last executing test programs: 6m29.533871909s ago: executing program 32 (id=905): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000040)={0x74, r1, 0x1, 0x70bd27, 0x0, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @empty, 0x4b}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 6m4.956710647s ago: executing program 33 (id=1123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}]}]}, 0x30}}, 0x0) 5m54.256259436s ago: executing program 34 (id=1213): unshare(0x400) r0 = mq_open(&(0x7f0000008740)='&\x00\x12|\xd6hJ\x1e\xc6\xea\xc3\xe5\xa3\xf9\xb8Bmp\x9e\xdb \x86\x11NLd\xe8\x8b\xacg\xf4\xd9L+\x95.\xf8\x00\x16sS\xef\x15\x9eii%\x7f\xba}MO\xb3\x82\xb4\xe8d-P\x99!\x84<,\xc0\xc2\xf4\xe4\x81\x80\xe4Y\xa9l\xf3\x7ff\x96\xc0d\xd7x$\x83\xb8\x80Xh\xe4g\xcdA\x8c\x83`^De\'\xd8\x18\x99\xaf\x95\xcd+\xa6\xa7\xda\x9bmT\x96&\x93\\\x93\xca0\x88\xb5Iq\x91?\xda\xc9]>K\xf4G9\x00\x00\x00\x00\xc4\x0e\x9e\xd3\xb5\x9d]\xabe\xef%\xb9\xf6Q\xc2\xb1\"r\x1d\x11\x81\xf7\xa0\x87T\xb0\x86\xcaw\xdb\xfe8J\x86,\xaa\x0e\a\xc1ac\xf3\xddf\xa4\x05\v\xe9\xf0d\n\x00\a\xdc\xea\x87\x00\xfc^/\xbcdD\x87\xa7C\xef\x85\xdd\x95\xca\a\x87\x16\x90/\n\x14\xb9e\x15\xc4\x8f\xe7\xfd\xb6y,~\x1c\xf7\xb7\x84\x02\x82T!\xd2\x8eWL\xeb\xdd\xe4\r/\xb3M\x00\rd\xdc\x944\xdc\xb3\xbb:|\xd3\xc8\xfb<\x9c\xc3\t\xc6M\xf9\f\x8c.\xde\xf3\x16_\xc9\x15Ua)\xf2\xbe\t\xc3\xa9\xc7\xee5{\x8f\xa8Y>\b\xfco\xab\x9b\x9f\xae7\xa2\xe0\x95pVl\x914\x86\xe0\xc3\xc2\x90\x9e\x9f%\xf3^\x107\xe6\xbd}\xfazE\x85\x91Lk\xb5O\xffK\xc9\xc8\x8eo\xeb)I\xaf\xf5\xd9\xbe\xba\'\xdb{wQS\xb0&\x92W\xb0\x87\x93\xf2\n\xc8U\xe5O\x1a\xfc&\xe2\xe4g.\x00&Z:\xec\xacp\x9a1n\xa6\t\xd3uc\xad\x0f\xd2\xc7\x0e\xc13J\x9cZ\xff\xdf\x8b\xd9\x8b\xcb\xe9\x90Gc\xd4\x83\x9a@\x86_\b\x00\x00\x00\xfd\xce\xa9\xe6hjU\xb3Qt\xc5\xf4\xd0\xf3\xec\xf8\x14LH\xfa\x13\xb5\b\xbek\xd5\x04\x8f3xC\x0e\xd2\xfe\xd8\xa1\xdb\xd4\xdak3\x9a\xb1\xcfX3\xfc_\xae\xd8\xe7aRa/\xf5\xdc^\xfa\xf3\xdd\x1a\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x00(\xdfJoa\x81\xaen\x88Z\x86\xc0\x05\xa8?\x86\xe9\xd2\xb43eA\x14\x01\x0f\x85Y5\xe5\xfb2\xa6\xbd{\x1d|P\x14\x82M\n\xcf\xa3\bfk\v\xb1Y\xa3\x16AE\xc6\x11>\x93\x05w\x87\xed\xb9\xd2\xb6\xa4\xfaT\xfa\xda\x91\x11\xb1*B\x17\x03\\{\xa0\xc8\xf3\xf7\xefYOs\xf7\xdc>\xd9,\xbe\x9dL\xdf\x0f\xd9\x8a~D\vU\\5\xee\xb8:\xf7\x01\xb7\xd1y\x83\x8c\xe6\xb4\xa3KY\xf1\xc5\xaf\xf2\x8dW\xaf\xf2\xae\xed\x01\xa0\x00\x87)A\x05\xdae\x9c;/\xf4/\xe4\xe9\xec\xb1ga4\xf9f\x1d*\x9aX\xff\xb7\x96t$\x05\x11y\xef\xb4+\x88db\x1a\x1e\x1f\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x124, 0x0) mq_notify(r0, 0x0) 5m5.805401981s ago: executing program 35 (id=1654): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x40, r1, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x40}}, 0x0) 4m53.472386764s ago: executing program 36 (id=1746): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) sendmmsg$inet(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="cf", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x6ef8eb021112b2d8) 4m38.197682024s ago: executing program 8 (id=1837): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000002c0)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000300)={0x3, &(0x7f0000000340)=[{0x28, 0x0, 0x4, 0xfffff034}, {0x50, 0x1, 0x3}, {0x6, 0x7f, 0x10, 0x47}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 4m37.822071872s ago: executing program 8 (id=1842): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80000003, 0x0, 0x101}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00000001000010000000000ffdbdf25fe8800000000000000000000000000010000000000000000000000000000000000000003000000000000000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffff000000000000000033000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000ffffffffffd5000000000000000000000000000000000000fcffffffffffffff0e000000000000040100000027"], 0xf0}}, 0x0) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 4m37.602907094s ago: executing program 8 (id=1846): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4001, @random="040003e31e00", 'gre0\x00'}}, 0x1e) close(0x3) 4m37.380657766s ago: executing program 8 (id=1850): openat(0xffffffffffffff9c, 0x0, 0x46042, 0x179) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x841e, &(0x7f0000000940)={[{@dioread_lock}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@barrier_val={'barrier', 0x3d, 0x36}}]}, 0x3, 0x42f, &(0x7f00000003c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='devices.list\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000840)={0x3, 0x6, 0x7, 0xffffffffffffffb6, 0x5, 0x6}) 4m36.693465656s ago: executing program 8 (id=1854): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f0000000000)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f0000000040)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x0, 0x221490, 0x0) stat(&(0x7f00000003c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f0000000400)) 4m36.240677021s ago: executing program 8 (id=1856): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x40000}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0xfffffffc, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0xfffffffffffffffb}, {0x0, 0x3ffffffffffffd, 0x200000000000000}, 0x2}, [@mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 4m28.152860457s ago: executing program 2 (id=1905): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x2000) readv(r0, &(0x7f0000001400)=[{&(0x7f0000002700)=""/4106, 0x100a}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) 4m26.607712513s ago: executing program 2 (id=1910): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) ioperm(0x4, 0x8, 0x5) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08006, &(0x7f0000000100)=ANY=[], 0xfe, 0x68f, &(0x7f0000000b00)="$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") llistxattr(&(0x7f0000000140)='./file1\x00', 0x0, 0xffffffffffffff76) 4m26.159364507s ago: executing program 2 (id=1912): lremovexattr(&(0x7f0000000780)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='syz', 0x0) 4m25.852764079s ago: executing program 2 (id=1914): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000000180)={[{@discard}, {@fmask={'fmask', 0x3d, 0x2}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@fmask={'fmask', 0x3d, 0x4}}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x5}}, {@namecase}, {@umask={'umask', 0x3d, 0x81}}, {@errors_continue}, {@utf8}]}, 0x1, 0x1535, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000002440)='./proc\x00', &(0x7f0000002480)='proc\x00', 0x0, 0x0) 4m25.290301125s ago: executing program 2 (id=1920): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fstatfs(0xffffffffffffffff, 0x0) 4m24.84283825s ago: executing program 2 (id=1925): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) sendto$packet(r0, &(0x7f0000000100)="3f031c00eee8140006001e0089e9aaa911d7c2290f0088481327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000080)={0xc9, 0x0, r1, 0x1, 0x4, 0x6, @multicast}, 0x14) 4m24.438723481s ago: executing program 37 (id=1925): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) sendto$packet(r0, &(0x7f0000000100)="3f031c00eee8140006001e0089e9aaa911d7c2290f0088481327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000080)={0xc9, 0x0, r1, 0x1, 0x4, 0x6, @multicast}, 0x14) 4m21.157595482s ago: executing program 38 (id=1856): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x40000}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0xfffffffc, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0xfffffffffffffffb}, {0x0, 0x3ffffffffffffd, 0x200000000000000}, 0x2}, [@mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 3m9.704902216s ago: executing program 4 (id=2483): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0xc}, @hyper, 0x0, 0xfffffffffffffffc, 0x5e, 0x200000000000, 0x100000000000006, 0x400}) 3m9.477051029s ago: executing program 4 (id=2486): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x210000, &(0x7f0000000240)={[{@nobarrier}, {@usrjquota}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x576, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file1\x00', 0x42, 0x0) close_range(r0, r0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0x0, r0, 0x1, 0x5, 0x9, 0x2}) 3m9.049892112s ago: executing program 4 (id=2493): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file1\x00', 0x10000, &(0x7f00000006c0)={[{@nobh}, {@auto_da_alloc}, {@grpquota}]}, 0x3, 0x4c7, &(0x7f0000000840)="$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") r0 = open(&(0x7f0000000fc0)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000001040)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282f, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x800000, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r0, r0, &(0x7f0000001100)=0x4, 0x8112) 3m8.164199581s ago: executing program 4 (id=2499): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1400c, &(0x7f00000004c0)={[{@debug}, {@data_journal}, {@norecovery}]}, 0x3, 0x498, &(0x7f0000000500)="$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") syz_mount_image$fuse(0x0, &(0x7f00000009c0)='./bus\x00', 0x3000440, 0x0, 0xff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) llistxattr(&(0x7f0000000b40)='./file0\x00', 0x0, 0xfffffdf3) 3m7.605045047s ago: executing program 4 (id=2501): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0xa, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000028c0)={0x2e, 0x50, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002880)=@new_dev={0x3, 0xad, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x1a2}}}, &(0x7f0000002940)) 3m7.041136794s ago: executing program 4 (id=2504): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000008f80)=@newlink={0x44, 0x10, 0x503, 0x40000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 3m6.627973876s ago: executing program 39 (id=2504): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000008f80)=@newlink={0x44, 0x10, 0x503, 0x40000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1m36.565037814s ago: executing program 3 (id=3236): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001000010027bd700402d4df2500000000", @ANYRES32=r2, @ANYBLOB="894e0600c16a010034001280110001006272696467655f736c617665000000001c00058005000800000000000500200001000000"], 0x54}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) 1m35.944968816s ago: executing program 3 (id=3239): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f0000000040)=ANY=[], 0xfe, 0xc24, &(0x7f0000001480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x6ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c0) 1m35.462724345s ago: executing program 3 (id=3243): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000300)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000380)={0x805, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000440)=0x3) 1m35.386957212s ago: executing program 5 (id=3245): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) connect(r0, &(0x7f0000000240)=@qipcrtr={0x2a, 0x1, 0x7fff}, 0x80) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000000)="938d2ad8f4bb52e131b795a5e1187a71cf04130a3d527f3176ed8730e28fb504283c5b4035385a80cba05f2818d4b372841d2285bc0713bff4e2fcc2a881e06ab5a631781a6a1b0bcea133d0d846158e5ec6b84546cdc6007c966bd63ea22a5b7734fa5f2776ea3e"}, {0x0, 0x14}], 0x2) 1m35.255325576s ago: executing program 3 (id=3246): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r0, &(0x7f0000002a40)={0x2020}, 0x2020) 1m35.254917536s ago: executing program 5 (id=3247): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x5ee7, 0x4) 1m35.025081149s ago: executing program 3 (id=3248): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0x3a, 0x1, 0x0, 0x0, {0x1, 0x1}, [@generic="00000000140001800c0024800400010000000000"]}, 0x2c}}, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) 1m34.460854296s ago: executing program 3 (id=3252): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x40, r0, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x64}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x40}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000000) 1m34.059184196s ago: executing program 40 (id=3252): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x40, r0, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x64}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x40}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000000) 1m34.043691697s ago: executing program 5 (id=3256): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d00, 0x0) 1m33.876136374s ago: executing program 5 (id=3257): syz_mount_image$ext4(&(0x7f0000000980)='ext2\x00', &(0x7f0000000900)='./file0\x00', 0x201804d, &(0x7f000001a1c0), 0x1, 0x491, &(0x7f000001a200)="$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") mount$overlay(0x0, &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0), 0x0, &(0x7f0000000f00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0\x00', 0x141104, 0x80) getdents64(r0, 0x0, 0x0) 1m32.398848922s ago: executing program 5 (id=3267): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}], 0x1c) listen(r0, 0x2) getpeername(r0, 0x0, &(0x7f0000000200)) 1m31.359069867s ago: executing program 5 (id=3274): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000340)={0x1, 0x0, [{0x40000084, 0x0, 0xfffffffffffffffe}]}) 1m30.892439854s ago: executing program 41 (id=3274): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000340)={0x1, 0x0, [{0x40000084, 0x0, 0xfffffffffffffffe}]}) 3.581264721s ago: executing program 6 (id=3950): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) 3.541491055s ago: executing program 7 (id=3951): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="cf042abd7000fcffffff0c00000008000300", @ANYRES32=r2, @ANYBLOB="040013000a0006"], 0x4c}, 0x1, 0x0, 0x0, 0x404c000}, 0x10008000) 3.269123282s ago: executing program 9 (id=3952): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) lseek(r0, 0xffffffffffffffff, 0x1) 3.268747922s ago: executing program 6 (id=3953): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x210800, &(0x7f0000000440)={[{@lazytime}, {@discard}, {}, {@prjquota}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x31, 0x39, 0x6d]}}, {@qnoenforce}]}, 0x4, 0x9606, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f000000a8c0)='./file0/file0\x00', 0x300, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0205867, &(0x7f000000a900)={0x0, 0x700, 0x8001}) 3.104060128s ago: executing program 7 (id=3955): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3b0, 0xffffffff, 0x248, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @local, [0x0, 0xff000000, 0xffffff00], [0xff000000, 0xff000000, 0xff, 0xff000000], 'vlan1\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x32, 0x5, 0x0, 0xe0}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xda, 0x28, "7eed4936aa4d30a2095b240a155fa6367f2f5307ae868132f9cf35b6ae43"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00', {0x25f}}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2, [0xffffff00, 0xff000000, 0x7fffffff, 0xffffffff], 0x4e23, 0x4e21, 0x4e20, 0x4e24, 0x9, 0x5, 0x0, 0xfffffff8, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000480)='\n', 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000480)={r1, r0, r0}, &(0x7f0000000580)=""/204, 0xcc, &(0x7f0000000680)={&(0x7f00000004c0)={'sha3-384\x00'}}) 2.866557862s ago: executing program 7 (id=3956): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB='D'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 2.762409723s ago: executing program 0 (id=3957): r0 = io_uring_setup(0x5d38, &(0x7f0000000040)={0x0, 0xcf32, 0x2, 0x3, 0x109}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) close_range(r0, r0, 0x0) 2.619362307s ago: executing program 7 (id=3959): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat(r0, &(0x7f0000000280)='root/proc/sys\x00', 0x10000, 0x0) lseek(r1, 0x1, 0x0) getdents(r1, 0x0, 0x3f) 2.477697051s ago: executing program 9 (id=3960): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e21, 0xffffe61b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb5b0}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000300)="ee", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x1}, 0x8) 2.345445195s ago: executing program 7 (id=3961): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000e80)='E', 0x1, 0x4fed3) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000ec0)={0x17c04, 0xffffffffffffffff, 0x4f003, 0x100000001, 0x3}) 2.136876105s ago: executing program 9 (id=3962): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r0}) 2.08506585s ago: executing program 1 (id=3963): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) preadv(r2, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000bc0)=""/4110, 0x100e}], 0x2, 0xa, 0x9) 1.737235205s ago: executing program 9 (id=3964): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f000000adc0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f000000ae00)='./file0\x00', 0x1c4) mount$fuse(0x0, &(0x7f000000ae40)='./file0\x00', &(0x7f000000ae80), 0x8001, &(0x7f000000aec0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f000000f180)='./file0/file0\x00', 0x42, 0x0) 1.684278181s ago: executing program 0 (id=3965): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/syz_tun/gro_flush_timeout\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)="38f1", 0x2) 1.502305059s ago: executing program 1 (id=3966): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.49331526s ago: executing program 0 (id=3967): r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f00000002c0)=[{0x3, 0xfff7, 0x1000}], 0x1) semop(r0, &(0x7f0000000300)=[{0x3, 0xa78d, 0x1000}], 0x1) semop(r0, &(0x7f0000000480)=[{0x3, 0x3, 0x800}, {0x3, 0x6}], 0x2) 1.387368401s ago: executing program 6 (id=3968): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x90) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)="651a2d5f67726f75702f5f796576656e7420731b6489a82e", 0x18) 1.246445645s ago: executing program 7 (id=3969): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1.176265962s ago: executing program 1 (id=3970): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x4}, 'port0\x00', 0x0, 0x60004, 0xfffffffc, 0xffffffff, 0x1, 0xfffffffc, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000500)={{0x80, 0x2}, 'port0\x00', 0x57, 0x40800, 0x9, 0x10, 0x0, 0x7fd, 0x8, 0x0, 0x3, 0x2}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{0x80, 0x2}, 'port0\x00', 0x80, 0x100816, 0x4, 0x9, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) 924.603027ms ago: executing program 1 (id=3971): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x4c, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x25, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xe}, @device_a, @device_a, @initial, {0x9, 0x5}}, @addba_resp={0x3, 0x1, {0x1, 0x20, {0x0, 0x0, 0x9, 0x72}, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x80) 621.081608ms ago: executing program 9 (id=3972): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$KDSIGACCEPT(r1, 0x80045440, 0xc) 586.903511ms ago: executing program 1 (id=3973): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020267b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff8850000006d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 466.313853ms ago: executing program 0 (id=3974): openat$nullb(0xffffffffffffff9c, &(0x7f00000006c0), 0xa4342, 0x0) r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000700)={0x0, 0x69ec, 0x1, 0x1, 0x50}, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000840)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000011c0)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x6a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001180)=@new_dev={0x3, 0x1e0, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000001240)) 381.001821ms ago: executing program 6 (id=3975): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2}) write$P9_RSTATu(r0, &(0x7f0000000100)={0x239, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {}, 0x0, 0x0, 0x3, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) 279.156152ms ago: executing program 9 (id=3976): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3004000, &(0x7f0000000340), 0x2, 0x7ad, &(0x7f0000002080)="$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") chdir(&(0x7f00000003c0)='./file0\x00') syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0) 239.406116ms ago: executing program 0 (id=3977): mmap$IORING_OFF_SQ_RING(0x0, 0xc00004, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40047452, 0x0) 185.043521ms ago: executing program 1 (id=3978): r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 184.817152ms ago: executing program 6 (id=3979): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4) sendmmsg$inet6(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @mcast2}, 0x1c, 0x0}}], 0x1, 0x80) 58.702284ms ago: executing program 0 (id=3980): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3b}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010101, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 0s ago: executing program 6 (id=3981): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./bus\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4449, &(0x7f0000008900)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x283016, 0x0, 0x13, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file1\x00', 0x1810090, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f00000039c0)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) kernel console output (not intermixed with test programs): 6] usb 10-1: config 0 interface 0 has no altsetting 0 [ 388.670357][ T7616] usb 10-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 388.690224][T12956] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.2705: couldn't read orphan inode 15 (err -117) [ 388.724687][ T7616] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.759370][ T7616] usb 10-1: config 0 descriptor?? [ 388.772762][T12956] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 389.186895][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 389.278061][ T7616] uclogic 0003:2179:0077.0013: interface is invalid, ignoring [ 389.290845][T12971] netlink: 'syz.3.2710': attribute type 10 has an invalid length. [ 389.311978][ T4351] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 389.524452][ T4351] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 389.561993][ T4351] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 389.600825][ T4351] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 389.644915][ T4351] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 389.685007][ T4351] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 389.724634][ T4351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.771385][T12966] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 389.798822][T12966] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 389.812141][ T5028] usb 10-1: USB disconnect, device number 12 [ 389.867402][ T4351] pl2303 6-1:1.0: pl2303 converter detected [ 389.889819][ T4351] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 390.182381][T12966] pl2303 6-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 390.248381][T12966] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 390.310950][T12966] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 390.373818][T12966] pl2303 6-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 390.464705][T12966] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 390.569438][ T7616] usb 6-1: USB disconnect, device number 3 [ 390.620481][ T7616] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 390.670462][ T7616] pl2303 6-1:1.0: device disconnected [ 390.989806][T13008] loop3: detected capacity change from 0 to 8192 [ 391.067501][T13008] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 391.173514][T13008] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 391.251306][T13008] REISERFS (device loop3): using ordered data mode [ 391.311169][T13008] reiserfs: using flush barriers [ 391.359184][T13008] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 391.519532][T13008] REISERFS (device loop3): checking transaction log (loop3) [ 391.571028][T13008] REISERFS (device loop3): Using r5 hash to sort names [ 391.619025][T13008] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 391.804755][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 391.804764][ T26] audit: type=1400 audit(1794326376.904:130): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=13033 comm="syz.9.2728" name="p" offset=48 [ 392.213935][T13046] rnbd_client L211: map_device: Parameters missing [ 392.926225][T13078] loop5: detected capacity change from 0 to 1024 [ 392.997626][T13078] EXT4-fs: Ignoring removed mblk_io_submit option [ 393.065024][T13078] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 393.182948][T13078] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 393.374763][T12281] EXT4-fs (loop5): unmounting filesystem. [ 393.787681][T13109] syz.9.2754[13109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 393.789546][T13109] syz.9.2754[13109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 393.883617][ T7253] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 393.994295][T13068] loop1: detected capacity change from 0 to 32768 [ 394.079420][T13068] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2740 (13068) [ 394.102373][T13115] ima: policy update failed [ 394.124838][ T5028] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 394.143164][ T26] audit: type=1802 audit(1794326379.244:131): pid=13115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2758" res=0 errno=0 [ 394.161945][ T7253] usb 4-1: Using ep0 maxpacket: 16 [ 394.196741][ T7253] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 394.256388][ T7253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.286678][ T7253] usb 4-1: Product: syz [ 394.290885][ T7253] usb 4-1: Manufacturer: syz [ 394.334793][ T7253] usb 4-1: SerialNumber: syz [ 394.364825][ T5028] usb 6-1: not running at top speed; connect to a high speed hub [ 394.395816][ T5028] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.466743][ T5028] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 394.544520][ T5028] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 394.589407][ T5028] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.661104][ T5028] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 394.710425][ T5028] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 394.757597][ T5028] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 394.811218][ T5028] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 394.864219][ T5028] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 394.920982][ T5028] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 395.000321][T13068] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 395.116419][T13068] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 395.171427][ T7253] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 395.221447][ T7253] usb 4-1: USB disconnect, device number 14 [ 395.231742][T13068] BTRFS info (device loop1): setting nodatasum [ 395.286559][ T5028] usb 6-1: USB disconnect, device number 4 [ 395.299080][T13068] BTRFS info (device loop1): force zlib compression, level 3 [ 395.323368][ T5028] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 395.369613][T13068] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 395.398070][ T5028] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 395.447314][ T5028] keyspan 6-1:1.0: device disconnected [ 395.459276][T13068] BTRFS info (device loop1): use lzo compression, level 0 [ 395.520509][T13068] BTRFS info (device loop1): turning on flush-on-commit [ 395.551556][T13068] BTRFS info (device loop1): enabling auto defrag [ 395.585883][T13068] BTRFS info (device loop1): max_inline at 4096 [ 395.615335][T13068] BTRFS info (device loop1): using free space tree [ 395.746943][T13156] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2761'. [ 395.806268][T13068] BTRFS error (device loop1): open_ctree failed: -12 [ 396.111006][T13165] (unnamed net_device) (uninitialized): (slave vxcan0): Device is not bonding slave [ 396.171507][T13165] (unnamed net_device) (uninitialized): option active_slave: invalid value (vxcan0) [ 396.541276][T13175] loop5: detected capacity change from 0 to 512 [ 396.657514][T13175] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 396.759666][T13175] EXT4-fs (loop5): shut down requested (0) [ 397.119995][T12281] EXT4-fs (loop5): unmounting filesystem. [ 397.130665][T13193] loop9: detected capacity change from 0 to 128 [ 397.967548][T13223] loop3: detected capacity change from 0 to 512 [ 398.048990][T13223] EXT4-fs (loop3): 1 truncate cleaned up [ 398.088522][T13223] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 398.230474][T13223] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2783: bg 0: block 465: padding at end of block bitmap is not set [ 398.351459][T13223] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28 [ 398.429671][T13223] EXT4-fs (loop3): This should not happen!! Data will be lost [ 398.429671][T13223] [ 398.487234][T13223] EXT4-fs (loop3): Total free blocks count 0 [ 398.520342][T13223] EXT4-fs (loop3): Free/Dirty block details [ 398.561175][T13223] EXT4-fs (loop3): free_blocks=0 [ 398.586826][T13223] EXT4-fs (loop3): dirty_blocks=10 [ 398.601052][T13245] program syz.0.2791 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 398.624669][T13223] EXT4-fs (loop3): Block reservation details [ 398.648256][T13223] EXT4-fs (loop3): i_reserved_data_blocks=10 [ 398.858934][T11334] EXT4-fs (loop3): unmounting filesystem. [ 398.867886][T13249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 398.948039][T13249] device bond1 entered promiscuous mode [ 398.994171][T13249] bond0: (slave bond1): Enslaving as an active interface with an up link [ 399.430013][T13273] loop9: detected capacity change from 0 to 64 [ 399.516863][T13279] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 399.567143][T13273] hfs: walked past end of dir [ 400.356615][T13309] i2c i2c-0: new_device: Invalid device name [ 400.511166][T13315] rnbd_client L211: map_device: Parameters missing [ 401.321730][T13350] netlink: 'syz.5.2827': attribute type 10 has an invalid length. [ 401.383214][T13350] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.2827'. [ 401.407333][T13319] device-mapper: table: 248:16: crypt: Error allocating crypto tfm (-ENOENT) [ 401.474621][T13357] ALSA: mixer_oss: invalid OSS volume '' [ 401.490457][T13319] device-mapper: ioctl: error adding target to table [ 401.537073][T13357] ALSA: mixer_oss: invalid OSS volume '' [ 401.585421][T13357] ALSA: mixer_oss: invalid OSS volume '' [ 401.626377][T13357] ALSA: mixer_oss: invalid OSS volume '' [ 401.721215][T13364] loop5: detected capacity change from 0 to 128 [ 401.853447][T13364] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 401.980768][T13364] hpfs: filesystem error: improperly stopped [ 402.025159][ T58] Bluetooth: hci5: Frame reassembly failed (-84) [ 402.048914][T13364] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 402.106743][T13364] hpfs: You really don't want any checks? You are crazy... [ 402.176194][T13364] hpfs: Code page index out of array [ 402.222170][T13364] hpfs: code page support is disabled [ 402.238570][T13364] hpfs: hpfs_map_4sectors(): unaligned read [ 402.274864][T13364] hpfs: hpfs_map_4sectors(): unaligned read [ 402.322489][T13364] hpfs: filesystem error: unable to find root dir [ 402.587503][T13383] loop3: detected capacity change from 0 to 512 [ 402.668885][T13383] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 402.691814][T13360] loop9: detected capacity change from 0 to 32768 [ 402.736605][T13383] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.750757][T13390] loop1: detected capacity change from 0 to 256 [ 402.798146][T13360] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 scanned by syz.9.2830 (13360) [ 402.876450][T13390] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 402.891276][T13383] EXT4-fs error (device loop3): __ext4_find_entry:1698: inode #12: comm syz.3.2838: checksumming directory block 0 [ 402.971928][T13360] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 403.035556][T13383] overlayfs: failed to create directory ./file0/work (errno: 74); mounting read-only [ 403.075691][T13360] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 403.093659][T13383] overlayfs: failed to clone lowerpath [ 403.143975][T13360] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 403.245277][T13360] BTRFS info (device loop9): use zstd compression, level 3 [ 403.274066][T13383] EXT4-fs (loop3): unmounting filesystem. [ 403.300153][T13360] BTRFS info (device loop9): using free space tree [ 403.518383][T13360] BTRFS info (device loop9): enabling ssd optimizations [ 403.716916][T13423] loop3: detected capacity change from 0 to 16 [ 403.787381][T13423] erofs: (device loop3): mounted with root inode @ nid 36. [ 403.840245][ T9675] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 404.043059][ T4285] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 404.289717][T13429] loop5: detected capacity change from 0 to 4096 [ 404.367518][T13429] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 404.926296][T13446] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2847'. [ 405.000258][T12281] ntfs3: loop5: ntfs_evict_inode r=3 failed, -22. [ 405.032669][T13446] device bridge0 entered promiscuous mode [ 405.052007][T12281] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 405.059032][T12281] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 405.091811][T13446] device macsec1 entered promiscuous mode [ 405.300136][T13453] loop5: detected capacity change from 0 to 1024 [ 405.346150][T13453] EXT4-fs: inline encryption not supported [ 405.436756][T13453] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 2: comm syz.5.2851: lblock 2 mapped to illegal pblock 2 (length 1) [ 405.506452][T13453] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 405.544612][T13453] EXT4-fs error (device loop5): __ext4_get_inode_loc:4523: comm syz.5.2851: Invalid inode table block 1 in block_group 0 [ 405.611115][T13453] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5985: Corrupt filesystem [ 405.651018][T13453] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.2851: mark_inode_dirty error [ 405.698340][T13453] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 405.744483][T13453] EXT4-fs error (device loop5): ext4_acquire_dquot:6848: comm syz.5.2851: Failed to acquire dquot type 0 [ 405.790995][T13453] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5985: Corrupt filesystem [ 405.849516][T13453] EXT4-fs error (device loop5): ext4_evict_inode:281: inode #11: comm syz.5.2851: mark_inode_dirty error [ 405.907075][T13453] EXT4-fs warning (device loop5): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 405.951073][T13453] EXT4-fs (loop5): 1 orphan inode deleted [ 405.975467][ T9] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 406.012743][T13453] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 406.101478][ T9] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 406.197523][ T9] EXT4-fs error (device loop5): ext4_release_dquot:6884: comm kworker/u4:0: Failed to release dquot type 0 [ 406.345662][T13476] loop3: detected capacity change from 0 to 1024 [ 406.448823][T13476] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 406.468886][T12281] EXT4-fs (loop5): unmounting filesystem. [ 406.507637][T12281] EXT4-fs error (device loop5): __ext4_get_inode_loc:4523: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 406.555429][T13476] EXT4-fs error (device loop3): ext4_read_inline_dir:1628: inode #12: block 7: comm syz.3.2856: path /107/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=13, rec_len=0, size=60 fake=0 [ 406.642032][T12281] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5985: Corrupt filesystem [ 406.681983][T12281] EXT4-fs error (device loop5): ext4_quota_off:7142: inode #3: comm syz-executor: mark_inode_dirty error [ 406.844360][T11334] EXT4-fs (loop3): unmounting filesystem. [ 406.998591][T13465] loop9: detected capacity change from 0 to 40427 [ 407.074997][T13465] F2FS-fs (loop9): invalid crc value [ 407.148745][T13465] F2FS-fs (loop9): Found nat_bits in checkpoint [ 407.368779][T13505] db_root: cannot open: % [ 407.467903][T13465] F2FS-fs (loop9): Cannot turn on quotas: -2 on 0 [ 407.598195][T13465] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 407.966338][ T9675] syz-executor: attempt to access beyond end of device [ 407.966338][ T9675] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 408.312711][T13528] netem: incorrect gi model size [ 408.317996][T13528] netem: change failed [ 408.494983][T13532] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2876'. [ 409.929456][T13573] tap0: tun_chr_ioctl cmd 1074025677 [ 409.956211][T13573] tap0: linktype set to 778 [ 409.998439][T13575] WARNING! power/level is deprecated; use power/control instead [ 410.103178][ T5293] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 410.323110][ T5293] usb 6-1: Using ep0 maxpacket: 32 [ 410.338188][ T5293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.402648][ T5293] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 410.464238][ T5293] usb 6-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 410.502553][ T5293] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.546086][ T5293] usb 6-1: config 0 descriptor?? [ 410.811061][T13595] loop1: detected capacity change from 0 to 512 [ 410.866437][T13595] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 411.023012][ T5293] uclogic 0003:5543:0005.0014: No inputs registered, leaving [ 411.063061][ T5293] uclogic 0003:5543:0005.0014: hidraw0: USB HID v0.02 Device [HID 5543:0005] on usb-dummy_hcd.5-1/input0 [ 411.286107][ T5295] usb 6-1: USB disconnect, device number 5 [ 411.414904][T13605] fido_id[13605]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 411.824028][T13626] can0: slcan on ttyS3. [ 412.044077][T13630] can0 (unregistered): slcan off ttyS3. [ 412.426152][T13642] device macvlan0 entered promiscuous mode [ 412.489374][T13642] netlink: 'syz.9.2910': attribute type 1 has an invalid length. [ 412.564196][T13642] netlink: 'syz.9.2910': attribute type 2 has an invalid length. [ 412.939663][T13654] bond0: option arp_validate: invalid value (a) [ 413.195646][T13661] pimreg1: tun_chr_ioctl cmd 2147767517 [ 413.485041][T13670] loop3: detected capacity change from 0 to 256 [ 413.561014][T13670] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 413.681825][T13670] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779264) [ 413.744784][T13670] FAT-fs (loop3): Filesystem has been set read-only [ 414.807719][T13704] loop9: detected capacity change from 0 to 512 [ 415.000911][T13711] device-mapper: table: 248:17: flakey: Device lookup failed (-ENODEV) [ 415.054381][T13711] device-mapper: ioctl: error adding target to table [ 415.760857][T13741] program syz.9.2943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 416.189834][T13755] loop3: detected capacity change from 0 to 128 [ 416.228177][T13755] FAT-fs (loop3): Directory bread(block 1048) failed [ 416.251391][T13755] FAT-fs (loop3): Directory bread(block 1049) failed [ 416.269323][T13755] FAT-fs (loop3): Directory bread(block 1050) failed [ 416.286374][T13755] FAT-fs (loop3): Directory bread(block 1051) failed [ 416.308828][T13755] FAT-fs (loop3): Directory bread(block 1052) failed [ 416.327301][T13755] FAT-fs (loop3): Directory bread(block 1053) failed [ 416.345159][T13755] FAT-fs (loop3): Directory bread(block 1054) failed [ 416.361384][T13755] FAT-fs (loop3): Directory bread(block 1055) failed [ 416.446402][T13755] FAT-fs (loop3): FAT read failed (blocknr 128) [ 416.949610][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2950'. [ 417.129148][T13778] loop9: detected capacity change from 0 to 512 [ 417.333359][T13784] loop1: detected capacity change from 0 to 1024 [ 417.730448][T13795] loop5: detected capacity change from 0 to 1024 [ 418.069699][T13804] sctp: [Deprecated]: syz.9.2960 (pid 13804) Use of int in max_burst socket option deprecated. [ 418.069699][T13804] Use struct sctp_assoc_value instead [ 418.434773][T13809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.999334][T13798] loop1: detected capacity change from 0 to 32768 [ 419.081410][T13798] XFS (loop1): Mounting V5 Filesystem [ 419.210477][T13798] XFS (loop1): Ending clean mount [ 419.467753][ T4278] XFS (loop1): Unmounting Filesystem [ 420.579534][T13885] i2c i2c-0: new_device: Instantiated device anx7411 at 0x2c [ 420.769649][T13890] program syz.5.2985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 421.409496][T13892] loop3: detected capacity change from 0 to 32768 [ 421.417882][ T4351] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 421.485374][T13892] ERROR: (device loop3): dtSearch: DT_GETPAGE: dtree page corrupt [ 421.485374][T13892] [ 421.577342][T13892] ERROR: (device loop3): remounting filesystem as read-only [ 421.592031][ T5293] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 421.613190][ T4351] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 421.645291][T13892] jfs_lookup: dtSearch returned -5 [ 421.651392][ T4351] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.672154][T13919] ERROR: (device loop3): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 421.672154][T13919] [ 421.705184][ T4351] usb 10-1: config 0 descriptor?? [ 421.739787][ T4351] cp210x 10-1:0.0: cp210x converter detected [ 421.817102][ T5293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 421.885331][ T5293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 421.968585][ T5293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 422.040402][ T5293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 422.074539][T13924] input: syz1 as /devices/virtual/input/input36 [ 422.123201][ T5293] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 422.138717][ T4351] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 422.178949][ T4351] usb 10-1: cp210x converter now attached to ttyUSB0 [ 422.187134][ T5293] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.246715][ T5293] usb 6-1: Product: syz [ 422.281384][ T5293] usb 6-1: Manufacturer: syz [ 422.302671][ T5293] usb 6-1: SerialNumber: syz [ 422.335689][ T5293] usb 6-1: config 0 descriptor?? [ 422.414053][ T4351] usb 10-1: USB disconnect, device number 13 [ 422.548421][ T4351] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 422.564317][ T5293] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 422.630748][ T4351] cp210x 10-1:0.0: device disconnected [ 422.728617][T13928] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [22] [ 422.779059][T13928] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 422.800909][ T5293] usb 6-1: USB disconnect, device number 6 [ 422.882576][T13928] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 422.917101][T13928] One or more global auth toks could not properly register; rc = [-22] [ 422.966113][T13928] Error parsing options; rc = [-22] [ 424.269906][T13990] md: ram6 does not have a valid v1.90 superblock, not importing! [ 424.354704][T13990] md: md_import_device returned -22 [ 424.648854][T13956] loop1: detected capacity change from 0 to 32768 [ 424.835135][T13956] add_index: next_index = 0. Resetting! [ 425.102251][ T5295] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 425.186618][T14015] sctp: [Deprecated]: syz.3.3021 (pid 14015) Use of int in max_burst socket option deprecated. [ 425.186618][T14015] Use struct sctp_assoc_value instead [ 425.332042][ T5295] usb 6-1: Using ep0 maxpacket: 8 [ 425.354418][ T5295] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 425.412293][ T5295] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 425.440374][ T5295] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 425.469892][ T5295] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 425.510550][ T5295] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 425.545139][ T5295] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 425.574815][ T5295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.612943][T14025] can0: slcan on ttyS3. [ 425.712116][T14028] can0 (unregistered): slcan off ttyS3. [ 425.830562][ T5295] usb 6-1: GET_CAPABILITIES returned 0 [ 425.847576][ T5295] usbtmc 6-1:16.0: can't read capabilities [ 426.041176][T14005] usb 6-1: usbtmc_ioctl_clear_out_halt returned -32 [ 426.077192][T14040] loop9: detected capacity change from 0 to 4096 [ 426.111516][ T4351] usb 6-1: USB disconnect, device number 7 [ 426.191349][T14044] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 426.400087][T14040] NILFS (loop9): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 427.071947][ T4351] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 427.291978][ T4351] usb 10-1: Using ep0 maxpacket: 8 [ 427.314499][ T4351] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 427.367983][ T4351] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 427.427756][T14068] loop5: detected capacity change from 0 to 256 [ 427.434787][ T4351] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 427.490058][T14068] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 427.504155][ T4351] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 427.575109][ T4351] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.628164][T14073] loop1: detected capacity change from 0 to 2048 [ 427.652548][ T4351] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 427.689439][ T4351] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.806629][T14077] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 428.003884][ T4351] usb 10-1: GET_CAPABILITIES returned 0 [ 428.034659][ T4351] usbtmc 10-1:16.0: can't read capabilities [ 428.276125][ T4351] usb 10-1: USB disconnect, device number 14 [ 428.402559][T14092] loop3: detected capacity change from 0 to 256 [ 428.500727][T14092] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 428.643889][T14099] kAFS: bad VL server IP address [ 428.896249][T14109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3049'. [ 429.393125][T14120] loop9: detected capacity change from 0 to 8192 [ 429.489026][T14120] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 429.620557][T14139] < [ 429.636427][T14120] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal [ 429.772230][T14120] REISERFS (device loop9): using ordered data mode [ 429.778797][T14120] reiserfs: using flush barriers [ 430.304508][T14148] loop5: detected capacity change from 0 to 131072 [ 430.369719][T14148] F2FS-fs (loop5): Found nat_bits in checkpoint [ 430.406988][T14120] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 430.432117][T14148] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 430.447468][T14148] F2FS-fs (loop5): access invalid blkaddr:0 [ 430.453854][T14148] CPU: 0 PID: 14148 Comm: syz.5.3063 Not tainted syzkaller #0 [ 430.461306][T14148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 430.471377][T14148] Call Trace: [ 430.474728][T14148] [ 430.477646][T14148] dump_stack_lvl+0x188/0x24e [ 430.482316][T14148] ? show_regs_print_info+0x12/0x12 [ 430.487523][T14148] ? __up_read+0x2b4/0x6b0 [ 430.491922][T14148] ? __lock_acquire+0x7ea0/0x7ea0 [ 430.496954][T14148] f2fs_is_valid_blkaddr+0xc4a/0x1260 [ 430.502317][T14148] sanity_check_extent_cache+0xf8/0x1f0 [ 430.507846][T14148] f2fs_iget+0x360c/0x4b20 [ 430.512254][T14148] f2fs_lookup+0x394/0x800 [ 430.516653][T14148] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 430.522702][T14148] ? from_kgid+0x14f/0x6a0 [ 430.527103][T14148] ? make_kgid+0x650/0x650 [ 430.531501][T14148] ? rwsem_write_trylock+0x135/0x1c0 [ 430.536774][T14148] ? inode_permission+0xef/0x480 [ 430.541710][T14148] ? bpf_lsm_inode_create+0x5/0x10 [ 430.546896][T14148] ? security_inode_create+0xb3/0x100 [ 430.552252][T14148] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 430.558325][T14148] path_openat+0xff8/0x2f10 [ 430.562848][T14148] ? do_filp_open+0x420/0x420 [ 430.567540][T14148] do_filp_open+0x1ee/0x420 [ 430.572039][T14148] ? vfs_tmpfile+0x490/0x490 [ 430.576628][T14148] ? _raw_spin_unlock+0x24/0x40 [ 430.581464][T14148] ? alloc_fd+0x590/0x640 [ 430.585809][T14148] do_sys_openat2+0x14b/0x4f0 [ 430.590475][T14148] ? do_sys_open+0xe0/0xe0 [ 430.594876][T14148] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 430.600840][T14148] ? lock_chain_count+0x20/0x20 [ 430.605678][T14148] __x64_sys_openat+0x135/0x160 [ 430.610512][T14148] do_syscall_64+0x4c/0xa0 [ 430.614927][T14148] ? clear_bhb_loop+0x60/0xb0 [ 430.619589][T14148] ? clear_bhb_loop+0x60/0xb0 [ 430.624250][T14148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.630127][T14148] RIP: 0033:0x7f3c719a8f19 [ 430.634533][T14148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.654123][T14148] RSP: 002b:00007f3c728d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 430.662516][T14148] RAX: ffffffffffffffda RBX: 00007f3c71c25fa0 RCX: 00007f3c719a8f19 [ 430.670469][T14148] RDX: 0000000000020842 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 430.678424][T14148] RBP: 00007f3c71a37f6d R08: 0000000000000000 R09: 0000000000000000 [ 430.686391][T14148] R10: 0000000000000063 R11: 0000000000000246 R12: 0000000000000000 [ 430.694347][T14148] R13: 00007f3c71c26038 R14: 00007f3c71c25fa0 R15: 00007fff66177f38 [ 430.702314][T14148] [ 430.706415][T14148] F2FS-fs (loop5): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 430.787423][T14154] i2c i2c-0: delete_device: Can't find device in list [ 430.898878][T14120] REISERFS (device loop9): checking transaction log (loop9) [ 431.306680][T14120] REISERFS (device loop9): Using tea hash to sort names [ 431.375463][T14120] REISERFS warning (device loop9): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 431.505645][T14120] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 431.678645][T14159] loop3: detected capacity change from 0 to 32768 [ 431.757744][T14159] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 431.840325][T14159] JBD2: Ignoring recovery information on journal [ 431.890235][T14120] REISERFS error (device loop9): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 431.979994][T14159] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 432.021813][T14120] REISERFS (device loop9): Remounting filesystem read-only [ 432.216158][T11334] ocfs2: Unmounting device (7,3) on (node local) [ 432.836580][T14198] usb251xb 0-0002: supply vdd not found, using dummy regulator [ 432.968812][T14198] usb251xb 0-0002: configuring block 0 failed: -5 [ 432.997452][T14198] usb251xb 0-0002: Failed to connect hub (-5) [ 433.087482][T14198] usb251xb: probe of 0-0002 failed with error -5 [ 433.111306][T14198] i2c i2c-0: new_device: Instantiated device usb2512b at 0x02 [ 433.636028][T14226] loop9: detected capacity change from 0 to 128 [ 433.746650][T14226] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 433.780481][T14230] loop5: detected capacity change from 0 to 512 [ 433.817458][T14226] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.864994][T14230] EXT4-fs (loop5): orphan cleanup on readonly fs [ 433.924925][T14230] Quota error (device loop5): dq_insert_tree: Quota tree root isn't allocated! [ 434.006387][T14230] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 434.056126][T14230] EXT4-fs error (device loop5): ext4_acquire_dquot:6848: comm syz.5.3086: Failed to acquire dquot type 0 [ 434.131661][ T9675] EXT4-fs (loop9): unmounting filesystem. [ 434.140348][T14230] Quota error (device loop5): dq_insert_tree: Quota tree root isn't allocated! [ 434.211786][T14230] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 434.294175][T14230] EXT4-fs error (device loop5): ext4_acquire_dquot:6848: comm syz.5.3086: Failed to acquire dquot type 0 [ 434.311450][T14243] rnbd_client L125: Can't parse path ip:127v0.0.1žµÖ×@: -22 [ 434.388033][T14230] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3086: bg 0: block 64: padding at end of block bitmap is not set [ 434.491746][T14230] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6195: Corrupt filesystem [ 434.595990][T14230] Quota error (device loop5): dq_insert_tree: Quota tree root isn't allocated! [ 434.640794][T14230] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 434.705543][T14230] EXT4-fs error (device loop5): ext4_acquire_dquot:6848: comm syz.5.3086: Failed to acquire dquot type 0 [ 434.781171][T14230] EXT4-fs (loop5): 1 orphan inode deleted [ 434.832095][T14230] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 434.992787][T12281] EXT4-fs (loop5): unmounting filesystem. [ 435.326345][T14280] loop3: detected capacity change from 0 to 1024 [ 435.376264][T14280] EXT4-fs: Ignoring removed bh option [ 435.438933][T14280] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 435.713387][T11334] EXT4-fs (loop3): unmounting filesystem. [ 435.871967][ T5031] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 436.083559][ T5031] usb 6-1: unable to get BOS descriptor or descriptor too short [ 436.115728][ T5031] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.151501][T14313] sch_tbf: burst 234 is lower than device veth0_to_bond mtu (1514) ! [ 436.184715][ T5031] usb 6-1: string descriptor 0 read error: -22 [ 436.245286][ T5031] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 436.286326][ T5031] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.379883][T14321] loop3: detected capacity change from 0 to 512 [ 436.456447][T14321] EXT4-fs: Ignoring removed bh option [ 436.486905][T14318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.552462][T14321] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 436.621025][T14321] EXT4-fs (loop3): 1 truncate cleaned up [ 436.635333][ T26] audit: type=1326 audit(1794326421.734:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14326 comm="syz.0.3118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dafa8f19 code=0x7ffc0000 [ 436.686645][T14321] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 436.781325][ T26] audit: type=1326 audit(1794326421.764:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14326 comm="syz.0.3118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dafa8f19 code=0x7ffc0000 [ 436.880187][T11334] EXT4-fs (loop3): unmounting filesystem. [ 436.945614][ T26] audit: type=1326 audit(1794326421.764:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14326 comm="syz.0.3118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f98dafa8f19 code=0x7ffc0000 [ 436.971967][ T5031] usb 6-1: 1:1: cannot get freq at ep 0x1 [ 437.017606][T14296] loop9: detected capacity change from 0 to 40427 [ 437.078607][ T5031] usb 6-1: USB disconnect, device number 8 [ 437.112501][ T26] audit: type=1326 audit(1794326421.764:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14326 comm="syz.0.3118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dafa8f19 code=0x7ffc0000 [ 437.157595][T14296] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64) [ 437.240301][T14296] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 437.316228][T14296] F2FS-fs (loop9): invalid crc value [ 437.416017][T14296] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 437.732861][T14296] F2FS-fs (loop9): recover fsync data on readonly fs [ 437.798763][T14296] F2FS-fs (loop9): Cannot turn on quotas: -2 on 1 [ 437.906341][T14352] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3125'. [ 437.919711][T14296] F2FS-fs (loop9): Try to recover 1th superblock, ret: -30 [ 437.977742][T14296] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 438.213850][T14296] F2FS-fs (loop9): Try to recover all the superblocks, ret: 0 [ 438.288716][T14363] f2fs_ckpt-7:9: attempt to access beyond end of device [ 438.288716][T14363] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 438.514901][T14367] loop5: detected capacity change from 0 to 2048 [ 438.620204][T14367] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 438.728683][T14367] EXT4-fs error (device loop5): ext4_find_extent:936: inode #2: comm syz.5.3128: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 438.891588][T14367] EXT4-fs (loop5): Remounting filesystem read-only [ 438.925868][T14367] CacheFiles: Lookup cache failed with error -117 [ 439.005379][T14367] CacheFiles: Failed to register: -117 [ 439.153863][T12281] EXT4-fs (loop5): unmounting filesystem. [ 439.500127][T14399] batman_adv: Routing algorithm 'B' is not supported [ 439.557916][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 439.557926][ T26] audit: type=1400 audit(1794326424.654:140): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=14402 comm="syz.5.3142" name="unknown" offset=16 [ 439.687959][T14405] loop9: detected capacity change from 0 to 164 [ 439.752735][T14405] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 439.884442][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.890792][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.902508][ T1283] clip:clip_start_xmit: skb_dst(skb) == NULL [ 440.124211][T14422] loop9: detected capacity change from 0 to 1024 [ 440.894803][ T5295] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 441.082376][ T5295] usb 4-1: Using ep0 maxpacket: 8 [ 441.095979][ T5295] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 441.120204][ T5295] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 441.143902][ T5295] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 441.175293][ T5295] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 441.203348][ T5295] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 441.227160][ T5295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.460238][ T5295] usb 4-1: GET_CAPABILITIES returned 0 [ 441.477609][ T5295] usbtmc 4-1:16.0: can't read capabilities [ 441.713943][T14442] usb 4-1: usbtmc_ioctl_clear_in_halt returned -32 [ 441.744220][ T5295] usb 4-1: USB disconnect, device number 15 [ 442.264653][ T5295] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 442.482009][ T5295] usb 10-1: Using ep0 maxpacket: 16 [ 442.499024][ T5295] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.591134][ T5295] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.681963][ T5295] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.764667][ T5295] usb 10-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 442.825896][ T5295] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.897185][ T5295] usb 10-1: config 0 descriptor?? [ 443.265031][ T5031] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 443.317742][T14530] loop1: detected capacity change from 0 to 256 [ 443.398615][T14530] exfat: Deprecated parameter 'namecase' [ 443.411183][ T5295] input: HID 054c:03d5 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:054C:03D5.0015/input/input37 [ 443.456325][T14530] exfat: Deprecated parameter 'namecase' [ 443.472012][ T5031] usb 6-1: Using ep0 maxpacket: 8 [ 443.492205][ T5031] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 443.532601][T14530] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 443.556323][ T5295] sony 0003:054C:03D5.0015: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.9-1/input0 [ 443.582199][ T5031] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 443.624320][ T5031] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 443.729365][ T5031] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 443.832877][ T5031] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.960182][ T5031] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 444.039693][ T5031] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.127148][ T5295] usb 10-1: USB disconnect, device number 15 [ 444.304703][ T5031] usb 6-1: GET_CAPABILITIES returned 0 [ 444.330182][ T5031] usbtmc 6-1:16.0: can't read capabilities [ 444.386829][ T7616] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 444.514873][ T5295] usb 6-1: USB disconnect, device number 9 [ 444.594818][ T7616] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 444.627163][ T7616] usb 4-1: config 127 has no interface number 0 [ 444.653700][ T7616] usb 4-1: too many endpoints for config 127 interface 57 altsetting 0: 232, using maximum allowed: 30 [ 444.716459][ T7616] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 255, setting to 64 [ 444.776166][ T7616] usb 4-1: config 127 interface 57 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 232 [ 444.858480][ T7616] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 444.920967][ T7616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.971938][ T7616] usb 4-1: Product: syz [ 445.006959][ T4285] Bluetooth: hci4: command 0x0405 tx timeout [ 445.015280][ T7616] usb 4-1: Manufacturer: syz [ 445.019877][ T7616] usb 4-1: SerialNumber: syz [ 445.095854][T14544] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 445.220206][T14572] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3186'. [ 445.555385][T14544] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 445.621797][T14582] loop1: detected capacity change from 0 to 1024 [ 445.816092][T14544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.884863][T14544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.940181][ T7616] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 446.000762][ T7616] asix: probe of 4-1:127.57 failed with error -71 [ 446.053143][ T7616] usb 4-1: USB disconnect, device number 16 [ 446.088418][T14593] loop5: detected capacity change from 0 to 1024 [ 446.178271][T14593] EXT4-fs: Ignoring removed bh option [ 446.258294][T14593] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 446.505515][T12281] EXT4-fs (loop5): unmounting filesystem. [ 446.786759][T14610] netlink: 'syz.9.3200': attribute type 3 has an invalid length. [ 446.887650][T14615] rnbd_client L600: Mapping device /dev/ram0 on session s., (access_mode: rw, nr_poll_queues: 0) [ 446.966736][T14620] loop5: detected capacity change from 0 to 128 [ 446.998780][T14615] rtrs_client L2815: pathname cannot contain / and . [ 447.028197][T14620] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 447.168808][T14628] loop3: detected capacity change from 0 to 512 [ 447.234086][T14630] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.256312][T14628] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.3207: iget: bad i_size value: 38620345925642 [ 447.373597][T14628] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.3207: couldn't read orphan inode 15 (err -117) [ 447.385953][ T5031] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 447.457995][T14628] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 447.527764][T14634] loop5: detected capacity change from 0 to 4096 [ 447.593515][ T5031] usb 10-1: Using ep0 maxpacket: 32 [ 447.608655][T14634] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 447.624547][ T5031] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.687153][ T5031] usb 10-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 447.771287][ T5031] usb 10-1: config 0 interface 0 has no altsetting 0 [ 447.811698][ T5031] usb 10-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 447.861620][ T5031] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.921754][ T5031] usb 10-1: config 0 descriptor?? [ 447.963821][T11334] EXT4-fs (loop3): unmounting filesystem. [ 448.350578][ T5031] input: HID 046d:c087 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:046D:C087.0016/input/input38 [ 448.518420][ T5031] logitech-hidpp-device 0003:046D:C087.0016: input,hiddev0,hidraw0: USB HID v0.07 Device [HID 046d:c087] on usb-dummy_hcd.9-1/input0 [ 448.651551][ T5031] usb 10-1: USB disconnect, device number 16 [ 448.933036][T14656] fido_id[14656]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 449.131154][T14636] loop1: detected capacity change from 0 to 40427 [ 449.258202][T14636] F2FS-fs (loop1): invalid crc value [ 449.334075][T14636] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 449.494859][T14677] sctp: [Deprecated]: syz.9.3223 (pid 14677) Use of struct sctp_assoc_value in delayed_ack socket option. [ 449.494859][T14677] Use struct sctp_sack_info instead [ 449.725869][T14636] F2FS-fs (loop1): recover fsync data on readonly fs [ 449.744797][T14684] loop3: detected capacity change from 0 to 136 [ 449.857936][T14684] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 449.866772][T14636] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 450.247758][T14674] loop5: detected capacity change from 0 to 32768 [ 450.393170][T14674] JBD2: Ignoring recovery information on journal [ 450.537149][T14699] loop3: detected capacity change from 0 to 512 [ 450.587877][T14674] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 450.672871][T14699] EXT4-fs error (device loop3): ext4_iget_extra_inode:4766: inode #15: comm syz.3.3230: corrupted in-inode xattr [ 450.838781][T14699] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.3230: couldn't read orphan inode 15 (err -117) [ 450.876371][T14707] loop9: detected capacity change from 0 to 128 [ 450.963626][T14699] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 451.166862][T12281] ocfs2: Unmounting device (7,5) on (node local) [ 451.397350][T11334] EXT4-fs (loop3): unmounting filesystem. [ 451.452683][T14716] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3235'. [ 451.524822][T14716] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3235'. [ 451.612124][T14716] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3235'. [ 451.655976][T14721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3236'. [ 451.970281][T14726] loop3: detected capacity change from 0 to 2048 [ 452.063048][T14726] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 452.142812][T14726] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 452.218167][T14726] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 452.641579][T14748] loop1: detected capacity change from 0 to 1024 [ 452.739572][T14748] hfsplus: unable to parse mount options [ 453.613157][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.831328][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.097195][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.117188][T14778] loop5: detected capacity change from 0 to 512 [ 454.184160][T14778] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 454.305325][T14778] EXT4-fs (loop5): orphan cleanup on readonly fs [ 454.315909][T14784] loop9: detected capacity change from 0 to 256 [ 454.364596][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.403546][T14784] exfat: Deprecated parameter 'utf8' [ 454.442819][T14778] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.3257: bg 0: block 104: invalid block bitmap [ 454.463886][T14787] loop1: detected capacity change from 0 to 2048 [ 454.494691][T14784] exfat: Deprecated parameter 'utf8' [ 454.500032][T14784] exfat: Deprecated parameter 'namecase' [ 454.578796][T14778] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6195: Corrupt filesystem [ 454.599085][T14787] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 454.610718][T14784] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xfffcecf0, utbl_chksum : 0xe619d30d) [ 454.696650][T14778] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.3257: invalid indirect mapped block 1 (level 1) [ 454.786066][T14778] EXT4-fs (loop5): 1 truncate cleaned up [ 454.819160][T14787] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.3260: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 454.865480][T14778] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 454.906837][ T4294] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 454.922735][ T4294] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 454.932564][ T4294] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 454.942226][ T4292] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 454.949483][ T4292] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 454.956991][ T4294] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 455.029919][T14799] rxe_eth0 speed is unknown, defaulting to 1000 [ 455.162651][T14787] EXT4-fs (loop1): Remounting filesystem read-only [ 455.247533][T14787] CacheFiles: Lookup cache failed with error -117 [ 455.333827][T14787] CacheFiles: Failed to register: -117 [ 455.426080][T12281] EXT4-fs error (device loop5): __ext4_iget:5135: inode #13: block 7962: comm syz-executor: invalid block [ 455.539073][T12281] EXT4-fs error (device loop5): __ext4_iget:5135: inode #13: block 7962: comm syz-executor: invalid block [ 455.580059][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 456.219132][T12281] EXT4-fs (loop5): unmounting filesystem. [ 456.439880][T14827] loop1: detected capacity change from 0 to 1024 [ 456.583595][T14827] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 456.764040][T14827] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 456.997006][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 457.002977][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 457.138544][T14799] chnl_net:caif_netlink_parms(): no params data found [ 457.639423][T14799] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.735418][T14799] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.775816][T14799] device bridge_slave_0 entered promiscuous mode [ 457.866176][ T4292] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 457.877615][ T4292] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 457.886825][ T4294] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 457.921098][ T4294] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 457.930753][ T4292] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 457.938338][ T4292] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 458.268745][T14799] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.293112][T14799] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.313136][T14799] device bridge_slave_1 entered promiscuous mode [ 458.439766][T14864] rxe_eth0 speed is unknown, defaulting to 1000 [ 458.487652][T14799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.584559][T14799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.082506][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 459.114161][T14799] team0: Port device team_slave_0 added [ 459.190135][T14891] loop9: detected capacity change from 0 to 1024 [ 459.212659][T14799] team0: Port device team_slave_1 added [ 459.259571][ T9] device hsr_slave_0 left promiscuous mode [ 459.334978][ T9] device hsr_slave_1 left promiscuous mode [ 459.370996][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.411116][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.467095][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.515639][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.538344][ T58] hfsplus: bad catalog file entry [ 459.559503][ T9] device bridge_slave_1 left promiscuous mode [ 459.628453][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.654852][ T9] device bridge_slave_0 left promiscuous mode [ 459.698649][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.874338][ T9] device bridge0 left promiscuous mode [ 459.911191][ T9] device veth1_macvtap left promiscuous mode [ 459.943153][ T9] device veth0_macvtap left promiscuous mode [ 459.961991][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 460.003096][ T9] device veth1_vlan left promiscuous mode [ 460.485573][T14895] loop1: detected capacity change from 0 to 40427 [ 460.579813][T14895] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 460.629760][T14895] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 460.705449][T14895] F2FS-fs (loop1): invalid crc value [ 460.726300][T14895] F2FS-fs (loop1): Found nat_bits in checkpoint [ 460.884415][T14895] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 460.922911][T14895] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 461.117957][ T58] kworker/u4:4: attempt to access beyond end of device [ 461.117957][ T58] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 461.162217][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 461.918430][ T9] team0 (unregistering): Port device team_slave_1 removed [ 461.986755][ T9] team0 (unregistering): Port device team_slave_0 removed [ 462.044695][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 462.055074][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.126900][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.586803][ T9] bond0 (unregistering): Released all slaves [ 462.755062][T14799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.785249][T14799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.884987][T14799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.931328][T14799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.954245][T14799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.072071][T14799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.107795][T14864] chnl_net:caif_netlink_parms(): no params data found [ 463.227875][T14799] device hsr_slave_0 entered promiscuous mode [ 463.242069][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 463.253477][T14799] device hsr_slave_1 entered promiscuous mode [ 463.392019][T14864] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.399098][T14864] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.428807][T14864] device bridge_slave_0 entered promiscuous mode [ 463.474386][T14864] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.481481][T14864] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.525641][T14864] device bridge_slave_1 entered promiscuous mode [ 463.616253][T14864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.728877][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.771199][T14864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.965610][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.124182][ T4285] Bluetooth: hci4: command 0x040f tx timeout [ 464.184810][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.373566][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.429137][T14864] team0: Port device team_slave_0 added [ 464.563195][T14864] team0: Port device team_slave_1 added [ 464.620579][T14864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.644615][T14864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.722886][T14864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.806847][T14864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.829588][T14864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.902191][T14864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.138087][T14864] device hsr_slave_0 entered promiscuous mode [ 465.155463][T14864] device hsr_slave_1 entered promiscuous mode [ 465.163870][T14864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.195457][T14864] Cannot create hsr debugfs directory [ 465.378848][T14799] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 465.447696][T14799] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 465.473257][T14799] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 465.529793][T14799] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 466.056757][T14799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.132859][T14799] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.139699][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 466.165816][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 466.203174][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 466.334834][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 466.355962][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 466.385682][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.392859][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.425623][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 466.434486][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 466.461236][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.468383][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.495427][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 466.522767][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 466.580282][T14799] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 466.623789][T14799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 466.743417][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 466.755527][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 466.805254][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 466.835941][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 466.857970][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 466.875932][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 466.902459][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 466.935691][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 466.944440][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 467.317917][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 467.328291][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 467.666271][ T9] device hsr_slave_0 left promiscuous mode [ 467.695707][ T9] device hsr_slave_1 left promiscuous mode [ 467.728817][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.756888][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.776282][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.796132][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.815728][ T9] device bridge_slave_1 left promiscuous mode [ 467.831166][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.854402][ T9] device bridge_slave_0 left promiscuous mode [ 467.860583][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.945315][ T9] device veth1_macvtap left promiscuous mode [ 467.951347][ T9] device veth0_macvtap left promiscuous mode [ 467.973998][ T9] device veth1_vlan left promiscuous mode [ 467.979814][ T9] device veth0_vlan left promiscuous mode [ 469.206591][ T9] team0 (unregistering): Port device team_slave_1 removed [ 469.279239][ T9] team0 (unregistering): Port device team_slave_0 removed [ 469.347862][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.415612][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.926855][ T9] bond0 (unregistering): Released all slaves [ 470.036931][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 470.068364][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 470.098100][T14799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.287871][T14864] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 470.340424][T14864] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 470.410070][T14864] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 470.441185][T14864] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 470.682654][T14864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.720676][T14864] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.750812][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 470.769479][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 470.827938][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 470.864625][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 470.893026][ T7968] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.900109][ T7968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.956196][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 470.993689][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 471.031605][ T7968] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.038728][ T7968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.064615][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 471.087005][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 471.108493][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 471.133478][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 471.168437][T14864] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 471.214298][T14864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 471.253134][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 471.265696][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 471.274555][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 471.287314][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 471.296566][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 471.307530][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 471.317936][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 471.329580][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 471.354699][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 471.393947][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 471.424852][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 471.476698][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 471.513390][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 471.547651][T14799] device veth0_vlan entered promiscuous mode [ 471.565989][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 471.585028][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 471.608181][T14799] device veth1_vlan entered promiscuous mode [ 471.660553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 471.689297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 471.725670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 471.753244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 471.784697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 471.813966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 471.849993][T14799] device veth0_macvtap entered promiscuous mode [ 471.870761][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 471.893275][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 471.900732][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 471.935593][T14799] device veth1_macvtap entered promiscuous mode [ 471.954189][T14864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.993988][T14799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.033141][T14799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.071901][T14799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.114780][T14799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.166170][T14799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.182683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 472.209600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 472.230007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 472.260474][T14799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.301934][T14799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.311768][T14799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.371694][T14799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.413243][T14799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.427071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 472.465804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 472.488364][T14799] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.499547][T14799] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.511437][T14799] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.520700][T14799] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.709883][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.746240][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.780596][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 472.817756][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.849327][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.859622][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 472.875295][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 472.907752][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 472.938762][T14864] device veth0_vlan entered promiscuous mode [ 472.974759][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 472.997568][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 473.078465][T14864] device veth1_vlan entered promiscuous mode [ 473.121047][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 473.138031][ T26] audit: type=1400 audit(1794326458.234:141): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=15067 comm="syz.9.3310" name="unknown" offset=16 [ 473.199354][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 473.270108][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 473.368949][T14864] device veth0_macvtap entered promiscuous mode [ 473.455762][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 473.507462][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 473.580863][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 473.665734][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 473.744040][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 473.833767][T14864] device veth1_macvtap entered promiscuous mode [ 473.894835][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 473.970710][T14864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.085607][T14864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.147805][T14864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.190719][T14864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.239286][T14864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.294497][T14864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.349323][T14864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.402686][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 474.460919][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 474.501436][T14864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.549849][T14864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.589733][T14864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.606374][T15104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3312'. [ 474.635847][T14864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.672121][ T5031] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 474.681497][T14864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.716326][T14864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.757380][T14864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.808469][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 474.847943][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 474.881994][ T5031] usb 7-1: Using ep0 maxpacket: 16 [ 474.917298][ T5031] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.941468][T14864] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.998284][T14864] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.025105][ T5031] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.051811][T15115] overlayfs: failed to set xattr on upper [ 475.090271][T14864] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.108713][ T5031] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 475.164613][T14864] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.195394][ T5031] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 475.243017][ T5031] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.279123][T15097] loop9: detected capacity change from 0 to 32768 [ 475.291707][ T5031] usb 7-1: config 0 descriptor?? [ 475.546013][T15097] XFS (loop9): Mounting V5 Filesystem [ 475.602375][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.635455][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.696557][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 475.715890][T15097] XFS (loop9): Ending clean mount [ 475.724053][T15100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.756167][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.793988][T15100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.835927][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.894823][ T5031] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 475.916008][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 475.953210][ T5031] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 475.994339][ T5031] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 476.029655][ T5031] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 476.085721][ T5031] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0017/input/input39 [ 476.165884][ T5031] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 476.255068][ T5031] usb 7-1: USB disconnect, device number 5 [ 476.441155][T15141] fido_id[15141]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 476.478744][ T9675] XFS (loop9): Unmounting Filesystem [ 477.533380][ T26] audit: type=1400 audit(1794326462.624:142): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=15169 comm="syz.0.3330" name="p" offset=48 [ 477.551898][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.927685][ T26] audit: type=1400 audit(1794326463.024:143): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=15181 comm="syz.0.3333" [ 479.449754][T15185] loop9: detected capacity change from 0 to 40427 [ 479.605187][T15185] F2FS-fs (loop9): invalid crc value [ 479.645677][ T7968] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 479.697075][T15185] F2FS-fs (loop9): Found nat_bits in checkpoint [ 479.995800][T15185] F2FS-fs (loop9): Cannot turn on quotas: -2 on 0 [ 480.129574][T15185] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 480.426743][T15185] syz.9.3318: attempt to access beyond end of device [ 480.426743][T15185] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 480.487483][T15243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3349'. [ 480.553976][T15243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3349'. [ 481.017315][T15253] loop1: detected capacity change from 0 to 2048 [ 481.207852][T15253] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 481.231309][T15260] loop7: detected capacity change from 0 to 16 [ 481.296094][T15260] erofs: (device loop7): mounted with root inode @ nid 36. [ 481.491942][T15253] UDF-fs: unknown compression code (0) [ 481.987530][T15281] loop1: detected capacity change from 0 to 256 [ 482.056200][T15281] exfat: Deprecated parameter 'namecase' [ 482.144331][T15281] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 482.897715][ T26] audit: type=1326 audit(1794326467.994:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15309 comm="syz.0.3381" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98dafa8f19 code=0x0 [ 485.037315][T15361] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 485.088371][T15366] loop7: detected capacity change from 0 to 512 [ 485.176199][T15366] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 485.266144][T15366] EXT4-fs error (device loop7): ext4_iget_extra_inode:4766: inode #15: comm syz.7.3389: corrupted in-inode xattr [ 485.364769][T15366] EXT4-fs error (device loop7): ext4_orphan_get:1414: comm syz.7.3389: couldn't read orphan inode 15 (err -117) [ 485.435814][T15366] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 485.621746][T15383] loop6: detected capacity change from 0 to 2048 [ 485.664080][T14864] EXT4-fs (loop7): unmounting filesystem. [ 485.727635][T15383] loop6: p3 < > p4 < > [ 485.737446][T15385] loop9: detected capacity change from 0 to 512 [ 485.746568][T15383] loop6: partition table partially beyond EOD, truncated [ 485.797688][T15383] loop6: p3 start 4284289 is beyond EOD, truncated [ 485.926444][T15385] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 485.980290][T15392] loop7: detected capacity change from 0 to 512 [ 486.064823][T15392] EXT4-fs: Ignoring removed nomblk_io_submit option [ 486.097588][T15385] FAT-fs (loop9): Filesystem has been set read-only [ 486.180954][T15392] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 486.241347][T15392] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 486.450458][T14864] EXT4-fs (loop7): unmounting filesystem. [ 486.780996][T15413] loop9: detected capacity change from 0 to 512 [ 486.907126][T15413] EXT4-fs warning (device loop9): dx_probe:833: inode #2: comm syz.9.3403: Unrecognised inode hash code 255 [ 486.921174][ T5034] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 487.026783][T15422] netlink: 'syz.0.3406': attribute type 8 has an invalid length. [ 487.036796][T15413] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.3403: Corrupt directory, running e2fsck is recommended [ 487.141034][T15413] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 487.153433][ T5034] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 487.191976][ T5034] usb 8-1: config 0 has no interface number 0 [ 487.198352][ T5034] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 487.219859][T15413] EXT4-fs error (device loop9): ext4_iget_extra_inode:4766: inode #15: comm syz.9.3403: corrupted in-inode xattr [ 487.266799][T15429] netlink: 'syz.0.3408': attribute type 5 has an invalid length. [ 487.304291][ T5034] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 487.326342][T15413] EXT4-fs error (device loop9): ext4_orphan_get:1414: comm syz.9.3403: couldn't read orphan inode 15 (err -117) [ 487.381941][ T5034] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 487.443119][T15413] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 487.455966][ T5034] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.507357][ T5034] usb 8-1: config 0 descriptor?? [ 487.520875][T15437] Invalid input. Must be >= 2304 [ 487.532597][T15408] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 487.582420][ T5034] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 487.616559][T15413] EXT4-fs error (device loop9): __ext4_remount:6657: comm syz.9.3403: Abort forced by user [ 487.702736][T15413] EXT4-fs (loop9): Remounting filesystem read-only [ 487.759981][T15413] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 487.846975][ T5034] usb 8-1: USB disconnect, device number 2 [ 487.982596][ T9675] EXT4-fs (loop9): unmounting filesystem. [ 488.500411][T15466] loop9: detected capacity change from 0 to 512 [ 488.570810][T15466] EXT4-fs: Ignoring removed nobh option [ 488.659180][T15466] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 488.770909][T15466] EXT4-fs error (device loop9): ext4_clear_blocks:883: inode #13: comm syz.9.3421: attempt to clear invalid blocks 2 len 1 [ 488.860274][T15466] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 488.968241][T15466] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.3421: invalid indirect mapped block 1819239214 (level 0) [ 489.060433][T15466] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.3421: invalid indirect mapped block 1819239214 (level 1) [ 489.157567][T15466] EXT4-fs (loop9): 1 truncate cleaned up [ 489.221462][T15466] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 489.255331][T15474] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input40 [ 489.409471][T15466] EXT4-fs (loop9): shut down requested (2) [ 489.676157][ T9675] EXT4-fs (loop9): unmounting filesystem. [ 489.877922][T15505] IPVS: lc: TCP 127.0.0.1:5376 - no destination available [ 490.217616][T15520] loop9: detected capacity change from 0 to 256 [ 490.257667][T15523] loop1: detected capacity change from 0 to 128 [ 490.299247][T15520] exfat: Deprecated parameter 'utf8' [ 490.366115][T15520] exfat: Deprecated parameter 'utf8' [ 490.421098][T15520] exfat: Deprecated parameter 'namecase' [ 490.476245][T15520] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 490.527274][T15528] syz.1.3440: attempt to access beyond end of device [ 490.527274][T15528] loop1: rw=2049, sector=145, nr_sectors = 96 limit=128 [ 490.715535][T15532] Bluetooth: MGMT ver 1.22 [ 491.037406][ T58] kworker/u4:4: attempt to access beyond end of device [ 491.037406][ T58] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 491.196333][T15549] bonding: no command found in bonding_masters - use +ifname or -ifname [ 491.604767][ T5033] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 491.760922][T15568] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 491.813432][ T5033] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 491.851070][T15557] device-mapper: table: 248:18: crypt: Device lookup failed (-ENODEV) [ 491.884678][ T5033] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 491.914996][T15557] device-mapper: ioctl: error adding target to table [ 491.947098][ T5033] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 492.012053][ T5033] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.073002][T15551] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 492.355591][ T5033] usb 8-1: USB disconnect, device number 3 [ 492.762355][ T4285] Bluetooth: hci4: command 0x0405 tx timeout [ 493.244156][T15611] loop9: detected capacity change from 0 to 64 [ 493.420057][T15611] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 493.608517][T15618] loop1: detected capacity change from 0 to 2048 [ 493.785682][T15626] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 494.486175][T15626] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 494.557883][T15626] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 494.622325][T15626] Remounting filesystem read-only [ 494.660802][ T4278] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 495.484429][ T5033] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 495.682026][ T5033] usb 10-1: Using ep0 maxpacket: 32 [ 495.700983][ T5033] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 495.767068][ T5033] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.828828][ T5033] usb 10-1: config 0 descriptor?? [ 496.062026][ T5033] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 496.106730][ T5033] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 496.167858][ T5033] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 496.218779][ T5033] usb 10-1: media controller created [ 496.308909][ T5033] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 496.393764][ T5033] az6027: usb out operation failed. (-71) [ 496.426920][ T5033] az6027: usb out operation failed. (-71) [ 496.447494][ T5033] stb0899_attach: Driver disabled by Kconfig [ 496.469557][ T5033] az6027: no front-end attached [ 496.469557][ T5033] [ 496.532572][ T5033] az6027: usb out operation failed. (-71) [ 496.554946][ T5033] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 496.600427][ T5033] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input41 [ 496.660418][ T5033] dvb-usb: schedule remote query interval to 400 msecs. [ 496.704024][ T5033] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 496.776026][ T5033] usb 10-1: USB disconnect, device number 17 [ 496.915471][ T5033] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 497.146573][T15733] loop7: detected capacity change from 0 to 256 [ 497.278758][T15733] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 497.505684][T15744] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 497.653220][T15744] FAT-fs (loop7): Filesystem has been set read-only [ 497.756292][T15744] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 497.869136][ T26] audit: type=1400 audit(1794326482.964:145): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="/" pid=15748 comm="syz.9.3514" name="/" offset=33 [ 498.541003][T15769] loop7: detected capacity change from 0 to 4096 [ 498.549389][T15775] loop9: detected capacity change from 0 to 64 [ 498.656781][T15776] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 498.859990][T15783] MTRR 2 not used [ 499.277414][T15796] loop7: detected capacity change from 0 to 1024 [ 499.501599][ T48] hfsplus: b-tree write err: -5, ino 25 [ 499.524815][ T48] hfsplus: b-tree write err: -5, ino 4 [ 499.555037][ T48] hfsplus: b-tree write err: -5, ino 2 [ 499.584458][ T48] hfsplus: b-tree write err: -5, ino 26 [ 499.761583][T15813] loop7: detected capacity change from 0 to 164 [ 499.856235][T15813] isofs: Unable to find the ".." directory for NFS. [ 500.208753][T15829] loop6: detected capacity change from 0 to 512 [ 500.286707][T15829] FAT-fs (loop6): error, clusters badly computed (1 != 0) [ 500.467470][T15838] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(14) [ 500.481324][T15827] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 501.242055][ T4285] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 501.248279][ T4285] Bluetooth: hci0: command 0x0c1a tx timeout [ 501.324478][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.330817][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.339026][ T1283] clip:clip_start_xmit: skb_dst(skb) == NULL [ 501.425100][T15859] loop9: detected capacity change from 0 to 512 [ 501.513726][T15859] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 501.614875][T15859] EXT4-fs error (device loop9): ext4_iget_extra_inode:4766: inode #15: comm syz.9.3550: corrupted in-inode xattr [ 501.697205][T15859] EXT4-fs error (device loop9): ext4_orphan_get:1414: comm syz.9.3550: couldn't read orphan inode 15 (err -117) [ 501.784360][T15859] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 502.514623][ T9675] EXT4-fs (loop9): unmounting filesystem. [ 502.835791][T15903] loop6: detected capacity change from 0 to 512 [ 502.896931][T15903] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 503.166957][T14799] EXT4-fs (loop6): unmounting filesystem. [ 503.357676][T15914] loop6: detected capacity change from 0 to 256 [ 503.436342][T15914] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 503.897222][T15933] tap0: tun_chr_ioctl cmd 1074025677 [ 503.936477][T15933] tap0: linktype set to 768 [ 504.555547][T15956] TCP: tcp_parse_options: Illegal window scaling value 170 > 14 received [ 504.564759][T15956] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 505.820765][T16000] loop1: detected capacity change from 0 to 16 [ 505.952521][T16000] erofs: (device loop1): mounted with root inode @ nid 36. [ 506.764475][ T5034] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 506.794897][T16038] Bluetooth: MGMT ver 1.22 [ 506.870313][T16044] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3613'. [ 506.922128][ T4294] Bluetooth: hci4: command 0x0409 tx timeout [ 506.983351][ T5034] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 507.034638][ T5034] usb 7-1: config 0 has no interface number 0 [ 507.040799][ T5034] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 507.120585][ T5034] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 507.180242][ T5034] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 507.231557][ T5034] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.285541][ T5034] usb 7-1: config 0 descriptor?? [ 507.314413][T16024] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 507.350791][ T5034] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 507.655330][ T5034] usb 7-1: USB disconnect, device number 6 [ 508.214051][T16075] loop1: detected capacity change from 0 to 2048 [ 508.354121][T16075] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 508.496656][T16075] ext4 filesystem being mounted at /729/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.835211][T16085] loop6: detected capacity change from 0 to 8192 [ 508.884046][T16085] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 508.902412][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 509.011260][T16085] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 509.098860][T16085] REISERFS (device loop6): using ordered data mode [ 509.157262][T16085] reiserfs: using flush barriers [ 509.227917][T16085] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 509.326661][T16100] Attempt to restore checkpoint with obsolete wellknown handles [ 509.354098][T16085] REISERFS (device loop6): checking transaction log (loop6) [ 509.603335][T16085] REISERFS (device loop6): Using tea hash to sort names [ 509.657949][T16085] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 509.754666][T16085] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 510.017384][T16113] loop1: detected capacity change from 0 to 64 [ 510.234680][T16113] syz.1.3633: attempt to access beyond end of device [ 510.234680][T16113] loop1: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 510.405495][T16113] Buffer I/O error on dev loop1, logical block 512, async page read [ 510.485091][T16113] syz.1.3633: attempt to access beyond end of device [ 510.485091][T16113] loop1: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 510.594177][ T5033] usb 10-1: new low-speed USB device number 18 using dummy_hcd [ 510.634713][T16113] Buffer I/O error on dev loop1, logical block 56576, async page read [ 510.823363][ T5033] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 510.871924][ T5033] usb 10-1: config 0 has no interface number 0 [ 510.902774][ T5033] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 510.984780][ T5033] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 511.048352][ T5033] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 511.088483][ T5033] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.142109][ T5033] usb 10-1: config 0 descriptor?? [ 511.184919][T16117] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 511.277696][ T5033] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 511.617031][ T5033] usb 10-1: USB disconnect, device number 18 [ 512.218965][T16148] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 512.333158][T16148] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 512.413077][T16148] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 512.514650][T16148] overlayfs: conflicting lowerdir path [ 512.830721][T16154] loop1: detected capacity change from 0 to 4096 [ 513.182085][T16154] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 514.108975][T16159] loop9: detected capacity change from 0 to 40427 [ 514.126177][T16191] serio: Serial port pty21 [ 514.141931][ T4351] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 514.204942][T16159] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 514.257651][T16197] loop1: detected capacity change from 0 to 8 [ 514.290698][T16159] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 514.355389][ T4351] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.393146][T16159] F2FS-fs (loop9): invalid crc value [ 514.425566][ T4351] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 514.490888][T16159] F2FS-fs (loop9): Found nat_bits in checkpoint [ 514.511628][ T4351] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 514.585561][ T4351] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 514.653540][ T4351] usb 7-1: SerialNumber: syz [ 514.784815][T16159] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 514.815679][T16189] loop7: detected capacity change from 0 to 32768 [ 514.854125][T16159] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 514.901779][ T4351] usb 7-1: 0:2 : does not exist [ 514.981162][ T4351] usb 7-1: USB disconnect, device number 7 [ 515.215388][T16216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3662'. [ 515.299551][T16220] sctp: [Deprecated]: syz.0.3664 (pid 16220) Use of int in maxseg socket option. [ 515.299551][T16220] Use struct sctp_assoc_value instead [ 515.764986][T16233] loop1: detected capacity change from 0 to 512 [ 515.839450][T16233] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 515.956395][T16233] EXT4-fs (loop1): 1 truncate cleaned up [ 516.005423][T16233] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 516.135899][T16233] EXT4-fs error (device loop1): ext4_empty_dir:3179: inode #2: block 13: comm syz.1.3668: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 516.217339][T16247] loop6: detected capacity change from 0 to 64 [ 516.436203][T16233] EXT4-fs (loop1): Remounting filesystem read-only [ 516.680696][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 517.006961][T16276] loop6: detected capacity change from 0 to 256 [ 517.044982][T16277] kAFS: Invalid Command on /proc/fs/afs/cells file [ 517.104342][T16276] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 517.255858][T16276] exFAT-fs (loop6): start_clu is invalid cluster(0xffffffff) [ 517.822014][ T5033] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 517.865889][T16267] loop9: detected capacity change from 0 to 32768 [ 517.997748][T16267] JBD2: Ignoring recovery information on journal [ 518.042121][ T5033] usb 7-1: Using ep0 maxpacket: 32 [ 518.066090][ T5033] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.158187][ T5033] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.196659][T16267] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 518.245542][ T5033] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 518.331757][ T5033] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 518.375558][ T5033] usb 7-1: Product: syz [ 518.379764][ T5033] usb 7-1: Manufacturer: syz [ 518.442587][ T5033] hub 7-1:4.0: USB hub found [ 518.644582][ T5033] hub 7-1:4.0: 2 ports detected [ 518.817571][T16330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3703'. [ 518.890544][T16330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3703'. [ 519.051570][ T5033] hub 7-1:4.0: set hub depth failed [ 519.073913][ T9675] ocfs2: Unmounting device (7,9) on (node local) [ 519.101300][ T5033] usb 7-1: USB disconnect, device number 8 [ 519.359940][T16341] loop7: detected capacity change from 0 to 4096 [ 519.457142][T16347] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 519.928388][T16354] loop9: detected capacity change from 0 to 2048 [ 520.034523][T16354] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 520.332815][ T9675] EXT4-fs (loop9): unmounting filesystem. [ 520.778360][T16383] loop1: detected capacity change from 0 to 2048 [ 520.811570][T16387] loop6: detected capacity change from 0 to 512 [ 520.915463][T16387] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 520.957401][T16383] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 520.976742][T16387] System zones: 0-2, 18-18, 34-34 [ 521.067346][T16387] EXT4-fs (loop6): 1 orphan inode deleted [ 521.121237][T16387] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 521.171748][T16387] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.328767][T14799] EXT4-fs (loop6): unmounting filesystem. [ 521.554983][T16385] loop7: detected capacity change from 0 to 32768 [ 521.639117][T16385] XFS (loop7): Mounting V5 Filesystem [ 521.750351][T16385] XFS (loop7): Ending clean mount [ 521.814215][T16385] XFS (loop7): Quotacheck needed: Please wait. [ 522.001552][T16385] XFS (loop7): Quotacheck: Done. [ 522.057815][T16425] loop9: detected capacity change from 0 to 512 [ 522.199943][T16425] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 522.248737][T16408] loop6: detected capacity change from 0 to 32768 [ 522.281753][T16425] ext4 filesystem being mounted at /353/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.319951][T14864] XFS (loop7): Unmounting Filesystem [ 522.346235][T16408] JBD2: Ignoring recovery information on journal [ 522.455391][T16408] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 522.569910][ T9675] EXT4-fs (loop9): unmounting filesystem. [ 522.711617][T14799] ocfs2: Unmounting device (7,6) on (node local) [ 523.708488][T16472] cramfs: checking physical address 0x0000000027732000 for linear cramfs image [ 523.806338][T16472] cramfs: wrong magic [ 523.921196][T16472] cramfs: wrong magic [ 523.957088][T16479] loop9: detected capacity change from 0 to 1024 [ 524.237382][T16486] loop7: detected capacity change from 0 to 128 [ 524.908263][T16513] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 526.343150][T16558] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 526.876464][T16585] loop7: detected capacity change from 0 to 16 [ 526.955616][T16585] erofs: (device loop7): mounted with root inode @ nid 36. [ 527.036670][T16585] overlayfs: failed to set xattr on upper [ 527.091552][T16585] overlayfs: ...falling back to index=off,metacopy=off. [ 527.166879][T16591] loop9: detected capacity change from 0 to 64 [ 527.501396][T16601] program syz.0.3786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 527.700978][T16607] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3788'. [ 527.914828][T16614] device-mapper: ioctl: Invalid ioctl structure: name ca, dev 2 [ 528.462553][T16638] loop6: detected capacity change from 0 to 64 [ 528.645625][T16619] loop7: detected capacity change from 0 to 32768 [ 528.743244][T16619] XFS (loop7): Mounting V5 Filesystem [ 528.819718][T16619] XFS (loop7): Ending clean mount [ 529.146069][T14864] XFS (loop7): Unmounting Filesystem [ 529.457124][T16663] loop6: detected capacity change from 0 to 8192 [ 529.516801][T16663] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 529.595118][T16663] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 529.658215][T16663] REISERFS (device loop6): using ordered data mode [ 529.706154][T16663] reiserfs: using flush barriers [ 529.754256][T16663] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 529.842739][T16663] REISERFS (device loop6): checking transaction log (loop6) [ 530.062652][T16663] REISERFS (device loop6): Using tea hash to sort names [ 530.102934][T16663] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 530.598570][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3813'. [ 530.819068][T16703] loop6: detected capacity change from 0 to 512 [ 530.876910][T16703] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 530.965064][T16703] EXT4-fs (loop6): 1 truncate cleaned up [ 530.995265][T16703] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 531.057951][T16703] EXT4-fs (loop6): shut down requested (2) [ 531.084971][T16703] EXT4-fs warning (device loop6): ext4_empty_dir:3158: inode #2: comm syz.6.3814: directory missing '..' [ 531.198905][T14799] EXT4-fs (loop6): unmounting filesystem. [ 531.455881][T16724] loop6: detected capacity change from 0 to 4096 [ 531.521338][T16724] NILFS (loop6): invalid segment: Checksum error in segment payload [ 531.570275][T16724] NILFS (loop6): trying rollback from an earlier position [ 531.650719][T16724] NILFS (loop6): recovery complete [ 531.695005][T16736] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 531.804896][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 239 already freed [ 531.844282][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 531.898251][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 531.950904][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 532.001184][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 532.048996][T16743] loop7: detected capacity change from 0 to 128 [ 532.065671][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 532.143577][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 532.224211][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 532.265751][T16747] syz.7.3825: attempt to access beyond end of device [ 532.265751][T16747] loop7: rw=2049, sector=145, nr_sectors = 96 limit=128 [ 532.297650][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 532.337577][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 532.404002][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 532.469638][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 532.527433][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 532.541462][ T48] kworker/u4:3: attempt to access beyond end of device [ 532.541462][ T48] loop7: rw=1, sector=241, nr_sectors = 800 limit=128 [ 532.603170][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 532.656495][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 532.731089][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 532.788427][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 532.827591][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 532.838671][T16767] loop7: detected capacity change from 0 to 2048 [ 532.881555][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 532.900302][T16767] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 532.943406][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 533.009450][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 533.064669][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 533.106824][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 533.167854][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 533.226109][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 533.285402][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 533.329124][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 533.344075][T16778] loop7: detected capacity change from 0 to 4096 [ 533.379185][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 533.420163][T16783] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 533.455283][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 533.528430][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 533.587333][T16739] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 533.644633][T16739] NILFS (loop6): nilfs_sufile_do_free: segment 9 is already clean [ 534.260556][T16800] loop6: detected capacity change from 0 to 128 [ 534.323633][ T5033] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 534.419125][T16804] syz.6.3842: attempt to access beyond end of device [ 534.419125][T16804] loop6: rw=2049, sector=145, nr_sectors = 96 limit=128 [ 534.521499][T16807] program syz.0.3844 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 534.534980][ T5033] usb 8-1: Using ep0 maxpacket: 16 [ 534.555856][ T5033] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 534.620363][ T5033] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 534.680282][ T5033] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.720061][ T5033] usb 8-1: Product: syz [ 534.738712][ T5033] usb 8-1: Manufacturer: syz [ 534.766744][ T5033] usb 8-1: SerialNumber: syz [ 534.775564][T16816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3847'. [ 534.806418][ T5033] usb 8-1: config 0 descriptor?? [ 534.827714][ T7968] kworker/u4:8: attempt to access beyond end of device [ 534.827714][ T7968] loop6: rw=1, sector=241, nr_sectors = 800 limit=128 [ 534.860339][ T5033] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 534.900500][ T5033] usb 8-1: Detected FT232R [ 535.044654][ T5033] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 535.066123][T16823] block2mtd: device name too long [ 535.286046][ T5033] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 535.468708][ T5295] usb 8-1: USB disconnect, device number 4 [ 535.543852][T16840] loop1: detected capacity change from 0 to 2048 [ 535.586063][ T5295] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 535.638506][T16840] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 535.662829][ T5295] ftdi_sio 8-1:0.0: device disconnected [ 535.766087][T16840] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 535.864608][T16850] loop7: detected capacity change from 0 to 7 [ 535.916926][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 535.946980][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 535.956177][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 535.964069][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 536.081557][T16856] loop6: detected capacity change from 0 to 2048 [ 536.095352][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 536.104595][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 536.212434][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 536.221653][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 536.280478][ T26] audit: type=1400 audit(1794326521.374:146): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=16862 comm="syz.0.3865" [ 536.326915][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 536.336228][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 536.422106][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 536.431298][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 536.635419][T16856] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 536.708018][T16856] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 536.794920][T16887] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3872'. [ 536.855501][T16856] EXT4-fs (loop6): Remounting filesystem read-only [ 536.865204][T16887] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 536.909131][T16890] netem: incorrect ge model size [ 536.950071][T16890] netem: change failed [ 537.016013][T14799] EXT4-fs (loop6): unmounting filesystem. [ 537.295111][T16905] loop6: detected capacity change from 0 to 512 [ 537.365512][T16905] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 537.464362][T16905] EXT4-fs (loop6): 1 truncate cleaned up [ 537.495186][T16905] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 537.566250][T16905] EXT4-fs (loop6): resizing filesystem from 256 to 2 blocks [ 537.650181][T16905] EXT4-fs warning (device loop6): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 537.825282][T14799] EXT4-fs (loop6): unmounting filesystem. [ 537.946729][T16923] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 538.021250][T16925] loop6: detected capacity change from 0 to 1024 [ 538.080200][T16923] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.087588][T16923] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.438935][ T26] audit: type=1326 audit(1794326523.534:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16931 comm="syz.6.3890" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859bfa8f19 code=0x7ffc0000 [ 538.463002][ C0] vkms_vblank_simulate: vblank timer overrun [ 538.539627][T16938] loop1: detected capacity change from 0 to 1024 [ 538.567870][T16940] loop9: detected capacity change from 0 to 128 [ 538.634678][ T26] audit: type=1326 audit(1794326523.584:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16931 comm="syz.6.3890" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859bfa8f19 code=0x7ffc0000 [ 538.658759][ C0] vkms_vblank_simulate: vblank timer overrun [ 538.776888][T16942] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 538.784225][T16942] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 538.845397][T16948] syz.9.3888: attempt to access beyond end of device [ 538.845397][T16948] loop9: rw=2049, sector=145, nr_sectors = 96 limit=128 [ 538.941950][ T26] audit: type=1326 audit(1794326523.584:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16931 comm="syz.6.3890" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f859bfa8f19 code=0x7ffc0000 [ 539.158003][ T26] audit: type=1326 audit(1794326523.584:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16931 comm="syz.6.3890" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859bfa8f19 code=0x7ffc0000 [ 539.315017][T16960] loop6: detected capacity change from 0 to 512 [ 539.369680][ T26] audit: type=1326 audit(1794326523.594:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16931 comm="syz.6.3890" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f859bfa8f19 code=0x7ffc0000 [ 539.398045][ T4314] kworker/u4:5: attempt to access beyond end of device [ 539.398045][ T4314] loop9: rw=1, sector=241, nr_sectors = 800 limit=128 [ 539.438264][T16960] EXT4-fs (loop6): 1 truncate cleaned up [ 539.457256][T16964] kAFS: bad VL server IP address [ 539.482294][T16960] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 539.490886][T16967] input: syz1 as /devices/virtual/input/input43 [ 539.588921][T16960] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.3899: bg 0: block 465: padding at end of block bitmap is not set [ 539.627743][ T26] audit: type=1326 audit(1794326523.594:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16931 comm="syz.6.3890" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859bfa8f19 code=0x7ffc0000 [ 539.793103][T16960] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 28 [ 539.827568][ T26] audit: type=1326 audit(1794326523.594:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16931 comm="syz.6.3890" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859bfa8f19 code=0x7ffc0000 [ 539.890251][T16977] netlink: 192 bytes leftover after parsing attributes in process `syz.9.3902'. [ 539.918533][T16960] EXT4-fs (loop6): This should not happen!! Data will be lost [ 539.918533][T16960] [ 539.975353][T16960] EXT4-fs (loop6): Total free blocks count 0 [ 539.975407][T16960] EXT4-fs (loop6): Free/Dirty block details [ 539.975416][T16960] EXT4-fs (loop6): free_blocks=0 [ 539.975425][T16960] EXT4-fs (loop6): dirty_blocks=8 [ 539.975433][T16960] EXT4-fs (loop6): Block reservation details [ 539.975439][T16960] EXT4-fs (loop6): i_reserved_data_blocks=8 [ 540.097212][T16983] loop7: detected capacity change from 0 to 1024 [ 540.106353][T14799] EXT4-fs (loop6): unmounting filesystem. [ 540.160551][T16983] hfsplus: invalid length 32517 has been corrected to 255 [ 540.284537][T16988] loop9: detected capacity change from 0 to 64 [ 540.346974][ T4314] hfsplus: b-tree write err: -5, ino 2 [ 540.347060][ T4314] hfsplus: b-tree write err: -5, ino 25 [ 540.347168][ T4314] hfsplus: b-tree write err: -5, ino 4 [ 540.520886][T16992] netlink: 116 bytes leftover after parsing attributes in process `syz.7.3908'. [ 540.955159][ T5295] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 541.204508][ T5295] usb 7-1: Using ep0 maxpacket: 32 [ 541.247509][ T5295] usb 7-1: config index 0 descriptor too short (expected 27632, got 27) [ 541.294630][ T5295] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 541.337339][ T5295] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 541.416381][ T5295] usb 7-1: config 1 has no interface number 0 [ 541.452086][ T5295] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 541.527326][ T5295] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 541.608622][ T5295] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 541.658753][ T5295] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.729307][T17037] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3925'. [ 541.751461][ T5295] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 541.919100][ T5295] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 542.080625][T17047] loop7: detected capacity change from 0 to 256 [ 542.178914][T17047] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a3b, chksum : 0xd53fbf7b, utbl_chksum : 0xe619d30d) [ 542.347161][ T5034] usb 7-1: USB disconnect, device number 9 [ 542.380696][ T5034] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 542.936918][T17075] netlink: 'syz.7.3938': attribute type 39 has an invalid length. [ 543.007936][T17075] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3938'. [ 543.078836][T17070] loop9: detected capacity change from 0 to 8192 [ 543.194806][T17070] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 543.341905][T17070] REISERFS (device loop9): found reiserfs format "3.5" with non-standard journal [ 543.442972][T17070] REISERFS (device loop9): using ordered data mode [ 543.518532][T17070] reiserfs: using flush barriers [ 543.578533][T17070] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 543.680137][ T26] audit: type=1326 audit(1794326528.774:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.1.3946" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fca7a8f19 code=0x7ffc0000 [ 543.740734][T17070] REISERFS (device loop9): checking transaction log (loop9) [ 543.990025][T17070] REISERFS (device loop9): Using r5 hash to sort names [ 544.042225][ T26] audit: type=1326 audit(1794326528.834:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.1.3946" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4fca7a8f19 code=0x7ffc0000 [ 544.066291][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.088859][ T5034] wacom 0003:056A:003F.0018: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 544.108618][T17070] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 544.325569][ T26] audit: type=1326 audit(1794326528.834:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.1.3946" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fca7a8f19 code=0x7ffc0000 [ 544.349645][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.419124][T17106] fido_id[17106]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 544.475696][T17116] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3951'. [ 544.587574][ T26] audit: type=1326 audit(1794326528.854:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.1.3946" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4fca7a8f19 code=0x7ffc0000 [ 544.611696][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.787259][ T26] audit: type=1326 audit(1794326528.864:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.1.3946" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fca7a8f19 code=0x7ffc0000 [ 544.811385][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.862110][T17122] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 544.973244][T17122] iwpm_mapping_info_cb: Unable to parse nlmsg [ 545.064541][ T26] audit: type=1326 audit(1794326528.864:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.1.3946" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f4fca7a8f19 code=0x7ffc0000 [ 545.252061][ T26] audit: type=1326 audit(1794326528.884:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.1.3946" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fca7a8f19 code=0x7ffc0000 [ 545.424069][T17138] tap0: tun_chr_ioctl cmd 1074025678 [ 545.437020][ T26] audit: type=1326 audit(1794326528.894:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.1.3946" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fca7a8f19 code=0x7ffc0000 [ 545.461164][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.506612][T17138] tap0: group set to 0 [ 545.600625][T17143] loop7: detected capacity change from 0 to 2048 [ 545.682646][T17143] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 545.698503][T17119] loop6: detected capacity change from 0 to 32768 [ 545.783999][T17143] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 545.821025][T17119] XFS (loop6): Mounting V5 Filesystem [ 545.918837][T17119] XFS (loop6): Ending clean mount [ 545.935780][T17143] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 546.036474][T17119] XFS (loop6): Quotacheck needed: Please wait. [ 546.066486][T17143] EXT4-fs (loop7): This should not happen!! Data will be lost [ 546.066486][T17143] [ 546.156991][T17143] EXT4-fs (loop7): Total free blocks count 0 [ 546.214859][T17143] EXT4-fs (loop7): Free/Dirty block details [ 546.235537][T17119] XFS (loop6): Quotacheck: Done. [ 546.266468][T17143] EXT4-fs (loop7): free_blocks=2415919504 [ 546.298749][T17143] EXT4-fs (loop7): dirty_blocks=32 [ 546.329734][T17143] EXT4-fs (loop7): Block reservation details [ 546.384247][T17143] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 546.430738][T14799] XFS (loop6): Unmounting Filesystem [ 546.529383][ T9] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 547.699636][T17215] loop9: detected capacity change from 0 to 2048 [ 547.869304][T17215] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 547.930104][T17221] ================================================================== [ 547.938222][T17221] BUG: KASAN: use-after-free in __xfrm_state_delete+0x3db/0x940 [ 547.945961][T17221] Write of size 8 at addr ffff888058d71118 by task syz.0.3980/17221 [ 547.953956][T17221] [ 547.956313][T17221] CPU: 0 PID: 17221 Comm: syz.0.3980 Not tainted syzkaller #0 [ 547.963780][T17221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 547.973829][T17221] Call Trace: [ 547.977159][T17221] [ 547.980125][T17221] dump_stack_lvl+0x188/0x24e [ 547.984892][T17221] ? read_lock_is_recursive+0x10/0x10 [ 547.990316][T17221] ? show_regs_print_info+0x12/0x12 [ 547.995532][T17221] ? load_image+0x410/0x410 [ 548.000043][T17221] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 548.005540][T17221] ? __virt_addr_valid+0x188/0x540 [ 548.010699][T17221] ? __virt_addr_valid+0x467/0x540 [ 548.015797][T17221] ? __xfrm_state_delete+0x3db/0x940 [ 548.021061][T17221] print_report+0xa8/0x210 [ 548.025465][T17221] kasan_report+0x10b/0x140 [ 548.030032][T17221] ? __rwlock_init+0x140/0x140 [ 548.034776][T17221] ? __xfrm_state_delete+0x3db/0x940 [ 548.040043][T17221] __xfrm_state_delete+0x3db/0x940 [ 548.045140][T17221] xfrm_state_flush+0x445/0x760 [ 548.049977][T17221] pfkey_flush+0x12f/0x480 [ 548.054400][T17221] ? slab_free_freelist_hook+0x133/0x1b0 [ 548.060018][T17221] ? pfkey_register+0x890/0x890 [ 548.064848][T17221] ? kmem_cache_free+0xf7/0x2a0 [ 548.069685][T17221] ? pfkey_broadcast+0x3bf/0x3e0 [ 548.074603][T17221] pfkey_sendmsg+0xc70/0x1140 [ 548.079265][T17221] ? pfkey_release+0x340/0x340 [ 548.084014][T17221] ? aa_sock_msg_perm+0x94/0x150 [ 548.089088][T17221] ? apparmor_socket_sendmsg+0x8a/0x330 [ 548.094632][T17221] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 548.099949][T17221] ? security_socket_sendmsg+0x7c/0xa0 [ 548.105427][T17221] ? pfkey_release+0x340/0x340 [ 548.110177][T17221] ____sys_sendmsg+0x5ed/0x9a0 [ 548.114977][T17221] ? __sys_sendmsg_sock+0x30/0x30 [ 548.119981][T17221] ? __import_iovec+0x306/0x510 [ 548.124837][T17221] ? import_iovec+0x6f/0xa0 [ 548.129325][T17221] ___sys_sendmsg+0x2a2/0x360 [ 548.133992][T17221] ? __sys_sendmsg+0x2a0/0x2a0 [ 548.138747][T17221] __se_sys_sendmsg+0x1c3/0x2b0 [ 548.143600][T17221] ? __x64_sys_sendmsg+0x80/0x80 [ 548.148522][T17221] ? lockdep_hardirqs_on+0x94/0x140 [ 548.153703][T17221] do_syscall_64+0x4c/0xa0 [ 548.158100][T17221] ? clear_bhb_loop+0x60/0xb0 [ 548.162822][T17221] ? clear_bhb_loop+0x60/0xb0 [ 548.167482][T17221] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.173363][T17221] RIP: 0033:0x7f98dafa8f19 [ 548.177830][T17221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.197459][T17221] RSP: 002b:00007f98dbf58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.205932][T17221] RAX: ffffffffffffffda RBX: 00007f98db225fa0 RCX: 00007f98dafa8f19 [ 548.213893][T17221] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 548.221848][T17221] RBP: 00007f98db037f6d R08: 0000000000000000 R09: 0000000000000000 [ 548.229805][T17221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.237763][T17221] R13: 00007f98db226038 R14: 00007f98db225fa0 R15: 00007ffdf808dde8 [ 548.245722][T17221] [ 548.248724][T17221] [ 548.251027][T17221] Allocated by task 4277: [ 548.255339][T17221] kasan_set_track+0x4b/0x70 [ 548.259922][T17221] __kasan_kmalloc+0x8e/0xa0 [ 548.264494][T17221] __kmalloc+0xb3/0x240 [ 548.268717][T17221] xfrm_state_init+0x125/0x470 [ 548.273480][T17221] xfrm_net_init+0x1a3/0xeb0 [ 548.278061][T17221] ops_init+0x360/0x5e0 [ 548.282230][T17221] setup_net+0x4f2/0xbd0 [ 548.286459][T17221] copy_net_ns+0x33e/0x5b0 [ 548.290858][T17221] create_new_namespaces+0x3ce/0x700 [ 548.296192][T17221] unshare_nsproxy_namespaces+0x116/0x160 [ 548.301889][T17221] ksys_unshare+0x4f6/0x8e0 [ 548.306409][T17221] __x64_sys_unshare+0x34/0x40 [ 548.311163][T17221] do_syscall_64+0x4c/0xa0 [ 548.315564][T17221] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.321440][T17221] [ 548.323744][T17221] Freed by task 4351: [ 548.327700][T17221] kasan_set_track+0x4b/0x70 [ 548.332277][T17221] kasan_save_free_info+0x27/0x40 [ 548.337282][T17221] ____kasan_slab_free+0x126/0x1f0 [ 548.342375][T17221] slab_free_freelist_hook+0x133/0x1b0 [ 548.347828][T17221] __kmem_cache_free+0xb6/0x200 [ 548.352661][T17221] xfrm_hash_resize+0xdce/0xff0 [ 548.357492][T17221] process_one_work+0x8ab/0x1160 [ 548.362486][T17221] worker_thread+0xaf5/0x12a0 [ 548.367143][T17221] kthread+0x29d/0x330 [ 548.371206][T17221] ret_from_fork+0x1f/0x30 [ 548.375619][T17221] [ 548.377924][T17221] The buggy address belongs to the object at ffff888058d71100 [ 548.377924][T17221] which belongs to the cache kmalloc-64 of size 64 [ 548.391827][T17221] The buggy address is located 24 bytes inside of [ 548.391827][T17221] 64-byte region [ffff888058d71100, ffff888058d71140) [ 548.404908][T17221] [ 548.407213][T17221] The buggy address belongs to the physical page: [ 548.413602][T17221] page:ffffea0001635c40 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888058d71b00 pfn:0x58d71 [ 548.425034][T17221] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 548.432571][T17221] raw: 00fff00000000200 ffffea000077f8c8 ffffea0000c13fc8 ffff888018441640 [ 548.441133][T17221] raw: ffff888058d71b00 000000000020001d 00000001ffffffff 0000000000000000 [ 548.449709][T17221] page dumped because: kasan: bad access detected [ 548.456098][T17221] page_owner tracks the page as allocated [ 548.461788][T17221] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 4277, tgid 4277 (syz-executor), ts 70901446493, free_ts 21804382391 [ 548.480099][T17221] post_alloc_hook+0x173/0x1a0 [ 548.484918][T17221] get_page_from_freelist+0x206b/0x2180 [ 548.490461][T17221] __alloc_pages+0x1ec/0x4f0 [ 548.495035][T17221] alloc_slab_page+0x5d/0x180 [ 548.499710][T17221] new_slab+0x87/0x2d0 [ 548.503774][T17221] ___slab_alloc+0xbc5/0x1240 [ 548.508428][T17221] __kmem_cache_alloc_node+0x126/0x270 [ 548.513884][T17221] __kmalloc+0xa3/0x240 [ 548.518034][T17221] xfrm_state_init+0xa9/0x470 [ 548.522692][T17221] xfrm_net_init+0x1a3/0xeb0 [ 548.527259][T17221] ops_init+0x360/0x5e0 [ 548.531447][T17221] setup_net+0x4f2/0xbd0 [ 548.535669][T17221] copy_net_ns+0x33e/0x5b0 [ 548.540061][T17221] create_new_namespaces+0x3ce/0x700 [ 548.545325][T17221] unshare_nsproxy_namespaces+0x116/0x160 [ 548.551020][T17221] ksys_unshare+0x4f6/0x8e0 [ 548.555504][T17221] page last free stack trace: [ 548.560161][T17221] free_unref_page_prepare+0x8e5/0x9e0 [ 548.565600][T17221] free_unref_page+0x2e/0x3f0 [ 548.570257][T17221] free_contig_range+0x9d/0x150 [ 548.575138][T17221] destroy_args+0xef/0xa0e [ 548.579620][T17221] debug_vm_pgtable+0x33c/0x38e [ 548.584452][T17221] do_one_initcall+0x257/0x800 [ 548.589195][T17221] do_initcall_level+0x13d/0x1ed [ 548.594131][T17221] do_initcalls+0x4b/0x8a [ 548.598441][T17221] kernel_init_freeable+0x401/0x5ab [ 548.603638][T17221] kernel_init+0x19/0x1b0 [ 548.607947][T17221] ret_from_fork+0x1f/0x30 [ 548.612448][T17221] [ 548.614752][T17221] Memory state around the buggy address: [ 548.620428][T17221] ffff888058d71000: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 548.628469][T17221] ffff888058d71080: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 548.636521][T17221] >ffff888058d71100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 548.644559][T17221] ^ [ 548.649384][T17221] ffff888058d71180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 548.657450][T17221] ffff888058d71200: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 548.665507][T17221] ================================================================== [ 548.673661][T17221] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 548.680833][T17221] CPU: 0 PID: 17221 Comm: syz.0.3980 Not tainted syzkaller #0 [ 548.688265][T17221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 548.698299][T17221] Call Trace: [ 548.701559][T17221] [ 548.704475][T17221] dump_stack_lvl+0x188/0x24e [ 548.709160][T17221] ? memcpy+0x3c/0x60 [ 548.713124][T17221] ? show_regs_print_info+0x12/0x12 [ 548.718303][T17221] ? load_image+0x410/0x410 [ 548.722795][T17221] panic+0x2d3/0x710 [ 548.726672][T17221] ? bpf_jit_dump+0xd0/0xd0 [ 548.731157][T17221] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 548.737038][T17221] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 548.742919][T17221] ? _raw_spin_unlock+0x40/0x40 [ 548.747748][T17221] check_panic_on_warn+0x80/0xa0 [ 548.752737][T17221] ? __xfrm_state_delete+0x3db/0x940 [ 548.757999][T17221] end_report+0x66/0x110 [ 548.762227][T17221] kasan_report+0x118/0x140 [ 548.766716][T17221] ? __rwlock_init+0x140/0x140 [ 548.771460][T17221] ? __xfrm_state_delete+0x3db/0x940 [ 548.776726][T17221] __xfrm_state_delete+0x3db/0x940 [ 548.781820][T17221] xfrm_state_flush+0x445/0x760 [ 548.786659][T17221] pfkey_flush+0x12f/0x480 [ 548.791057][T17221] ? slab_free_freelist_hook+0x133/0x1b0 [ 548.796673][T17221] ? pfkey_register+0x890/0x890 [ 548.801502][T17221] ? kmem_cache_free+0xf7/0x2a0 [ 548.806341][T17221] ? pfkey_broadcast+0x3bf/0x3e0 [ 548.811260][T17221] pfkey_sendmsg+0xc70/0x1140 [ 548.815921][T17221] ? pfkey_release+0x340/0x340 [ 548.820669][T17221] ? aa_sock_msg_perm+0x94/0x150 [ 548.825589][T17221] ? apparmor_socket_sendmsg+0x8a/0x330 [ 548.831112][T17221] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 548.836392][T17221] ? security_socket_sendmsg+0x7c/0xa0 [ 548.841845][T17221] ? pfkey_release+0x340/0x340 [ 548.846592][T17221] ____sys_sendmsg+0x5ed/0x9a0 [ 548.851341][T17221] ? __sys_sendmsg_sock+0x30/0x30 [ 548.856346][T17221] ? __import_iovec+0x306/0x510 [ 548.861181][T17221] ? import_iovec+0x6f/0xa0 [ 548.866098][T17221] ___sys_sendmsg+0x2a2/0x360 [ 548.870784][T17221] ? __sys_sendmsg+0x2a0/0x2a0 [ 548.875545][T17221] __se_sys_sendmsg+0x1c3/0x2b0 [ 548.880378][T17221] ? __x64_sys_sendmsg+0x80/0x80 [ 548.885300][T17221] ? lockdep_hardirqs_on+0x94/0x140 [ 548.890478][T17221] do_syscall_64+0x4c/0xa0 [ 548.894882][T17221] ? clear_bhb_loop+0x60/0xb0 [ 548.899540][T17221] ? clear_bhb_loop+0x60/0xb0 [ 548.904214][T17221] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.910093][T17221] RIP: 0033:0x7f98dafa8f19 [ 548.914488][T17221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.934074][T17221] RSP: 002b:00007f98dbf58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.942466][T17221] RAX: ffffffffffffffda RBX: 00007f98db225fa0 RCX: 00007f98dafa8f19 [ 548.950509][T17221] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 548.958561][T17221] RBP: 00007f98db037f6d R08: 0000000000000000 R09: 0000000000000000 [ 548.966518][T17221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.974467][T17221] R13: 00007f98db226038 R14: 00007f98db225fa0 R15: 00007ffdf808dde8 [ 548.982431][T17221] [ 548.985512][T17221] Kernel Offset: disabled [ 548.989822][T17221] Rebooting in 86400 seconds..