last executing test programs: 9m46.241154403s ago: executing program 0 (id=1): socket(0xa, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 9m44.450548298s ago: executing program 0 (id=8): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x2, 0xfffffffffffffff9, 0x2, 0x8001, 0x2, [0x7, 0x12ae1acd, 0x7, 0x28]}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) 9m40.209956328s ago: executing program 0 (id=15): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x1b, 0xffffffffffffffff, 0x1) r3 = socket$inet(0x2, 0xa, 0x400) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) 9m38.178097096s ago: executing program 0 (id=21): r0 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x402, &(0x7f0000000ac0)=ANY=[@ANYRES16=0x0], 0x1, 0x27a, &(0x7f0000000540)="$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") ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000140)) 9m37.097444492s ago: executing program 0 (id=24): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x86, 0xfff, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 9m35.926599448s ago: executing program 0 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, 0x0, 0x0) close(r3) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x88}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0x9) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 9m35.680822412s ago: executing program 32 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, 0x0, 0x0) close(r3) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x88}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0x9) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 3.747965557s ago: executing program 3 (id=1834): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000000f", @ANYRES8=r1], 0x3c}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 3.669748448s ago: executing program 3 (id=1835): gettid() syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000005e00), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20281e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x509, &(0x7f00000008c0)="$eJzs3c1PXGsZAPBnhq+By71wr3ehRr31erXeNB1gekuaLrSujDFNjF1q0iJMCWGGIcxQC9aE/g8mNnGjLv0DXHfl3o3RnZu6MPGD2JQmLo45ZwY6hZmC5WMI8/slJ+e85xzmeV7oeV94KPMG0LcuRcRWRAxHxL2ImGidz7W2uNXc0vtebD+a39l+NJ+LJLnzr1x2PT0XbR+Teqf1moWI+OF3I36SOxi3vrG5PFeplNeazdGpRnV1qr6xeXWpOrdYXiyvlEqzM7PTN65dL51YXz+qDreOvvzsj1uf/ixNa7x1pr0fJ6nZ9aG9OKnBiPj+aQTrgYFWf4Z7nQhvJR8RH0TEx9nzPxED2VfzoF+feWYAwGlJkolIJtrbAMBFl89qYLl8sVkL+Pl45PPFYrOG92GM5Su1euPK/dr6ykKzVjYZQ/n7S5XydKtWOBlDubQ9kx2/apf2ta9FxPsR8YuR0axdnK9VFnr5jQ8A9LF3Xp//4/lIc/4HAC64Qq8TAADOnPkfAPqP+R8A+o/5HwD6j/kfAPqP+R8A+o/5HwD6yg9u3063ZKf1/tcLDzbWl2sPri6U68vF6vp8cb62tlpcrNUWs/fsqR72epVabXXms1h/OPmt1Xpjqr6xebdaW19p3M3e1/tueehMegUAvMn7Hz39Sy4itm6OZlu0reVgroaLLd/rBICeGeh1AkDPdF7tC+gHx/gZX3kALogOS/S+phARo/tPJkmSnF5KwCm7/AX1f+hXbfV//wsY+oz6P/Qv9X/oX0mSO+qa/3HUGwGA802NH+jy+/8PWvvftX458OOF/Xc8Oc2sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbXf+32FoLfDzy+WIx4t2ImIyh3P2lSnk6It6LiD+PDI2k7Zke5wwAHFf+77nW+l+XJz4Z3391OPdyJNtHxE9/deeXD+cajbU/pef/vXe+8aR1vtSL/AGAw+zO09m+7Qf5F9uP5ne3s8znH9+JiEIz/s72cOzsxR+MwWxfiKGIGPtPrtVuyrXVLo5j63FEfL5T/3MxntVAmiuf7o+fxn73hOKPdvz874+ffy1+PrvW3Kefi8+dQC7Qb56m48+tTs9fPi5l+87PfyEboY6vNf6lLzW/k42Br+Lvjn8DXca/S0eN8dkfvtc8Gj147XHEFwcjdmPvtI0/u/FzXeJ/csT4f/3SVz7udi35TcTl6By/PdZUo7o6Vd/YvLpUnVssL5ZXSqXZmdnpG9eul6ayGvVU99ngnzevvNch8l7/x7rELxzS/68fsf+//e+9H321y7U0/je/1il+Pj58Q/x0TvzGEePPjf2+0O1aGn+hS/8P+/pfOWL8Z3/bPLBsOADQO/WNzeW5SqW8dpYHu99IvPnmT58nmV5k6OB8HqT/as5BGh0Pvn1WsYbj//qoJHmrWN1GjJOougHnwd5DHxEve50MAAAAAAAAAAAAAADQ0Vn8xVKv+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDF9b8AAAD//2eR1JI=") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x85}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) 3.494383051s ago: executing program 5 (id=1839): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0xe) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x509, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x0, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}}, 0x0) 3.474514131s ago: executing program 2 (id=1840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x7, 0x84) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x8000, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) 3.207496795s ago: executing program 5 (id=1843): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) read$FUSE(r2, &(0x7f0000001c80)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x40, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8a}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r9, 0x0, 0x80, 0x5, 0x9, 0x1, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xe, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_SET_TIME(r10, 0x4024700a, &(0x7f0000000000)={0x3a, 0x20, 0x14, 0x18, 0x9, 0x1063, 0x4, 0xf5, 0x1}) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003cc0)={0x8a0, r11, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x878, 0x8, 0x0, 0x1, [{0x874, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0xfe}}]}]}, @WGPEER_A_ALLOWEDIPS={0x428, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x6}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e0e5b783df206249764e8941ed6da4a450a7d9efce8f13c7816db691057a03aa"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010101}}, @WGPEER_A_ALLOWEDIPS={0x3a0, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fd5fa8ff33bbee42e087eb3df2705e619af06a3fdfac26a836382cecd9d2a103"}]}]}]}, 0x8a0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 2.367961787s ago: executing program 2 (id=1846): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000280)=[{0x4, 0x5, 0x3, 0x5}, {0x8, 0xf, 0x6, 0x1}, {0x8, 0x8, 0x6}]}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) 2.316744147s ago: executing program 5 (id=1848): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x54, r1, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x6}, @broadcast, @device_b, @from_mac=@device_b, {0x8, 0xd}, "", @value={0x7, 0x1, 0x1, 0x0, 0x5}, @value=@ver_80211n={0x0, 0x37e8, 0x1, 0x1, 0x0, 0x1}}, @a_msdu}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6005}]}, 0x54}}, 0x0) 2.261524098s ago: executing program 4 (id=1849): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x4c, r1, 0x1, 0x70bd25, 0x25df5bfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40c4}, 0x40800) 2.14478346s ago: executing program 5 (id=1851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8faa"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0) 2.14416928s ago: executing program 2 (id=1852): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14c, r5, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x128, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x7}, @broadcast, @device_a, @from_mac=@device_b, {0x1}}, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x24}, @val={0x2d, 0x1a, {0x1000, 0x0, 0x0, 0x0, {0x8, 0x8, 0x0, 0xf, 0x0, 0x1, 0x1}, 0x800, 0xf0000000, 0x6}}, @void, [{0xdd, 0x1d, "9acefee96291ef53d5d06905d7ab962c86d9b3f3ab0c340650ad6bf1fa"}, {0xdd, 0x6, "327c2866c16b"}, {0xdd, 0x6, "582575b94c22"}, {0xdd, 0x4e, "2ddd9428dc5697222918bc2c6f98cd9fdf4c37f29a7b1783d82568c2eb70e21ad5a3460785c8ad48b1366173a1d9a000303f8e084bd177df270e6cacaf399cf969664590639fc5e155ab8d3857a1"}, {0xdd, 0x6, "e96a4500873d"}, {0xdd, 0x5c, "feb80d1a33a9a281099da54b1b47c3c54903e77e65426b6e69f271b810b8f7dc32719dc8f8c771c5b7b99bddca593f0f6dc142946d22cae9c28b38fd92edd83d1526bf3d1a2ee25c3b4d93e38fa3230d1a60d775be1523be96db3935"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) 2.003982212s ago: executing program 4 (id=1853): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}]}}}]}, 0x38}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='rose0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x4000) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, 0x0, 0x20008000) 2.003038092s ago: executing program 5 (id=1854): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, &(0x7f0000000340), 0x1000000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x40000000000000}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000006c0)={{0xa, 0x4e24, 0x2ea, @private1, 0x4}, {0xa, 0x4e22, 0x1, @local, 0x5}, 0x1, {[0x9, 0x1ff, 0x8, 0x2, 0x1c8, 0x2, 0x5, 0x29b]}}, 0x5c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.001952242s ago: executing program 1 (id=1855): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) 1.976078732s ago: executing program 3 (id=1856): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) read$FUSE(r2, &(0x7f0000001c80)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x40, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8a}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r9, 0x0, 0x80, 0x5, 0x9, 0x1, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xe, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_SET_TIME(r10, 0x4024700a, &(0x7f0000000000)={0x3a, 0x20, 0x14, 0x18, 0x9, 0x1063, 0x4, 0xf5, 0x1}) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003cc0)={0x7cc, r11, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x7a4, 0x8, 0x0, 0x1, [{0x7a0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0xfe}}]}]}, @WGPEER_A_ALLOWEDIPS={0x40c, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x6}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e0e5b783df206249764e8941ed6da4a450a7d9efce8f13c7816db691057a03aa"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010101}}, @WGPEER_A_ALLOWEDIPS={0x2e8, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fd5fa8ff33bbee42e087eb3df2705e619af06a3fdfac26a836382cecd9d2a103"}]}]}]}, 0x7cc}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1.954332192s ago: executing program 2 (id=1857): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffd], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38010000100033060000000008000080fe800000000000000000000000000042fe8000000000000a000000000000000000000000000000000a00800000000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d232000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000001000000000000000000000000000000000000000000000500000000000000000000002000000000000000000000000001000000000000000000000000000000000000020000000000000002000400000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.876893593s ago: executing program 4 (id=1858): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b800000019000100000000f7ffffff00e000000200"/43, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff"], 0xb8}}, 0x4004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYRES16=r5, @ANYBLOB="0101000000", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x11, &(0x7f0000000540)=0x8, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c000280050001000000090024000280"], 0xa8}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000004400000008000300", @ANYRES32, @ANYBLOB="08002700851600000a00180000000000000000001c005a801800018014"], 0x4c}}, 0x4000804) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.667683477s ago: executing program 5 (id=1859): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) read$FUSE(r2, &(0x7f0000001c80)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x40, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8a}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r9, 0x0, 0x80, 0x5, 0x9, 0x1, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xe, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_SET_TIME(r10, 0x4024700a, &(0x7f0000000000)={0x3a, 0x20, 0x14, 0x18, 0x9, 0x1063, 0x4, 0xf5, 0x1}) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003cc0)={0x8a0, r11, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x878, 0x8, 0x0, 0x1, [{0x874, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0xfe}}]}]}, @WGPEER_A_ALLOWEDIPS={0x428, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x6}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e0e5b783df206249764e8941ed6da4a450a7d9efce8f13c7816db691057a03aa"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010101}}, @WGPEER_A_ALLOWEDIPS={0x3a0, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fd5fa8ff33bbee42e087eb3df2705e619af06a3fdfac26a836382cecd9d2a103"}]}]}]}, 0x8a0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1.167964314s ago: executing program 1 (id=1860): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x44, 0x0, 0x207, 0x0, 0x0, {0x4b}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 1.028477115s ago: executing program 3 (id=1861): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000400)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @null, @bpq0, 0x4, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, 0x0) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), 0x0}, 0x20) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}) 964.002787ms ago: executing program 4 (id=1862): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x44000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000005c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}, {&(0x7f0000000480)=""/175, 0xaf}], 0x3}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002a40)=""/4097, 0x1001}, {&(0x7f0000000640)=""/158, 0x9e}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000240)=""/114, 0x72}, {0x0}, {&(0x7f0000000900)=""/4104, 0x1008}, {&(0x7f0000000700)=""/200, 0xc8}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x10003}], 0x5, 0x40008062, 0x0) 893.910187ms ago: executing program 3 (id=1863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x70, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]]}, 0x70}}, 0x0) 874.623788ms ago: executing program 4 (id=1864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={&(0x7f0000008540)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x10000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x5801}, 0x0) 808.006018ms ago: executing program 1 (id=1865): socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000070006010200000000000000000200ffff200007800c00018008000140e000000208000a400000000205000300020000000900020073797a31000000000500010007000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x40c0080) 740.852199ms ago: executing program 3 (id=1866): gettid() syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000005e00), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20281e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x509, &(0x7f00000008c0)="$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") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x85}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) 586.744832ms ago: executing program 2 (id=1867): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x5a, 0x0, 0x1, 0x0, 0x25dfdbfd}, 0x14}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 484.036053ms ago: executing program 1 (id=1868): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050027bd7000080000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0400460005003400ef000000080051"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x488c0) 373.115855ms ago: executing program 1 (id=1869): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @null, @bpq0, 0x4, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, 0x0) 330.299146ms ago: executing program 2 (id=1870): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) 259.053216ms ago: executing program 1 (id=1871): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) read$FUSE(r2, &(0x7f0000001c80)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x40, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8a}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r9, 0x0, 0x80, 0x5, 0x9, 0x1, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xe, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_SET_TIME(r10, 0x4024700a, &(0x7f0000000000)={0x3a, 0x20, 0x14, 0x18, 0x9, 0x1063, 0x4, 0xf5, 0x1}) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003cc0)={0x7cc, r11, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x7a4, 0x8, 0x0, 0x1, [{0x7a0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0xfe}}]}]}, @WGPEER_A_ALLOWEDIPS={0x40c, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x6}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e0e5b783df206249764e8941ed6da4a450a7d9efce8f13c7816db691057a03aa"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010101}}, @WGPEER_A_ALLOWEDIPS={0x2e8, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fd5fa8ff33bbee42e087eb3df2705e619af06a3fdfac26a836382cecd9d2a103"}]}]}]}, 0x7cc}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 0s ago: executing program 4 (id=1872): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) kernel console output (not intermixed with test programs): : Mounted with checkpoint version = 48b305e5 [ 71.569717][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.576305][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.966532][ T4169] attempt to access beyond end of device [ 71.966532][ T4169] loop1: rw=2049, want=40968, limit=40427 [ 72.055557][ T4296] ======================================================= [ 72.055557][ T4296] WARNING: The mand mount option has been deprecated and [ 72.055557][ T4296] and is ignored by this kernel. Remove the mand [ 72.055557][ T4296] option from the mount to silence this warning. [ 72.055557][ T4296] ======================================================= [ 72.090629][ C0] vkms_vblank_simulate: vblank timer overrun [ 73.355255][ T4306] nfs4: Unknown parameter 'noa' [ 73.851486][ T4315] rdma_op ffff88807e9d31f0 conn xmit_rdma 0000000000000000 [ 74.105321][ T4319] loop2: detected capacity change from 0 to 512 [ 74.189988][ T4319] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.428049][ T4319] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.620662][ T4319] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 74.709395][ T4323] loop3: detected capacity change from 0 to 32768 [ 74.727291][ T4319] System zones: 1-12 [ 74.788024][ T4319] EXT4-fs (loop2): 1 truncate cleaned up [ 74.804362][ T4319] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,init_itable=0x000000007fffffff,debug,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 75.231679][ T4323] XFS (loop3): Mounting V5 Filesystem [ 75.737523][ T4342] loop0: detected capacity change from 0 to 128 [ 75.781518][ T4323] XFS (loop3): Ending clean mount [ 75.794490][ T4323] XFS (loop3): Quotacheck needed: Please wait. [ 75.893188][ T4323] XFS (loop3): Quotacheck: Done. [ 76.041707][ T4345] loop4: detected capacity change from 0 to 40427 [ 76.103088][ T4345] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 76.111110][ T4345] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 76.298079][ T4345] F2FS-fs (loop4): invalid crc value [ 76.428277][ T4345] F2FS-fs (loop4): Found nat_bits in checkpoint [ 76.499204][ T4345] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 76.506353][ T4345] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 76.710830][ T4352] loop2: detected capacity change from 0 to 1024 [ 76.724307][ T4184] XFS (loop3): Unmounting Filesystem [ 77.338519][ T4177] attempt to access beyond end of device [ 77.338519][ T4177] loop4: rw=2049, want=40968, limit=40427 [ 77.938412][ T4335] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.029667][ T4364] netlink: 'syz.3.23': attribute type 1 has an invalid length. [ 78.143093][ T4335] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.338597][ T4335] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.563641][ T4335] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.697574][ T3053] hfsplus: b-tree write err: -5, ino 3 [ 80.265267][ T4390] nfs4: Unknown parameter 'noa' [ 81.010718][ T4373] chnl_net:caif_netlink_parms(): no params data found [ 81.184155][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 81.489228][ T1110] cfg80211: failed to load regulatory.db [ 82.351295][ T4416] loop1: detected capacity change from 0 to 32768 [ 82.392055][ T4373] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.420963][ T4373] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.431569][ T4373] device bridge_slave_0 entered promiscuous mode [ 82.471269][ T4373] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.529727][ T4373] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.537961][ T4373] device bridge_slave_1 entered promiscuous mode [ 82.600437][ T4416] XFS (loop1): Mounting V5 Filesystem [ 82.753597][ T4416] XFS (loop1): Ending clean mount [ 82.762726][ T4416] XFS (loop1): Quotacheck needed: Please wait. [ 82.845152][ T4416] XFS (loop1): Quotacheck: Done. [ 83.272870][ T4373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.309794][ T4439] tap0: tun_chr_ioctl cmd 1074025677 [ 83.315555][ T4439] tap0: linktype set to 6 [ 83.591399][ T4373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.629926][ T1110] Bluetooth: hci3: command 0x041b tx timeout [ 83.681424][ T4169] XFS (loop1): Unmounting Filesystem [ 83.778944][ T4373] team0: Port device team_slave_0 added [ 83.816522][ T4373] team0: Port device team_slave_1 added [ 84.009246][ T4452] netlink: 'syz.4.41': attribute type 1 has an invalid length. [ 84.017490][ T4373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.032521][ T4373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.089169][ T4373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.140387][ T4373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.148368][ T4373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.232252][ T4373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.306690][ T4335] device hsr_slave_0 left promiscuous mode [ 84.328607][ T4335] device hsr_slave_1 left promiscuous mode [ 84.347107][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.388052][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.427269][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.444670][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.467033][ T4335] device bridge_slave_1 left promiscuous mode [ 84.504528][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.542770][ T4335] device bridge_slave_0 left promiscuous mode [ 84.563900][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.641123][ T4335] device veth1_macvtap left promiscuous mode [ 84.670398][ T4335] device veth0_macvtap left promiscuous mode [ 84.699316][ T4335] device veth1_vlan left promiscuous mode [ 84.721162][ T4335] device veth0_vlan left promiscuous mode [ 85.233192][ T4474] nfs4: Unknown parameter 'noa' [ 85.639465][ T4212] Bluetooth: hci3: command 0x040f tx timeout [ 86.664369][ T4476] loop2: detected capacity change from 0 to 65536 [ 87.024715][ T4476] XFS (loop2): Mounting V5 Filesystem [ 87.276362][ T4476] XFS (loop2): Ending clean mount [ 87.504852][ T4335] team0 (unregistering): Port device team_slave_1 removed [ 87.533720][ T4335] team0 (unregistering): Port device team_slave_0 removed [ 89.042942][ T4246] Bluetooth: hci3: command 0x0419 tx timeout [ 89.196883][ T23] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 89.356468][ T23] XFS (loop2): Unmount and run xfs_repair [ 89.513628][ T23] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 89.651627][ T23] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 89.693199][ T23] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 89.719260][ T23] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 89.734758][ T23] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 89.764193][ T23] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 89.783738][ T23] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 89.802994][ T23] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 89.822229][ T23] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 89.842814][ T4505] XFS (loop2): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 89.859948][ T4505] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x514/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 89.874697][ T4505] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 89.887088][ T4335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.956347][ T4335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.166660][ T4335] bond0 (unregistering): Released all slaves [ 90.196870][ T4170] XFS (loop2): Unmounting Filesystem [ 91.148606][ T4373] device hsr_slave_0 entered promiscuous mode [ 91.229969][ T4373] device hsr_slave_1 entered promiscuous mode [ 91.249213][ T4373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.278055][ T4373] Cannot create hsr debugfs directory [ 91.610080][ T4518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.53'. [ 92.110163][ T4526] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 92.119182][ T4526] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 92.599512][ T4538] netlink: 'syz.4.56': attribute type 1 has an invalid length. [ 94.839093][ C1] sched: RT throttling activated [ 94.858406][ T4373] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.155881][ T4373] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.284023][ T4373] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.351978][ T4373] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.775889][ T4577] loop4: detected capacity change from 0 to 40427 [ 97.543621][ T4373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.578899][ T4577] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 97.585974][ T4577] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 97.725782][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.128534][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.213839][ T4373] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.292018][ T4585] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 98.300984][ T4585] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 98.327466][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.056021][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.129786][ T4392] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.137046][ T4392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.608721][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.709622][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.729900][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.738698][ T4392] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.745828][ T4392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.762501][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.776139][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.797288][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.020368][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.567491][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.576545][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.595918][ T4373] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 101.646226][ T4373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.861838][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.864799][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 101.879320][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 101.888523][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 101.897621][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 101.906783][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 101.915916][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 101.925034][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 101.934159][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 101.943383][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 101.952572][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 102.060418][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.248197][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.428457][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.496091][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.504711][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.288827][ T4630] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 103.298474][ T4630] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 104.582042][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.634068][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.705396][ T4373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.304780][ T4699] loop1: detected capacity change from 0 to 2048 [ 109.873614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.899877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.013038][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.032445][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.117913][ T4373] device veth0_vlan entered promiscuous mode [ 110.156075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.188830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.227924][ T4699] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.294437][ T4373] device veth1_vlan entered promiscuous mode [ 110.345303][ T4713] netlink: 'syz.2.93': attribute type 13 has an invalid length. [ 110.359526][ T4713] device vcan0 entered promiscuous mode [ 110.550182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 110.558547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 110.621367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.683711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.848184][ T4373] device veth0_macvtap entered promiscuous mode [ 110.882874][ T4373] device veth1_macvtap entered promiscuous mode [ 112.295472][ T4373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.395433][ T4373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.509136][ T4373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.547617][ T4373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.579127][ T4373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.609146][ T4373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.653646][ T4373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.669988][ T4373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.727338][ T4744] loop2: detected capacity change from 0 to 512 [ 112.730512][ T4373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.750732][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.765708][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.785489][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.800866][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.825881][ T4744] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.851148][ T4373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.909121][ T4373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.975447][ T4373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.031764][ T4373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.041860][ T4373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.052837][ T4373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.066497][ T4373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.071708][ T4744] EXT4-fs (loop2): 1 truncate cleaned up [ 113.077455][ T4373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.105435][ T4373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.191327][ T4744] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.594798][ T4373] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.887513][ T4373] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.896580][ T4373] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.905335][ T4373] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.943312][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.973729][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.224751][ T4307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.269260][ T4307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.442908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 115.532897][ T4771] overlayfs: failed to resolve './file2': -2 [ 115.627108][ T4307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.781190][ T4307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.154701][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.468560][ T4795] loop3: detected capacity change from 0 to 32768 [ 119.328714][ T4816] rdma_op ffff88807be1e1f0 conn xmit_rdma 0000000000000000 [ 119.346696][ T4795] XFS (loop3): Mounting V5 Filesystem [ 119.802127][ T4837] overlayfs: failed to resolve './file2': -2 [ 120.919609][ T4795] XFS (loop3): Ending clean mount [ 120.927105][ T4795] XFS (loop3): Quotacheck needed: Please wait. [ 121.060265][ T4795] XFS (loop3): Quotacheck: Done. [ 121.129497][ T4849] loop4: detected capacity change from 0 to 512 [ 121.144043][ T4184] XFS (loop3): Unmounting Filesystem [ 121.173358][ T4849] EXT4-fs (loop4): Ignoring removed bh option [ 121.249524][ T4849] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 121.667305][ T4849] EXT4-fs (loop4): 1 truncate cleaned up [ 121.816227][ T4849] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,max_dir_size_kb=0x0000000000000003,bh,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 122.861621][ T4868] nfs4: Unknown parameter 'noa' [ 123.670561][ T4874] binder: 4860:4874 ioctl c0306201 0 returned -14 [ 124.213462][ T4883] loop3: detected capacity change from 0 to 2048 [ 124.724321][ T4883] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.268711][ T4899] rdma_op ffff88807543b1f0 conn xmit_rdma 0000000000000000 [ 126.165722][ T4184] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 128.601489][ T4920] loop3: detected capacity change from 0 to 32768 [ 129.339293][ T4928] loop1: detected capacity change from 0 to 40427 [ 129.981007][ T4928] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 129.982346][ T4920] XFS (loop3): Mounting V5 Filesystem [ 129.987991][ T4928] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 130.413066][ T4944] nfs4: Unknown parameter 'noa' [ 130.848912][ T4920] XFS (loop3): Ending clean mount [ 130.869766][ T4920] XFS (loop3): Quotacheck needed: Please wait. [ 131.097558][ T4920] XFS (loop3): Quotacheck: Done. [ 133.121457][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.127806][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.154344][ T4184] XFS (loop3): Unmounting Filesystem [ 133.324048][ T4966] loop1: detected capacity change from 0 to 512 [ 133.446833][ T4966] EXT4-fs (loop1): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 133.585630][ T4966] gfs2: gfs2 mount does not exist [ 133.987115][ T4973] loop4: detected capacity change from 0 to 4096 [ 134.944038][ T4973] ntfs3: loop4: MFT: r=2, expect seq=5 instead of 2! [ 135.353296][ T4993] rdma_op ffff88807e6739f0 conn xmit_rdma 0000000000000000 [ 136.775837][ T5008] loop3: detected capacity change from 0 to 40427 [ 138.021427][ T5008] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 138.028466][ T5008] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 138.630086][ T5013] loop3: detected capacity change from 0 to 32768 [ 138.847897][ T5013] XFS (loop3): Mounting V5 Filesystem [ 139.166887][ T5013] XFS (loop3): Ending clean mount [ 139.177675][ T5013] XFS (loop3): Quotacheck needed: Please wait. [ 140.234203][ T5013] XFS (loop3): Quotacheck: Done. [ 140.615349][ T5054] rdma_op ffff88807b38c1f0 conn xmit_rdma 0000000000000000 [ 141.757640][ T4184] XFS (loop3): Unmounting Filesystem [ 142.453056][ T5068] nfs4: Unknown parameter 'noa' [ 143.292913][ T5070] loop1: detected capacity change from 0 to 40427 [ 143.415833][ T5070] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 143.422960][ T5070] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 144.364132][ T5084] loop1: detected capacity change from 0 to 1024 [ 144.456911][ T5084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'. [ 144.773779][ T5089] loop5: detected capacity change from 0 to 512 [ 144.845235][ T5089] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 144.989725][ T5089] EXT4-fs (loop5): 1 truncate cleaned up [ 144.995501][ T5089] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.012526][ T5093] loop1: detected capacity change from 0 to 4096 [ 145.038929][ T5097] loop4: detected capacity change from 0 to 256 [ 145.507980][ T5097] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.649176][ T5097] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 145.703412][ T5097] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 145.724777][ T5093] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 146.406563][ T5110] loop5: detected capacity change from 0 to 32768 [ 147.611922][ T5132] nfs4: Unknown parameter 'noa' [ 148.030744][ T5136] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 148.039817][ T5136] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 148.307950][ T5110] XFS (loop5): Mounting V5 Filesystem [ 149.103090][ T5151] loop4: detected capacity change from 0 to 256 [ 149.967188][ T5157] loop4: detected capacity change from 0 to 512 [ 149.981467][ T5110] XFS (loop5): Ending clean mount [ 149.988303][ T5110] XFS (loop5): Quotacheck needed: Please wait. [ 150.061039][ T5110] XFS (loop5): Quotacheck: Done. [ 150.086961][ T4373] XFS (loop5): Unmounting Filesystem [ 150.180852][ T5157] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 150.264643][ T5157] EXT4-fs (loop4): 1 truncate cleaned up [ 150.279362][ T5157] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.887265][ T5174] netlink: 28 bytes leftover after parsing attributes in process `syz.5.186'. [ 150.905120][ T5174] HTB: quantum of class 80010010 is big. Consider r2q change. [ 150.979726][ T5160] loop3: detected capacity change from 0 to 32768 [ 151.032372][ T5160] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.183 (5160) [ 151.448293][ T5160] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 153.384917][ T5160] BTRFS info (device loop3): turning off barriers [ 153.549146][ T5160] BTRFS info (device loop3): setting nodatasum [ 153.615825][ T5160] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 153.719685][ T5160] BTRFS info (device loop3): use zstd compression, level 3 [ 153.813184][ T5160] BTRFS info (device loop3): using free space tree [ 153.869249][ T5160] BTRFS info (device loop3): has skinny extents [ 153.939210][ T5201] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 153.948205][ T5201] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 154.700119][ T5160] BTRFS error (device loop3): open_ctree failed: -12 [ 155.026471][ T5230] loop4: detected capacity change from 0 to 32768 [ 155.495976][ T5230] XFS (loop4): Mounting V5 Filesystem [ 156.018927][ T5230] XFS (loop4): Ending clean mount [ 156.894013][ T4359] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4359) [ 156.944290][ T5230] XFS (loop4): Quotacheck needed: Please wait. [ 157.352445][ T5230] XFS (loop4): Quotacheck: Done. [ 158.409511][ T5276] Zero length message leads to an empty skb [ 159.405978][ T5290] loop1: detected capacity change from 0 to 2048 [ 160.862547][ T5290] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.176641][ T5306] loop5: detected capacity change from 0 to 764 [ 161.342352][ T5306] rock: directory entry would overflow storage [ 161.348795][ T5306] rock: sig=0x4654, size=5, remaining=4 [ 161.494494][ T5306] rock: directory entry would overflow storage [ 161.521846][ T5306] rock: sig=0x4f50, size=4, remaining=3 [ 161.572195][ T5306] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 162.129628][ T5322] loop5: detected capacity change from 0 to 512 [ 162.204324][ T5322] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 162.455454][ T5327] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 162.464472][ T5327] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 162.708459][ T5322] EXT4-fs (loop5): 1 truncate cleaned up [ 162.714308][ T5322] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.843336][ T5349] loop1: detected capacity change from 0 to 128 [ 165.495423][ T4177] XFS (loop4): Unmounting Filesystem [ 167.854635][ T5384] loop3: detected capacity change from 0 to 512 [ 167.904384][ T5384] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 167.960959][ T5384] EXT4-fs (loop3): 1 truncate cleaned up [ 167.977035][ T5384] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.242466][ T5390] loop1: detected capacity change from 0 to 32768 [ 169.803448][ T5407] loop5: detected capacity change from 0 to 32768 [ 169.830069][ T5390] XFS (loop1): Mounting V5 Filesystem [ 171.093497][ T5422] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 171.150505][ T5390] XFS (loop1): log mount failed [ 171.841915][ T5407] XFS (loop5): Mounting V5 Filesystem [ 172.222541][ T5454] capability: warning: `syz.3.236' uses deprecated v2 capabilities in a way that may be insecure [ 172.614599][ T5407] XFS (loop5): Ending clean mount [ 172.623314][ T5407] XFS (loop5): Quotacheck needed: Please wait. [ 172.813803][ T5459] loop3: detected capacity change from 0 to 256 [ 172.936937][ T5407] XFS (loop5): Quotacheck: Done. [ 172.965098][ T4373] XFS (loop5): Unmounting Filesystem [ 172.971467][ T5459] exfat: Deprecated parameter 'namecase' [ 173.012208][ T5459] exfat: Deprecated parameter 'utf8' [ 173.385262][ T5459] exfat: Unknown parameter 'sys_tz' [ 175.351865][ T5485] loop1: detected capacity change from 0 to 32768 [ 177.435743][ T5502] loop3: detected capacity change from 0 to 40427 [ 177.669895][ T5502] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 177.676955][ T5502] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 177.706777][ T5485] XFS (loop1): Mounting V5 Filesystem [ 177.886992][ T5485] XFS (loop1): Ending clean mount [ 177.897625][ T5485] XFS (loop1): Quotacheck needed: Please wait. [ 177.989995][ T5485] XFS (loop1): Quotacheck: Done. [ 179.050899][ T5520] loop5: detected capacity change from 0 to 512 [ 179.133845][ T5520] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 179.163200][ T5520] EXT4-fs (loop5): 1 truncate cleaned up [ 179.163229][ T5520] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 179.269242][ T4169] XFS (loop1): Unmounting Filesystem [ 180.252063][ T5542] loop2: detected capacity change from 0 to 512 [ 180.299401][ T5540] loop5: detected capacity change from 0 to 1764 [ 180.332841][ T5542] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 180.417552][ T5542] EXT4-fs (loop2): 1 truncate cleaned up [ 180.478439][ T5542] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 180.805634][ T5557] loop1: detected capacity change from 0 to 32768 [ 181.498260][ T5557] XFS (loop1): Mounting V5 Filesystem [ 181.785736][ T5575] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 181.794812][ T5575] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 182.139217][ T5557] XFS (loop1): Ending clean mount [ 182.311077][ T5223] Process accounting resumed [ 182.869342][ T5557] XFS (loop1): Quotacheck needed: Please wait. [ 183.389500][ T5557] XFS (loop1): Quotacheck: Done. [ 183.873605][ T5588] loop2: detected capacity change from 0 to 32768 [ 184.554943][ T5597] loop5: detected capacity change from 0 to 40427 [ 185.014670][ T5593] loop4: detected capacity change from 0 to 512 [ 185.027698][ T4169] XFS (loop1): Unmounting Filesystem [ 185.068721][ T5597] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 185.075819][ T5597] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 185.126876][ T5593] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 185.476025][ T5588] XFS (loop2): Mounting V5 Filesystem [ 185.518118][ T5593] EXT4-fs (loop4): 1 truncate cleaned up [ 185.524385][ T5593] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 185.806755][ T5588] XFS (loop2): Ending clean mount [ 185.815201][ T5588] XFS (loop2): Quotacheck needed: Please wait. [ 186.273479][ T5588] XFS (loop2): Quotacheck: Done. [ 187.594872][ T4245] Bluetooth: hci0: command 0x0406 tx timeout [ 187.601234][ T4245] Bluetooth: hci1: command 0x0406 tx timeout [ 187.607309][ T4245] Bluetooth: hci4: command 0x0406 tx timeout [ 187.613428][ T4245] Bluetooth: hci2: command 0x0406 tx timeout [ 187.647891][ T4170] XFS (loop2): Unmounting Filesystem [ 189.650915][ T5675] loop5: detected capacity change from 0 to 2048 [ 189.744953][ T5675] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 189.982458][ T5684] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.016643][ T5681] loop4: detected capacity change from 0 to 32768 [ 190.224254][ T5675] syz.5.281 (5675) used greatest stack depth: 20144 bytes left [ 190.580468][ T5702] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 190.589667][ T5702] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 190.969419][ T5681] XFS (loop4): Mounting V5 Filesystem [ 192.027337][ T5712] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.757011][ T5681] XFS (loop4): Ending clean mount [ 192.767769][ T5681] XFS (loop4): Quotacheck needed: Please wait. [ 192.908532][ T5681] XFS (loop4): Quotacheck: Done. [ 193.057289][ T4177] XFS (loop4): Unmounting Filesystem [ 194.126363][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.135860][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.242797][ T5745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.295'. [ 195.110103][ T5758] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 195.119162][ T5758] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 195.419657][ T5761] input: syz1 as /devices/virtual/input/input5 [ 195.549519][ T5761] input: failed to attach handler evdev to device input5, error: -4 [ 197.418571][ T5774] loop5: detected capacity change from 0 to 40427 [ 197.494567][ T5774] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 197.501722][ T5774] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 200.194587][ T5806] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 200.203702][ T5806] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 206.567280][ T5843] loop1: detected capacity change from 0 to 164 [ 207.125614][ T5855] nfs4: Unknown parameter 'noa' [ 207.570963][ T5864] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 207.580024][ T5864] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 208.702367][ T5871] loop2: detected capacity change from 0 to 32768 [ 209.452240][ T5883] sctp: failed to load transform for md5: -2 [ 209.899888][ T5871] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 209.908661][ T5871] BTRFS info (device loop2): using free space tree [ 209.915271][ T5871] BTRFS info (device loop2): has skinny extents [ 210.933631][ T5871] BTRFS info (device loop2): enabling ssd optimizations [ 211.274236][ T5923] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 213.019816][ T5947] nfs4: Unknown parameter 'noa' [ 213.099807][ T5948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.341'. [ 213.286318][ T5946] loop1: detected capacity change from 0 to 32768 [ 213.438971][ T5946] XFS (loop1): Mounting V5 Filesystem [ 213.605826][ T5946] XFS (loop1): Ending clean mount [ 213.614173][ T5946] XFS (loop1): Quotacheck needed: Please wait. [ 214.294639][ T4359] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (4359) [ 214.314935][ T5946] XFS (loop1): Quotacheck: Done. [ 214.856271][ T5963] loop5: detected capacity change from 0 to 32768 [ 214.940523][ T5963] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.347 (5963) [ 215.151363][ T4169] XFS (loop1): Unmounting Filesystem [ 215.569528][ T5984] fuse: Unknown parameter 'group_i00000000000000000000' [ 215.647933][ T5963] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 215.780633][ T5963] BTRFS info (device loop5): setting nodatacow, compression disabled [ 215.918549][ T5963] BTRFS info (device loop5): force clearing of disk cache [ 216.097113][ T5963] BTRFS info (device loop5): enabling ssd optimizations [ 216.113414][ T5963] BTRFS info (device loop5): using spread ssd allocation scheme [ 216.149244][ T5963] BTRFS info (device loop5): doing ref verification [ 216.155899][ T5963] BTRFS info (device loop5): disabling free space tree [ 216.322216][ T5963] BTRFS info (device loop5): turning on sync discard [ 216.335352][ T5963] BTRFS info (device loop5): has skinny extents [ 217.720468][ T6017] nfs4: Unknown parameter 'noa' [ 217.927934][ T6022] loop2: detected capacity change from 0 to 512 [ 218.083851][ T4186] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by udevd (4186) [ 218.097024][ T5963] BTRFS error (device loop5): open_ctree failed: -12 [ 218.213483][ T6022] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 218.263879][ T6022] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 218.276840][ T6022] System zones: 1-12 [ 218.286362][ T6022] EXT4-fs (loop2): 1 truncate cleaned up [ 218.294429][ T6022] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,init_itable=0x000000007fffffff,debug,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 220.267556][ T6041] loop4: detected capacity change from 0 to 512 [ 221.495987][ T6041] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 222.068889][ T6041] EXT4-fs: error -4 creating inode table initialization thread [ 222.261499][ T6041] EXT4-fs (loop4): mount failed [ 222.336507][ T6063] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 222.348467][ T6059] loop5: detected capacity change from 0 to 32768 [ 226.983548][ T6105] loop2: detected capacity change from 0 to 512 [ 227.632207][ T6105] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 228.690236][ T6105] EXT4-fs (loop2): 1 truncate cleaned up [ 228.695946][ T6105] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 230.117010][ T6126] loop5: detected capacity change from 0 to 32768 [ 230.330522][ T6126] XFS (loop5): Mounting V5 Filesystem [ 230.526228][ T6126] XFS (loop5): Ending clean mount [ 230.668726][ T6126] XFS (loop5): Quotacheck needed: Please wait. [ 230.933337][ T6168] loop2: detected capacity change from 0 to 32768 [ 231.231013][ T6126] XFS (loop5): Quotacheck: Done. [ 231.288020][ T4373] XFS (loop5): Unmounting Filesystem [ 231.671623][ T6168] XFS (loop2): Mounting V5 Filesystem [ 232.194506][ T6168] XFS (loop2): Ending clean mount [ 232.231206][ T6168] XFS (loop2): Quotacheck needed: Please wait. [ 232.940493][ T6168] XFS (loop2): Quotacheck: Done. [ 233.974533][ T4170] XFS (loop2): Unmounting Filesystem [ 237.943353][ T6229] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.008378][ T6229] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 238.022022][ T6229] bridge_slave_0: default FDB implementation only supports local addresses [ 238.202588][ T6232] loop1: detected capacity change from 0 to 512 [ 238.745610][ T6216] loop4: detected capacity change from 0 to 32768 [ 238.790865][ T6232] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.413: casefold flag without casefold feature [ 238.805334][ T6232] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.413: couldn't read orphan inode 15 (err -117) [ 238.817484][ T6232] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: writeback. [ 238.909279][ T6232] syz.1.413 (pid 6232) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 238.982398][ T6232] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 239.034735][ T6216] XFS (loop4): Mounting V5 Filesystem [ 239.098468][ T6250] netlink: 'syz.2.406': attribute type 1 has an invalid length. [ 239.352349][ T6252] loop5: detected capacity change from 0 to 32768 [ 239.596851][ T6257] loop1: detected capacity change from 0 to 32768 [ 239.620025][ T6252] XFS (loop5): Mounting V5 Filesystem [ 239.633352][ T6216] XFS (loop4): Ending clean mount [ 239.668732][ T6216] XFS (loop4): Quotacheck needed: Please wait. [ 239.778335][ T6216] XFS (loop4): Quotacheck: Done. [ 239.794993][ T6257] XFS (loop1): Mounting V5 Filesystem [ 239.829159][ T6252] XFS (loop5): Ending clean mount [ 239.866646][ T6252] XFS (loop5): Quotacheck needed: Please wait. [ 239.930401][ T6257] XFS (loop1): Ending clean mount [ 239.945293][ T6257] XFS (loop1): Quotacheck needed: Please wait. [ 239.976979][ T4177] XFS (loop4): Unmounting Filesystem [ 239.982422][ T6252] XFS (loop5): Quotacheck: Done. [ 240.052765][ T6257] XFS (loop1): Quotacheck: Done. [ 240.931553][ T4169] XFS (loop1): Unmounting Filesystem [ 240.941209][ T4373] XFS (loop5): Unmounting Filesystem [ 242.524953][ T6301] loop2: detected capacity change from 0 to 8 [ 242.680877][ T6301] unable to read inode lookup table [ 243.154095][ T6312] loop5: detected capacity change from 0 to 4096 [ 243.612458][ T6312] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 243.718052][ T6312] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 244.441681][ T6320] loop1: detected capacity change from 0 to 32768 [ 244.657260][ T6320] XFS (loop1): Mounting V5 Filesystem [ 245.612600][ T6320] XFS (loop1): Ending clean mount [ 245.709114][ T6320] XFS (loop1): Quotacheck needed: Please wait. [ 245.772917][ T6350] loop5: detected capacity change from 0 to 1024 [ 245.857602][ T6320] XFS (loop1): Quotacheck: Done. [ 245.862822][ T6350] EXT4-fs (loop5): inline encryption not supported [ 245.949235][ T6350] EXT4-fs (loop5): Ignoring removed bh option [ 246.046142][ T6350] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 246.086271][ T6326] loop4: detected capacity change from 0 to 32768 [ 246.129790][ T6326] XFS: ikeep mount option is deprecated. [ 246.625282][ T6326] XFS (loop4): Mounting V5 Filesystem [ 246.752969][ T6326] XFS (loop4): log mount failed [ 246.942846][ T6375] loop2: detected capacity change from 0 to 32768 [ 247.099650][ T6375] XFS (loop2): Mounting V5 Filesystem [ 247.451987][ T6375] XFS (loop2): Ending clean mount [ 247.459331][ T6375] XFS (loop2): Quotacheck needed: Please wait. [ 247.562457][ T6375] XFS (loop2): Quotacheck: Done. [ 248.321261][ T4170] XFS (loop2): Unmounting Filesystem [ 249.874896][ T6415] loop5: detected capacity change from 0 to 2048 [ 249.890430][ T4169] XFS (loop1): Unmounting Filesystem [ 250.313883][ T6422] nfs4: Unknown parameter 'noa' [ 250.731120][ T6415] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.731697][ T6415] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.019275][ T6415] fs-verity: sha512 using implementation "sha512-avx2" [ 253.454564][ T6462] loop1: detected capacity change from 0 to 1024 [ 253.641495][ T144] hfsplus: b-tree write err: -5, ino 4 [ 254.100685][ T6470] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 254.109613][ T6470] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 254.873091][ T6479] loop5: detected capacity change from 0 to 8 [ 255.184488][ T6460] loop4: detected capacity change from 0 to 32768 [ 255.337293][ T6460] XFS (loop4): Mounting V5 Filesystem [ 255.488904][ T6460] XFS (loop4): Ending clean mount [ 255.517860][ T6480] loop1: detected capacity change from 0 to 32768 [ 255.525729][ T6460] XFS (loop4): Quotacheck needed: Please wait. [ 255.562285][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.568632][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.632946][ T6480] XFS (loop1): Mounting V5 Filesystem [ 255.658578][ T6460] XFS (loop4): Quotacheck: Done. [ 255.911743][ T6480] XFS (loop1): Ending clean mount [ 255.923577][ T6480] XFS (loop1): Quotacheck needed: Please wait. [ 256.259490][ T6480] XFS (loop1): Quotacheck: Done. [ 256.487773][ T6521] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 256.960274][ T6527] loop2: detected capacity change from 0 to 2048 [ 257.358210][ T6527] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 257.621423][ T4169] XFS (loop1): Unmounting Filesystem [ 258.117626][ T6539] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 258.126654][ T6539] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 258.909903][ T6540] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 258.918800][ T6540] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 261.887590][ T4177] XFS (loop4): Unmounting Filesystem [ 262.481105][ T6576] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 262.490343][ T6576] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 262.989853][ T6582] loop2: detected capacity change from 0 to 512 [ 263.131218][ T6586] overlayfs: failed to clone upperpath [ 263.150837][ T6582] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 263.218935][ T6582] EXT4-fs (loop2): 1 truncate cleaned up [ 263.227358][ T6582] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 264.518776][ T6600] loop2: detected capacity change from 0 to 40427 [ 264.544127][ T6602] loop4: detected capacity change from 0 to 2048 [ 265.051556][ T6600] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 265.058589][ T6600] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 265.251075][ T6602] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 266.073931][ T6624] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 266.083108][ T6624] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 266.955440][ T6632] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 266.964485][ T6632] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 267.390028][ T6635] loop2: detected capacity change from 0 to 512 [ 267.485453][ T6635] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 267.592987][ T6635] EXT4-fs (loop2): 1 truncate cleaned up [ 267.598675][ T6635] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 267.665307][ T6608] loop5: detected capacity change from 0 to 32768 [ 268.013256][ T6608] XFS (loop5): Mounting V5 Filesystem [ 268.571069][ T6608] XFS (loop5): Ending clean mount [ 268.596253][ T6657] 9pnet: Insufficient options for proto=fd [ 268.656577][ T6608] XFS (loop5): Quotacheck needed: Please wait. [ 269.058599][ T6665] loop2: detected capacity change from 0 to 2048 [ 269.154016][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 269.172896][ T6608] XFS (loop5): Quotacheck: Done. [ 269.205120][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 269.226694][ T6666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.519'. [ 269.253941][ T4373] XFS (loop5): Unmounting Filesystem [ 270.762097][ T6673] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 270.771158][ T6673] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 271.009971][ T6665] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 272.855315][ T6685] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 272.864376][ T6685] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 273.560218][ T6693] loop1: detected capacity change from 0 to 512 [ 273.854434][ T6693] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 274.505216][ T6693] EXT4-fs (loop1): 1 truncate cleaned up [ 274.534651][ T6693] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 275.437628][ T6717] loop2: detected capacity change from 0 to 256 [ 276.902965][ T6725] loop5: detected capacity change from 0 to 40427 [ 277.019749][ T6725] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 277.027702][ T6725] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 277.043301][ T6725] F2FS-fs (loop5): invalid crc value [ 277.221508][ T6741] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 277.230636][ T6741] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 277.577395][ T6743] fuse: Bad value for 'fd' [ 277.672227][ T6725] F2FS-fs (loop5): Found nat_bits in checkpoint [ 277.839237][ T6725] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 277.846382][ T6725] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 277.987516][ T6747] overlayfs: missing 'lowerdir' [ 280.919269][ T6779] loop1: detected capacity change from 0 to 2048 [ 281.467685][ T6779] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 282.269751][ T6790] loop2: detected capacity change from 0 to 40427 [ 282.280647][ T6793] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 282.289669][ T6793] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 282.506496][ T6790] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 282.514597][ T6790] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 282.533577][ T6790] F2FS-fs (loop2): invalid crc value [ 282.559549][ T6798] loop1: detected capacity change from 0 to 8 [ 282.658181][ T6790] F2FS-fs (loop2): Found nat_bits in checkpoint [ 282.725988][ T6790] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 282.733200][ T6790] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 283.122438][ T6798] SQUASHFS error: Failed to read block 0x2d7: -5 [ 283.262211][ T6798] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 287.731602][ T6818] loop1: detected capacity change from 0 to 4096 [ 287.755305][ T6818] ntfs3: Unknown parameter 'nocase' [ 289.524565][ T6840] netlink: 'syz.4.563': attribute type 10 has an invalid length. [ 289.603504][ T6841] loop4: detected capacity change from 0 to 256 [ 293.929661][ T6851] loop5: detected capacity change from 0 to 40427 [ 294.056814][ T6840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.086394][ T6840] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 294.500464][ T6851] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 294.508346][ T6851] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 294.531879][ T6851] F2FS-fs (loop5): invalid crc value [ 294.784482][ T6851] F2FS-fs (loop5): Found nat_bits in checkpoint [ 294.818946][ T6851] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 294.826117][ T6851] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 294.879285][ T6863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.568'. [ 296.727484][ T6876] loop1: detected capacity change from 0 to 2048 [ 297.107404][ T6876] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 301.720003][ T6906] netlink: 'syz.3.580': attribute type 10 has an invalid length. [ 301.846778][ T6914] fuse: Bad value for 'rootmode' [ 302.636072][ T6913] loop4: detected capacity change from 0 to 4096 [ 302.668174][ T6906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.678222][ T6906] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 302.757571][ T6913] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 302.841874][ T6913] ntfs3: loop4: Failed to load $Extend. [ 303.222458][ T6926] loop2: detected capacity change from 0 to 2048 [ 303.905183][ T26] audit: type=1804 audit(1748004730.872:2): pid=6923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.582" name=2F6E6577726F6F742F3131392F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop4" ino=30 res=1 errno=0 [ 304.080228][ T6926] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 306.194259][ T6946] device veth1_macvtap left promiscuous mode [ 306.412937][ T6954] loop5: detected capacity change from 0 to 512 [ 308.333504][ T6971] fuse: Bad value for 'rootmode' [ 308.935204][ T6981] loop5: detected capacity change from 0 to 2048 [ 310.450180][ T6981] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 311.288404][ T6994] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 311.297478][ T6994] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 312.596378][ T7011] loop4: detected capacity change from 0 to 2048 [ 312.768386][ T7014] fuse: Bad value for 'rootmode' [ 312.871613][ T7011] NILFS (loop4): invalid segment: Magic number mismatch [ 313.503519][ T7011] NILFS (loop4): trying rollback from an earlier position [ 313.636141][ T7011] NILFS (loop4): recovery complete [ 313.656711][ T7020] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 314.301226][ T7028] loop2: detected capacity change from 0 to 2048 [ 314.710553][ T7028] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 316.217173][ T7054] fuse: Unknown parameter 'use00000000000000000000' [ 317.013891][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.020492][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.958592][ T7073] loop5: detected capacity change from 0 to 64 [ 320.005979][ T7082] loop5: detected capacity change from 0 to 2048 [ 320.348283][ T7082] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 322.780867][ T7106] loop2: detected capacity change from 0 to 2048 [ 322.983018][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 323.023548][ T7106] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.022051][ T7112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.079969][ T7112] bond0: (slave rose0): Enslaving as an active interface with an up link [ 324.089684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 325.307130][ T7144] loop1: detected capacity change from 0 to 512 [ 328.396580][ T7168] fuse: Unknown parameter 'use00000000000000000000' [ 330.285193][ T7182] loop2: detected capacity change from 0 to 2048 [ 330.377421][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 330.399154][ T7182] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 331.368008][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 331.489353][ T13] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 331.539184][ T13] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 331.610971][ T13] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 331.649123][ T7196] loop5: detected capacity change from 0 to 2048 [ 331.652135][ T13] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.709291][ T13] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 331.757991][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.890379][ T7196] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 332.039913][ T13] usb 5-1: GET_CAPABILITIES returned 0 [ 332.052355][ T13] usbtmc 5-1:16.0: can't read capabilities [ 332.108876][ T7205] loop2: detected capacity change from 0 to 4096 [ 332.157945][ T7205] ntfs3: Unknown parameter 'nocase' [ 332.454626][ T13] usb 5-1: USB disconnect, device number 2 [ 332.627145][ T7213] loop1: detected capacity change from 0 to 512 [ 337.848960][ T7265] loop4: detected capacity change from 0 to 32768 [ 339.713620][ T7265] ERROR: (device loop4): dbAdjCtl: the maximum free buddy is not the old root [ 339.713620][ T7265] [ 339.821161][ T7265] ERROR: (device loop4): remounting filesystem as read-only [ 340.281034][ T7286] fuse: Unknown parameter 'user_i00000000000000000000' [ 343.392921][ T7319] tipc: Enabling of bearer rejected, failed to enable media [ 345.185823][ T26] audit: type=1326 audit(1748004772.152:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.5.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe3214f9b39 code=0x7ffc0000 [ 345.306205][ T26] audit: type=1326 audit(1748004772.182:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.5.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe3214f9b39 code=0x7ffc0000 [ 345.352787][ T7337] fuse: Unknown parameter 'user_i00000000000000000000' [ 345.557264][ T26] audit: type=1326 audit(1748004772.192:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.5.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe3214f9b39 code=0x7ffc0000 [ 345.811836][ T26] audit: type=1326 audit(1748004772.192:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.5.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe3214f9b39 code=0x7ffc0000 [ 346.799203][ T26] audit: type=1326 audit(1748004772.192:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.5.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe3214f9b39 code=0x7ffc0000 [ 347.619852][ T26] audit: type=1326 audit(1748004772.192:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.5.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe3214f9b39 code=0x7ffc0000 [ 348.224040][ T26] audit: type=1326 audit(1748004772.192:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.5.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe3214f9b39 code=0x7ffc0000 [ 348.573505][ T26] audit: type=1326 audit(1748004772.192:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.5.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe3214f9b39 code=0x7ffc0000 [ 348.689103][ T26] audit: type=1326 audit(1748004772.192:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.5.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe3214f9b39 code=0x7ffc0000 [ 348.756013][ T26] audit: type=1326 audit(1748004772.192:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.5.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe3214f9b39 code=0x7ffc0000 [ 348.877712][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.700'. [ 350.311107][ T7381] loop5: detected capacity change from 0 to 2048 [ 350.535983][ T7381] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 350.646363][ T4214] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 351.372127][ T7389] fuse: Unknown parameter 'user_id00000000000000000000' [ 351.579089][ T4214] usb 5-1: Using ep0 maxpacket: 32 [ 353.723850][ T7410] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 909 [ 353.789087][ T4259] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 353.828312][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.712'. [ 353.888605][ T7415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.712'. [ 354.099334][ T4259] usb 6-1: Using ep0 maxpacket: 32 [ 354.249478][ T4259] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.292254][ T4259] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.389152][ T4259] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 354.538206][ T4259] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.594003][ T4259] usb 6-1: config 0 descriptor?? [ 354.642351][ T4259] usb 6-1: can't set config #0, error -71 [ 354.679182][ T4214] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 354.687569][ T4214] usb 5-1: can't read configurations, error -71 [ 354.703246][ T4259] usb 6-1: USB disconnect, device number 2 [ 355.790891][ T7441] fuse: Unknown parameter 'user_id00000000000000000000' [ 360.708912][ T7499] fuse: Unknown parameter 'user_id00000000000000000000' [ 361.707491][ T7501] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 363.691058][ T7540] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.699618][ T7540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.726992][ T7541] loop4: detected capacity change from 0 to 2048 [ 364.187792][ T7548] fuse: Bad value for 'fd' [ 365.010650][ T7541] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 365.208282][ T7558] delete_channel: no stack [ 366.354248][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 366.354259][ T26] audit: type=1800 audit(1748004793.322:71): pid=7557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.747" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 367.514896][ T7576] process 'syz.2.753' launched './file1' with NULL argv: empty string added [ 369.387217][ T7605] loop5: detected capacity change from 0 to 2048 [ 369.806641][ T7602] netlink: 56 bytes leftover after parsing attributes in process `syz.1.761'. [ 370.043668][ T7605] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 371.378251][ T7625] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 371.387275][ T7625] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 373.967550][ T7657] loop5: detected capacity change from 0 to 2048 [ 374.300075][ T7657] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 375.698715][ T26] audit: type=1326 audit(1748004802.662:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a56cf3969 code=0x7fc00000 [ 376.328789][ T7685] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 376.337756][ T7685] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 376.499261][ T26] audit: type=1326 audit(1748004803.312:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a56c8fb39 code=0x7fc00000 [ 377.302147][ T2343] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 377.489845][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 377.709289][ T2343] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 377.717597][ T2343] usb 6-1: config 0 has no interface number 0 [ 377.745280][ T2343] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 377.785098][ T2343] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.822447][ T2343] usb 6-1: config 0 descriptor?? [ 377.887588][ T2343] usb 6-1: selecting invalid altsetting 1 [ 377.907611][ T2343] dvb_ttusb_budget: ttusb_init_controller: error [ 377.928632][ T2343] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 377.943033][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.000113][ T13] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 378.240190][ T13] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 378.436747][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.452975][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.467433][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.725870][ T13] usb 3-1: Product: syz [ 378.759253][ T13] usb 3-1: Manufacturer: syz [ 378.807037][ T13] usb 3-1: SerialNumber: syz [ 378.826812][ T2343] DVB: Unable to find symbol cx22700_attach() [ 378.845432][ T13] usb 3-1: config 0 descriptor?? [ 379.041033][ T2343] DVB: Unable to find symbol tda10046_attach() [ 379.049210][ T2343] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 379.086231][ T2343] usb 6-1: USB disconnect, device number 3 [ 379.169352][ T7729] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 379.178322][ T7729] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 379.888782][ T4213] usb 3-1: USB disconnect, device number 2 [ 381.675704][ T7764] tipc: Started in network mode [ 381.697356][ T7764] tipc: Node identity 7, cluster identity 4711 [ 381.712111][ T7764] tipc: Node number set to 7 [ 381.991188][ T7772] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 382.000600][ T7772] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 385.392685][ T7803] nfs4: Unknown parameter 'noa' [ 386.649703][ T7821] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 386.658848][ T7821] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 387.284648][ T7827] netlink: 'syz.5.823': attribute type 10 has an invalid length. [ 393.210011][ T7890] device bond0 entered promiscuous mode [ 393.234294][ T7890] device bond_slave_0 entered promiscuous mode [ 393.431808][ T7890] device bond_slave_1 entered promiscuous mode [ 393.726646][ T7890] device batadv0 entered promiscuous mode [ 396.919230][ T4297] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 397.729223][ T4297] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 398.131441][ T4297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.139904][ T4297] usb 2-1: Product: syz [ 398.144113][ T4297] usb 2-1: Manufacturer: syz [ 398.148723][ T4297] usb 2-1: SerialNumber: syz [ 398.155758][ T4297] usb 2-1: config 0 descriptor?? [ 398.185697][ T7947] loop4: detected capacity change from 0 to 2048 [ 398.189225][ T4297] usb 2-1: can't set config #0, error -71 [ 398.249685][ T4297] usb 2-1: USB disconnect, device number 2 [ 399.840029][ T7947] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 399.886010][ T7982] loop5: detected capacity change from 0 to 512 [ 400.621489][ T7998] nfs4: Unknown parameter 'noa' [ 400.746629][ T8002] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 400.755675][ T8002] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 403.448176][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.885'. [ 403.546695][ T8035] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 403.603203][ T8027] loop1: detected capacity change from 0 to 32768 [ 403.786615][ T8027] XFS (loop1): Mounting V5 Filesystem [ 404.594145][ T8060] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 404.603103][ T8060] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 405.813222][ T8027] XFS (loop1): Ending clean mount [ 405.826866][ T8027] XFS (loop1): Quotacheck needed: Please wait. [ 405.925187][ T8027] XFS (loop1): Quotacheck: Done. [ 406.737687][ T4169] XFS (loop1): Unmounting Filesystem [ 407.227815][ T8094] netlink: 20 bytes leftover after parsing attributes in process `syz.5.901'. [ 408.465297][ T8103] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 408.474299][ T8103] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 409.829516][ T8093] Unrecognized hibernate image header format! [ 409.847937][ T8093] PM: hibernation: Image mismatch: architecture specific data [ 409.919584][ T8115] nfs4: Unknown parameter 'noa' [ 412.044862][ T8119] usb usb8: usbfs: process 8119 (syz.5.909) did not claim interface 0 before use [ 412.431622][ T8139] loop1: detected capacity change from 0 to 32768 [ 413.828630][ T8139] XFS (loop1): Mounting V5 Filesystem [ 414.066214][ T8139] XFS (loop1): Ending clean mount [ 414.074485][ T8139] XFS (loop1): Quotacheck needed: Please wait. [ 414.179544][ T8139] XFS (loop1): Quotacheck: Done. [ 415.076266][ T4169] XFS (loop1): Unmounting Filesystem [ 415.791226][ T8194] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 415.800430][ T8194] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 416.764379][ T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 417.190586][ T8213] nfs4: Unknown parameter 'noa' [ 417.439086][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 417.799277][ T8218] loop1: detected capacity change from 0 to 32768 [ 417.894886][ T13] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 417.908698][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.965738][ T13] usb 5-1: Product: syz [ 418.012787][ T13] usb 5-1: Manufacturer: syz [ 418.017444][ T13] usb 5-1: SerialNumber: syz [ 418.039542][ T8218] XFS (loop1): Mounting V5 Filesystem [ 418.071009][ T13] usb 5-1: config 0 descriptor?? [ 419.173390][ T8218] XFS (loop1): Ending clean mount [ 419.180953][ T8218] XFS (loop1): Quotacheck needed: Please wait. [ 419.292331][ T13] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 419.329472][ T13] gspca_sunplus: reg_w_riv err -71 [ 419.329605][ T8218] XFS (loop1): Quotacheck: Done. [ 419.490664][ T13] sunplus: probe of 5-1:0.0 failed with error -71 [ 420.138404][ T13] usb 5-1: USB disconnect, device number 5 [ 420.209543][ T8249] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 420.218519][ T8249] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 420.627664][ T4169] XFS (loop1): Unmounting Filesystem [ 421.311325][ T8266] loop5: detected capacity change from 0 to 2048 [ 421.477616][ T8271] netlink: 'syz.1.952': attribute type 10 has an invalid length. [ 421.481957][ T8266] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 421.578736][ T8271] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.586092][ T8271] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.901422][ T8271] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.908601][ T8271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.916329][ T8271] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.923456][ T8271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.261916][ T8271] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 422.452320][ T8273] device bridge_slave_1 left promiscuous mode [ 422.458712][ T8273] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.673360][ T8278] nfs4: Unknown parameter 'noa' [ 422.709843][ T8276] loop4: detected capacity change from 0 to 32768 [ 422.747364][ T8273] device bridge_slave_0 left promiscuous mode [ 422.753890][ T8273] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.122049][ T8273] bond0: (slave bridge0): Releasing backup interface [ 423.186950][ T8276] XFS (loop4): Mounting V5 Filesystem [ 423.428278][ T8276] XFS (loop4): Ending clean mount [ 423.438750][ T8276] XFS (loop4): Quotacheck needed: Please wait. [ 424.199894][ T8293] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 424.208799][ T8293] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 424.504499][ T8276] XFS (loop4): Quotacheck: Done. [ 425.235360][ T4177] XFS (loop4): Unmounting Filesystem [ 425.569772][ T8310] device netdevsim0 entered promiscuous mode [ 425.911240][ T8318] loop1: detected capacity change from 0 to 2048 [ 426.392167][ T8318] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 427.485914][ T8332] loop2: detected capacity change from 0 to 32768 [ 427.495820][ T8336] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 427.505591][ T8336] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 427.982552][ T4214] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 428.096617][ T8332] XFS (loop2): Mounting V5 Filesystem [ 428.249066][ T4214] usb 5-1: Using ep0 maxpacket: 8 [ 428.387878][ T8332] XFS (loop2): Ending clean mount [ 428.395425][ T8332] XFS (loop2): Quotacheck needed: Please wait. [ 428.521195][ T8332] XFS (loop2): Quotacheck: Done. [ 428.531401][ T4214] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 428.665801][ T4214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.719452][ T8364] tipc: Can't bind to reserved service type 0 [ 428.733699][ T4214] usb 5-1: Product: syz [ 429.145562][ T4214] usb 5-1: Manufacturer: syz [ 429.163337][ T4214] usb 5-1: SerialNumber: syz [ 429.197191][ T4170] XFS (loop2): Unmounting Filesystem [ 429.203764][ T4214] usb 5-1: config 0 descriptor?? [ 429.275633][ T4214] gspca_main: se401-2.14.0 probing 047d:5003 [ 429.769161][ T4214] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 429.783539][ T4214] se401: probe of 5-1:0.0 failed with error -71 [ 429.792948][ T4214] usb 5-1: USB disconnect, device number 6 [ 429.873799][ T8374] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 429.882897][ T8374] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 430.342701][ T8381] bridge0: port 2(bridge_slave_1) entered learning state [ 430.369389][ T8381] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.435685][ T8399] loop7: detected capacity change from 0 to 16384 [ 432.613627][ T8419] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 432.622941][ T8419] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 433.317058][ T8418] loop4: detected capacity change from 0 to 32768 [ 433.765837][ T8418] XFS (loop4): Mounting V5 Filesystem [ 434.827987][ T8418] XFS (loop4): Ending clean mount [ 434.837127][ T8418] XFS (loop4): Quotacheck needed: Please wait. [ 434.983427][ T8418] XFS (loop4): Quotacheck: Done. [ 435.200733][ T4177] XFS (loop4): Unmounting Filesystem [ 435.353204][ T8453] loop5: detected capacity change from 0 to 2048 [ 435.387236][ T8453] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 435.979600][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806271b800: rx timeout, send abort [ 436.386904][ T8471] xt_CT: No such helper "snmp" [ 436.489818][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806271b800: abort rx timeout. Force session deactivation [ 437.897721][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1001'. [ 438.528326][ T8496] loop2: detected capacity change from 0 to 32768 [ 438.714560][ T8496] XFS (loop2): Mounting V5 Filesystem [ 439.708000][ T8496] XFS (loop2): Ending clean mount [ 439.721362][ T8496] XFS (loop2): Quotacheck needed: Please wait. [ 439.785944][ T8496] XFS (loop2): Quotacheck: Done. [ 439.882643][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.889636][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.097587][ T4170] XFS (loop2): Unmounting Filesystem [ 441.446279][ T8494] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.453640][ T8494] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.202386][ T8556] loop1: detected capacity change from 0 to 32768 [ 444.654653][ T8556] XFS (loop1): Mounting V5 Filesystem [ 444.798697][ T8556] XFS (loop1): Ending clean mount [ 444.806643][ T8556] XFS (loop1): Quotacheck needed: Please wait. [ 444.947053][ T8556] XFS (loop1): Quotacheck: Done. [ 445.668114][ T4169] XFS (loop1): Unmounting Filesystem [ 445.977230][ T8494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.107598][ T8494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.042383][ T8494] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.051830][ T8494] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.079008][ T8494] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.088051][ T8494] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.223640][ T8585] program syz.2.1037 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 447.741285][ T8550] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 447.750238][ T8550] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 448.248040][ T8494] syz.4.1014 (8494) used greatest stack depth: 19744 bytes left [ 450.337236][ T8622] tipc: Started in network mode [ 450.470886][ T8622] tipc: Node identity ac14140f, cluster identity 4711 [ 450.478616][ T8622] tipc: New replicast peer: 255.255.255.255 [ 450.543930][ T8622] tipc: Enabled bearer , priority 10 [ 450.559635][ T8626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1047'. [ 450.599229][ T8626] tipc: Disabling bearer [ 451.070643][ T8636] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 451.079693][ T8636] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 451.243030][ T4259] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 451.889524][ T4259] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 451.947790][ T4259] usb 2-1: config 0 has no interface number 0 [ 451.959573][ T4259] usb 2-1: config 0 interface 128 has no altsetting 0 [ 452.225634][ T4259] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 452.235032][ T4259] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.250694][ T4259] usb 2-1: Product: syz [ 452.255152][ T4259] usb 2-1: Manufacturer: syz [ 452.260075][ T4259] usb 2-1: SerialNumber: syz [ 452.269451][ T4259] usb 2-1: config 0 descriptor?? [ 452.978742][ T4259] radio-si470x 2-1:0.128: could not find interrupt in endpoint [ 452.986507][ T4259] radio-si470x: probe of 2-1:0.128 failed with error -5 [ 452.995009][ T4259] usbhid 2-1:0.128: couldn't find an input interrupt endpoint [ 453.140102][ T4259] usb 2-1: USB disconnect, device number 3 [ 453.193702][ T8653] loop2: detected capacity change from 0 to 2048 [ 454.376612][ T8653] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 455.429035][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 457.626368][ T8696] loop4: detected capacity change from 0 to 512 [ 457.829391][ T7] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 457.869190][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.930395][ T7] usb 2-1: Product: syz [ 457.934599][ T7] usb 2-1: Manufacturer: syz [ 457.955587][ T7] usb 2-1: SerialNumber: syz [ 458.003427][ T7] usb 2-1: can't set config #1, error -71 [ 458.028551][ T7] usb 2-1: USB disconnect, device number 4 [ 458.161635][ T8706] loop2: detected capacity change from 0 to 2048 [ 458.256509][ T8706] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 461.857979][ T8739] loop5: detected capacity change from 0 to 512 [ 464.267447][ T8777] capability: warning: `syz.5.1097' uses 32-bit capabilities (legacy support in use) [ 466.848147][ T8812] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 466.857277][ T8812] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 467.391393][ T8815] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 467.400654][ T8815] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 469.518458][ T8841] loop1: detected capacity change from 0 to 2048 [ 469.693163][ T8841] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 472.976272][ T1110] Bluetooth: hci3: command 0x0406 tx timeout [ 474.182844][ T8887] loop4: detected capacity change from 0 to 512 [ 475.768787][ T8903] loop4: detected capacity change from 0 to 4096 [ 475.852195][ T8903] ntfs3: Unknown parameter 'nocase' [ 477.582634][ T8924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1144'. [ 478.403809][ T8932] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 479.386120][ T8940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.890924][ T8981] loop2: detected capacity change from 0 to 512 [ 482.146414][ T8990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.154686][ T8990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.170577][ T8990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.196559][ T8990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.560807][ T9005] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1170'. [ 484.032534][ T9013] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1172'. [ 484.160768][ T9016] nfs4: Unknown parameter 'noa' [ 485.317443][ T9025] loop5: detected capacity change from 0 to 512 [ 485.609663][ T9027] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 485.609694][ T9027] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 488.443781][ T9065] loop4: detected capacity change from 0 to 512 [ 488.862703][ T9076] loop4: detected capacity change from 0 to 4096 [ 488.887587][ T9076] ntfs3: Unknown parameter 'nocase' [ 489.019276][ T7] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 489.738988][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 491.474905][ T26] audit: type=1326 audit(1748004918.442:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9102 comm="syz.2.1202" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2248fff969 code=0x0 [ 491.748212][ T9106] nfs4: Unknown parameter 'noa' [ 492.526257][ T9112] loop2: detected capacity change from 0 to 32768 [ 492.769522][ T7] usb 6-1: unable to get BOS descriptor or descriptor too short [ 492.785557][ T9112] XFS (loop2): Mounting V5 Filesystem [ 492.853657][ T7] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 492.886923][ T7] usb 6-1: can't read configurations, error -71 [ 492.910986][ T9119] loop5: detected capacity change from 0 to 4096 [ 492.968487][ T9112] XFS (loop2): Ending clean mount [ 492.979047][ T9112] XFS (loop2): Quotacheck needed: Please wait. [ 492.989838][ T9119] ntfs3: Unknown parameter 'nocase' [ 493.710921][ T9112] XFS (loop2): Quotacheck: Done. [ 494.509160][ T4170] XFS (loop2): Unmounting Filesystem [ 495.304523][ T9140] netlink: 'syz.2.1210': attribute type 1 has an invalid length. [ 495.348074][ T9140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 495.435894][ T9142] bond1: (slave erspan0): making interface the new active one [ 495.447419][ T9142] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 495.456541][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 495.492243][ T9142] syz.2.1210 (9142) used greatest stack depth: 19584 bytes left [ 497.078417][ T9167] loop4: detected capacity change from 0 to 32768 [ 497.238246][ T9167] XFS (loop4): Mounting V5 Filesystem [ 497.420177][ T9167] XFS (loop4): Ending clean mount [ 497.427579][ T9167] XFS (loop4): Quotacheck needed: Please wait. [ 497.527762][ T9167] XFS (loop4): Quotacheck: Done. [ 497.879249][ T4177] XFS (loop4): Unmounting Filesystem [ 497.893820][ T9211] netlink: 'syz.3.1223': attribute type 1 has an invalid length. [ 498.001227][ T9211] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.091319][ T9215] bond1: (slave erspan0): making interface the new active one [ 498.110688][ T9215] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 498.151876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 498.414531][ T9221] nfs4: Unknown parameter 'noa' [ 500.163513][ T1110] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 500.529815][ T1110] usb 5-1: config 0 has no interfaces? [ 500.709234][ T1110] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 500.727828][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.746013][ T1110] usb 5-1: Product: syz [ 500.759160][ T1110] usb 5-1: Manufacturer: syz [ 500.771661][ T1110] usb 5-1: SerialNumber: syz [ 500.796376][ T1110] usb 5-1: config 0 descriptor?? [ 501.332305][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.339047][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.584670][ T9245] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 501.593800][ T9245] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 502.579041][ T2343] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 502.849104][ T2343] usb 3-1: Using ep0 maxpacket: 8 [ 503.389508][ T2343] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 503.417462][ T2343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.455451][ T2343] usb 3-1: Product: syz [ 503.475482][ T2343] usb 3-1: Manufacturer: syz [ 503.505469][ T2343] usb 3-1: SerialNumber: syz [ 503.575055][ T2343] usb 3-1: config 0 descriptor?? [ 504.080295][ T2343] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 504.108478][ T2343] gspca_sunplus: reg_w_riv err -71 [ 504.232648][ T2343] sunplus: probe of 3-1:0.0 failed with error -71 [ 504.257330][ T2343] usb 3-1: USB disconnect, device number 3 [ 504.360010][ T9281] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 504.369009][ T9281] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 505.107498][ T9293] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 505.107573][ T9293] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 505.654177][ T1110] usb 5-1: USB disconnect, device number 7 [ 505.720833][ T9295] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 505.721082][ T9295] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 505.746305][ T9303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1248'. [ 506.488196][ T9315] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 506.497281][ T9315] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 507.183773][ T9327] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 507.292048][ T9329] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 507.301060][ T9329] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 507.836399][ T9338] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 507.845426][ T9338] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 509.679131][ T4214] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 509.723898][ T9363] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 509.733095][ T9363] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 509.956425][ T9366] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1268'. [ 510.039192][ T4214] usb 2-1: Using ep0 maxpacket: 8 [ 510.174086][ T4214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 510.188590][ T4214] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 510.209042][ T4214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.279444][ T4214] usb 2-1: config 0 descriptor?? [ 510.846260][ T4214] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 510.870972][ T4214] usb 2-1: USB disconnect, device number 5 [ 511.734818][ T9385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1274'. [ 512.182660][ T9388] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 512.191586][ T9388] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 513.976058][ T9418] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 513.985807][ T9418] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 515.349028][ T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 515.589083][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 515.704136][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880607b9c00: rx timeout, send abort [ 515.712760][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 515.740341][ T21] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 515.778979][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.829549][ T21] usb 3-1: config 0 descriptor?? [ 516.097034][ T21] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 516.212432][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880607b9c00: abort rx timeout. Force session deactivation [ 516.437802][ T21] usb 3-1: USB disconnect, device number 4 [ 518.196030][ T9458] loop5: detected capacity change from 0 to 32768 [ 518.450170][ T9471] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 518.459281][ T9471] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 519.361088][ T9458] XFS (loop5): Mounting V5 Filesystem [ 519.438837][ T9487] netlink: 'syz.4.1304': attribute type 2 has an invalid length. [ 519.538058][ T9458] XFS (loop5): Ending clean mount [ 519.545751][ T9458] XFS (loop5): Quotacheck needed: Please wait. [ 519.670389][ T9458] XFS (loop5): Quotacheck: Done. [ 520.388231][ T4373] XFS (loop5): Unmounting Filesystem [ 520.909373][ T9512] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 520.918349][ T9512] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 522.489080][ T2343] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 523.233453][ T2343] usb 2-1: Using ep0 maxpacket: 16 [ 523.814911][ T9547] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1322'. [ 523.860241][ T2343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.883586][ T2343] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 523.920236][ T2343] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 523.936062][ T9547] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1322'. [ 523.945137][ T2343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.276838][ T2343] usb 2-1: config 0 descriptor?? [ 524.345306][ T2343] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 524.400783][ T9558] xt_CT: No such helper "snmp" [ 525.616564][ T2343] usb 2-1: USB disconnect, device number 6 [ 526.814005][ T9581] loop1: detected capacity change from 0 to 512 [ 528.177090][ T9582] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 528.186033][ T9582] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 528.878472][ T9587] loop5: detected capacity change from 0 to 32768 [ 528.939078][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 529.145526][ T9587] XFS (loop5): Mounting V5 Filesystem [ 529.314772][ T9587] XFS (loop5): Ending clean mount [ 529.321167][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 529.331301][ T9587] XFS (loop5): Quotacheck needed: Please wait. [ 529.459228][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.629281][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 529.712015][ T9587] XFS (loop5): Quotacheck: Done. [ 530.497703][ T4373] XFS (loop5): Unmounting Filesystem [ 530.539236][ T7] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 530.582977][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.623916][ T7] usb 5-1: Product: syz [ 530.628135][ T7] usb 5-1: Manufacturer: syz [ 530.655137][ T7] usb 5-1: SerialNumber: syz [ 531.169301][ T7] usb 5-1: cannot find UAC_HEADER [ 531.392981][ T7] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 531.493614][ T7] usb 5-1: USB disconnect, device number 8 [ 531.523724][ T4359] udevd[4359]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 533.451901][ T9647] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 533.460887][ T9647] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 534.107749][ T9655] loop4: detected capacity change from 0 to 512 [ 534.715869][ T9664] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1351'. [ 534.933020][ T9669] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1353'. [ 534.958556][ T9669] unsupported nlmsg_type 40 [ 535.095728][ T9667] loop5: detected capacity change from 0 to 32768 [ 535.273750][ T9667] XFS (loop5): Mounting V5 Filesystem [ 535.700802][ T9667] XFS (loop5): Ending clean mount [ 535.708513][ T9667] XFS (loop5): Quotacheck needed: Please wait. [ 536.553817][ T9667] XFS (loop5): Quotacheck: Done. [ 537.362421][ T9696] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 537.372138][ T9696] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 537.845944][ T4373] XFS (loop5): Unmounting Filesystem [ 538.147700][ T26] audit: type=1326 audit(1748004965.112:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9674 comm="syz.2.1354" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2248fff969 code=0x0 [ 538.281054][ T9704] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 538.319145][ T9704] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 539.887321][ T9731] loop2: detected capacity change from 0 to 32768 [ 540.063635][ T9731] XFS (loop2): Mounting V5 Filesystem [ 540.209755][ T9731] XFS (loop2): Ending clean mount [ 540.222474][ T9731] XFS (loop2): Quotacheck needed: Please wait. [ 540.353606][ T9731] XFS (loop2): Quotacheck: Done. [ 541.176576][ T4170] XFS (loop2): Unmounting Filesystem [ 541.193825][ T9754] loop1: detected capacity change from 0 to 512 [ 542.981880][ T9771] loop2: detected capacity change from 0 to 4096 [ 543.012479][ T9771] ntfs3: Unknown parameter 'nocase' [ 544.103315][ T9784] loop2: detected capacity change from 0 to 32768 [ 544.110229][ T2343] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 544.291426][ T9784] XFS (loop2): Mounting V5 Filesystem [ 544.383942][ T2343] usb 5-1: Using ep0 maxpacket: 8 [ 544.426808][ T9784] XFS (loop2): Ending clean mount [ 544.474760][ T9784] XFS (loop2): Quotacheck needed: Please wait. [ 544.549230][ T2343] usb 5-1: config 0 has an invalid descriptor of length 219, skipping remainder of the config [ 544.579328][ T2343] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 109, using maximum allowed: 30 [ 544.621606][ T2343] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 109 [ 544.664783][ T2343] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 544.674172][ T2343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.724942][ T2343] usb 5-1: config 0 descriptor?? [ 544.738140][ T9784] XFS (loop2): Quotacheck: Done. [ 545.534785][ T4170] XFS (loop2): Unmounting Filesystem [ 545.549071][ T2343] usb 5-1: string descriptor 0 read error: -71 [ 545.558140][ T2343] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 545.598852][ T2343] usb 5-1: USB disconnect, device number 9 [ 547.664876][ T9832] loop2: detected capacity change from 0 to 4096 [ 547.827656][ T9838] loop5: detected capacity change from 0 to 32768 [ 547.870959][ T9832] ntfs3: Unknown parameter 'nocase' [ 547.986532][ T9838] XFS (loop5): Mounting V5 Filesystem [ 548.699856][ T9838] XFS (loop5): Ending clean mount [ 548.707305][ T9838] XFS (loop5): Quotacheck needed: Please wait. [ 548.889751][ T9838] XFS (loop5): Quotacheck: Done. [ 549.508621][ T4373] XFS (loop5): Unmounting Filesystem [ 550.389024][ T9865] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 550.397976][ T9865] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 551.135636][ T9870] loop2: detected capacity change from 0 to 32768 [ 551.329164][ T9870] XFS (loop2): Mounting V5 Filesystem [ 551.460880][ T9870] XFS (loop2): Ending clean mount [ 551.473751][ T9870] XFS (loop2): Quotacheck needed: Please wait. [ 551.759590][ T9870] XFS (loop2): Quotacheck: Done. [ 552.492826][ T4170] XFS (loop2): Unmounting Filesystem [ 552.931786][ T9900] loop5: detected capacity change from 0 to 4096 [ 553.104909][ T9900] ntfs3: Unknown parameter 'nocase' [ 554.362564][ T9917] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 554.372217][ T9917] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 555.409067][ T5224] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 555.668959][ T5224] usb 2-1: Using ep0 maxpacket: 16 [ 555.809149][ T5224] usb 2-1: config 0 has no interfaces? [ 555.999419][ T5224] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 556.013567][ T5224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.062754][ T5224] usb 2-1: Product: syz [ 556.079076][ T5224] usb 2-1: Manufacturer: syz [ 556.099323][ T5224] usb 2-1: SerialNumber: syz [ 556.134256][ T5224] usb 2-1: config 0 descriptor?? [ 556.409209][ T5224] usb 2-1: USB disconnect, device number 7 [ 556.663271][ T9942] nfs4: Unknown parameter 'noa' [ 557.253926][ T9950] loop2: detected capacity change from 0 to 4096 [ 557.356305][ T9950] ntfs3: Unknown parameter 'nocase' [ 557.441560][ T9956] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 557.450950][ T9956] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 558.328441][ T9962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.734302][ T9972] netlink: zone id is out of range [ 560.545403][ T26] audit: type=1326 audit(1748004987.512:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9991 comm="syz.3.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a56c8fb39 code=0x7ffc0000 [ 560.624587][ T26] audit: type=1326 audit(1748004987.542:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9991 comm="syz.3.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a56c8fb39 code=0x7ffc0000 [ 560.706640][ T26] audit: type=1326 audit(1748004987.542:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9991 comm="syz.3.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a56cf3969 code=0x7ffc0000 [ 560.776274][ T9994] loop5: detected capacity change from 0 to 4096 [ 560.803125][ T26] audit: type=1326 audit(1748004987.542:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9991 comm="syz.3.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a56c8fb39 code=0x7ffc0000 [ 560.827546][ T9994] ntfs3: Unknown parameter 'nocase' [ 561.139305][ T26] audit: type=1326 audit(1748004987.542:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9991 comm="syz.3.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a56c8fb39 code=0x7ffc0000 [ 561.428378][ T26] audit: type=1326 audit(1748004987.542:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9991 comm="syz.3.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a56cf3969 code=0x7ffc0000 [ 561.450717][ C0] vkms_vblank_simulate: vblank timer overrun [ 561.579356][ T26] audit: type=1326 audit(1748004987.542:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9991 comm="syz.3.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a56c8fb39 code=0x7ffc0000 [ 561.726083][ T26] audit: type=1326 audit(1748004987.542:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9991 comm="syz.3.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a56c8fb39 code=0x7ffc0000 [ 562.088725][ T26] audit: type=1326 audit(1748004987.542:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9991 comm="syz.3.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a56cf3969 code=0x7ffc0000 [ 562.244050][ T26] audit: type=1326 audit(1748004987.542:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9991 comm="syz.3.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a56cf3969 code=0x7ffc0000 [ 562.266321][ C0] vkms_vblank_simulate: vblank timer overrun [ 562.405568][T10010] nfs4: Unknown parameter 'noa' [ 562.762745][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.769174][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.651837][T10029] loop4: detected capacity change from 0 to 32768 [ 563.727933][T10031] loop1: detected capacity change from 0 to 32768 [ 563.829123][T10029] XFS (loop4): Mounting V5 Filesystem [ 563.862718][T10031] XFS (loop1): Mounting V5 Filesystem [ 564.033970][T10029] XFS (loop4): Ending clean mount [ 564.042068][T10031] XFS (loop1): Ending clean mount [ 564.043074][T10029] XFS (loop4): Quotacheck needed: Please wait. [ 564.050213][T10031] XFS (loop1): Quotacheck needed: Please wait. [ 564.160808][T10029] XFS (loop4): Quotacheck: Done. [ 564.160827][T10031] XFS (loop1): Quotacheck: Done. [ 564.392940][T10049] loop5: detected capacity change from 0 to 4096 [ 564.886498][ T4169] XFS (loop1): Unmounting Filesystem [ 564.972437][ T4177] XFS (loop4): Unmounting Filesystem [ 565.059854][T10049] ntfs3: Unknown parameter 'nocase' [ 566.405129][T10084] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 566.414216][T10084] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 567.363478][T10093] nfs4: Unknown parameter 'noa' [ 567.526421][T10092] loop2: detected capacity change from 0 to 32768 [ 567.670241][T10092] XFS (loop2): Mounting V5 Filesystem [ 567.769240][T10092] XFS (loop2): Ending clean mount [ 567.796349][T10092] XFS (loop2): Quotacheck needed: Please wait. [ 567.937452][T10092] XFS (loop2): Quotacheck: Done. [ 568.601782][ T4170] XFS (loop2): Unmounting Filesystem [ 569.148763][T10108] loop4: detected capacity change from 0 to 32768 [ 569.318226][T10108] XFS (loop4): Mounting V5 Filesystem [ 569.508235][T10108] XFS (loop4): Ending clean mount [ 569.516921][T10108] XFS (loop4): Quotacheck needed: Please wait. [ 569.542330][T10122] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1461'. [ 569.823590][T10108] XFS (loop4): Quotacheck: Done. [ 570.557178][T10142] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 570.566159][T10142] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 572.372657][ T4177] XFS (loop4): Unmounting Filesystem [ 573.468899][T10151] nfs4: Unknown parameter 'noa' [ 573.705817][T10170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1477'. [ 575.814833][T10196] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 575.823782][T10196] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 578.729266][ T4214] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 579.979215][ T4214] usb 2-1: config 0 has no interfaces? [ 579.984752][ T4214] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 580.020056][ T4214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.046715][ T4214] usb 2-1: config 0 descriptor?? [ 580.370684][T10223] udc-core: couldn't find an available UDC or it's busy [ 580.377766][T10223] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 580.403649][T10223] udc-core: couldn't find an available UDC or it's busy [ 580.446203][T10223] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 581.193514][T10251] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 581.203222][T10251] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 581.472697][ T2343] usb 2-1: USB disconnect, device number 8 [ 581.938077][T10261] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 581.947339][T10261] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 586.366998][T10297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1510'. [ 588.139550][T10313] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 588.139580][T10313] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 590.208599][T10329] loop5: detected capacity change from 0 to 2048 [ 590.283919][T10329] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 590.818954][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 591.059264][T10337] loop1: detected capacity change from 0 to 512 [ 591.309128][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 591.459270][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.476063][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.489696][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 591.513260][ T7] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 591.527723][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.546678][ T7] usb 3-1: config 0 descriptor?? [ 592.067844][ T7] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 592.138974][ T7] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input6 [ 592.319804][ T7] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 592.417759][ T7] usb 3-1: USB disconnect, device number 5 [ 592.561347][T10356] fido_id[10356]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 593.498745][T10364] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 593.978241][T10367] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 593.987242][T10367] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 595.708331][T10392] loop1: detected capacity change from 0 to 512 [ 595.764917][T10391] loop2: detected capacity change from 0 to 2048 [ 595.857539][T10394] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 595.866568][T10394] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 596.134258][T10391] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 596.486285][T10398] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1538'. [ 597.242861][T10415] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 597.251939][T10415] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 598.326435][T10433] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 598.335536][T10433] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 600.086885][T10457] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 600.095955][T10457] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 601.318948][T10472] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 601.327908][T10472] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 601.776067][T10475] device ipip0 entered promiscuous mode [ 603.710450][T10501] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 603.720174][T10501] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 604.581864][T10511] loop5: detected capacity change from 0 to 2048 [ 605.810104][T10517] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 605.819038][T10517] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 606.623065][T10511] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 606.769274][T10528] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 606.819054][T10528] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 607.301410][T10544] loop1: detected capacity change from 0 to 32768 [ 607.440459][T10544] XFS (loop1): Mounting V5 Filesystem [ 607.583237][T10544] XFS (loop1): Ending clean mount [ 607.591388][T10544] XFS (loop1): Quotacheck needed: Please wait. [ 607.684388][T10544] XFS (loop1): Quotacheck: Done. [ 608.500420][T10563] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 608.509404][T10563] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 608.707141][ T4169] XFS (loop1): Unmounting Filesystem [ 609.036403][T10543] xt_CT: No such helper "pptp" [ 609.554202][ T4259] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 609.622716][T10582] loop5: detected capacity change from 0 to 2048 [ 609.729849][T10582] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 610.021853][ T4259] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.036216][ T4259] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.388905][ T4259] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 610.402047][ T4259] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 610.418896][ T4259] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.447948][ T4259] usb 3-1: config 0 descriptor?? [ 611.009283][T10602] loop5: detected capacity change from 0 to 32768 [ 611.020066][T10605] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 611.029004][T10605] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 611.231648][ T4259] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 611.527721][ T4259] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 611.546038][T10612] ptrace attach of "./syz-executor exec"[4177] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ /dev/adsp1 ÿÿÿÿÿÿÿÿ   œ   ÿÿÿÿ    ÿ\x07 ÿÿÿÿ @     @A [ 611.549101][ T4259] usb 3-1: USB disconnect, device number 6 [ 611.737572][T10602] XFS (loop5): Mounting V5 Filesystem [ 612.055275][T10630] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 612.064342][T10630] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 612.483937][T10602] XFS (loop5): Ending clean mount [ 612.490841][T10602] XFS (loop5): Quotacheck needed: Please wait. [ 612.543017][T10602] XFS (loop5): Quotacheck: Done. [ 613.193466][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1600'. [ 613.228252][T10620] fido_id[10620]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 613.244767][T10633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1600'. [ 613.532949][ T4373] XFS (loop5): Unmounting Filesystem [ 614.921847][T10653] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 614.930890][T10653] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 616.019407][T10663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1608'. [ 616.238107][ T7] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 616.359682][T10673] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 616.368660][T10673] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 616.763820][T10677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1612'. [ 616.842334][T10677] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.851781][T10677] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.860527][T10677] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.869227][T10677] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.889262][ T7] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.912515][T10677] device vxlan0 entered promiscuous mode [ 616.920472][ T7] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 617.129274][ T7] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 617.154887][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.168456][ T7] usb 6-1: Product: syz [ 617.173690][ T7] usb 6-1: Manufacturer: syz [ 617.178732][ T7] usb 6-1: SerialNumber: syz [ 617.259094][ T4259] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 617.579345][ T7] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 617.840278][ T4259] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 617.854158][ T4259] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.879104][ T4259] usb 2-1: Product: syz [ 617.883700][ T4259] usb 2-1: Manufacturer: syz [ 617.889699][ T4259] usb 2-1: SerialNumber: syz [ 617.897018][ T4259] usb 2-1: config 0 descriptor?? [ 617.979209][ T7] usb 5-1: config 0 has no interfaces? [ 618.151356][T10698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1620'. [ 618.170874][ T7] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 618.180832][ T4259] usb-storage 2-1:0.0: USB Mass Storage device detected [ 618.202685][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.233077][ T7] usb 5-1: Product: syz [ 618.237300][ T7] usb 5-1: Manufacturer: syz [ 618.244606][ T7] usb 5-1: SerialNumber: syz [ 618.252062][ T7] usb 5-1: config 0 descriptor?? [ 618.474667][ T4214] usb 2-1: USB disconnect, device number 9 [ 618.707008][ T21] usb 5-1: USB disconnect, device number 10 [ 618.827316][ T4214] usb 6-1: USB disconnect, device number 6 [ 619.166667][T10712] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 619.175653][T10712] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 620.692569][T10733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1631'. [ 620.717377][T10731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1630'. [ 621.139561][ T7] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 621.994724][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 622.154042][ T7] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 622.246578][ T26] kauditd_printk_skb: 161 callbacks suppressed [ 622.246593][ T26] audit: type=1326 audit(1748005049.212:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10765 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a56cf3969 code=0x7ffc0000 [ 622.349220][ T26] audit: type=1326 audit(1748005049.252:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10765 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a56c8fb39 code=0x7ffc0000 [ 622.389066][ T7] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 622.418616][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.447619][ T7] usb 5-1: Product: syz [ 622.457800][ T7] usb 5-1: Manufacturer: syz [ 622.462894][ T26] audit: type=1326 audit(1748005049.252:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10765 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a56c8fb39 code=0x7ffc0000 [ 622.496063][ T7] usb 5-1: SerialNumber: syz [ 622.510273][ T7] usb 5-1: config 0 descriptor?? [ 622.576295][ T26] audit: type=1326 audit(1748005049.252:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10765 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a56c8fb39 code=0x7ffc0000 [ 622.741157][ T26] audit: type=1326 audit(1748005049.252:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10765 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a56cf3969 code=0x7ffc0000 [ 622.803118][ T7] usb 5-1: USB disconnect, device number 11 [ 622.835121][ T26] audit: type=1326 audit(1748005049.252:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10765 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a56cf3969 code=0x7ffc0000 [ 622.880363][T10778] input: syz1 as /devices/virtual/input/input7 [ 623.007611][ T26] audit: type=1326 audit(1748005049.252:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10765 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a56cf3969 code=0x7ffc0000 [ 623.118437][ T26] audit: type=1326 audit(1748005049.252:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10765 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a56cf3969 code=0x7ffc0000 [ 623.152175][ T26] audit: type=1326 audit(1748005049.262:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10765 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a56c8fb39 code=0x7ffc0000 [ 623.180080][ T26] audit: type=1326 audit(1748005049.262:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10765 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a56cf3969 code=0x7ffc0000 [ 624.212785][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.220351][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.303629][T10833] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 627.599473][T10833] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 628.094893][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1675'. [ 630.068360][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1689'. [ 630.808780][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1694'. [ 630.898670][T10919] 8021q: VLANs not supported on vcan0 [ 630.917848][T10916] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 630.945419][T10916] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 631.149692][T10923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 631.237582][T10938] ALSA: mixer_oss: invalid OSS volume '' [ 631.378195][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1701'. [ 631.530768][T10942] loop4: detected capacity change from 0 to 4096 [ 631.548399][T10942] ntfs3: Unknown parameter 'nocase' [ 632.105811][T10950] vxcan1 speed is unknown, defaulting to 1000 [ 632.157831][T10950] vxcan1 speed is unknown, defaulting to 1000 [ 632.241489][T10950] vxcan1 speed is unknown, defaulting to 1000 [ 632.673393][ T13] vxcan1 speed is unknown, defaulting to 1000 [ 632.687687][T10950] infiniband syz2: set active [ 632.702018][T10950] infiniband syz2: added vxcan1 [ 632.785001][T10948] Hibernate inconsistent memory map detected! [ 632.812932][T10948] PM: hibernation: Image mismatch: architecture specific data [ 632.835738][T10950] RDS/IB: syz2: added [ 632.861080][T10950] smc: adding ib device syz2 with port count 1 [ 632.915188][T10950] smc: ib device syz2 port 1 has pnetid [ 632.936912][ T1110] vxcan1 speed is unknown, defaulting to 1000 [ 632.966314][T10950] vxcan1 speed is unknown, defaulting to 1000 [ 633.259835][T10969] vxcan1 speed is unknown, defaulting to 1000 [ 633.455484][T10950] vxcan1 speed is unknown, defaulting to 1000 [ 633.752091][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1713'. [ 633.921309][T10950] vxcan1 speed is unknown, defaulting to 1000 [ 634.011925][T10988] loop4: detected capacity change from 0 to 4096 [ 634.028733][T10988] ntfs3: Unknown parameter 'nocase' [ 634.588372][T10990] vxcan1 speed is unknown, defaulting to 1000 [ 634.743255][T10998] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1720'. [ 634.916552][T11000] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 634.938994][T11000] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 635.046596][T10950] vxcan1 speed is unknown, defaulting to 1000 [ 635.583087][T11022] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1727'. [ 635.624882][T11022] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1727'. [ 635.691089][T10950] vxcan1 speed is unknown, defaulting to 1000 [ 635.864998][T11027] loop2: detected capacity change from 0 to 4096 [ 635.904920][T11027] ntfs3: Unknown parameter 'nocase' [ 636.539941][T11033] netlink: 'syz.5.1733': attribute type 4 has an invalid length. [ 636.683005][T11035] tc_dump_action: action bad kind [ 636.862893][T11042] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 636.888981][T11042] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 637.521009][T11075] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1746'. [ 637.748426][T11074] loop2: detected capacity change from 0 to 4096 [ 637.809897][T11074] ntfs3: Unknown parameter 'nocase' [ 639.254689][T11129] vxcan1 speed is unknown, defaulting to 1000 [ 640.711458][T11166] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 640.720491][T11166] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 642.097330][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1787'. [ 642.314408][T11184] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 642.349013][T11184] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 644.642705][T11221] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 644.651676][T11221] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 644.999429][T11227] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 646.399107][T11257] 8021q: adding VLAN 0 to HW filter on device bond1 [ 646.574043][T11269] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 646.583126][T11269] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 647.595652][T11270] loop2: detected capacity change from 0 to 512 [ 647.947836][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 647.988552][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 648.010908][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 648.018467][T11281] infiniband syz2: set active [ 648.039316][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 648.048142][ T7] vxcan1 speed is unknown, defaulting to 1000 [ 648.304308][T11294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1821'. [ 648.398580][T11291] vxcan1 speed is unknown, defaulting to 1000 [ 648.600821][T11305] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1825'. [ 649.350311][T11312] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 649.359376][T11312] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 649.971424][T11321] team0: Device sit1 is of different type [ 650.488633][T11334] device syzkaller1 entered promiscuous mode [ 650.903509][T11359] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 650.912598][T11359] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 651.378463][T11363] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 651.700456][ C1] Unknown status report in ack skb [ 652.139752][T11399] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 652.148805][T11399] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 652.642292][T11404] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 652.651775][T11404] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 652.772354][T11408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1860'. [ 653.586911][T11431] vxcan1 speed is unknown, defaulting to 1000 [ 653.780281][T11437] ================================================================== [ 653.788764][T11437] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 653.796514][T11437] Write of size 4 at addr ffff888024f31bb8 by task syz.4.1872/11437 [ 653.804522][T11437] [ 653.806873][T11437] CPU: 0 PID: 11437 Comm: syz.4.1872 Not tainted 5.15.184-syzkaller #0 [ 653.815188][T11437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 653.825273][T11437] Call Trace: [ 653.828577][T11437] [ 653.831523][T11437] dump_stack_lvl+0x168/0x230 [ 653.836235][T11437] ? show_regs_print_info+0x20/0x20 [ 653.841461][T11437] ? load_image+0x3b0/0x3b0 [ 653.845995][T11437] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 653.851399][T11437] ? lockdep_hardirqs_on+0x94/0x140 [ 653.856630][T11437] print_address_description+0x60/0x2d0 [ 653.862191][T11437] ? ax25_dev_device_down+0x35e/0x520 [ 653.867572][T11437] kasan_report+0xdf/0x130 [ 653.871999][T11437] ? ax25_dev_device_down+0x35e/0x520 [ 653.877390][T11437] ? kfree+0xef/0x2a0 [ 653.881390][T11437] kasan_check_range+0x27b/0x290 [ 653.886350][T11437] ax25_dev_device_down+0x35e/0x520 [ 653.891563][T11437] ax25_device_event+0x4b4/0x4f0 [ 653.896513][T11437] raw_notifier_call_chain+0xcb/0x160 [ 653.901900][T11437] __dev_notify_flags+0x178/0x2d0 [ 653.906940][T11437] ? __dev_change_flags+0x6a0/0x6a0 [ 653.912147][T11437] ? __dev_change_flags+0x4bb/0x6a0 [ 653.917486][T11437] ? dev_get_flags+0x1c0/0x1c0 [ 653.922263][T11437] ? dev_ioctl+0x54e/0xe50 [ 653.926687][T11437] ? dev_ioctl+0x54e/0xe50 [ 653.931117][T11437] dev_change_flags+0xe3/0x1a0 [ 653.935899][T11437] dev_ifsioc+0x147/0xe70 [ 653.940240][T11437] ? dev_ioctl+0xe50/0xe50 [ 653.944836][T11437] ? apparmor_capable+0x12c/0x190 [ 653.949879][T11437] ? full_name_hash+0x8e/0xe0 [ 653.954594][T11437] dev_ioctl+0x55f/0xe50 [ 653.958855][T11437] ? _copy_from_user+0x111/0x170 [ 653.963820][T11437] sock_do_ioctl+0x222/0x2f0 [ 653.968444][T11437] ? sock_show_fdinfo+0xb0/0xb0 [ 653.973331][T11437] sock_ioctl+0x4ed/0x6e0 [ 653.977772][T11437] ? sock_poll+0x3f0/0x3f0 [ 653.982220][T11437] ? bpf_lsm_file_ioctl+0x5/0x10 [ 653.987189][T11437] ? security_file_ioctl+0x7c/0xa0 [ 653.992330][T11437] ? sock_poll+0x3f0/0x3f0 [ 653.996941][T11437] __se_sys_ioctl+0xfa/0x170 [ 654.001563][T11437] do_syscall_64+0x4c/0xa0 [ 654.006059][T11437] ? clear_bhb_loop+0x30/0x80 [ 654.010757][T11437] ? clear_bhb_loop+0x30/0x80 [ 654.015457][T11437] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 654.021386][T11437] RIP: 0033:0x7fc62eb96969 [ 654.025829][T11437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.045644][T11437] RSP: 002b:00007fc62c9fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.054091][T11437] RAX: ffffffffffffffda RBX: 00007fc62edbdfa0 RCX: 00007fc62eb96969 [ 654.062090][T11437] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000008 [ 654.070101][T11437] RBP: 00007fc62ec18ab1 R08: 0000000000000000 R09: 0000000000000000 [ 654.078103][T11437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.086122][T11437] R13: 0000000000000000 R14: 00007fc62edbdfa0 R15: 00007ffdda837ba8 [ 654.094137][T11437] [ 654.097175][T11437] [ 654.099510][T11437] Allocated by task 11119: [ 654.104070][T11437] __kasan_kmalloc+0xb5/0xf0 [ 654.108776][T11437] ax25_dev_device_up+0x50/0x580 [ 654.113735][T11437] ax25_device_event+0x483/0x4f0 [ 654.118690][T11437] raw_notifier_call_chain+0xcb/0x160 [ 654.124100][T11437] __dev_notify_flags+0x178/0x2d0 [ 654.129149][T11437] dev_change_flags+0xe3/0x1a0 [ 654.133931][T11437] dev_ifsioc+0x147/0xe70 [ 654.138279][T11437] dev_ioctl+0x55f/0xe50 [ 654.142539][T11437] sock_do_ioctl+0x222/0x2f0 [ 654.147147][T11437] sock_ioctl+0x4ed/0x6e0 [ 654.151496][T11437] __se_sys_ioctl+0xfa/0x170 [ 654.156103][T11437] do_syscall_64+0x4c/0xa0 [ 654.160536][T11437] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 654.166453][T11437] [ 654.168957][T11437] Freed by task 11437: [ 654.173045][T11437] kasan_set_track+0x4b/0x70 [ 654.177771][T11437] kasan_set_free_info+0x1f/0x40 [ 654.182737][T11437] ____kasan_slab_free+0xd5/0x110 [ 654.187782][T11437] slab_free_freelist_hook+0xea/0x170 [ 654.193380][T11437] kfree+0xef/0x2a0 [ 654.197213][T11437] ax25_dev_device_down+0x1c0/0x520 [ 654.202435][T11437] ax25_device_event+0x4b4/0x4f0 [ 654.207399][T11437] raw_notifier_call_chain+0xcb/0x160 [ 654.212795][T11437] __dev_notify_flags+0x178/0x2d0 [ 654.217845][T11437] dev_change_flags+0xe3/0x1a0 [ 654.222632][T11437] dev_ifsioc+0x147/0xe70 [ 654.226983][T11437] dev_ioctl+0x55f/0xe50 [ 654.231246][T11437] sock_do_ioctl+0x222/0x2f0 [ 654.235899][T11437] sock_ioctl+0x4ed/0x6e0 [ 654.240261][T11437] __se_sys_ioctl+0xfa/0x170 [ 654.244871][T11437] do_syscall_64+0x4c/0xa0 [ 654.249304][T11437] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 654.255223][T11437] [ 654.257556][T11437] The buggy address belongs to the object at ffff888024f31b00 [ 654.257556][T11437] which belongs to the cache kmalloc-192 of size 192 [ 654.271633][T11437] The buggy address is located 184 bytes inside of [ 654.271633][T11437] 192-byte region [ffff888024f31b00, ffff888024f31bc0) [ 654.285022][T11437] The buggy address belongs to the page: [ 654.290682][T11437] page:ffffea000093cc40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24f31 [ 654.301003][T11437] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 654.308854][T11437] raw: 00fff00000000200 ffffea0000647480 0000000400000004 ffff888016841a00 [ 654.317462][T11437] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 654.326057][T11437] page dumped because: kasan: bad access detected [ 654.332500][T11437] page_owner tracks the page as allocated [ 654.338241][T11437] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4177, ts 74532085372, free_ts 74478568432 [ 654.354240][T11437] get_page_from_freelist+0x1b77/0x1c60 [ 654.359821][T11437] __alloc_pages+0x1e1/0x470 [ 654.364440][T11437] new_slab+0xb6/0x4b0 [ 654.368527][T11437] ___slab_alloc+0x81e/0xdf0 [ 654.373135][T11437] __kmalloc_node+0x200/0x3b0 [ 654.377828][T11437] memcg_alloc_page_obj_cgroups+0x81/0x120 [ 654.383662][T11437] slab_post_alloc_hook+0xba/0x380 [ 654.388799][T11437] kmem_cache_alloc+0x100/0x290 [ 654.393665][T11437] __d_alloc+0x2a/0x6f0 [ 654.397842][T11437] d_alloc+0x47/0x1a0 [ 654.401841][T11437] lookup_one_qstr_excl+0xc6/0x240 [ 654.406974][T11437] filename_create+0x21e/0x450 [ 654.411759][T11437] do_mkdirat+0x9d/0x5a0 [ 654.416031][T11437] __x64_sys_mkdirat+0x85/0x90 [ 654.420813][T11437] do_syscall_64+0x4c/0xa0 [ 654.425260][T11437] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 654.431183][T11437] page last free stack trace: [ 654.435865][T11437] free_unref_page_prepare+0x637/0x6c0 [ 654.441345][T11437] free_unref_page+0x94/0x280 [ 654.446044][T11437] tlb_finish_mmu+0x236/0x2e0 [ 654.450740][T11437] exit_mmap+0x3a6/0x5f0 [ 654.455005][T11437] __mmput+0x115/0x3b0 [ 654.459091][T11437] exit_mm+0x567/0x6c0 [ 654.463182][T11437] do_exit+0x599/0x20a0 [ 654.467375][T11437] do_group_exit+0x12e/0x300 [ 654.471982][T11437] get_signal+0x6ca/0x12c0 [ 654.476415][T11437] arch_do_signal_or_restart+0xc1/0x1300 [ 654.482088][T11437] exit_to_user_mode_loop+0x9e/0x130 [ 654.487416][T11437] exit_to_user_mode_prepare+0xb1/0x140 [ 654.492986][T11437] syscall_exit_to_user_mode+0x16/0x40 [ 654.498812][T11437] do_syscall_64+0x58/0xa0 [ 654.503246][T11437] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 654.509188][T11437] [ 654.511523][T11437] Memory state around the buggy address: [ 654.517159][T11437] ffff888024f31a80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 654.525236][T11437] ffff888024f31b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 654.533322][T11437] >ffff888024f31b80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 654.541488][T11437] ^ [ 654.547414][T11437] ffff888024f31c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 654.555498][T11437] ffff888024f31c80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 654.563572][T11437] ================================================================== [ 654.571648][T11437] Disabling lock debugging due to kernel taint [ 654.650566][T11437] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 654.657812][T11437] CPU: 0 PID: 11437 Comm: syz.4.1872 Tainted: G B 5.15.184-syzkaller #0 [ 654.667746][T11437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 654.677913][T11437] Call Trace: [ 654.681223][T11437] [ 654.684164][T11437] dump_stack_lvl+0x168/0x230 [ 654.688859][T11437] ? show_regs_print_info+0x20/0x20 [ 654.694077][T11437] ? load_image+0x3b0/0x3b0 [ 654.698596][T11437] panic+0x2c9/0x7f0 [ 654.702510][T11437] ? bpf_jit_dump+0xd0/0xd0 [ 654.707039][T11437] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 654.712959][T11437] ? _raw_spin_unlock+0x40/0x40 [ 654.717915][T11437] ? ax25_dev_device_down+0x35e/0x520 [ 654.723298][T11437] check_panic_on_warn+0x80/0xa0 [ 654.728258][T11437] ? ax25_dev_device_down+0x35e/0x520 [ 654.733649][T11437] end_report+0x6d/0xf0 [ 654.737831][T11437] kasan_report+0x102/0x130 [ 654.742363][T11437] ? ax25_dev_device_down+0x35e/0x520 [ 654.747749][T11437] ? kfree+0xef/0x2a0 [ 654.751755][T11437] kasan_check_range+0x27b/0x290 [ 654.756717][T11437] ax25_dev_device_down+0x35e/0x520 [ 654.761931][T11437] ax25_device_event+0x4b4/0x4f0 [ 654.766887][T11437] raw_notifier_call_chain+0xcb/0x160 [ 654.772279][T11437] __dev_notify_flags+0x178/0x2d0 [ 654.777328][T11437] ? __dev_change_flags+0x6a0/0x6a0 [ 654.782537][T11437] ? __dev_change_flags+0x4bb/0x6a0 [ 654.787752][T11437] ? dev_get_flags+0x1c0/0x1c0 [ 654.792535][T11437] ? dev_ioctl+0x54e/0xe50 [ 654.797051][T11437] ? dev_ioctl+0x54e/0xe50 [ 654.801480][T11437] dev_change_flags+0xe3/0x1a0 [ 654.806267][T11437] dev_ifsioc+0x147/0xe70 [ 654.810804][T11437] ? dev_ioctl+0xe50/0xe50 [ 654.815238][T11437] ? apparmor_capable+0x12c/0x190 [ 654.820268][T11437] ? full_name_hash+0x8e/0xe0 [ 654.824961][T11437] dev_ioctl+0x55f/0xe50 [ 654.829220][T11437] ? _copy_from_user+0x111/0x170 [ 654.834175][T11437] sock_do_ioctl+0x222/0x2f0 [ 654.838775][T11437] ? sock_show_fdinfo+0xb0/0xb0 [ 654.843657][T11437] sock_ioctl+0x4ed/0x6e0 [ 654.848012][T11437] ? sock_poll+0x3f0/0x3f0 [ 654.852443][T11437] ? bpf_lsm_file_ioctl+0x5/0x10 [ 654.857395][T11437] ? security_file_ioctl+0x7c/0xa0 [ 654.862522][T11437] ? sock_poll+0x3f0/0x3f0 [ 654.866953][T11437] __se_sys_ioctl+0xfa/0x170 [ 654.871559][T11437] do_syscall_64+0x4c/0xa0 [ 654.875987][T11437] ? clear_bhb_loop+0x30/0x80 [ 654.880677][T11437] ? clear_bhb_loop+0x30/0x80 [ 654.885371][T11437] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 654.891280][T11437] RIP: 0033:0x7fc62eb96969 [ 654.895710][T11437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.915333][T11437] RSP: 002b:00007fc62c9fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.923771][T11437] RAX: ffffffffffffffda RBX: 00007fc62edbdfa0 RCX: 00007fc62eb96969 [ 654.931758][T11437] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000008 [ 654.939746][T11437] RBP: 00007fc62ec18ab1 R08: 0000000000000000 R09: 0000000000000000 [ 654.947728][T11437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.955797][T11437] R13: 0000000000000000 R14: 00007fc62edbdfa0 R15: 00007ffdda837ba8 [ 654.963790][T11437] [ 654.967117][T11437] Kernel Offset: disabled [ 654.971539][T11437] Rebooting in 86400 seconds..