] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 272.930181][ T7627] netlink: 84 bytes leftover after parsing attributes in process `syz.3.421'. [ 273.944781][ T7629] loop1: detected capacity change from 0 to 1024 [ 273.993048][ T7351] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 274.023560][ T7351] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 274.662072][ T5922] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 275.163065][ T7351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.222682][ T35] hfsplus: b-tree write err: -5, ino 4 [ 275.238028][ T7351] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.252377][ T7365] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.259623][ T7365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.269322][ T5922] usb 5-1: Using ep0 maxpacket: 8 [ 275.303311][ T7655] loop3: detected capacity change from 0 to 1024 [ 275.314267][ T5922] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 275.332328][ T5922] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 275.342613][ T7655] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 275.352369][ T7655] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 275.364954][ T5922] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 275.375227][ T7655] EXT4-fs (loop3): invalid journal inode [ 275.381208][ T7655] EXT4-fs (loop3): can't get journal size [ 275.388919][ T7655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 275.388952][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.403394][ T7655] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.408458][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.419412][ T5922] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.446040][ T5922] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 275.455383][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.657709][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.430'. [ 276.792593][ T7665] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 277.372146][ T5922] usb 5-1: usb_control_msg returned -71 [ 277.387871][ T5922] usbtmc 5-1:16.0: can't read capabilities [ 277.399856][ T5922] usb 5-1: USB disconnect, device number 15 [ 277.800593][ T7351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.661522][ T7716] loop2: detected capacity change from 0 to 1024 [ 279.802710][ T7732] loop4: detected capacity change from 0 to 1024 [ 279.826220][ T7732] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 279.835975][ T7732] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 279.848539][ T7732] EXT4-fs (loop4): invalid journal inode [ 279.849355][ T5938] hfsplus: b-tree write err: -5, ino 4 [ 279.854333][ T7732] EXT4-fs (loop4): can't get journal size [ 279.870571][ T7732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 279.884519][ T7732] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.935688][ T7351] veth0_vlan: entered promiscuous mode [ 279.946543][ T7351] veth1_vlan: entered promiscuous mode [ 279.972185][ T7351] veth0_macvtap: entered promiscuous mode [ 279.982246][ T7351] veth1_macvtap: entered promiscuous mode [ 279.997085][ T7351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.008216][ T7351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.019462][ T7351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.030295][ T7351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.040235][ T7351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.051797][ T7351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.061960][ T7351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.072981][ T7351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.086481][ T7351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.097799][ T7351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.108877][ T7351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.119526][ T7351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.130709][ T7351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.141027][ T7351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.151778][ T7351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.161821][ T7351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.172587][ T7351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.186344][ T7351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.268907][ T7351] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.278057][ T7351] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.287678][ T7351] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.296795][ T7351] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.077365][ T7748] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 281.290009][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'. [ 281.443828][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.503704][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.671921][ T7767] VFS: could not find a valid V7 on nullb0. [ 281.681375][ T7767] netlink: 92 bytes leftover after parsing attributes in process `syz.4.450'. [ 282.320967][ T29] audit: type=1326 audit(1730545181.237:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.4.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 282.460323][ T3519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.533925][ T29] audit: type=1326 audit(1730545181.237:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.4.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 282.598334][ T3519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.630714][ T7792] bridge0: port 3(veth1_to_hsr) entered blocking state [ 283.638091][ T7792] bridge0: port 3(veth1_to_hsr) entered disabled state [ 283.646218][ T7792] veth1_to_hsr: entered allmulticast mode [ 283.656745][ T7792] veth1_to_hsr: entered promiscuous mode [ 283.665623][ T7792] bridge0: port 3(veth1_to_hsr) entered blocking state [ 283.672799][ T7792] bridge0: port 3(veth1_to_hsr) entered forwarding state [ 284.446102][ T7786] loop5: detected capacity change from 0 to 32768 [ 284.554862][ T7800] loop4: detected capacity change from 0 to 1024 [ 284.595773][ T7800] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 284.595885][ T7800] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 284.606023][ T7800] EXT4-fs (loop4): invalid journal inode [ 284.606096][ T7800] EXT4-fs (loop4): can't get journal size [ 284.787368][ T7800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 284.876516][ T7800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.070006][ T7816] sp0: Synchronizing with TNC [ 285.412329][ T5854] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 285.548778][ T7783] delete_channel: no stack [ 285.620120][ T5854] usb 4-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41 [ 285.671962][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.732793][ T5854] usb 4-1: Product: syz [ 285.772406][ T5854] usb 4-1: Manufacturer: syz [ 285.809848][ T5854] usb 4-1: SerialNumber: syz [ 285.865905][ T5854] usb 4-1: config 0 descriptor?? [ 285.907795][ T5854] gspca_main: kinect-2.14.0 probing 045e:02bf [ 288.930228][ T8] usb 4-1: USB disconnect, device number 7 [ 291.083618][ T7872] loop1: detected capacity change from 0 to 32768 [ 291.091659][ T5917] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 291.159524][ T7879] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 292.668045][ T5917] usb 6-1: device descriptor read/64, error -71 [ 293.244751][ T7871] delete_channel: no stack [ 293.669536][ T7892] loop3: detected capacity change from 0 to 64 [ 294.383013][ T7898] loop2: detected capacity change from 0 to 1024 [ 294.403310][ T7898] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 294.413087][ T7898] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 294.427782][ T7898] EXT4-fs (loop2): invalid journal inode [ 294.433527][ T7898] EXT4-fs (loop2): can't get journal size [ 294.452624][ T7898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 294.482714][ T7898] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.212118][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.479'. [ 296.503741][ T7906] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 297.343996][ T7923] loop4: detected capacity change from 0 to 64 [ 298.881953][ T7934] netlink: 92 bytes leftover after parsing attributes in process `syz.2.483'. [ 299.649211][ T29] audit: type=1326 audit(1730545198.427:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7921 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1077e719 code=0x7ffc0000 [ 299.801585][ T29] audit: type=1326 audit(1730545198.427:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7921 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1077e719 code=0x7ffc0000 [ 300.361046][ T5854] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 301.312546][ T5854] usb 5-1: no configurations [ 301.333941][ T5854] usb 5-1: can't read configurations, error -22 [ 301.431541][ T7960] loop5: detected capacity change from 0 to 64 [ 302.228235][ T7966] loop3: detected capacity change from 0 to 1024 [ 302.234778][ T5854] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 302.412208][ T7944] loop2: detected capacity change from 0 to 32768 [ 302.542808][ T5854] usb 5-1: no configurations [ 302.554112][ T5854] usb 5-1: can't read configurations, error -22 [ 303.157688][ T5854] usb usb5-port1: attempt power cycle [ 303.190029][ T5937] hfsplus: b-tree write err: -5, ino 4 [ 303.559469][ T7981] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.492418][ T7943] delete_channel: no stack [ 304.499019][ T7984] read_mapping_page failed! [ 304.503999][ T7984] diRead: read_metapage failed [ 304.508874][ T7984] jfs_lookup: iget failed on inum 32 [ 304.889895][ T8003] netlink: 92 bytes leftover after parsing attributes in process `syz.1.498'. [ 305.724015][ T29] audit: type=1326 audit(1730545204.477:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 306.513802][ T29] audit: type=1326 audit(1730545204.487:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 307.231954][ T8027] loop4: detected capacity change from 0 to 1024 [ 309.046434][ T8051] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 309.629588][ T8074] netlink: 92 bytes leftover after parsing attributes in process `syz.3.511'. [ 309.669625][ T8076] bridge0: port 3(veth1_to_hsr) entered blocking state [ 309.677455][ T8076] bridge0: port 3(veth1_to_hsr) entered disabled state [ 309.686965][ T8076] veth1_to_hsr: entered allmulticast mode [ 309.702242][ T8076] veth1_to_hsr: entered promiscuous mode [ 309.713240][ T8076] bridge0: port 3(veth1_to_hsr) entered blocking state [ 309.720282][ T8076] bridge0: port 3(veth1_to_hsr) entered forwarding state [ 310.693776][ T29] audit: type=1326 audit(1730545209.177:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294917e719 code=0x7ffc0000 [ 310.839790][ T29] audit: type=1326 audit(1730545209.177:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294917e719 code=0x7ffc0000 [ 313.877736][ T8112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 313.901346][ T8111] loop5: detected capacity change from 0 to 1024 [ 313.912173][ T8111] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 313.921838][ T8111] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 313.932893][ T8111] EXT4-fs (loop5): invalid journal inode [ 313.938725][ T8111] EXT4-fs (loop5): can't get journal size [ 313.946404][ T8111] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 313.959608][ T8111] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.224708][ T7365] hfsplus: b-tree write err: -5, ino 4 [ 314.377272][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.517'. [ 314.712533][ T8116] ceph: No mds server is up or the cluster is laggy [ 316.327072][ T8148] netlink: 92 bytes leftover after parsing attributes in process `syz.1.522'. [ 317.061457][ T29] audit: type=1326 audit(1730545215.877:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8142 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 317.083718][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.188354][ T29] audit: type=1326 audit(1730545215.877:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8142 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 317.409613][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.416432][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.248691][ T8170] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 318.262483][ T11] Bluetooth: hci2: Frame reassembly failed (-84) [ 319.376158][ T8176] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 319.486686][ T8176] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 319.576629][ T8176] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 319.584922][ T8176] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 320.284036][ T5158] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 321.648203][ T8206] netlink: 92 bytes leftover after parsing attributes in process `syz.1.536'. [ 321.771424][ T29] audit: type=1326 audit(1730545221.197:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8199 comm="syz.1.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 322.177531][ T29] audit: type=1326 audit(1730545221.197:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8199 comm="syz.1.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 322.199741][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.330029][ T8236] loop4: detected capacity change from 0 to 1024 [ 324.513911][ T5854] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 324.734024][ T5854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.745172][ T5854] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 324.754417][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.787904][ T5854] usb 2-1: config 0 descriptor?? [ 325.092889][ T8251] Zero length message leads to an empty skb [ 326.586558][ T5854] usbhid 2-1:0.0: can't add hid device: -71 [ 326.592666][ T5854] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 326.633586][ T5854] usb 2-1: USB disconnect, device number 10 [ 326.767437][ T35] hfsplus: b-tree write err: -5, ino 4 [ 329.571225][ T5845] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 329.906215][ T8310] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 329.953966][ T8310] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 329.976161][ T8310] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 330.246600][ T8310] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 330.387656][ T8315] loop1: detected capacity change from 0 to 1024 [ 333.272578][ T2129] hfsplus: b-tree write err: -5, ino 4 [ 333.645941][ T5845] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 333.676277][ T5845] Bluetooth: hci3: Injecting HCI hardware error event [ 333.687084][ T5845] Bluetooth: hci3: hardware error 0x00 [ 334.852095][ T8370] netlink: 92 bytes leftover after parsing attributes in process `syz.3.569'. [ 335.232805][ T8366] loop4: detected capacity change from 0 to 1024 [ 335.240279][ T29] audit: type=1326 audit(1730545234.397:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294917e719 code=0x7ffc0000 [ 335.262656][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.287362][ T8366] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 335.297584][ T8366] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 335.309163][ T8366] EXT4-fs (loop4): invalid journal inode [ 335.314997][ T8366] EXT4-fs (loop4): can't get journal size [ 335.421398][ T8366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 335.435265][ T8366] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.704136][ T29] audit: type=1326 audit(1730545234.397:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294917e719 code=0x7ffc0000 [ 335.916681][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.571'. [ 336.136185][ T8382] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 336.581763][ T8386] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 337.939633][ T5845] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 338.242187][ T8403] VFS: could not find a valid V7 on nullb0. [ 338.558006][ T8403] netlink: 92 bytes leftover after parsing attributes in process `syz.3.574'. [ 338.619635][ T29] audit: type=1326 audit(1730545238.147:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.3.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294917e719 code=0x7ffc0000 [ 338.828521][ T29] audit: type=1326 audit(1730545238.147:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.3.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294917e719 code=0x7ffc0000 [ 339.552001][ T8433] warning: `syz.4.582' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 340.635652][ T8447] loop4: detected capacity change from 0 to 1024 [ 340.676556][ T8447] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 340.686571][ T8447] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 340.737283][ T8450] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 340.745268][ T8450] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 340.753778][ T8450] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 340.761619][ T8450] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 340.899249][ T8447] EXT4-fs (loop4): invalid journal inode [ 340.905125][ T8447] EXT4-fs (loop4): can't get journal size [ 341.329390][ T8447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 341.342491][ T8447] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.070777][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 342.151985][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 342.167712][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 342.190435][ T29] audit: type=1326 audit(1730545241.477:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.1.588" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x0 [ 342.244538][ T8463] ceph: No mds server is up or the cluster is laggy [ 342.634718][ T8470] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 346.114822][ T8521] loop4: detected capacity change from 0 to 1024 [ 346.122284][ T8521] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 346.132123][ T8521] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 346.143469][ T8521] EXT4-fs (loop4): invalid journal inode [ 346.149220][ T8521] EXT4-fs (loop4): can't get journal size [ 346.156775][ T8521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 346.169858][ T8521] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.516212][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'. [ 346.934846][ T8526] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 347.240405][ T8537] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 347.435990][ T8542] VFS: could not find a valid V7 on nullb0. [ 347.461589][ T8542] netlink: 92 bytes leftover after parsing attributes in process `syz.5.602'. [ 347.475663][ T2129] Bluetooth: hci2: Frame reassembly failed (-84) [ 347.830194][ T29] audit: type=1326 audit(1730545247.327:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.5.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff568d7e719 code=0x7ffc0000 [ 347.852754][ T29] audit: type=1326 audit(1730545247.327:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.5.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff568d7e719 code=0x7ffc0000 [ 349.654796][ T5845] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 350.493163][ T8579] loop2: detected capacity change from 0 to 1024 [ 350.532821][ T8579] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 350.542562][ T8579] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 350.553089][ T8579] EXT4-fs (loop2): invalid journal inode [ 350.558915][ T8579] EXT4-fs (loop2): can't get journal size [ 350.579354][ T8579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 350.593568][ T8579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.980523][ T8584] netlink: 92 bytes leftover after parsing attributes in process `syz.3.614'. [ 351.012103][ T29] audit: type=1326 audit(1730545250.527:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294917e719 code=0x7ffc0000 [ 351.034892][ T29] audit: type=1326 audit(1730545250.527:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294917e719 code=0x7ffc0000 [ 351.691415][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.613'. [ 351.839557][ T8594] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 364.916604][ T5856] Bluetooth: hci1: unexpected event for opcode 0x2042 [ 365.902470][ T8735] orangefs_mount: mount request failed with -4 [ 366.205390][ T5856] Bluetooth: hci5: command 0x0406 tx timeout [ 369.019112][ T5158] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 369.036059][ T5158] Bluetooth: hci1: Injecting HCI hardware error event [ 369.055969][ T5845] Bluetooth: hci1: hardware error 0x00 [ 370.823480][ T8787] netlink: 92 bytes leftover after parsing attributes in process `syz.1.667'. [ 370.845229][ T29] audit: type=1326 audit(1730545270.377:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 371.213008][ T5845] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 371.315229][ T29] audit: type=1326 audit(1730545270.377:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 371.337475][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.157796][ T8823] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 376.174462][ T8823] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 376.847679][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 376.880242][ T8823] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 376.964398][ T8823] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 377.403188][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.633284][ T25] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 377.642479][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.038924][ T25] usb 2-1: config 0 descriptor?? [ 378.899992][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.900116][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.733986][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 380.548956][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 380.558989][ T25] usb 2-1: USB disconnect, device number 11 [ 381.779205][ T5845] Bluetooth: hci4: unexpected event for opcode 0x2042 [ 385.874229][ T5845] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 385.887729][ T5845] Bluetooth: hci4: Injecting HCI hardware error event [ 385.906574][ T5845] Bluetooth: hci4: hardware error 0x00 [ 388.053225][ T5845] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 391.691034][ T8934] loop4: detected capacity change from 0 to 32768 [ 393.717720][ T8933] delete_channel: no stack [ 394.601219][ T8973] VFS: could not find a valid V7 on nullb0. [ 394.612152][ T8973] netlink: 92 bytes leftover after parsing attributes in process `syz.1.722'. [ 394.638686][ T29] audit: type=1326 audit(1730545294.167:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8967 comm="syz.1.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 394.712021][ T29] audit: type=1326 audit(1730545294.167:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8967 comm="syz.1.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 397.049921][ T8993] loop4: detected capacity change from 0 to 1024 [ 397.068074][ T8993] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 397.078656][ T8993] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 397.092903][ T8993] EXT4-fs (loop4): invalid journal inode [ 397.098761][ T8993] EXT4-fs (loop4): can't get journal size [ 397.130471][ T8993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 397.144323][ T8993] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.903749][ T9004] VFS: could not find a valid V7 on nullb0. [ 398.104849][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.727'. [ 398.209842][ T29] audit: type=1326 audit(1730545297.447:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.2.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1077e719 code=0x7ffc0000 [ 398.247460][ T9006] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 398.414370][ T29] audit: type=1326 audit(1730545297.447:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.2.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1077e719 code=0x7ffc0000 [ 404.840382][ T9063] VFS: could not find a valid V7 on nullb0. [ 405.457290][ T29] audit: type=1326 audit(1730545304.387:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9054 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 405.457337][ T29] audit: type=1326 audit(1730545304.387:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9054 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 405.688782][ T9069] loop4: detected capacity change from 0 to 1024 [ 405.697315][ T9069] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 405.707236][ T9069] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 405.727901][ T9069] EXT4-fs (loop4): invalid journal inode [ 405.733806][ T9069] EXT4-fs (loop4): can't get journal size [ 405.753890][ T9069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 405.767650][ T9069] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.336488][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.743'. [ 407.453842][ T9078] ceph: No mds server is up or the cluster is laggy [ 407.827320][ T9089] VFS: could not find a valid V7 on nullb0. [ 407.839259][ T9089] netlink: 92 bytes leftover after parsing attributes in process `syz.5.749'. [ 407.893918][ T29] audit: type=1326 audit(1730545307.387:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="syz.5.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff568d7e719 code=0x7ffc0000 [ 407.916264][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.080279][ T29] audit: type=1326 audit(1730545307.387:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="syz.5.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff568d7e719 code=0x7ffc0000 [ 410.620244][ T9122] VFS: could not find a valid V7 on nullb0. [ 410.789005][ T29] audit: type=1326 audit(1730545310.157:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294917e719 code=0x7ffc0000 [ 410.867890][ T29] audit: type=1326 audit(1730545310.157:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294917e719 code=0x7ffc0000 [ 412.152681][ T9133] loop3: detected capacity change from 0 to 1024 [ 412.926313][ T9133] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 412.936156][ T9133] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 412.962170][ T9133] EXT4-fs (loop3): invalid journal inode [ 412.968195][ T9133] EXT4-fs (loop3): can't get journal size [ 413.100752][ T9133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 413.114547][ T9133] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.371112][ T9147] VFS: could not find a valid V7 on nullb0. [ 414.075615][ T29] audit: type=1326 audit(1730545312.907:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9142 comm="syz.4.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 414.154133][ T29] audit: type=1326 audit(1730545312.907:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9142 comm="syz.4.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 414.475970][ T9151] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 418.177640][ T9188] VFS: could not find a valid V7 on nullb0. [ 418.249444][ T29] audit: type=1326 audit(1730545317.757:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.5.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff568d7e719 code=0x7ffc0000 [ 418.315490][ T29] audit: type=1326 audit(1730545317.757:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.5.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff568d7e719 code=0x7ffc0000 [ 420.172426][ T9185] loop4: detected capacity change from 0 to 32768 [ 420.797714][ T9184] delete_channel: no stack [ 422.039619][ T9224] xt_nat: multiple ranges no longer supported [ 422.729908][ T9230] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 422.737894][ T9230] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 423.329823][ T9230] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 423.337756][ T9230] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 424.188081][ T29] audit: type=1326 audit(1730545323.587:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.1.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 424.210430][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.388850][ T29] audit: type=1326 audit(1730545323.587:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.1.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 424.488647][ T9254] loop3: detected capacity change from 0 to 1024 [ 424.512062][ T9254] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 424.521797][ T9254] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 424.533935][ T9254] EXT4-fs (loop3): invalid journal inode [ 424.539747][ T9254] EXT4-fs (loop3): can't get journal size [ 424.769330][ T9254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 424.782983][ T9254] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.920095][ T9264] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 426.669384][ T9273] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 428.324684][ T9285] F2FS-fs (loop7): Unable to read 1th superblock [ 428.331233][ T9285] F2FS-fs (loop7): Unable to read 2th superblock [ 429.352250][ T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 430.020269][ T9308] VFS: could not find a valid V7 on nullb0. [ 430.190182][ T29] audit: type=1326 audit(1730545329.657:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9302 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1077e719 code=0x7ffc0000 [ 430.490373][ T29] audit: type=1326 audit(1730545329.657:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9302 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1077e719 code=0x7ffc0000 [ 431.073829][ T25] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 431.088195][ T25] usb 6-1: can't read configurations, error -71 [ 431.438889][ T9323] netlink: 'syz.3.809': attribute type 9 has an invalid length. [ 431.683607][ T9323] bond_slave_0: entered promiscuous mode [ 431.689789][ T9323] bond_slave_1: entered promiscuous mode [ 431.726904][ T9326] loop4: detected capacity change from 0 to 1024 [ 431.746586][ T9323] macvlan2: entered promiscuous mode [ 431.751970][ T9323] bond0: entered promiscuous mode [ 431.763456][ T9326] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 431.773241][ T9326] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 431.784429][ T9326] EXT4-fs (loop4): invalid journal inode [ 431.790144][ T9326] EXT4-fs (loop4): can't get journal size [ 431.807430][ T9326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 431.820606][ T9326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.998987][ T9323] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 432.552341][ T9334] ceph: No mds server is up or the cluster is laggy [ 432.598467][ T5890] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 432.783855][ T5890] usb 4-1: device descriptor read/64, error -71 [ 433.146792][ T29] audit: type=1326 audit(1730545332.677:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 433.444121][ T29] audit: type=1326 audit(1730545332.677:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 434.319453][ T5890] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 434.561647][ T9361] VFS: could not find a valid V7 on nullb0. [ 434.582597][ T29] audit: type=1326 audit(1730545334.107:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 434.604845][ C1] vkms_vblank_simulate: vblank timer overrun [ 435.097730][ T29] audit: type=1326 audit(1730545334.107:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 435.119940][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.062945][ T5890] usb 4-1: device descriptor read/64, error -71 [ 436.174103][ T5890] usb usb4-port1: attempt power cycle [ 437.630804][ T9393] netlink: 92 bytes leftover after parsing attributes in process `syz.5.824'. [ 437.648476][ T29] audit: type=1326 audit(1730545337.177:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.5.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff568d7e719 code=0x7ffc0000 [ 437.701486][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.779851][ T5925] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 438.433257][ T29] audit: type=1326 audit(1730545337.177:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.5.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff568d7e719 code=0x7ffc0000 [ 438.449047][ T7365] Bluetooth: hci2: Frame reassembly failed (-84) [ 438.470219][ T9392] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 439.692868][ T9417] VFS: could not find a valid V7 on nullb0. [ 439.767193][ T29] audit: type=1326 audit(1730545339.237:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.5.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff568d7e719 code=0x7ffc0000 [ 440.113885][ T29] audit: type=1326 audit(1730545339.237:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.5.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff568d7e719 code=0x7ffc0000 [ 440.360831][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.367648][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.444002][ T5845] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 442.459994][ T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 442.686584][ T8] usb 6-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 442.696260][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.892962][ T8] usb 6-1: config 0 descriptor?? [ 443.356455][ T8] usb-storage 6-1:0.0: USB Mass Storage device detected [ 443.435660][ T9455] VFS: could not find a valid V7 on nullb0. [ 443.443307][ T9455] netlink: 92 bytes leftover after parsing attributes in process `syz.2.840'. [ 443.509149][ T29] audit: type=1326 audit(1730545343.037:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9444 comm="syz.2.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1077e719 code=0x7ffc0000 [ 443.588545][ T29] audit: type=1326 audit(1730545343.037:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9444 comm="syz.2.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1077e719 code=0x7ffc0000 [ 444.525361][ T29] audit: type=1326 audit(1730545344.037:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.1.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 444.547904][ T29] audit: type=1326 audit(1730545344.037:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.1.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08177e719 code=0x7ffc0000 [ 444.570083][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.157270][ T9437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.373513][ T9437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.590483][ T9478] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 446.859478][ T5922] usb 6-1: USB disconnect, device number 6 [ 447.050857][ T9486] netlink: 'syz.1.850': attribute type 14 has an invalid length. [ 448.155834][ T9500] loop1: detected capacity change from 0 to 1024 [ 448.178902][ T9500] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 448.188573][ T9500] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 448.200276][ T9500] EXT4-fs (loop1): invalid journal inode [ 448.206379][ T9500] EXT4-fs (loop1): can't get journal size [ 448.260859][ T9500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 448.274679][ T9500] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.608297][ T5158] Bluetooth: hci2: command 0x1003 tx timeout [ 448.615913][ T5845] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 449.378131][ T9521] VFS: could not find a valid V7 on nullb0. [ 449.385521][ T9521] netlink: 92 bytes leftover after parsing attributes in process `syz.5.857'. [ 449.993553][ T29] audit: type=1326 audit(1730545348.927:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9512 comm="syz.5.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff568d7e719 code=0x7ffc0000 [ 450.022956][ T29] audit: type=1326 audit(1730545348.927:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9512 comm="syz.5.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff568d7e719 code=0x7ffc0000 [ 450.491816][ T9515] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 451.898774][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.864'. [ 452.314837][ T9539] VFS: could not find a valid V7 on nullb0. [ 452.322348][ T9539] netlink: 92 bytes leftover after parsing attributes in process `syz.4.862'. [ 452.346260][ T29] audit: type=1326 audit(1730545351.867:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.4.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 452.368929][ T29] audit: type=1326 audit(1730545351.867:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.4.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 452.394517][ T9538] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.544103][ T5922] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 453.001887][ T9538] bridge_slave_1 (unregistering): left allmulticast mode [ 453.009413][ T9538] bridge_slave_1 (unregistering): left promiscuous mode [ 453.023408][ T9538] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.920101][ T5922] usb 6-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 453.929224][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.938410][ T5922] usb 6-1: config 0 descriptor?? [ 453.977336][ T9555] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 454.201924][ T9560] loop1: detected capacity change from 0 to 1024 [ 454.211805][ T5922] usb 6-1: can't set config #0, error -71 [ 454.218653][ T5922] usb 6-1: USB disconnect, device number 7 [ 454.975407][ T9560] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 454.985190][ T9560] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 455.001619][ T9560] EXT4-fs (loop1): invalid journal inode [ 455.007817][ T9560] EXT4-fs (loop1): can't get journal size [ 455.165365][ T9560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 455.179111][ T9560] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.188964][ T5845] Bluetooth: hci2: command 0x1003 tx timeout [ 456.681789][ T9573] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 456.830875][ T5158] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 458.005717][ T9603] VFS: could not find a valid V7 on nullb0. [ 458.013213][ T9603] netlink: 92 bytes leftover after parsing attributes in process `syz.5.880'. [ 458.025898][ T29] audit: type=1326 audit(1730545357.557:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff568d7e719 code=0x7ffc0000 [ 458.061409][ T29] audit: type=1326 audit(1730545357.557:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff568d7e719 code=0x7ffc0000 [ 458.121908][ T9607] sctp: [Deprecated]: syz.4.882 (pid 9607) Use of struct sctp_assoc_value in delayed_ack socket option. [ 458.121908][ T9607] Use struct sctp_sack_info instead [ 458.793865][ T5925] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 459.189694][ T9614] loop2: detected capacity change from 0 to 1024 [ 459.315141][ T9614] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 459.325849][ T9614] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 459.393995][ T9614] EXT4-fs (loop2): invalid journal inode [ 459.399854][ T9614] EXT4-fs (loop2): can't get journal size [ 459.879396][ T5925] usb 4-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 459.888707][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.900071][ T5925] usb 4-1: config 0 descriptor?? [ 460.057678][ T5925] usb-storage 4-1:0.0: USB Mass Storage device detected [ 460.095148][ T9614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 460.108798][ T9614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.542433][ T9598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.551086][ T9598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.789623][ T9631] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 461.776234][ T63] Bluetooth: hci2: Frame reassembly failed (-84) [ 462.614781][ T9634] ceph: No mds server is up or the cluster is laggy [ 462.776928][ T5925] usb 4-1: USB disconnect, device number 11 [ 463.286350][ T5845] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 464.027687][ T9652] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 464.036577][ T9652] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 464.045395][ T9652] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 464.053243][ T9652] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 467.017016][ T9681] loop1: detected capacity change from 0 to 64 [ 468.102720][ T9687] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 468.166657][ T9689] netlink: 24 bytes leftover after parsing attributes in process `syz.3.905'. [ 469.544065][ T5925] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 470.205234][ T5845] Bluetooth: hci2: command 0x1003 tx timeout [ 470.212336][ T5158] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 472.058153][ T5925] usb 6-1: unable to read config index 0 descriptor/all [ 472.066659][ T5925] usb 6-1: can't read configurations, error -71 [ 473.779744][ T9737] loop2: detected capacity change from 0 to 64 [ 473.916409][ T9738] loop5: detected capacity change from 0 to 64 [ 476.369381][ T9758] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 477.276114][ T5158] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 479.638210][ T9790] loop1: detected capacity change from 0 to 64 [ 483.245807][ T9816] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 483.253776][ T9816] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 483.262445][ T9816] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 483.270620][ T9816] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 485.836352][ T9833] loop1: detected capacity change from 0 to 1024 [ 486.031592][ T9833] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 486.041870][ T9833] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 486.603223][ T7365] Bluetooth: hci2: Frame reassembly failed (-84) [ 486.616772][ T9833] EXT4-fs (loop1): invalid journal inode [ 486.622536][ T9833] EXT4-fs (loop1): can't get journal size [ 486.656499][ T9828] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 486.666698][ T9833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 486.680435][ T9833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.289076][ T9847] netlink: 92 bytes leftover after parsing attributes in process `syz.4.947'. [ 487.954586][ T29] audit: type=1326 audit(1730545642.840:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9841 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 487.978315][ T5158] Bluetooth: hci2: command 0x1003 tx timeout [ 488.016780][ T5845] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 488.339046][ T29] audit: type=1326 audit(1730545642.840:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9841 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869357e719 code=0x7ffc0000 [ 489.009975][ T9861] ceph: No mds server is up or the cluster is laggy [ 493.621426][ T9910] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 493.880744][ T9914] netlink: 92 bytes leftover after parsing attributes in process `syz.3.959'. [ 494.259487][ T29] audit: type=1326 audit(1730545649.430:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9907 comm="syz.3.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294917e719 code=0x7ffc0000 [ 494.304430][ T29] audit: type=1326 audit(1730545649.430:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9907 comm="syz.3.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294917e719 code=0x7ffc0000 [ 494.830174][ T9919] loop3: detected capacity change from 0 to 1024 [ 495.065589][ T9921] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 495.083067][ T9919] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 495.092928][ T9919] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 495.624273][ T9919] EXT4-fs (loop3): invalid journal inode [ 495.630034][ T9919] EXT4-fs (loop3): can't get journal size [ 495.733766][ T5845] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 495.743768][ T9919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 495.757358][ T9919] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.415565][ T9937] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 500.323830][ T9966] VFS: could not find a valid V7 on nullb0. [ 500.342567][ T9966] netlink: 92 bytes leftover after parsing attributes in process `syz.3.973'. [ 500.790767][ T29] audit: type=1326 audit(1730545655.900:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.3.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294917e719 code=0x7ffc0000 [ 500.895470][ T29] audit: type=1326 audit(1730545655.900:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.3.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294917e719 code=0x7ffc0000 [ 502.732048][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.739337][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.003907][ T9988] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 503.861730][ T9996] loop1: detected capacity change from 0 to 1024 [ 503.905933][ T9996] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 503.915615][ T9996] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 503.928546][ T9996] EXT4-fs (loop1): invalid journal inode [ 503.934531][ T9996] EXT4-fs (loop1): can't get journal size [ 503.969699][ T9999] loop2: detected capacity change from 0 to 1024 [ 503.975226][ T9996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 503.989130][ T9996] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.999242][ T9999] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 504.008846][ T9999] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 504.020327][ T9999] EXT4-fs (loop2): invalid journal inode [ 504.026058][ T9999] EXT4-fs (loop2): can't get journal size [ 504.058759][ T9999] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 504.075155][ T9999] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.763763][T10005] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 507.013768][T10006] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 509.837524][T10040] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 509.854854][T10040] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 509.913812][T10040] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 509.923751][T10040] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 511.077734][ T5845] Bluetooth: hci5: unexpected event for opcode 0x2042 [ 512.027166][T10057] loop4: detected capacity change from 0 to 1024 [ 512.763884][T10057] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 512.773502][T10057] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 512.786740][T10057] EXT4-fs (loop4): invalid journal inode [ 512.792427][T10057] EXT4-fs (loop4): can't get journal size [ 512.838822][T10057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 512.852034][T10057] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.335145][T10068] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 515.001170][T10080] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 515.091934][ T5845] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 515.100846][ T5845] Bluetooth: hci5: Injecting HCI hardware error event [ 515.110863][ T5158] Bluetooth: hci5: hardware error 0x00 [ 516.935739][T10098] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 516.943523][T10098] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 516.951901][T10098] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 516.959765][T10098] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 517.745614][ T5158] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 520.094158][T10113] loop3: detected capacity change from 0 to 1024 [ 520.125046][T10113] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 520.134856][T10113] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 520.145248][T10113] EXT4-fs (loop3): invalid journal inode [ 520.150979][T10113] EXT4-fs (loop3): can't get journal size [ 520.159751][T10113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 520.173754][T10113] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.929686][T10120] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 521.164059][ T5925] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 521.505239][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 521.571852][ T5925] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 521.630556][ T5925] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 521.688438][ T5925] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 521.751349][ T5925] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 521.838976][ T5925] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 521.897394][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.177261][ T5925] usbtmc 5-1:16.0: bulk endpoints not found [ 522.240265][T10134] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 523.201425][T10140] F2FS-fs (loop7): Unable to read 1th superblock [ 523.208110][T10140] F2FS-fs (loop7): Unable to read 2th superblock [ 523.504713][ T9] usb 5-1: USB disconnect, device number 19 [ 525.701428][ T5158] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 525.716918][ T5158] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 525.723986][T10161] loop1: detected capacity change from 0 to 1024 [ 525.732514][T10161] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 525.742412][T10161] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 525.754832][ T5158] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 525.755724][T10161] EXT4-fs (loop1): invalid journal inode [ 525.764194][ T5158] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 525.767630][T10161] EXT4-fs (loop1): can't get journal size [ 525.782515][ T5158] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 525.790461][ T5158] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 525.845735][T10161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 525.859752][T10161] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.340345][T10158] chnl_net:caif_netlink_parms(): no params data found [ 527.258272][T10177] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 527.877933][T10184] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 528.090618][T10158] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.131305][T10158] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.153466][T10158] bridge_slave_0: entered allmulticast mode [ 528.356379][T10196] sctp: [Deprecated]: syz.1.1028 (pid 10196) Use of struct sctp_assoc_value in delayed_ack socket option. [ 528.356379][T10196] Use struct sctp_sack_info instead [ 529.128053][ T5845] Bluetooth: hci2: command tx timeout [ 529.137026][T10158] bridge_slave_0: entered promiscuous mode [ 529.152013][T10158] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.159622][T10158] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.166938][T10158] bridge_slave_1: entered allmulticast mode [ 529.173999][T10158] bridge_slave_1: entered promiscuous mode [ 529.415593][T10158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.427784][T10158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.095492][T10158] team0: Port device team_slave_0 added [ 530.167895][T10158] team0: Port device team_slave_1 added [ 530.339770][T10158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.361240][T10158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.428886][T10158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.115947][T10158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.122937][T10158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.153769][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 531.174497][ T5845] Bluetooth: hci2: command tx timeout [ 531.274548][T10158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.366839][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 531.546902][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 531.559155][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 531.572320][ T8] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 531.584116][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 531.598812][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 531.608904][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.870833][ T8] usbtmc 2-1:16.0: bulk endpoints not found [ 531.886619][ T5158] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 532.068747][ T5158] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 532.091363][ T5158] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 532.105829][ T5158] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 532.118157][ T5158] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 532.127501][ T5158] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 532.348044][T10158] hsr_slave_0: entered promiscuous mode [ 532.413343][T10158] hsr_slave_1: entered promiscuous mode [ 532.474232][T10158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 532.483463][T10158] Cannot create hsr debugfs directory [ 532.688105][T10222] loop4: detected capacity change from 0 to 1024 [ 532.695533][T10222] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 532.705245][T10222] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 532.717664][T10222] EXT4-fs (loop4): invalid journal inode [ 532.723377][T10222] EXT4-fs (loop4): can't get journal size [ 532.741138][T10222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 532.754387][T10222] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.885585][ T5158] Bluetooth: hci2: command tx timeout [ 533.966713][T10229] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 534.141775][ T8] usb 2-1: USB disconnect, device number 13 [ 534.390416][ T5158] Bluetooth: hci6: command tx timeout [ 536.006973][ T5158] Bluetooth: hci2: command tx timeout [ 536.451586][ T5158] Bluetooth: hci6: command tx timeout [ 536.770751][T10158] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 536.880708][T10158] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 536.953605][T10158] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 538.185957][T10158] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 538.524750][ T5845] Bluetooth: hci6: command tx timeout [ 538.834143][T10270] loop3: detected capacity change from 0 to 1024 [ 538.843256][T10270] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 538.852943][T10270] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 538.866014][T10270] EXT4-fs (loop3): invalid journal inode [ 538.871827][T10270] EXT4-fs (loop3): can't get journal size [ 538.887342][T10270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 538.901003][T10270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.014173][ T8] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 539.190922][T10215] chnl_net:caif_netlink_parms(): no params data found [ 539.285765][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 539.463080][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 539.480514][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 539.867309][ T8] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 539.878224][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.891361][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 539.900717][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.912634][ T8] usbtmc 5-1:16.0: bulk endpoints not found [ 539.963470][T10279] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 540.107238][T10158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.733178][T10158] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.777533][ T5845] Bluetooth: hci6: command tx timeout [ 540.799292][T10290] xt_nat: multiple ranges no longer supported [ 540.945554][T10215] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.305824][T10215] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.314385][T10215] bridge_slave_0: entered allmulticast mode [ 541.327249][T10215] bridge_slave_0: entered promiscuous mode [ 541.342910][T10215] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.350740][T10215] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.359095][T10215] bridge_slave_1: entered allmulticast mode [ 541.371491][T10215] bridge_slave_1: entered promiscuous mode [ 541.706744][T10158] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 541.844237][T10158] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 542.033162][T10215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.050785][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.057927][ T5937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.454251][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.461391][ T5937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.566508][ T5891] usb 5-1: USB disconnect, device number 20 [ 542.601492][T10215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.818741][T10215] team0: Port device team_slave_0 added [ 542.863258][T10215] team0: Port device team_slave_1 added [ 543.880304][T10314] [ 543.882649][T10314] ====================================================== [ 543.889650][T10314] WARNING: possible circular locking dependency detected [ 543.896664][T10314] 6.12.0-rc5-next-20241101-syzkaller #0 Not tainted [ 543.903240][T10314] ------------------------------------------------------ [ 543.910239][T10314] syz.3.1056/10314 is trying to acquire lock: [ 543.916282][T10314] ffff88806ba233e0 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaa/0x120 [ 543.925171][T10314] [ 543.925171][T10314] but task is already holding lock: [ 543.932513][T10314] ffff888142f9ccd0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0xb0/0x1e0 [ 543.941813][T10314] [ 543.941813][T10314] which lock already depends on the new lock. [ 543.941813][T10314] [ 543.952211][T10314] [ 543.952211][T10314] the existing dependency chain (in reverse order) is: [ 543.961232][T10314] [ 543.961232][T10314] -> #2 (&q->debugfs_mutex){+.+.}-{4:4}: [ 543.969054][T10314] lock_acquire+0x1ed/0x550 [ 543.974076][T10314] __mutex_lock+0x1ac/0xee0 [ 543.979093][T10314] blk_mq_init_sched+0x3fa/0x830 [ 543.984541][T10314] elevator_init_mq+0x1d8/0x2d0 [ 543.989906][T10314] add_disk_fwnode+0x10d/0xf80 [ 543.995182][T10314] sd_probe+0xba6/0x1100 [ 543.999933][T10314] really_probe+0x2b8/0xad0 [ 544.004952][T10314] __driver_probe_device+0x1a2/0x390 [ 544.010754][T10314] driver_probe_device+0x50/0x430 [ 544.016298][T10314] __device_attach_driver+0x2d6/0x530 [ 544.022186][T10314] bus_for_each_drv+0x24e/0x2e0 [ 544.027555][T10314] __device_attach_async_helper+0x22d/0x300 [ 544.033972][T10314] async_run_entry_fn+0xa8/0x420 [ 544.039430][T10314] process_scheduled_works+0xa63/0x1850 [ 544.045508][T10314] worker_thread+0x870/0xd30 [ 544.050615][T10314] kthread+0x2f0/0x390 [ 544.055195][T10314] ret_from_fork+0x4b/0x80 [ 544.060127][T10314] ret_from_fork_asm+0x1a/0x30 [ 544.065410][T10314] [ 544.065410][T10314] -> #1 (&q->q_usage_counter(io)#66){++++}-{0:0}: [ 544.074013][T10314] lock_acquire+0x1ed/0x550 [ 544.079030][T10314] blk_mq_submit_bio+0x1510/0x2490 [ 544.084652][T10314] __submit_bio+0x2c2/0x560 [ 544.089668][T10314] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 544.095813][T10314] __swap_writepage+0x5fc/0x1400 [ 544.101267][T10314] swap_writepage+0x8f4/0xf70 [ 544.106459][T10314] shrink_folio_list+0x3c0e/0x8cc0 [ 544.112086][T10314] reclaim_folio_list+0x13c/0x600 [ 544.117627][T10314] reclaim_pages+0x5b8/0x700 [ 544.122731][T10314] madvise_cold_or_pageout_pte_range+0x295a/0x32a0 [ 544.129745][T10314] walk_pgd_range+0xc3d/0x17e0 [ 544.135020][T10314] __walk_page_range+0x15f/0x700 [ 544.140469][T10314] walk_page_range_mm+0x58f/0x7c0 [ 544.146004][T10314] do_madvise+0x392b/0x4d80 [ 544.151017][T10314] __x64_sys_madvise+0xa6/0xc0 [ 544.156297][T10314] do_syscall_64+0xf3/0x230 [ 544.161310][T10314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.167724][T10314] [ 544.167724][T10314] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 544.175281][T10314] validate_chain+0x18ef/0x5920 [ 544.180643][T10314] __lock_acquire+0x1397/0x2100 [ 544.186001][T10314] lock_acquire+0x1ed/0x550 [ 544.191011][T10314] __might_fault+0xc6/0x120 [ 544.196028][T10314] _copy_from_user+0x2a/0xc0 [ 544.201135][T10314] blk_trace_setup+0xd2/0x1e0 [ 544.206330][T10314] sg_ioctl+0xa46/0x2e80 [ 544.211085][T10314] __se_sys_ioctl+0xf9/0x170 [ 544.216188][T10314] do_syscall_64+0xf3/0x230 [ 544.221201][T10314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.227611][T10314] [ 544.227611][T10314] other info that might help us debug this: [ 544.227611][T10314] [ 544.237826][T10314] Chain exists of: [ 544.237826][T10314] &mm->mmap_lock --> &q->q_usage_counter(io)#66 --> &q->debugfs_mutex [ 544.237826][T10314] [ 544.251905][T10314] Possible unsafe locking scenario: [ 544.251905][T10314] [ 544.259343][T10314] CPU0 CPU1 [ 544.264693][T10314] ---- ---- [ 544.270042][T10314] lock(&q->debugfs_mutex); [ 544.274628][T10314] lock(&q->q_usage_counter(io)#66); [ 544.282515][T10314] lock(&q->debugfs_mutex); [ 544.289619][T10314] rlock(&mm->mmap_lock); [ 544.294047][T10314] [ 544.294047][T10314] *** DEADLOCK *** [ 544.294047][T10314] [ 544.302200][T10314] 1 lock held by syz.3.1056/10314: [ 544.307306][T10314] #0: ffff888142f9ccd0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0xb0/0x1e0 [ 544.317068][T10314] [ 544.317068][T10314] stack backtrace: [ 544.322961][T10314] CPU: 0 UID: 0 PID: 10314 Comm: syz.3.1056 Not tainted 6.12.0-rc5-next-20241101-syzkaller #0 [ 544.333203][T10314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 544.343261][T10314] Call Trace: [ 544.346552][T10314] [ 544.349478][T10314] dump_stack_lvl+0x241/0x360 [ 544.354153][T10314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 544.359345][T10314] ? __pfx__printk+0x10/0x10 [ 544.363940][T10314] print_circular_bug+0x13a/0x1b0 [ 544.368974][T10314] check_noncircular+0x36a/0x4a0 [ 544.373913][T10314] ? __pfx_check_noncircular+0x10/0x10 [ 544.379365][T10314] ? lockdep_lock+0x123/0x2b0 [ 544.384042][T10314] validate_chain+0x18ef/0x5920 [ 544.388883][T10314] ? __pfx_lock_release+0x10/0x10 [ 544.393989][T10314] ? 0xffffffffa0006140 [ 544.398144][T10314] ? __pfx_validate_chain+0x10/0x10 [ 544.403335][T10314] ? kernel_text_address+0xa7/0xe0 [ 544.408441][T10314] ? __kernel_text_address+0xd/0x40 [ 544.413632][T10314] ? mark_lock+0x9a/0x360 [ 544.417951][T10314] ? __lock_acquire+0x1397/0x2100 [ 544.422994][T10314] ? mark_lock+0x9a/0x360 [ 544.427351][T10314] __lock_acquire+0x1397/0x2100 [ 544.432237][T10314] lock_acquire+0x1ed/0x550 [ 544.436756][T10314] ? __might_fault+0xaa/0x120 [ 544.441453][T10314] ? __pfx_lock_acquire+0x10/0x10 [ 544.446477][T10314] ? __pfx___might_resched+0x10/0x10 [ 544.451760][T10314] ? blk_trace_setup+0xb0/0x1e0 [ 544.456627][T10314] ? __pfx___mutex_lock+0x10/0x10 [ 544.461667][T10314] ? __pfx_lock_release+0x10/0x10 [ 544.466695][T10314] ? __might_fault+0xaa/0x120 [ 544.471392][T10314] __might_fault+0xc6/0x120 [ 544.475912][T10314] ? __might_fault+0xaa/0x120 [ 544.480593][T10314] _copy_from_user+0x2a/0xc0 [ 544.485187][T10314] blk_trace_setup+0xd2/0x1e0 [ 544.489865][T10314] ? __lock_acquire+0x1397/0x2100 [ 544.494884][T10314] ? __pfx_blk_trace_setup+0x10/0x10 [ 544.500190][T10314] sg_ioctl+0xa46/0x2e80 [ 544.504444][T10314] ? __pfx_sg_ioctl+0x10/0x10 [ 544.509123][T10314] ? __fget_files+0x2a/0x410 [ 544.513716][T10314] ? __fget_files+0x2a/0x410 [ 544.518307][T10314] ? __pfx_sg_ioctl+0x10/0x10 [ 544.522978][T10314] __se_sys_ioctl+0xf9/0x170 [ 544.527569][T10314] do_syscall_64+0xf3/0x230 [ 544.532067][T10314] ? clear_bhb_loop+0x35/0x90 [ 544.536742][T10314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.542726][T10314] RIP: 0033:0x7f294917e719 [ 544.547130][T10314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.566832][T10314] RSP: 002b:00007f2949fae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.575262][T10314] RAX: ffffffffffffffda RBX: 00007f2949335f80 RCX: 00007f294917e719 [ 544.583240][T10314] RDX: 0000000020000540 RSI: 00000000c0481273 RDI: 0000000000000006 [ 544.591212][T10314] RBP: 00007f29491f132e R08: 0000000000000000 R09: 0000000000000000 [ 544.599178][T10314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.607148][T10314] R13: 0000000000000000 R14: 00007f2949335f80 R15: 00007ffe0e5d9218 [ 544.615125][T10314] [ 544.625208][T10318] sctp: [Deprecated]: syz.4.1057 (pid 10318) Use of struct sctp_assoc_value in delayed_ack socket option. [ 544.625208][T10318] Use struct sctp_sack_info instead [ 544.650908][T10215] batman_adv: batadv0: Adding interface: batadv_slave_0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 544.659072][T10215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.686303][T10215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.700027][T10215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.707195][T10215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.739294][T10215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.390668][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.489960][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.547645][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.608428][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.738576][ T52] bridge_slave_1: left allmulticast mode [ 545.745218][ T52] bridge_slave_1: left promiscuous mode [ 545.750928][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.760022][ T52] bridge_slave_0: left allmulticast mode [ 545.765956][ T52] bridge_slave_0: left promiscuous mode [ 545.771737][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.878704][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.890545][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.905749][ T52] bond0 (unregistering): Released all slaves [ 546.149984][ T52] hsr_slave_0: left promiscuous mode [ 546.156136][ T52] hsr_slave_1: left promiscuous mode [ 546.161921][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.169499][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.178611][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.186213][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.194917][ T52] veth1_macvtap: left promiscuous mode [ 546.200396][ T52] veth0_macvtap: left promiscuous mode [ 546.206110][ T52] veth1_vlan: left promiscuous mode [ 546.211357][ T52] veth0_vlan: left promiscuous mode [ 546.333534][ T52] team0 (unregistering): Port device team_slave_1 removed [ 546.359490][ T52] team0 (unregistering): Port device team_slave_0 removed [ 546.811245][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.850906][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.917472][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.966989][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.037066][ T52] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.076813][ T52] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.147722][ T52] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.207948][ T52] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.291464][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.327553][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.397547][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.456605][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.539270][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.577603][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.637135][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.676975][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.747090][ T52] veth1_to_hsr: left allmulticast mode [ 547.753769][ T52] veth1_to_hsr: left promiscuous mode [ 547.759263][ T52] bridge0: port 3(veth1_to_hsr) entered disabled state [ 547.768347][ T52] bridge_slave_0: left allmulticast mode [ 547.774912][ T52] bridge_slave_0: left promiscuous mode [ 547.780566][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.789190][ T52] bridge_slave_1: left allmulticast mode [ 547.795063][ T52] bridge_slave_1: left promiscuous mode [ 547.800693][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.809615][ T52] bridge_slave_0: left allmulticast mode [ 547.815315][ T52] bridge_slave_0: left promiscuous mode [ 547.820940][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.829677][ T52] veth1_to_hsr: left allmulticast mode [ 547.835204][ T52] veth1_to_hsr: left promiscuous mode [ 547.840728][ T52] bridge0: port 3(veth1_to_hsr) entered disabled state [ 547.849061][ T52] bridge_slave_1: left allmulticast mode [ 547.855296][ T52] bridge_slave_1: left promiscuous mode [ 547.860941][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.868972][ T52] bridge_slave_0: left allmulticast mode [ 547.874798][ T52] bridge_slave_0: left promiscuous mode [ 547.880511][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.888944][ T52] bridge_slave_1: left allmulticast mode [ 547.895094][ T52] bridge_slave_1: left promiscuous mode [ 547.900719][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.908701][ T52] bridge_slave_0: left allmulticast mode [ 547.914543][ T52] bridge_slave_0: left promiscuous mode [ 547.920166][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.928532][ T52] bridge_slave_1: left allmulticast mode [ 547.934234][ T52] bridge_slave_1: left promiscuous mode [ 547.939856][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.948066][ T52] bridge_slave_0: left allmulticast mode [ 547.954760][ T52] bridge_slave_0: left promiscuous mode [ 547.960479][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.369036][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.379071][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.388569][ T52] bond0 (unregistering): Released all slaves [ 548.400970][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.411543][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.422321][ T52] bond0 (unregistering): Released all slaves [ 548.433404][ T52] bond0 (unregistering): left promiscuous mode [ 548.439755][ T52] bond_slave_0: left promiscuous mode [ 548.445356][ T52] bond_slave_1: left promiscuous mode [ 548.456347][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.467345][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.478043][ T52] bond0 (unregistering): Released all slaves [ 548.490622][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.500684][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.511476][ T52] bond0 (unregistering): Released all slaves [ 548.520293][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.530234][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.539661][ T52] bond0 (unregistering): Released all slaves [ 549.100595][ T52] hsr_slave_0: left promiscuous mode [ 549.106541][ T52] hsr_slave_1: left promiscuous mode [ 549.112545][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.120041][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.127636][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.135151][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.146404][ T52] hsr_slave_0: left promiscuous mode [ 549.152221][ T52] hsr_slave_1: left promiscuous mode [ 549.158258][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.166007][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.173648][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.181153][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.191014][ T52] hsr_slave_0: left promiscuous mode [ 549.196945][ T52] hsr_slave_1: left promiscuous mode [ 549.202670][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.210128][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.217976][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.225531][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.235934][ T52] hsr_slave_0: left promiscuous mode [ 549.241594][ T52] hsr_slave_1: left promiscuous mode [ 549.247406][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.254901][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.262497][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.270007][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.277858][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.285771][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.297343][ T52] veth1_macvtap: left promiscuous mode [ 549.302819][ T52] veth0_macvtap: left promiscuous mode [ 549.308532][ T52] veth1_vlan: left promiscuous mode [ 549.313917][ T52] veth0_vlan: left promiscuous mode [ 549.319753][ T52] veth1_macvtap: left promiscuous mode [ 549.325646][ T52] veth0_macvtap: left promiscuous mode [ 549.331169][ T52] veth1_vlan: left promiscuous mode [ 549.336565][ T52] veth0_vlan: left promiscuous mode [ 549.342501][ T52] veth1_macvtap: left promiscuous mode [ 549.348042][ T52] veth0_macvtap: left promiscuous mode [ 549.353542][ T52] veth1_vlan: left promiscuous mode [ 549.358881][ T52] veth0_vlan: left promiscuous mode [ 549.364775][ T52] veth1_macvtap: left promiscuous mode [ 549.370249][ T52] veth0_macvtap: left promiscuous mode [ 549.375935][ T52] veth1_vlan: left promiscuous mode [ 549.381184][ T52] veth0_vlan: left promiscuous mode [ 549.571286][ T52] team0 (unregistering): Port device team_slave_1 removed [ 549.596649][ T52] team0 (unregistering): Port device team_slave_0 removed [ 549.752833][ T52] team0 (unregistering): Port device team_slave_1 removed [ 549.765798][ T52] team0 (unregistering): Port device team_slave_0 removed [ 549.930915][ T52] team0 (unregistering): Port device team_slave_1 removed [ 549.953786][ T52] team0 (unregistering): Port device team_slave_0 removed [ 550.128854][ T52] team0 (unregistering): Port device team_slave_1 removed [ 550.150642][ T52] team0 (unregistering): Port device team_slave_0 removed [ 550.257938][ T52] team0 (unregistering): Port device team_slave_1 removed [ 550.281530][ T52] team0 (unregistering): Port device team_slave_0 removed [ 551.311850][ T52] IPVS: stop unused estimator thread 0... [ 551.563622][ T52] bridge_slave_1: left allmulticast mode [ 551.569410][ T52] bridge_slave_1: left promiscuous mode [ 551.575516][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.583445][ T52] bridge_slave_0: left allmulticast mode [ 551.589603][ T52] bridge_slave_0: left promiscuous mode [ 551.595436][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.670742][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.680812][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.690466][ T52] bond0 (unregistering): Released all slaves [ 551.786602][ T52] hsr_slave_0: left promiscuous mode [ 551.792479][ T52] hsr_slave_1: left promiscuous mode [ 551.798462][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.806741][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.897402][ T52] team0 (unregistering): Port device team_slave_1 removed [ 551.920984][ T52] team0 (unregistering): Port device team_slave_0 removed