last executing test programs: 24.481119193s ago: executing program 1 (id=1206): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000240)=ANY=[@ANYBLOB="80000000080211000001080211020000080211000000000000e3ffffffffffff63822f07c13b1974f10001000006463e98b2076c7014e5fe056dea5957480202020202020108"], 0x36) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r4], 0x44}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8931, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x1, 0x84) 23.160457841s ago: executing program 1 (id=1210): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000240)=ANY=[@ANYBLOB="80000000080211000001080211020000080211000000000000e3ffffffffffff63822f07c13b1974f10001000006463e98b2076c7014e5fe056dea5957480202020202020108"], 0x36) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES16=r5, @ANYRESHEX=r0], 0xfc}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r6], 0x44}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8931, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x1, 0x84) 21.14192059s ago: executing program 1 (id=1216): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x1008c, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1518, &(0x7f0000002280)="$eJzs3AuYjVX7MPD7Xms9Y0jaTXIY1lr3wyaHZZIkhyQ5JEmSJDklJE3ySl4khpCkIQnJYUgOQ0gOE5PG+Xw+JknSJElITsn6rgmft7f63n/f2//1v/5z/67rufa693rWetba97Nnr+fZM/Nt16G1mtSu3oiI4N+CFx+SACAWAAYCwHUAEABA+bjycVn1OSUm/XsHYX+th1Ov9gjY1cT5z944/9kb5z974/xnb5z/7I3zn71x/rM3zj9j2dnm6QWv5y37bnz/Pzvjz///RTLLjP1ybZkbu/2JJpz/7I3z/79W8F/ZifOfvXH+szfOf/bG+c8OcvxhDec/u7p4TnD+GcvOrvb9Z96u7na1zz/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY9nDGX+FAoDL5as9LsYYY4wxxhhjjP11fI6rPQLGGGOMMcYYY4z990MQIEFBADGQA2IhJ+QCAQDXQh64DiJwPcTBDZAXboR8kB8KQEGIh0JQGDQYsEAQQhEoClEoBsXhJigBJaEUlAYHZSABboaycAuUg1uhPNwGFeB2qAiVoDJUgTugKtwJ1eAuqA53Qw2oCbWgNtwDdeBeqAv3QT24H+rDA9AAHoSG8BA0goehMTwCTeBRaAqPQTNoDi2gJbT6/2r/AvSEF6EX9IYk6AN94SXoB/3/7ysyCF6FwfAaJMMQGAqvwzB4A4bDmzACRsIoeAtGw9swBsbCOBgPKTABJsI7MAnehckwBabCNEiF6TAD3oOZMAtmw/swBz6AuTAP5sMCSIMPYSEsgnT4CBbDx5ABS2ApLIPlsAJWwipYDWtgLayD9bABNsIm2AxbYCtsg+2wA3bCLtgNn8Ae+BT2wmewDz7/k+1P/1P7bggIKFCgQoUxGIOxGIu5MBfmxtyYB/NgBCMYh3GYF/NiPsyHBbAAxmM8FsbCaNAgIWERLIJRjGJxLI4lsASWwlLo0GECJmBZvAXLYTksj+WxAlbAilgJK2EVrIJVsSpWw2pYHatjDayBtbAW3oP3YB+si3WxHtbD+lj/8u0pbISNsDE2xibYBJtiU2yGzbAFtsBW2ApbY2tsg22wHbbD9tgeO2AHTMRE7IgdsRN2ws7YGbtgF+yKXbEbdsfu+EIOwBfxReyNNUQf7It9sR8m5xiAL+PL+AoOwlfxVXwNk3EIDsXX8XV8A4fjKRyBI3EUjsKqvjcAjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsL3cQ5+gB/gPJyHCzAN03AhLsJ0TMfFeBozcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/BT/FTTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyJJ/EUnsYzeAbP4Tk8j8/Hf914V8k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFcVFclBAlRClRSjjhRIJIEGVFWVFOlBPlxW2igrhdVBSVRFtXRVQRVUU7V03cJaqL6qKGqClqidqitqgj6oi6oq6oJ+qJ+qK+aCAeFA1FHxyAD4uszDQRQ7CpGIrNRHMhL71fW4vh2Ea0Fe3Ek2IkjsAOorVLFM+IjmIMdhJ/E2PxOdFFjMeu4u+im+gueogXRE/RxvUSvcVk7CP6imnYT/QXA8TLYibWFO/jnJy1xGsiWQwRQ8XrYgG+IYaLN8UIMVKMEm+J0eJtMUaMFePEeJEiJoiJ4h0xSbwrJospYqqYJlLFdDFDvCdmillitnhfzBEfiLlinpgvFog08aFYKBaJdPGRWCw+FhliiVgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH2Cl2id3iE7FHfCr2is/EPvG52C++EAfEl+Kg+Epkiq/FIfGNOCy+FUfEd+Ko+F4cE8fFCfGDOCl+FKfEaXFGnBXnxE/ivPhZXBBegEQppJRKBjJG5pCxMqfMJa+RuWVw6dW9XsbJG2ReeaPMJ/PLArKgjJeFZGGppZFWkgxlEVlURmUxWVzeJEvIkrKULC2dLCMT5M2yrLxFlpO3yvLyNllB3i4rykqysqwi75BV5Z0SIhePUUPWlLVkbXmPrCPvlXXlfbKevF/Wlw/IBvJB2VA+JBvJh2Vj+YhsIh+VTeVjsplsLlvIlrKVfFy2lk/INrKtbCeflO3lU7KDfFomymdkR+kvnSLPyS7yedlV/l12k91lD/mzvCC97CV7S4A+sq98SfaT/eUA+bIcKF+Rg+SrcrB8TSbLIXKofF0Ok2/I4fJNOUKOlKPkW3K0fFuOkWPlODlepsgJcqJ8R06S78rJcoqcKqfJVDldDrjU02wp/2X7d36n/eBfjr5JbpZb5Fa5TW6XO+ROuUvulrvlHrlH7pV75T65T+6X++UBeUAelAdlpsyUh+QheVgelkfkEXlUHpXH5HF5Vv4gT8of5Sl5Wp6WZ+U5eU6ev/QagEIllFRKBSpG5VCxKqfKpa5RudW1Ko+6TkXU9SpO3aDyqhtVPpVfFVAFVbwqpAorrYyyilSoiqiiKqqK4aUTRpVSpZVTZVSCuvnPtFfF1U2qhCr5q/aXx6f/YHytVCvVWrVWbVQb1U61U+1Ve9VBdVCJKlF1VB1VJ9VJdVadVRfVRXVVXVU31U31UD1UT9VT9VK9VJJKUn3VS6qf6q8GqJfVQPWKGqQGqcFqsEpWyWqoGqqGqWFquBquRqgRapQapUar0WqMGqPGqXEqRaWoiWqimqQmqclqspqqpqpUlapmqBlqppqpZqvZao6ao+aquWq+mq/SVJpaqBaqdJWuFqvFKkMtUUvUMrVMrVAr1Cq1Sq1Ra9Q6tU5tUBtUhtqsNqutaqvarrarnWqn2q12qz1qj9qr9qp9ap/ar/arA+qAOqgOqkyVqQ6pQ+qwOqyOqCPqqDqqjqlj6oQ6oU6qk+qUOqXOqDPqnDqnzqvz6oK6kLXsC0QgAhWoICaICWKD2CBXkCvIHeQO8gR5gkgQCeKCuCBvcGOQL8gfFAgKBvFBoaBwoAMT2EBcSno0KBYUD24KSgQlg1JB6cAFZYKE4OagbHBLUC64NSgf3BZUCG4PKgaVgspBleCOoGpwZ1AtuCuoHtwd1AhqBrWC2sE9QZ3g3qBucF9QL7g/qB88EDQIHgwaBg8FjYKHg8bBI0GT4NGgafBY0CxoHrQIWgat/tL+vT+V/wnXS/fWSbqP7qtf0v10fz1Av6wH6lf0IP2qHqxf08l6iB6qX9fD9Bt6uH5Tj9Aj9Sj9lh6t39Zj9Fg9To/XKXqCnqjf0ZP0u3qynqKn6mk6VU/XM/R7eqaepWfr9/Uc/YGeq+fp+XqBTtMf6oV6kU7XH+nF+mOdoZfopXqZXq5X6JV6lV6t1+i1ep1erzfojXqT3qy36K16m96ud+idepferT/Re/Sneq/+TO/Tn+v9+gt9QH+pD+qvdKb+Wh/S3+jD+lt9RH+nj+rv9TF9XJ/QP+iT+kd9Sp/WZ/RZfU7/pM/rn/UF7bMW91kf70YZZWJMjIk1sSaXyWVym9wmj8ljIiZi4kycyWvymnwmnylgCph4E28Km8ImCxkyRUwREzVRU9wUNyVMCVPKlDLOOJNgEkxZU9aUM+VMeVPeVDAVTEVT0VQ2lc0d5g5zp7nT3GXuMnebu01NU9PUNrVNHVPH1DV1TT1Tz9Q39U0D08A0NA1NI9PINDaNTRPTxDQ1TU0z08y0MC1MK9PKtDatTRvTxrQz7Ux70950MB1Mokk0HU1H08l0Mp1NZ9PFdDFdTVfTzXQzPUwP09P0NL1ML5Nkkkxf09f0M/3MADPADDQDzSAzyAw2g02ySTZDzVAzzAwzw81wM8KMNKOyFqrmbTPGjDXjzHiTYlLMRDPRTDKTzGQz2Uw13qSaVDPDzDAzzUwz28w2c8wcM9fMNfPNfJNm0sxCs9Ckm3Sz2Cw2GSbDLDVLzXKz3Kw0K81qs9qsNWvNelhvNpqNZrPZbLaarWa72W52mp1mt9lt9pg9Zq/Za/aZfWa/2W8OmAPmoDloMk2mOWQOmcPmsDlijpij5qg5Zo6ZE+aEOWlOmlPmlDljzphzJv+lz0tvYm1Om8teY3Pba20ee53957iALWjjbSFb2Gqbz+b/VWystSVsSVvKlrbOlrEJ9ubfxBVtJVvZVrF32Kr2TlvtN3Ede6+ta++z9ez9tra951dxffuAbWAftQ0RAWxz29i2tE3so7apfcw2s81tC9vStrdP2Q72aZton7Ed7bO/iRfaRXa1XWPX2nV2j/3UnrFn7WH7rT1nf7K9bG870L5iB9lX7WD7mk22Q34Tj7Jv2dH2bTvGjrXj7PjfxFPtNJtqp9sZ9j070876TZxmP7RzbLqda+fZ+XbBL3HWmNLtR3ax/dhm2CV2qV1ml9sVdqVddXmsl7+tt7vtJ3ar3Wa32x12p931S5w1j732M7vPfm4P2W/sAfulPWiP2Ez79S9x1vyO2O/sUfu9PWaP2xP2B3vS/mhP2dO/zD9r7j/Yn+0F6y0QEpAkRQHFUA6KpZyUi66h3HQt5aHrKELXUxzdQHnpRspH+akAFaR4KkSFSZMhS0QhFaGiFKVidHmdXopKk6MylEA3U1m6hcrRrVSebqMKdDtVpEpUmarQHVSV7qRqdBdVp7upBtWkWlSb7qE6dC/VpfuoHt1P9ekBakAPUkN6iBrRw9SYHqEm9Cg1pceoGTWnFtSSWtHj1JqeoDbUltrRk9SenqIO9DQl0jPUkZ6lTvQ36kzPURd6nrrS36kbdace9AL1pBepF/WmJOpDfekl6kf9aQC9TAPpFRpEr9Jgeo2SaQgNpddpGL1Bw+lNGkEjaRS9RaPpbRpDY2kcjacUmkAT6R2aRO/SZJpCU2kapdJ0mkHv0UyaRbPpfZpDH9BcmkfzaQGl0Ye0kBZROn1Ei+ljyqAltJSW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lbbRdtpBO2kX7aZPaA99SnvpM9pHn9N++oIO0Jd0kL6iTPqaDtE3dJi+pSP0ne9N39MxOk4n6Ac6ST/SKTpNZ+gsnaOf6Dz9TBfIE4QYilCGKgzCmDBHGBvmDHOF14S5w2vDPOF1YSS8PowLbwjzhjeG+cL8YYGwYBgfFgoLhzo0oQ0pDMMiYdEwGhYLi4c3hSXCkmGpsHTowjJhQnhzWDa8JSwX3hqWD28LK4S3hxXDSuGj91cJ7wirhneG1cK7wurh3WGNsGZYK6wd3hPWCe8N64b3hfXC+8Ny4QNhg/DBsGH4UNgofDhsHD4SNgkfDZuGj4XNwuZhi7Bl2Cp8PGwdPhG2CduG7cInw/bhU2GH8OkwMXwm7Bg++0v9A4v+uD4p7BP2DV8KXwq9v0/Ojy6IpkU/jC6MLoqmRz+KLo5+HM2ILokujS6LLo+uiK6Mroqujq6Jro2ui66PbohujG6Kel87Bzh0wkmnXOBiXA4X63K6XO4al9td6/K461zEXe/i3A0ur7vR5XP5XQFX0MW7Qq6w084468iFrogr6qKumCvubnIlXElXypV2zpVxCa6la+VaudbuCdfGtXXt3JPuSfeUe8o97Z52z7iO7lnXyf3NdXbPuS7ueRUD4Lq57q6He8H1dBPyXHxPJrm+rq/r5/q5AW6AG+gGukFukBvsBrtkl+yGuqFumBvmhrvhboTLCQCj3Gg32o1xY9w4N86luBQ30U10k9wkN9lNdlPdVJfqUt0MN8PNdDNd1VkXjzLXzXXz3XyX5tLcQpe1Zkx3i91il+Ey3FK31C13y91Kt9KtdqvdWrfWrXfr3Ua30W12m91Wt9Vtd9vdTrfT7Xa73R5/3cVO3T633+13B9wBd9B95TLd1+6Q+8Yddt+6I+47d9R974654+6E+8GddD+6U+60O+POunPuJ3fe/ewuOO9SIhMiEyPvRCZF3o1MjkyJTI1Mi6RGpkdmRN6LzIzMisyOvB+ZE/kgMjcyLzI/siCSFvkwsjCyKJIe+SiyOPJxJCOyJLI0siyyPLIi4n2hraEv4ov6qC/mi/ubfAlf0pfypb3zZXyCv9mX9bf4cv5WX97f5iv4231FX8lX9o/5Zr65b+Fb+lb+cd/aP+Hb+La+nX/St/dP+Q7+aZ/on/Ed/bO+k/+b7+yf8138876r/7vv5rv7Hv4F39O/6Hv53j7J9/F9/Uu+n+/vB/iX/UD/ih/kX/WD/Ws+2Q/xQ/3rfph/ww/3b/oRfqQfFfOWH335EhnG+xQ/wU/07/hJ/l0/2U/xU/00n+qn+xn+PT/Tz/Kz/ft+jv8Akvw8P98v8Gn+Q7/QL/Lp/iO/2H/sM/ySy7dQ/Uq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3O/xOv8vv9p/4Pf5Tv9d/5vf5z/1+/4U/4L/0B/1XPtN/7Q/5b/xh/60/4r/zR/33/pg/7k/4H/xJ/6M/5U/7M/6sP+d/8uf9z/4C/80aY4wxxth/yYQrRfF79X1+5znxDzv3BYBrtxXM/Mf6rBXl+nwXy/1FfPsIADzTu+vDl7caNZKSki7tmyEhKDoP4PI3QVli4Eq8BNrBU5AIbaHs746/v+h+jv5F/9HbAHL9Q5tYuBJf6f+LP+j/8SdHLawQnon7f/Q/D6BE0Sttsq6TLsdLoJ3KemwL5f6g//yt/8X4c36ZAtDmH9rkhivxlfEnwBPwLCT+ak/GGGOMMcYYY+yi/qJy58vXn5d/4/P3rs/j1ZU2OeBK/K+uzxljjDHGGGOMMXb1Pde9x9OPX1OsbedfComJf6JQ7c/szIXfK3j4HzGMiwXvAS4/owDg3+wQ4JfCuP/gLLb8R46VfOmt889Vy8/6AP5npPKvKFzlH0yMMcYYY4yxv9yVRf+vn1dXa0CMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxlg29J/4d2JXe46MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbY1fZ/AgAA//81OQSC") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0xfffffffffffffffc}, {0xb6, 0x0, 0x0, 0x400000000000}, 0x4, 0x6e6bb1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2b}, 0x0, @in=@empty, 0x3506}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r6) keyctl$search(0xa, r6, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) 18.589247256s ago: executing program 1 (id=1223): socket$inet6(0xa, 0x2, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000100)) write$tun(r0, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x8}}}}}}}, 0x42) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 17.128815947s ago: executing program 0 (id=1227): iopl(0x3) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0xc, {"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", 0x5c1}}, 0x505) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000000)=""/188, 0xbc) read$char_usb(r2, 0x0, 0x0) syz_io_uring_complete(0x0) syz_usb_disconnect(0xffffffffffffffff) 14.949581228s ago: executing program 1 (id=1231): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000240)=ANY=[@ANYBLOB="80000000080211000001080211020000080211000000000000e3ffffffffffff63822f07c13b1974f10001000006463e98b2076c7014e5fe056dea5957480202020202020108"], 0x36) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=r1, @ANYRES16, @ANYRESHEX=r0], 0xfc}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r6], 0x44}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8931, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x1, 0x84) 13.536676668s ago: executing program 0 (id=1233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) 13.527577788s ago: executing program 3 (id=1234): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0xfffffffffffffffc}, {0xb6, 0x0, 0x0, 0x400000000000}, 0x4, 0x6e6bb1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2b}, 0x0, @in=@empty, 0x3506}}, 0xe8) openat$drirender128(0xffffffffffffff9c, 0x0, 0x40000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r4) keyctl$search(0xa, r4, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) 13.099084394s ago: executing program 0 (id=1235): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019003970000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000000080000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc000000000000000000000000000001000000000400"], 0xfc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000000180), 0x400000000000077, 0x700000000000000) 12.430517124s ago: executing program 1 (id=1237): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd318001c0600fc010000000000000000000000000002fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) socket$netlink(0x10, 0x3, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') getpid() r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r4, 0x80086303, &(0x7f0000000000)) 12.399082504s ago: executing program 3 (id=1238): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) close(r4) 10.319934094s ago: executing program 0 (id=1240): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x700000000000000) 10.246784385s ago: executing program 4 (id=1241): r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) 10.066880667s ago: executing program 3 (id=1242): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x40, 0x6, @remote}, 0x14) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a0101010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090"], 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) mkdir(&(0x7f0000000100)='./file0\x00', 0x1bd) mount(0x0, 0x0, &(0x7f00000000c0)='ocfs2\x00', 0x11, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.752089106s ago: executing program 0 (id=1243): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000240)=ANY=[@ANYBLOB="80000000080211000001080211020000080211000000000000e3ffffffffffff63822f07c13b1974f10001000006463e98b2076c7014e5fe056dea5957480202020202020108"], 0x36) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r6, @ANYRESDEC=r1, @ANYRES16=r5, @ANYRESHEX=r0], 0xfc}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r7], 0x44}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8931, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x1, 0x84) 8.746521296s ago: executing program 2 (id=1244): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) request_key(&(0x7f0000000040)='trusted\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) open(0x0, 0x143142, 0xa2) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) r4 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc008551c, &(0x7f0000000200)={0x8, 0x8, [0x7, 0x10]}) 6.784178794s ago: executing program 2 (id=1245): socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x7f, 0x24000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x6, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) fcntl$setstatus(r5, 0x4, 0x42c00) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000180)=""/9, 0x9}], 0x1, 0x2f, 0x0) 6.783562804s ago: executing program 3 (id=1246): r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000006b40)={0x2020}, 0x206e) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0)='\x00', 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) 6.782194114s ago: executing program 4 (id=1247): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002c40), 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000002c80)={0x5, 0xfffffddb, 0xfffff800, 0x0, 0x5, "8e8c3721eb2eaed3de78948640a6c4f698978c", 0xd, 0xffff}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000000000)="3f14708a1525e3c80d6e89af1c12", 0xe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setfsgid(0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0xd57e}], 0x1, 0x60010020, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) signalfd(r1, &(0x7f0000000280)={[0x7b3a]}, 0x8) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4.850562451s ago: executing program 3 (id=1248): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002c40), 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000002c80)={0x5, 0xfffffddb, 0xfffff800, 0x0, 0x5, "8e8c3721eb2eaed3de78948640a6c4f698978c", 0xd, 0xffff}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000000000)="3f14708a1525e3c80d6e89af1c12", 0xe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setfsgid(0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0xd57e}], 0x1, 0x60010020, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) signalfd(r1, &(0x7f0000000280)={[0x7b3a]}, 0x8) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4.845781461s ago: executing program 2 (id=1249): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) request_key(&(0x7f0000000040)='trusted\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r3 = open(0x0, 0x143142, 0xa2) write$FUSE_INIT(r3, &(0x7f0000000140)={0x50}, 0xffd3) read$FUSE(r3, &(0x7f0000000600)={0x2020}, 0x2020) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) r4 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc008551c, &(0x7f0000000200)={0x8, 0x8, [0x7, 0x10]}) 4.828494652s ago: executing program 0 (id=1250): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000340), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000001000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="a5dcce2d48272499784b729df2bcad82b059", 0x12, 0x4810, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x66}, @initr0, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {0x3, 0x3, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file2\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x8, 0x2f8, &(0x7f0000000ac0)="$eJzs3EtPE1EUwPHTB6UtgbIwGk0MN7rRzQSqa6UxkBibSJAaH4nJAFNtOrak02BqjOjKrfFDuCAs2ZEoX4CNO924ccfGxIUsjDWdB4UyhVKgRfj/EjKHuffM3NsZyLlNO+sP3j/PZy0tq5clGFUSEBHZEBmUoHgC7jZoxxHZ6o1c7fv19eK9h4/upNLpsUmlxlNT15JKqYGhTy9exdxuK72yNvhk/Wfyx9rZtfPrf6ee5SyVs1ShWFa6mi5+L+vTpqFmc1ZeU2rCNHTLULmCZZSc9qLTnjWLc3MVpRdm++NzJcOylF6oqLxRUeWiKpcqKvRUzxWUpmmqPy6nWbilXpnFyUk91eYpZtrMQ4eVSik9JCKxHS2Zxa4MCAAAdFVj/R8UdZj1/9Kl1XLf/eUBt/5fifjV/9e/OcfaVv9HRcS3/vfO71v/6/ur/3dWRKfLgep/HA9DkR27AvWw1lhK6XH379f29vHSsB1Q/wMAAAAAAAAAAAAAAAAAAAAA8D/YqFYT1Wo14W29n14RiYqI97tPakhEbnZhyDhELVz/YJPrjxOg/sW98ICI+W4+M59xtm6HVRExxZBhScgf+35w1WLvm0eqZlA+mwtu/sJ8JmS3pLKSs/NHJNEjjfnV6vjt9NiIcmzP75H4Zn6vIUlJyBn//KRvfkSuXN5yfk0S8mVGimLKrD2Oev7rEaVu3U035MfsfgAAAAAAnASa2uS7fte0Zu1O/ub6uvH9gVB9fT3suz4Py4XWHlIJAAAAAAAOyKq8zOumaZR2CWKyd5/2g/ARHdmbYatZ3mcZjm6muwTeybc1Rd2dh/6yBPbxsjQJgtJO1lBtNuqgs/DeNmrWRyZGO38F7eDch4+/95cV3OWuu7Ec3WOm7Qch5wZoduSejvzzAQAAANBR9aLf2zPa3QEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAKdeLpaN2eIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBc/AsAAP//QE0BYQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x10, 0x0) r6 = open(&(0x7f0000000080)='./file1\x00', 0x20042, 0x45) r7 = open(&(0x7f0000000000)='./file2\x00', 0x2940, 0x120) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff00000000000000001811", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000008500000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) copy_file_range(r7, 0x0, r6, 0x0, 0x3df1, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="0002020100000000ff"], 0x18) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5dc}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000000340)=ANY=[], 0x0) 3.846292885s ago: executing program 2 (id=1251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) 3.792976326s ago: executing program 2 (id=1252): r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) 3.55304937s ago: executing program 4 (id=1253): syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'syz_tun\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 2.655417863s ago: executing program 2 (id=1254): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002c40), 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000002c80)={0x5, 0xfffffddb, 0xfffff800, 0x0, 0x5, "8e8c3721eb2eaed3de78948640a6c4f698978c", 0xd, 0xffff}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000000000)="3f14708a1525e3c80d6e89af1c12", 0xe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setfsgid(0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0xd57e}], 0x1, 0x60010020, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) signalfd(r1, &(0x7f0000000280)={[0x7b3a]}, 0x8) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 2.584663213s ago: executing program 4 (id=1255): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019003970000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000000080000002000000169942", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc000000000000000000000000000001000000000400"], 0xfc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000000180), 0x400000000000077, 0x700000000000000) 1.320985641s ago: executing program 4 (id=1256): r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000006b40)={0x2020}, 0x206e) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0)='\x00', 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) r8 = socket$alg(0x26, 0x5, 0x0) accept4(r8, 0x0, 0x0, 0x0) 25.99009ms ago: executing program 4 (id=1257): syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 0s ago: executing program 3 (id=1258): socket$inet6(0xa, 0x2, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x378, &(0x7f0000000740)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x342, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x7, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x19, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x5, 0x11, "3f14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e2eeb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05"}, {0x5}]}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000100)) write$tun(r0, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x8}}}}}}}, 0x42) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) kernel console output (not intermixed with test programs): strings: Mfr=1, Product=2, SerialNumber=3 [ 438.267760][ T4344] usb 4-1: Product: syz [ 438.271969][ T4344] usb 4-1: Manufacturer: syz [ 438.278201][ T4344] usb 4-1: SerialNumber: syz [ 438.297289][ T4344] usb 4-1: config 0 descriptor?? [ 438.567899][ T4794] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 438.577023][ T4794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.602895][ T4794] usb 2-1: Product: syz [ 438.614450][ T4794] usb 2-1: Manufacturer: syz [ 438.626519][ T4794] usb 2-1: SerialNumber: syz [ 438.650377][ T4794] usb 2-1: config 0 descriptor?? [ 439.929659][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.936000][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.068298][ T6727] udc-core: couldn't find an available UDC or it's busy [ 440.190084][ T6727] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 440.439694][ T4309] usb 2-1: USB disconnect, device number 38 [ 441.037908][ T5449] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 441.507879][ T5449] usb 2-1: config 0 has no interfaces? [ 441.587587][ T4344] usb 4-1: USB disconnect, device number 30 [ 441.678051][ T5449] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 441.705339][ T5449] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.737794][ T5449] usb 2-1: Product: syz [ 441.753633][ T5449] usb 2-1: Manufacturer: syz [ 441.783813][ T5449] usb 2-1: SerialNumber: syz [ 441.788979][ T6751] kvm: vcpu 0: requested 1152 ns lapic timer period limited to 200000 ns [ 441.818216][ T5449] usb 2-1: config 0 descriptor?? [ 442.161444][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.587'. [ 442.667451][ T6758] udc-core: couldn't find an available UDC or it's busy [ 442.680145][ T6758] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 443.844093][ T7] usb 5-1: USB disconnect, device number 30 [ 443.928609][ T4794] usb 1-1: USB disconnect, device number 32 [ 444.017828][ T4238] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 444.188878][ T6767] kvm: vcpu 0: requested 1152 ns lapic timer period limited to 200000 ns [ 444.248831][ T4794] usb 2-1: USB disconnect, device number 39 [ 444.387984][ T4238] usb 4-1: config 0 has no interfaces? [ 444.549541][ T4238] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 444.569099][ T4238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.611375][ T4238] usb 4-1: Product: syz [ 444.622525][ T4238] usb 4-1: Manufacturer: syz [ 444.636924][ T4238] usb 4-1: SerialNumber: syz [ 444.684987][ T4238] usb 4-1: config 0 descriptor?? [ 444.848674][ T6769] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 444.856610][ T6769] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 444.923169][ T6774] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 444.952533][ T6774] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 445.037755][ T7] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 445.458451][ T7] usb 5-1: config 0 has no interfaces? [ 445.477881][ T23] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 445.650345][ T7] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 445.669605][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.705091][ T7] usb 5-1: Product: syz [ 445.723739][ T7] usb 5-1: Manufacturer: syz [ 445.738017][ T7] usb 5-1: SerialNumber: syz [ 445.761837][ T7] usb 5-1: config 0 descriptor?? [ 445.847823][ T23] usb 2-1: config 0 has no interfaces? [ 446.008405][ T23] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 446.080048][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.125099][ T23] usb 2-1: Product: syz [ 446.143213][ T23] usb 2-1: Manufacturer: syz [ 446.165371][ T23] usb 2-1: SerialNumber: syz [ 446.204037][ T23] usb 2-1: config 0 descriptor?? [ 446.410616][ T6800] kvm: vcpu 0: requested 1152 ns lapic timer period limited to 200000 ns [ 446.467294][ T7] usb 4-1: USB disconnect, device number 31 [ 446.540341][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.597'. [ 446.720892][ T6805] kvm: vcpu 0: requested 1152 ns lapic timer period limited to 200000 ns [ 448.743501][ T13] usb 2-1: USB disconnect, device number 40 [ 448.959730][ T6825] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 448.960302][ T6828] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 449.007398][ T6828] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 449.024163][ T6825] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 449.460303][ T6838] loop0: detected capacity change from 0 to 512 [ 449.567000][ T6838] EXT4-fs (loop0): Ignoring removed nobh option [ 449.594011][ T6845] udc-core: couldn't find an available UDC or it's busy [ 449.644779][ T6838] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 449.668218][ T6845] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 449.677380][ T6838] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.609: invalid indirect mapped block 2683928664 (level 1) [ 449.707807][ T4309] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 449.739075][ T6838] EXT4-fs (loop0): 1 truncate cleaned up [ 449.841986][ T6838] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,minixdf,acl,usrjquota=.grpquota,nodiscard,jqfmt=vfsv0,noload,,,errors=continue. Quota mode: writeback. [ 449.933931][ T6852] netlink: 148 bytes leftover after parsing attributes in process `syz.4.612'. [ 450.067865][ T4309] usb 2-1: config 0 has no interfaces? [ 450.151238][ T6852] kvm: vcpu 0: requested 1152 ns lapic timer period limited to 200000 ns [ 450.155579][ T26] audit: type=1326 audit(1744484037.112:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8247ac8169 code=0x7fc00000 [ 450.239224][ T4309] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 450.264229][ T4309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.291923][ T26] audit: type=1326 audit(1744484037.142:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8247ac8169 code=0x7fc00000 [ 450.340227][ T4309] usb 2-1: Product: syz [ 450.344431][ T4309] usb 2-1: Manufacturer: syz [ 450.351933][ T4309] usb 2-1: SerialNumber: syz [ 450.393861][ T4309] usb 2-1: config 0 descriptor?? [ 450.423515][ T26] audit: type=1326 audit(1744484037.142:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8247ac8169 code=0x7fc00000 [ 450.498905][ T26] audit: type=1326 audit(1744484037.142:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8247ac8169 code=0x7fc00000 [ 450.626657][ T26] audit: type=1326 audit(1744484037.142:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8247ac8169 code=0x7fc00000 [ 450.756985][ T26] audit: type=1326 audit(1744484037.142:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8247ac8169 code=0x7fc00000 [ 450.824483][ T26] audit: type=1326 audit(1744484037.142:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8247ac8169 code=0x7fc00000 [ 450.847804][ T26] audit: type=1326 audit(1744484037.142:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8247ac8169 code=0x7fc00000 [ 450.875969][ T26] audit: type=1326 audit(1744484037.142:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8247ac8169 code=0x7fc00000 [ 450.907750][ T26] audit: type=1326 audit(1744484037.142:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8247ac8169 code=0x7fc00000 [ 452.466564][ T5449] usb 5-1: USB disconnect, device number 31 [ 452.881459][ T23] usb 2-1: USB disconnect, device number 41 [ 453.932578][ T6890] loop2: detected capacity change from 0 to 4096 [ 454.091440][ T6890] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 455.636389][ T6899] loop0: detected capacity change from 0 to 4096 [ 456.105299][ T6899] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 456.657033][ T7] usb 3-1: USB disconnect, device number 33 [ 457.177756][ T23] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 458.637910][ T23] usb 3-1: config 0 has no interfaces? [ 459.010858][ T4183] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 459.257972][ T4183] usb 5-1: Using ep0 maxpacket: 32 [ 459.298660][ T23] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 459.330535][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.353770][ T23] usb 3-1: Product: syz [ 459.375210][ T23] usb 3-1: Manufacturer: syz [ 459.385426][ T23] usb 3-1: SerialNumber: syz [ 459.390852][ T4183] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 459.423164][ T23] usb 3-1: config 0 descriptor?? [ 459.567951][ T4183] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 459.603804][ T4183] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 459.683368][ T4183] usb 5-1: Product: syz [ 459.738522][ T4183] usb 5-1: Manufacturer: syz [ 459.801867][ T4183] usb 5-1: SerialNumber: syz [ 459.851768][ T4183] usb 5-1: config 0 descriptor?? [ 459.878109][ T6920] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 460.077892][ T13] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 460.203878][ T6920] udc-core: couldn't find an available UDC or it's busy [ 460.221919][ T6920] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 460.347742][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 460.482559][ T13] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 460.568532][ T7] usb 5-1: USB disconnect, device number 32 [ 460.678136][ T13] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 460.687216][ T13] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 460.722287][ T13] usb 4-1: Product: syz [ 460.732149][ T13] usb 4-1: Manufacturer: syz [ 460.747007][ T13] usb 4-1: SerialNumber: syz [ 460.782874][ T13] usb 4-1: config 0 descriptor?? [ 460.828248][ T6922] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 461.075450][ T7] usb 3-1: USB disconnect, device number 34 [ 461.315295][ T6922] udc-core: couldn't find an available UDC or it's busy [ 461.384720][ T6922] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 461.592795][ T4183] usb 4-1: USB disconnect, device number 32 [ 463.057875][ T4183] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 463.547808][ T4183] usb 2-1: config 0 has no interfaces? [ 463.957842][ T4183] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 463.977359][ T4183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.026908][ T4183] usb 2-1: Product: syz [ 464.047760][ T4183] usb 2-1: Manufacturer: syz [ 464.065181][ T4183] usb 2-1: SerialNumber: syz [ 464.099233][ T4183] usb 2-1: config 0 descriptor?? [ 464.627260][ T6951] kvm: vcpu 0: requested 1152 ns lapic timer period limited to 200000 ns [ 464.837909][ T4183] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 465.257962][ T4183] usb 4-1: config 0 has no interfaces? [ 465.298005][ T13] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 465.427980][ T4183] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 465.457739][ T4183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.489727][ T4183] usb 4-1: Product: syz [ 465.504470][ T4183] usb 4-1: Manufacturer: syz [ 465.532509][ T4183] usb 4-1: SerialNumber: syz [ 465.564165][ T4183] usb 4-1: config 0 descriptor?? [ 465.919416][ T13] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 465.957280][ T13] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 465.999992][ T13] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 466.038866][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.237855][ T5449] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 466.453656][ T6960] udc-core: couldn't find an available UDC or it's busy [ 466.499567][ T6960] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 466.517831][ T5449] usb 5-1: Using ep0 maxpacket: 32 [ 466.648062][ T5449] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 466.717089][ T4344] usb 2-1: USB disconnect, device number 42 [ 466.858154][ T5449] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 466.876253][ T5449] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 466.892025][ T5449] usb 5-1: Product: syz [ 466.899737][ T5449] usb 5-1: Manufacturer: syz [ 466.916829][ T5449] usb 5-1: SerialNumber: syz [ 466.955982][ T5449] usb 5-1: config 0 descriptor?? [ 466.978204][ T6963] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 467.157747][ T4344] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 467.217153][ T6963] udc-core: couldn't find an available UDC or it's busy [ 467.237910][ T6963] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 467.358560][ T4238] usb 4-1: USB disconnect, device number 33 [ 467.438223][ T4344] usb 2-1: Using ep0 maxpacket: 32 [ 467.486856][ T13] usb 5-1: USB disconnect, device number 33 [ 467.598255][ T4344] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 467.777966][ T4344] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 467.807394][ T4344] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 467.845017][ T4344] usb 2-1: Product: syz [ 467.872591][ T4344] usb 2-1: Manufacturer: syz [ 467.887348][ T4344] usb 2-1: SerialNumber: syz [ 467.909642][ T4344] usb 2-1: config 0 descriptor?? [ 467.938092][ T6968] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 468.186936][ T6968] udc-core: couldn't find an available UDC or it's busy [ 468.216038][ T6968] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 468.437807][ T4183] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 468.461645][ T7] usb 2-1: USB disconnect, device number 43 [ 468.827982][ T4183] usb 4-1: config 0 has no interfaces? [ 468.987964][ T4183] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 469.044961][ T4183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.065109][ T4183] usb 4-1: Product: syz [ 469.078112][ T4183] usb 4-1: Manufacturer: syz [ 469.090064][ T4183] usb 4-1: SerialNumber: syz [ 469.125282][ T4183] usb 4-1: config 0 descriptor?? [ 469.887801][ T4183] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 470.258007][ T4183] usb 2-1: config 0 has no interfaces? [ 470.438697][ T4183] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 470.453860][ T4183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.472210][ T4183] usb 2-1: Product: syz [ 470.482347][ T4183] usb 2-1: Manufacturer: syz [ 470.496210][ T4183] usb 2-1: SerialNumber: syz [ 470.521208][ T4183] usb 2-1: config 0 descriptor?? [ 470.563392][ T4238] usb 3-1: USB disconnect, device number 35 [ 470.814936][ T7] usb 4-1: USB disconnect, device number 34 [ 471.959804][ T4183] usb 2-1: USB disconnect, device number 44 [ 473.147904][ T4183] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 473.397962][ T4183] usb 5-1: Using ep0 maxpacket: 32 [ 473.520896][ T4183] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 473.767992][ T4183] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 473.795337][ T4183] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 473.835281][ T4183] usb 5-1: Product: syz [ 473.847766][ T4183] usb 5-1: Manufacturer: syz [ 473.860158][ T4183] usb 5-1: SerialNumber: syz [ 473.882998][ T4183] usb 5-1: config 0 descriptor?? [ 473.908021][ T7015] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 474.199631][ T7015] udc-core: couldn't find an available UDC or it's busy [ 474.241889][ T7015] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 474.490326][ T7] usb 5-1: USB disconnect, device number 34 [ 474.687770][ T4310] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 475.068186][ T4310] usb 2-1: config 0 has no interfaces? [ 475.232805][ T4310] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 475.275251][ T4310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.305440][ T4310] usb 2-1: Product: syz [ 475.322634][ T4310] usb 2-1: Manufacturer: syz [ 475.337285][ T4310] usb 2-1: SerialNumber: syz [ 475.369797][ T4310] usb 2-1: config 0 descriptor?? [ 477.153411][ T13] usb 2-1: USB disconnect, device number 45 [ 477.997861][ T4213] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 478.427789][ T4213] usb 2-1: config 0 has no interfaces? [ 478.607866][ T4213] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 478.624552][ T4213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.655008][ T4213] usb 2-1: Product: syz [ 478.672723][ T4213] usb 2-1: Manufacturer: syz [ 478.687849][ T4213] usb 2-1: SerialNumber: syz [ 478.714878][ T4213] usb 2-1: config 0 descriptor?? [ 480.664576][ T5449] usb 2-1: USB disconnect, device number 46 [ 481.468027][ T4213] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 481.747787][ T4213] usb 2-1: Using ep0 maxpacket: 8 [ 482.078559][ T4213] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 482.131067][ T4213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.142824][ T4213] usb 2-1: Product: syz [ 482.147123][ T4213] usb 2-1: Manufacturer: syz [ 482.155819][ T4213] usb 2-1: SerialNumber: syz [ 482.191086][ T4213] usb 2-1: config 0 descriptor?? [ 482.218181][ T5449] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 482.460894][ T4213] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 482.477862][ T5449] usb 5-1: Using ep0 maxpacket: 8 [ 482.598247][ T5449] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 482.625596][ T5449] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 482.687234][ T5449] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 482.707751][ T5449] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.729372][ T5449] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 482.742108][ T5449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.011247][ T7100] fuse: Unknown parameter 'default_permissions7) r5 ' [ 483.048115][ T5449] usb 5-1: GET_CAPABILITIES returned 0 [ 483.053702][ T5449] usbtmc 5-1:16.0: can't read capabilities [ 483.266015][ T5449] usb 5-1: USB disconnect, device number 35 [ 483.324799][ T7118] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 483.568524][ T7123] ptrace attach of ""[7124] was attempted by "./syz-executor exec"[7123] [ 483.785497][ T7126] netlink: 'syz.2.682': attribute type 1 has an invalid length. [ 483.824904][ T7126] 8021q: adding VLAN 0 to HW filter on device bond1 [ 483.866779][ T7128] bond1: (slave gretap1): making interface the new active one [ 483.952491][ T7128] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 483.962970][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 484.207734][ T7128] syz.2.682 (7128) used greatest stack depth: 19312 bytes left [ 484.707915][ T5449] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 484.715818][ T4213] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 484.754928][ T4213] usb 2-1: USB disconnect, device number 47 [ 484.919450][ T4183] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 484.968120][ T5449] usb 1-1: Using ep0 maxpacket: 8 [ 485.124647][ T5449] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 485.152897][ T5449] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 485.197966][ T4183] usb 3-1: Using ep0 maxpacket: 32 [ 485.257689][ T5449] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 485.304713][ T5449] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.348745][ T5449] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 485.353991][ T4183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 485.368704][ T4183] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 485.387753][ T5449] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.523131][ T7149] loop7: detected capacity change from 0 to 16384 [ 485.588109][ T4183] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 485.634956][ T4183] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 485.694466][ T4183] usb 3-1: Product: syz [ 485.699029][ T4210] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 485.705762][ T7131] fuse: Unknown parameter 'default_permissions7) r5 ' [ 485.743571][ T4183] usb 3-1: Manufacturer: syz [ 485.765430][ T4183] usb 3-1: SerialNumber: syz [ 485.780728][ T5449] usb 1-1: GET_CAPABILITIES returned 0 [ 485.787427][ T5449] usbtmc 1-1:16.0: can't read capabilities [ 485.847662][ T4183] usb 3-1: config 0 descriptor?? [ 485.917191][ T7153] loop_set_status: loop7 () has still dirty pages (nrpages=288) [ 486.060607][ T4684] usb 1-1: USB disconnect, device number 33 [ 486.087881][ T4210] usb 2-1: config 0 has no interfaces? [ 486.191317][ T4310] usb 3-1: USB disconnect, device number 36 [ 486.321617][ T4210] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 486.347300][ T4210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.440612][ T4210] usb 2-1: Product: syz [ 486.444852][ T4210] usb 2-1: Manufacturer: syz [ 486.490458][ T4210] usb 2-1: SerialNumber: syz [ 486.548623][ T4210] usb 2-1: config 0 descriptor?? [ 489.266693][ T4210] usb 2-1: USB disconnect, device number 48 [ 490.457801][ T4213] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 490.708093][ T4213] usb 1-1: Using ep0 maxpacket: 32 [ 490.828098][ T4213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.847722][ T4213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.895207][ T4213] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 490.926282][ T4213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.982239][ T4213] usb 1-1: config 0 descriptor?? [ 491.028543][ T4213] hub 1-1:0.0: USB hub found [ 491.248144][ T4213] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 491.894871][ T4213] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 492.899417][ T4213] usb 1-1: USB disconnect, device number 34 [ 493.817733][ T4213] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 493.911491][ T7255] netlink: 'syz.1.716': attribute type 1 has an invalid length. [ 494.057018][ T7255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 494.108027][ T4213] usb 1-1: Using ep0 maxpacket: 32 [ 494.227796][ T4213] usb 1-1: config index 0 descriptor too short (expected 8978, got 18) [ 494.236132][ T4213] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 494.256953][ T7256] bond1: (slave gretap1): making interface the new active one [ 494.307071][ T7256] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 494.348290][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 494.451175][ T4213] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 494.466327][ T4213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.535110][ T4213] usb 1-1: Product: syz [ 494.553871][ T4213] usb 1-1: Manufacturer: syz [ 494.618203][ T4213] usb 1-1: SerialNumber: syz [ 494.651934][ T4213] usb 1-1: config 0 descriptor?? [ 494.706863][ T7260] netlink: 'syz.1.717': attribute type 1 has an invalid length. [ 494.812312][ T7260] 8021q: adding VLAN 0 to HW filter on device bond2 [ 495.891486][ T7275] netlink: 'syz.2.722': attribute type 1 has an invalid length. [ 495.990913][ T7275] 8021q: adding VLAN 0 to HW filter on device bond2 [ 496.037783][ T4213] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 496.309320][ T4213] usb 2-1: Using ep0 maxpacket: 32 [ 496.430200][ T4213] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.445526][ T4213] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.466653][ T4213] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 496.494878][ T4213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.533913][ T4213] usb 2-1: config 0 descriptor?? [ 496.550257][ T4210] usb 1-1: USB disconnect, device number 35 [ 496.589789][ T4213] hub 2-1:0.0: USB hub found [ 496.798203][ T4213] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 497.100180][ T4344] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 497.110508][ T7272] delete_channel: no stack [ 497.233159][ T4213] hid-generic 0003:046D:C31C.0002: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 497.347778][ T4344] usb 1-1: Using ep0 maxpacket: 8 [ 497.468152][ T4344] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 497.517235][ T4344] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 497.591884][ T4344] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 497.640250][ T4344] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 497.682063][ T4344] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 497.718419][ T4344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.748463][ T4213] usb 2-1: USB disconnect, device number 49 [ 498.959950][ T7283] fuse: Unknown parameter 'default_permissions7) r5 ' [ 499.008164][ T4344] usb 1-1: GET_CAPABILITIES returned 0 [ 499.013784][ T4344] usbtmc 1-1:16.0: can't read capabilities [ 499.249392][ T4344] usb 1-1: USB disconnect, device number 36 [ 501.486753][ T4344] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 501.500013][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.506332][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.747830][ T4344] usb 1-1: Using ep0 maxpacket: 32 [ 501.868397][ T4344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.981578][ T4344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.998389][ T4344] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 502.013343][ T4344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.916129][ T4344] usb 1-1: config 0 descriptor?? [ 503.977919][ T4344] usb 1-1: can't set config #0, error -71 [ 503.988215][ T4344] usb 1-1: USB disconnect, device number 37 [ 504.568208][ T4344] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 504.827813][ T4344] usb 1-1: Using ep0 maxpacket: 32 [ 504.961814][ T4344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.993697][ T4344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.021287][ T4344] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 505.049278][ T4344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.083810][ T4344] usb 1-1: config 0 descriptor?? [ 505.151133][ T4344] hub 1-1:0.0: USB hub found [ 505.371478][ T4344] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 505.776205][ T7344] hub 2-0:1.0: USB hub found [ 505.785125][ T7344] hub 2-0:1.0: 1 port detected [ 506.462853][ T4344] hid-generic 0003:046D:C31C.0003: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 506.681380][ T4344] usb 1-1: USB disconnect, device number 38 [ 507.015939][ T7353] hub 2-0:1.0: USB hub found [ 507.022162][ T7353] hub 2-0:1.0: 1 port detected [ 507.156389][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.742'. [ 508.173617][ T7359] hub 2-0:1.0: USB hub found [ 508.179339][ T7359] hub 2-0:1.0: 1 port detected [ 509.417826][ T13] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 510.118044][ T7] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 511.397837][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 511.408169][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 511.518029][ T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 511.530012][ T13] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 511.547731][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 511.559048][ T13] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 511.575813][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 511.603727][ T13] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 511.615129][ T4344] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 511.665654][ T7] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 511.687744][ T13] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 512.189682][ T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 512.199172][ T13] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 512.209277][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.217716][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.247822][ T7] usb 1-1: can't set config #16, error -71 [ 512.387715][ T4344] usb 4-1: Using ep0 maxpacket: 32 [ 512.409723][ T7390] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 512.463264][ T13] usb 2-1: can't set config #16, error -71 [ 512.779590][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'. [ 513.124063][ T7] usb 1-1: USB disconnect, device number 39 [ 513.148262][ T13] usb 2-1: USB disconnect, device number 50 [ 513.198159][ T4344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.209439][ T4344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.219367][ T4344] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 513.228753][ T4344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.239805][ T4344] usb 4-1: config 0 descriptor?? [ 513.286650][ T4344] hub 4-1:0.0: USB hub found [ 513.365675][ T7397] netlink: 'syz.0.756': attribute type 1 has an invalid length. [ 513.401333][ T7397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 513.455450][ T7397] bond1: (slave gretap1): making interface the new active one [ 513.471128][ T7397] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 513.485371][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 513.497943][ T4344] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 513.627828][ T13] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 513.867860][ T23] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 513.887996][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 513.937774][ T4213] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 514.008289][ T4344] usbhid 4-1:0.0: can't add hid device: -71 [ 514.014334][ T4344] usbhid: probe of 4-1:0.0 failed with error -71 [ 514.048534][ T4344] usb 4-1: USB disconnect, device number 35 [ 514.117879][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 514.177934][ T13] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 514.187058][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.195512][ T4213] usb 5-1: Using ep0 maxpacket: 32 [ 514.200803][ T13] usb 2-1: Product: syz [ 514.204960][ T13] usb 2-1: Manufacturer: syz [ 514.209784][ T13] usb 2-1: SerialNumber: syz [ 514.216777][ T13] usb 2-1: config 0 descriptor?? [ 514.251253][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.262117][ T23] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 514.271614][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 514.281386][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.297120][ T23] usb 1-1: config 0 descriptor?? [ 514.318308][ T4213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.329515][ T4213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.339707][ T4213] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 514.348855][ T4213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.360314][ T4213] usb 5-1: config 0 descriptor?? [ 514.399744][ T4213] hub 5-1:0.0: USB hub found [ 514.483271][ T13] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 514.591304][ T7406] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 514.618286][ T4213] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 515.130985][ T4213] hid-generic 0003:046D:C31C.0004: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 515.729805][ T4310] usb 5-1: USB disconnect, device number 36 [ 516.241615][ T7414] netlink: 'syz.4.761': attribute type 1 has an invalid length. [ 516.259668][ T7414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 516.285365][ T7414] bond1: (slave gretap1): making interface the new active one [ 516.294493][ T7414] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 516.305442][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 516.436483][ T7420] netlink: 148 bytes leftover after parsing attributes in process `syz.4.763'. [ 516.487831][ T13] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 516.512397][ T13] usb 2-1: USB disconnect, device number 51 [ 516.631349][ T7] usb 1-1: USB disconnect, device number 40 [ 517.687343][ T7427] hub 2-0:1.0: USB hub found [ 517.692420][ T7427] hub 2-0:1.0: 1 port detected [ 519.376375][ T7] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 519.807764][ T4684] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 519.937792][ T13] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 519.987970][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 520.057729][ T4684] usb 2-1: Using ep0 maxpacket: 8 [ 520.108473][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.119518][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.129450][ T7] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 520.138879][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.149739][ T7] usb 5-1: config 0 descriptor?? [ 520.188080][ T4684] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 520.192659][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 520.202075][ T4684] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 520.206647][ T7] hub 5-1:0.0: USB hub found [ 520.224291][ T4684] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 520.235590][ T4684] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.253194][ T4684] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 520.262799][ T4684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.337963][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.355550][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.366130][ T13] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 520.382307][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.412907][ T13] usb 4-1: config 0 descriptor?? [ 520.418198][ T7] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 520.469397][ T13] hub 4-1:0.0: USB hub found [ 520.728288][ T4684] usb 2-1: usb_control_msg returned -71 [ 520.738251][ T4684] usbtmc 2-1:16.0: can't read capabilities [ 520.754388][ T7447] usb 2-1: USB disconnect, device number 52 [ 521.058633][ T13] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 521.096416][ T7457] netlink: 148 bytes leftover after parsing attributes in process `syz.2.775'. [ 521.112242][ T7] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 521.248058][ T4310] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 521.274923][ T13] hid-generic 0003:046D:C31C.0006: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 521.352949][ T7462] netlink: 116 bytes leftover after parsing attributes in process `syz.1.777'. [ 521.453629][ T4684] usb 5-1: USB disconnect, device number 37 [ 521.477910][ T23] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 521.518032][ T4310] usb 1-1: Using ep0 maxpacket: 32 [ 521.628479][ T4684] usb 4-1: USB disconnect, device number 36 [ 521.647838][ T4310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.662603][ T4310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.672908][ T4310] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 521.682378][ T4310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.692229][ T4310] usb 1-1: config 0 descriptor?? [ 521.727827][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 521.734267][ T4310] hub 1-1:0.0: USB hub found [ 521.847947][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.865286][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.875871][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 521.885343][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.896249][ T23] usb 3-1: config 0 descriptor?? [ 521.937925][ T4310] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 521.947317][ T23] hub 3-1:0.0: USB hub found [ 522.052025][ T7472] netlink: 116 bytes leftover after parsing attributes in process `syz.3.781'. [ 522.147873][ T23] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 522.373217][ T4310] hid-generic 0003:046D:C31C.0007: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 523.470702][ T13] usb 1-1: USB disconnect, device number 41 [ 524.198676][ T23] hid-generic 0003:046D:C31C.0008: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 524.260798][ T23] usb 3-1: USB disconnect, device number 37 [ 524.483627][ T7493] netlink: 148 bytes leftover after parsing attributes in process `syz.0.788'. [ 524.591007][ T7495] hub 2-0:1.0: USB hub found [ 524.596623][ T7495] hub 2-0:1.0: 1 port detected [ 525.369769][ T7501] netlink: 148 bytes leftover after parsing attributes in process `syz.2.789'. [ 525.496774][ T7496] netlink: 'syz.1.790': attribute type 1 has an invalid length. [ 525.566863][ T7496] 8021q: adding VLAN 0 to HW filter on device bond3 [ 525.650217][ T7508] loop3: detected capacity change from 0 to 512 [ 525.952988][ T7508] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 526.607359][ T7508] EXT4-fs (loop3): 1 truncate cleaned up [ 526.718033][ T7508] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 526.956761][ T7526] hub 2-0:1.0: USB hub found [ 526.964300][ T7526] hub 2-0:1.0: 1 port detected [ 527.505262][ T13] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 527.935271][ T7531] netlink: 'syz.1.798': attribute type 1 has an invalid length. [ 527.968574][ T7531] 8021q: adding VLAN 0 to HW filter on device bond4 [ 528.908816][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 529.058122][ T13] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 529.096238][ T13] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 529.123629][ T7544] netlink: 'syz.1.803': attribute type 1 has an invalid length. [ 529.131916][ T13] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 529.201017][ T7544] 8021q: adding VLAN 0 to HW filter on device bond5 [ 529.319011][ T13] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.369832][ T13] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 529.379422][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.494521][ T7551] hub 2-0:1.0: USB hub found [ 529.500935][ T7551] hub 2-0:1.0: 1 port detected [ 531.526311][ T4213] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 531.648310][ T13] usb 1-1: can't set config #16, error -71 [ 531.655714][ T13] usb 1-1: USB disconnect, device number 42 [ 533.303045][ T7574] hub 2-0:1.0: USB hub found [ 533.308714][ T7574] hub 2-0:1.0: 1 port detected [ 533.604104][ T7575] loop4: detected capacity change from 0 to 512 [ 533.885927][ T7575] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 534.132117][ T7575] EXT4-fs (loop4): 1 truncate cleaned up [ 534.144905][ T7575] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 534.164859][ T7584] netlink: 148 bytes leftover after parsing attributes in process `syz.3.814'. [ 538.598046][ T7615] hub 2-0:1.0: USB hub found [ 538.604198][ T7615] hub 2-0:1.0: 1 port detected [ 539.644003][ T7625] hub 2-0:1.0: USB hub found [ 539.649809][ T7625] hub 2-0:1.0: 1 port detected [ 539.943042][ T7624] netlink: 'syz.1.825': attribute type 1 has an invalid length. [ 540.641903][ T7624] 8021q: adding VLAN 0 to HW filter on device bond6 [ 540.828085][ T7632] loop2: detected capacity change from 0 to 512 [ 540.891732][ T7632] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 540.984905][ T7632] EXT4-fs (loop2): 1 truncate cleaned up [ 540.994697][ T7641] loop0: detected capacity change from 0 to 128 [ 541.001531][ T7632] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 541.022591][ T7637] 8021q: adding VLAN 0 to HW filter on device bond7 [ 541.022617][ T4238] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 541.637750][ T4238] usb 5-1: Using ep0 maxpacket: 32 [ 541.814990][ T26] kauditd_printk_skb: 46 callbacks suppressed [ 541.815007][ T26] audit: type=1800 audit(1744484128.452:60): pid=7644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.829" name="file1" dev="loop0" ino=1048600 res=0 errno=0 [ 541.917956][ T4238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.967779][ T4238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.006325][ T4238] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 542.047210][ T4238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.132130][ T4238] usb 5-1: config 0 descriptor?? [ 542.353977][ T4238] hub 5-1:0.0: USB hub found [ 542.508468][ T23] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 542.558607][ T4238] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 542.757781][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 542.877907][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.889214][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.899511][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 542.909060][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.929372][ T23] usb 2-1: config 0 descriptor?? [ 542.970899][ T23] hub 2-1:0.0: USB hub found [ 543.048306][ T4238] hid-generic 0003:046D:C31C.0009: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 543.289123][ T23] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 545.164202][ T23] hid-generic 0003:046D:C31C.000A: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 545.375226][ T7680] netlink: 'syz.0.841': attribute type 1 has an invalid length. [ 545.444486][ T7680] 8021q: adding VLAN 0 to HW filter on device bond2 [ 545.464051][ T7675] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 545.752642][ T7675] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 546.154471][ T7690] loop4: detected capacity change from 0 to 128 [ 547.786858][ T7701] loop2: detected capacity change from 0 to 1024 [ 548.057183][ T7701] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 548.967778][ T1108] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 549.768290][ T7648] usb 5-1: reset high-speed USB device number 39 using dummy_hcd [ 550.368066][ T7648] usbhid 5-1:0.0: reset_resume error -1 [ 550.508963][ T5449] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 550.561473][ T7724] input: syz1 as /devices/virtual/input/input19 [ 550.581311][ T1108] usb 1-1: Using ep0 maxpacket: 32 [ 550.610332][ T13] usb 2-1: USB disconnect, device number 53 [ 550.633268][ T7724] loop3: detected capacity change from 0 to 1024 [ 550.719469][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.741367][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.788385][ T5449] usb 3-1: Using ep0 maxpacket: 32 [ 550.858504][ T1108] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 550.929414][ T5449] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.951150][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.988543][ T5449] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.040538][ T1108] usb 1-1: config 0 descriptor?? [ 551.052391][ T5449] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 551.065632][ T5449] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.089270][ T1108] usb 1-1: can't set config #0, error -71 [ 551.098590][ T5449] usb 3-1: config 0 descriptor?? [ 551.160723][ T1108] usb 1-1: USB disconnect, device number 43 [ 551.213605][ T7735] input: syz1 as /devices/virtual/input/input20 [ 551.259865][ T5449] hub 3-1:0.0: USB hub found [ 551.288066][ T7735] loop0: detected capacity change from 0 to 1024 [ 551.311162][ T7724] EXT4-fs (loop3): Test dummy encryption mode enabled [ 551.318780][ T7724] EXT4-fs (loop3): Ignoring removed orlov option [ 552.208722][ T7724] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 552.237051][ C1] vkms_vblank_simulate: vblank timer overrun [ 552.421722][ T7723] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 552.984060][ T7735] EXT4-fs (loop0): Test dummy encryption mode enabled [ 552.991034][ T7735] EXT4-fs (loop0): Ignoring removed orlov option [ 553.006969][ T7735] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 553.073878][ T5449] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 553.187915][ T5449] usbhid 3-1:0.0: can't add hid device: -71 [ 553.214892][ T5449] usbhid: probe of 3-1:0.0 failed with error -71 [ 553.248590][ T4684] usb 5-1: USB disconnect, device number 39 [ 553.271069][ T7760] loop4: detected capacity change from 0 to 1024 [ 553.278742][ T5449] usb 3-1: USB disconnect, device number 38 [ 553.415794][ T7764] input: syz1 as /devices/virtual/input/input21 [ 553.469592][ T7760] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 553.475554][ T7764] loop0: detected capacity change from 0 to 1024 [ 553.543311][ T7764] EXT4-fs (loop0): Test dummy encryption mode enabled [ 553.550965][ T7764] EXT4-fs (loop0): Ignoring removed orlov option [ 553.755591][ T7764] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 554.531432][ T7768] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 554.547794][ T7768] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 554.655856][ T7780] input: syz1 as /devices/virtual/input/input22 [ 554.743414][ T7780] loop0: detected capacity change from 0 to 1024 [ 554.882882][ T7780] EXT4-fs (loop0): Test dummy encryption mode enabled [ 554.890549][ T7780] EXT4-fs (loop0): Ignoring removed orlov option [ 554.990976][ T7780] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 555.011420][ T7781] loop4: detected capacity change from 0 to 1024 [ 555.196619][ T7781] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 555.912997][ T7800] input: syz1 as /devices/virtual/input/input23 [ 556.013495][ T7800] loop0: detected capacity change from 0 to 1024 [ 556.101686][ T7800] EXT4-fs (loop0): Test dummy encryption mode enabled [ 556.109254][ T7800] EXT4-fs (loop0): Ignoring removed orlov option [ 556.351131][ T7806] input: syz1 as /devices/virtual/input/input24 [ 556.432975][ T7806] loop4: detected capacity change from 0 to 1024 [ 556.466843][ T7800] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 556.495100][ C1] vkms_vblank_simulate: vblank timer overrun [ 556.619467][ T7806] EXT4-fs (loop4): Test dummy encryption mode enabled [ 556.628065][ T7806] EXT4-fs (loop4): Ignoring removed orlov option [ 556.753691][ T7806] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 557.882892][ T7823] loop0: detected capacity change from 0 to 1024 [ 557.928107][ T7820] input: syz1 as /devices/virtual/input/input25 [ 558.210739][ T7825] input: syz1 as /devices/virtual/input/input26 [ 558.339415][ T7825] loop4: detected capacity change from 0 to 1024 [ 558.629493][ T7828] loop3: detected capacity change from 0 to 1024 [ 558.869208][ T7830] loop1: detected capacity change from 0 to 1024 [ 559.014336][ T7825] EXT4-fs (loop4): Test dummy encryption mode enabled [ 559.021430][ T7825] EXT4-fs (loop4): Ignoring removed orlov option [ 559.027919][ T7823] EXT4-fs (loop0): Test dummy encryption mode enabled [ 559.034876][ T7823] EXT4-fs (loop0): Ignoring removed orlov option [ 559.056721][ T7825] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 559.136312][ T7823] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 559.212286][ T7830] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 559.315146][ T7828] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 559.865396][ T7846] loop4: detected capacity change from 0 to 1024 [ 559.918319][ T7848] loop2: detected capacity change from 0 to 1024 [ 560.428120][ T7846] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 560.527526][ T7848] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 561.049001][ T7862] loop1: detected capacity change from 0 to 1024 [ 561.946891][ T7862] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 562.469929][ T7] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 563.071669][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.085113][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.129300][ T7886] input: syz1 as /devices/virtual/input/input28 [ 563.149270][ T7888] input: syz1 as /devices/virtual/input/input27 [ 563.169129][ T7886] loop0: detected capacity change from 0 to 1024 [ 563.169715][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 563.196272][ T7888] loop3: detected capacity change from 0 to 1024 [ 563.222044][ T7886] EXT4-fs (loop0): Test dummy encryption mode enabled [ 563.229072][ T7886] EXT4-fs (loop0): Ignoring removed orlov option [ 563.235927][ T7888] EXT4-fs (loop3): Test dummy encryption mode enabled [ 563.242923][ T7888] EXT4-fs (loop3): Ignoring removed orlov option [ 563.255637][ T7886] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 563.380746][ T7888] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 563.589081][ T7] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 563.609950][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.622274][ T7] usb 3-1: Product: syz [ 563.626482][ T7] usb 3-1: Manufacturer: syz [ 563.800780][ T7903] input: syz1 as /devices/virtual/input/input29 [ 564.000705][ T7903] loop1: detected capacity change from 0 to 1024 [ 564.010145][ T4310] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 564.267761][ T4310] usb 1-1: Using ep0 maxpacket: 32 [ 564.288018][ T7] usb 3-1: SerialNumber: syz [ 564.307937][ T7] usb 3-1: config 0 descriptor?? [ 564.328490][ T7903] EXT4-fs (loop1): Test dummy encryption mode enabled [ 564.335778][ T7903] EXT4-fs (loop1): Ignoring removed orlov option [ 564.376221][ T7903] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 564.434118][ T4310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.449643][ T4310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.459802][ T4310] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 564.469156][ T4310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.479660][ T4310] usb 1-1: config 0 descriptor?? [ 564.526657][ T4310] hub 1-1:0.0: USB hub found [ 564.573649][ T7] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 564.739071][ T4310] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 564.882910][ T7918] loop3: detected capacity change from 0 to 1024 [ 564.983780][ T7918] EXT4-fs (loop3): Test dummy encryption mode enabled [ 564.991501][ T7918] EXT4-fs (loop3): Ignoring removed orlov option [ 565.142337][ T7918] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 565.300096][ T4310] usbhid 1-1:0.0: can't add hid device: -71 [ 565.306142][ T4310] usbhid: probe of 1-1:0.0 failed with error -71 [ 565.384004][ T4310] usb 1-1: USB disconnect, device number 44 [ 565.629681][ T7929] input: syz1 as /devices/virtual/input/input30 [ 566.302750][ T7937] loop3: detected capacity change from 0 to 1024 [ 566.426293][ T7937] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 567.022803][ T7944] input: syz1 as /devices/virtual/input/input31 [ 567.487915][ T7] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 567.564925][ T7957] input: syz1 as /devices/virtual/input/input32 [ 567.585323][ T7957] loop3: detected capacity change from 0 to 1024 [ 567.599906][ T7] usb 3-1: USB disconnect, device number 39 [ 567.600853][ T7957] EXT4-fs (loop3): Test dummy encryption mode enabled [ 567.613211][ T7957] EXT4-fs (loop3): Ignoring removed orlov option [ 567.680324][ T7957] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 567.777023][ T7960] loop0: detected capacity change from 0 to 128 [ 568.416780][ T26] audit: type=1800 audit(1744484155.372:61): pid=7964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.906" name="file1" dev="loop0" ino=1048603 res=0 errno=0 [ 569.449720][ T7962] loop3: detected capacity change from 0 to 32768 [ 569.672881][ T7962] XFS (loop3): Mounting V5 Filesystem [ 569.856745][ T7962] XFS (loop3): Ending clean mount [ 569.875509][ T7962] XFS (loop3): Quotacheck needed: Please wait. [ 570.020971][ T7962] XFS (loop3): Quotacheck: Done. [ 570.044804][ T7971] loop1: detected capacity change from 0 to 32768 [ 570.243598][ T7971] XFS (loop1): Mounting V5 Filesystem [ 570.457460][ T7971] XFS (loop1): Ending clean mount [ 570.472047][ T7971] XFS (loop1): Quotacheck needed: Please wait. [ 570.512385][ T8002] input: syz1 as /devices/virtual/input/input33 [ 570.580145][ T7971] XFS (loop1): Quotacheck: Done. [ 570.688286][ T8002] loop0: detected capacity change from 0 to 1024 [ 570.854374][ T8002] EXT4-fs (loop0): Test dummy encryption mode enabled [ 570.884728][ T8002] EXT4-fs (loop0): Ignoring removed orlov option [ 570.970181][ T8011] input: syz1 as /devices/virtual/input/input34 [ 571.052032][ T8011] loop4: detected capacity change from 0 to 1024 [ 571.141380][ T8011] EXT4-fs (loop4): Test dummy encryption mode enabled [ 571.149292][ T8011] EXT4-fs (loop4): Ignoring removed orlov option [ 571.274855][ T8002] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 571.304312][ T8011] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 571.566520][ T4173] XFS (loop3): Unmounting Filesystem [ 571.570584][ T8016] loop2: detected capacity change from 0 to 1024 [ 571.613077][ T4165] XFS (loop1): Unmounting Filesystem [ 571.802843][ T8016] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 572.777761][ T8031] input: syz1 as /devices/virtual/input/input35 [ 572.881422][ T8031] loop2: detected capacity change from 0 to 1024 [ 572.968657][ T8031] EXT4-fs (loop2): Test dummy encryption mode enabled [ 572.976098][ T8031] EXT4-fs (loop2): Ignoring removed orlov option [ 573.169921][ T8031] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 573.380733][ T8040] loop0: detected capacity change from 0 to 256 [ 573.502006][ T8040] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 573.564226][ T8037] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 573.582599][ T8037] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 573.722363][ T8043] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 573.772768][ T8043] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 573.969166][ T8051] input: syz1 as /devices/virtual/input/input36 [ 574.066396][ T8051] loop3: detected capacity change from 0 to 1024 [ 574.080803][ T8029] loop4: detected capacity change from 0 to 32768 [ 574.132134][ T8051] EXT4-fs (loop3): Test dummy encryption mode enabled [ 574.139847][ T8051] EXT4-fs (loop3): Ignoring removed orlov option [ 574.189330][ T8051] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 574.384321][ T8028] loop1: detected capacity change from 0 to 32768 [ 574.399167][ T8029] XFS (loop4): Mounting V5 Filesystem [ 574.590277][ T8028] XFS (loop1): Mounting V5 Filesystem [ 574.612453][ T8072] input: syz1 as /devices/virtual/input/input37 [ 574.712469][ T8072] loop3: detected capacity change from 0 to 1024 [ 574.793818][ T8072] EXT4-fs (loop3): Test dummy encryption mode enabled [ 574.796124][ T8029] XFS (loop4): Ending clean mount [ 574.800920][ T8072] EXT4-fs (loop3): Ignoring removed orlov option [ 574.809084][ T8029] XFS (loop4): Quotacheck needed: Please wait. [ 574.828435][ T8052] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 574.898090][ T8052] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 574.924845][ T8072] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 575.311292][ T8083] input: syz1 as /devices/virtual/input/input38 [ 575.406242][ T8083] loop2: detected capacity change from 0 to 1024 [ 575.422063][ T8029] XFS (loop4): Quotacheck: Done. [ 575.565088][ T8083] EXT4-fs (loop2): Test dummy encryption mode enabled [ 575.572694][ T8083] EXT4-fs (loop2): Ignoring removed orlov option [ 575.700023][ T8083] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 576.242787][ T4174] XFS (loop4): Unmounting Filesystem [ 576.248973][ T8028] XFS (loop1): Ending clean mount [ 576.259317][ T8028] XFS (loop1): Quotacheck needed: Please wait. [ 576.294548][ T8088] input: syz1 as /devices/virtual/input/input39 [ 576.623059][ T8098] input: syz1 as /devices/virtual/input/input41 [ 576.671692][ T8098] loop3: detected capacity change from 0 to 1024 [ 576.765780][ T8098] EXT4-fs (loop3): Test dummy encryption mode enabled [ 576.773487][ T8098] EXT4-fs (loop3): Ignoring removed orlov option [ 576.779850][ T8028] XFS (loop1): Quotacheck: Done. [ 576.979118][ T8098] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 577.315460][ T8104] input: syz1 as /devices/virtual/input/input42 [ 577.335530][ T8104] loop2: detected capacity change from 0 to 1024 [ 577.358146][ T4165] XFS (loop1): Unmounting Filesystem [ 578.153655][ T8104] EXT4-fs (loop2): Test dummy encryption mode enabled [ 578.161625][ T8104] EXT4-fs (loop2): Ignoring removed orlov option [ 578.227466][ T8104] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 578.515657][ T8115] netlink: 148 bytes leftover after parsing attributes in process `syz.3.938'. [ 578.696766][ T8118] netlink: 'syz.4.933': attribute type 1 has an invalid length. [ 578.938515][ T8125] input: syz1 as /devices/virtual/input/input43 [ 579.043753][ T8125] loop2: detected capacity change from 0 to 1024 [ 579.048936][ T8118] 8021q: adding VLAN 0 to HW filter on device bond2 [ 579.071219][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.933'. [ 579.124812][ T8125] EXT4-fs (loop2): Test dummy encryption mode enabled [ 579.132442][ T8125] EXT4-fs (loop2): Ignoring removed orlov option [ 579.227353][ T8125] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 579.543914][ T8131] input: syz1 as /devices/virtual/input/input44 [ 579.622744][ T8131] loop0: detected capacity change from 0 to 1024 [ 579.690857][ T8131] EXT4-fs (loop0): Test dummy encryption mode enabled [ 579.698504][ T8131] EXT4-fs (loop0): Ignoring removed orlov option [ 579.773673][ T8131] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 580.219201][ T8142] netlink: 'syz.4.943': attribute type 1 has an invalid length. [ 580.255671][ T8140] input: syz1 as /devices/virtual/input/input45 [ 580.462964][ T8140] loop1: detected capacity change from 0 to 1024 [ 580.488951][ T8142] 8021q: adding VLAN 0 to HW filter on device bond3 [ 580.542428][ T8140] EXT4-fs (loop1): Test dummy encryption mode enabled [ 580.553761][ T8140] EXT4-fs (loop1): Ignoring removed orlov option [ 580.647494][ T8155] input: syz1 as /devices/virtual/input/input46 [ 580.852255][ T8140] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 582.336581][ T8169] netlink: 'syz.0.949': attribute type 1 has an invalid length. [ 582.534592][ T8169] 8021q: adding VLAN 0 to HW filter on device bond3 [ 582.551007][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'. [ 582.717176][ T8176] loop4: detected capacity change from 0 to 128 [ 582.806751][ T8184] loop0: detected capacity change from 0 to 16 [ 582.857716][ T8184] erofs: (device loop0): mounted with root inode @ nid 36. [ 583.030394][ T8179] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 583.038502][ T8179] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 584.234925][ T8196] input: syz1 as /devices/virtual/input/input47 [ 584.256871][ T8196] loop1: detected capacity change from 0 to 1024 [ 584.277239][ T8197] loop4: detected capacity change from 0 to 128 [ 584.283350][ T8196] EXT4-fs (loop1): Test dummy encryption mode enabled [ 584.290570][ T8196] EXT4-fs (loop1): Ignoring removed orlov option [ 584.342804][ T8196] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 584.419916][ T4159] udevd[4159]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 584.997922][ T26] audit: type=1800 audit(1744484171.942:62): pid=8210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.955" name="file1" dev="loop4" ino=1048606 res=0 errno=0 [ 585.027242][ T8208] loop2: detected capacity change from 0 to 1024 [ 585.242735][ T8208] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 586.729083][ T8236] input: syz1 as /devices/virtual/input/input48 [ 586.735646][ T8231] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 586.821554][ T8231] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 586.822329][ T8236] loop0: detected capacity change from 0 to 1024 [ 586.922562][ T8236] EXT4-fs (loop0): Test dummy encryption mode enabled [ 586.930209][ T8236] EXT4-fs (loop0): Ignoring removed orlov option [ 587.086335][ T8236] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 587.544251][ T8244] input: syz1 as /devices/virtual/input/input49 [ 587.931671][ T8246] input: syz1 as /devices/virtual/input/input50 [ 587.932414][ T8244] loop3: detected capacity change from 0 to 1024 [ 588.008774][ T8245] loop0: detected capacity change from 0 to 1024 [ 588.062673][ T8245] EXT4-fs (loop0): Test dummy encryption mode enabled [ 588.071399][ T8245] EXT4-fs (loop0): Ignoring removed orlov option [ 588.089564][ T8245] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 588.166760][ T8244] EXT4-fs (loop3): Test dummy encryption mode enabled [ 588.173935][ T8244] EXT4-fs (loop3): Ignoring removed orlov option [ 588.217454][ T8244] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 588.471815][ T8257] input: syz1 as /devices/virtual/input/input51 [ 588.582044][ T8257] loop2: detected capacity change from 0 to 1024 [ 588.649552][ T8257] EXT4-fs (loop2): Test dummy encryption mode enabled [ 588.657003][ T8257] EXT4-fs (loop2): Ignoring removed orlov option [ 588.775503][ T8257] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 588.927506][ T8260] loop1: detected capacity change from 0 to 1024 [ 589.051898][ T8267] input: syz1 as /devices/virtual/input/input52 [ 589.279684][ T8260] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 589.640850][ T8278] netlink: 148 bytes leftover after parsing attributes in process `syz.0.976'. [ 589.706378][ T8282] netlink: 148 bytes leftover after parsing attributes in process `syz.3.977'. [ 589.821942][ T8283] kvm: vcpu 0: requested 1152 ns lapic timer period limited to 200000 ns [ 589.955323][ T8288] kvm: vcpu 0: requested 1152 ns lapic timer period limited to 200000 ns [ 590.574397][ T8293] input: syz1 as /devices/virtual/input/input53 [ 590.662689][ T8293] loop0: detected capacity change from 0 to 1024 [ 590.752936][ T8293] EXT4-fs (loop0): Test dummy encryption mode enabled [ 590.760540][ T8293] EXT4-fs (loop0): Ignoring removed orlov option [ 590.861513][ T8293] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 591.057862][ T8297] input: syz1 as /devices/virtual/input/input54 [ 591.152757][ T8297] loop3: detected capacity change from 0 to 1024 [ 591.171853][ T8297] EXT4-fs (loop3): Test dummy encryption mode enabled [ 591.179262][ T8297] EXT4-fs (loop3): Ignoring removed orlov option [ 591.427442][ T8297] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 591.885429][ T8311] loop2: detected capacity change from 0 to 128 [ 592.028540][ T8316] netlink: 'syz.3.986': attribute type 1 has an invalid length. [ 592.036224][ T8316] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.986'. [ 592.527512][ T26] audit: type=1800 audit(1744484179.482:63): pid=8318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.985" name="file1" dev="loop2" ino=1048607 res=0 errno=0 [ 592.731649][ T8321] netlink: 'syz.3.988': attribute type 1 has an invalid length. [ 592.900342][ T8321] 8021q: adding VLAN 0 to HW filter on device bond1 [ 592.956358][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.988'. [ 593.298170][ T8336] netlink: 'syz.0.991': attribute type 1 has an invalid length. [ 593.372577][ T8336] 8021q: adding VLAN 0 to HW filter on device bond4 [ 593.390088][ T8334] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 593.398646][ T8334] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 593.976122][ T8348] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 594.004942][ T8348] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 594.053894][ T8340] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 594.068278][ T8340] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 594.198001][ T8356] netlink: 'syz.1.996': attribute type 1 has an invalid length. [ 594.286740][ T8360] netlink: 148 bytes leftover after parsing attributes in process `syz.3.997'. [ 594.394912][ T8356] 8021q: adding VLAN 0 to HW filter on device bond8 [ 594.454263][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 594.535838][ T8366] kvm: vcpu 0: requested 1152 ns lapic timer period limited to 200000 ns [ 594.592519][ T8369] loop4: detected capacity change from 0 to 128 [ 594.825087][ T8372] loop1: detected capacity change from 0 to 1024 [ 595.528757][ T8372] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 596.179965][ T8379] input: syz1 as /devices/virtual/input/input55 [ 596.212688][ T8379] loop3: detected capacity change from 0 to 1024 [ 596.256617][ T8379] EXT4-fs (loop3): Test dummy encryption mode enabled [ 596.263689][ T8379] EXT4-fs (loop3): Ignoring removed orlov option [ 596.298678][ T8379] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 596.353185][ T8384] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1004'. [ 596.696606][ T8401] input: syz1 as /devices/virtual/input/input56 [ 597.546963][ T8407] input: syz1 as /devices/virtual/input/input57 [ 597.637860][ T8407] loop3: detected capacity change from 0 to 1024 [ 598.071152][ T8407] EXT4-fs (loop3): Test dummy encryption mode enabled [ 598.078136][ T8407] EXT4-fs (loop3): Ignoring removed orlov option [ 598.105538][ T8407] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 598.388354][ T8411] input: syz1 as /devices/virtual/input/input58 [ 598.522488][ T8411] loop4: detected capacity change from 0 to 1024 [ 598.600633][ T8411] EXT4-fs (loop4): Test dummy encryption mode enabled [ 598.608315][ T8411] EXT4-fs (loop4): Ignoring removed orlov option [ 598.622840][ T8413] loop2: detected capacity change from 0 to 16 [ 598.766315][ T8411] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 598.769890][ T8413] erofs: (device loop2): mounted with root inode @ nid 36. [ 599.125726][ T8418] loop3: detected capacity change from 0 to 8192 [ 599.930621][ T8434] input: syz1 as /devices/virtual/input/input59 [ 599.973132][ T8434] loop4: detected capacity change from 0 to 1024 [ 599.991939][ T8434] EXT4-fs (loop4): Test dummy encryption mode enabled [ 599.999333][ T8434] EXT4-fs (loop4): Ignoring removed orlov option [ 600.008477][ T8418] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 600.049606][ T8434] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 600.055956][ T8418] REISERFS (device loop3): using ordered data mode [ 600.138624][ T8418] reiserfs: using flush barriers [ 600.184109][ T8444] input: syz1 as /devices/virtual/input/input60 [ 600.294613][ T8418] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 600.607442][ T8418] REISERFS (device loop3): checking transaction log (loop3) [ 600.662926][ T8449] input: syz1 as /devices/virtual/input/input61 [ 600.863646][ T8449] loop0: detected capacity change from 0 to 1024 [ 600.915522][ T8453] input: syz1 as /devices/virtual/input/input62 [ 600.933400][ T8449] EXT4-fs (loop0): Test dummy encryption mode enabled [ 600.941239][ T8449] EXT4-fs (loop0): Ignoring removed orlov option [ 601.035681][ T8453] loop2: detected capacity change from 0 to 1024 [ 601.104202][ T8453] EXT4-fs (loop2): Test dummy encryption mode enabled [ 601.111687][ T8453] EXT4-fs (loop2): Ignoring removed orlov option [ 601.176821][ T8453] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 601.325307][ T8449] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 601.462281][ T8463] input: syz1 as /devices/virtual/input/input63 [ 601.891575][ T8418] REISERFS (device loop3): Using tea hash to sort names [ 601.923185][ T8418] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 602.069881][ T8475] input: syz1 as /devices/virtual/input/input64 [ 602.153096][ T8475] loop2: detected capacity change from 0 to 1024 [ 602.224713][ T8475] EXT4-fs (loop2): Test dummy encryption mode enabled [ 602.232427][ T8475] EXT4-fs (loop2): Ignoring removed orlov option [ 602.348898][ T8475] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 602.869506][ T8481] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1029'. [ 603.069163][ T8484] kvm: vcpu 0: requested 1152 ns lapic timer period limited to 200000 ns [ 603.197737][ T1108] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 603.310064][ T8487] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 603.338244][ T8487] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 603.339734][ T8476] loop0: detected capacity change from 0 to 32768 [ 603.460304][ T1108] usb 2-1: Using ep0 maxpacket: 32 [ 603.464357][ T8468] loop4: detected capacity change from 0 to 32768 [ 603.588090][ T1108] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 603.645089][ T8476] XFS (loop0): Mounting V5 Filesystem [ 603.654577][ T8468] XFS (loop4): Mounting V5 Filesystem [ 603.774891][ T8476] XFS (loop0): Ending clean mount [ 603.791210][ T8476] XFS (loop0): Quotacheck needed: Please wait. [ 603.819755][ T1108] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 603.842339][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 603.852822][ T1108] usb 2-1: Product: syz [ 603.867936][ T1108] usb 2-1: Manufacturer: syz [ 603.872583][ T1108] usb 2-1: SerialNumber: syz [ 603.893829][ T1108] usb 2-1: config 0 descriptor?? [ 603.913673][ T8468] XFS (loop4): Ending clean mount [ 603.922631][ T8476] XFS (loop0): Quotacheck: Done. [ 603.922828][ T8483] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 603.960589][ T8468] XFS (loop4): Quotacheck needed: Please wait. [ 604.057186][ T8468] XFS (loop4): Quotacheck: Done. [ 604.166596][ T8518] netlink: 'syz.3.1035': attribute type 1 has an invalid length. [ 604.187388][ T8483] udc-core: couldn't find an available UDC or it's busy [ 604.206567][ T8514] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 604.217861][ T8483] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 604.241479][ T8514] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 604.283919][ T8518] 8021q: adding VLAN 0 to HW filter on device bond2 [ 604.307055][ T13] usb 2-1: USB disconnect, device number 54 [ 604.470481][ T4166] XFS (loop0): Unmounting Filesystem [ 604.533236][ T4174] XFS (loop4): Unmounting Filesystem [ 604.643548][ T8528] input: syz1 as /devices/virtual/input/input65 [ 604.715999][ T8528] loop2: detected capacity change from 0 to 1024 [ 604.787983][ T8528] EXT4-fs (loop2): Test dummy encryption mode enabled [ 604.795469][ T8528] EXT4-fs (loop2): Ignoring removed orlov option [ 604.948993][ T8528] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 604.962326][ T8527] loop3: detected capacity change from 0 to 8192 [ 605.157541][ T8527] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 605.178847][ T8527] REISERFS (device loop3): using ordered data mode [ 605.185968][ T8527] reiserfs: using flush barriers [ 605.396325][ T8534] input: syz1 as /devices/virtual/input/input66 [ 605.618874][ T8534] loop1: detected capacity change from 0 to 1024 [ 605.688431][ T8527] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 605.728036][ T8527] REISERFS (device loop3): checking transaction log (loop3) [ 605.743482][ T8534] EXT4-fs (loop1): Test dummy encryption mode enabled [ 605.750759][ T8534] EXT4-fs (loop1): Ignoring removed orlov option [ 605.788353][ T8534] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 606.147384][ T8545] loop1: detected capacity change from 0 to 512 [ 606.233524][ T8527] REISERFS (device loop3): Using tea hash to sort names [ 606.248807][ T8545] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 606.341631][ T8527] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 606.342782][ T8550] input: syz1 as /devices/virtual/input/input67 [ 606.355836][ T8540] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 606.459642][ T8550] loop0: detected capacity change from 0 to 1024 [ 606.471308][ T8540] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 606.513411][ T8550] EXT4-fs (loop0): Test dummy encryption mode enabled [ 606.521289][ T8550] EXT4-fs (loop0): Ignoring removed orlov option [ 606.682442][ T8550] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 606.778197][ T8545] EXT4-fs (loop1): 1 truncate cleaned up [ 606.838399][ T8545] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 607.224463][ T8556] input: syz1 as /devices/virtual/input/input68 [ 607.312145][ T8556] loop4: detected capacity change from 0 to 1024 [ 607.411125][ T8556] EXT4-fs (loop4): Test dummy encryption mode enabled [ 607.419094][ T8556] EXT4-fs (loop4): Ignoring removed orlov option [ 607.479396][ T8556] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 607.988069][ T8565] xt_CT: You must specify a L4 protocol and not use inversions on it [ 608.470621][ T8559] loop0: detected capacity change from 0 to 32768 [ 608.519956][ T4332] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 608.627399][ T8559] XFS (loop0): Mounting V5 Filesystem [ 608.777832][ T4332] usb 5-1: Using ep0 maxpacket: 32 [ 608.859530][ T8559] XFS (loop0): Ending clean mount [ 608.874021][ T8559] XFS (loop0): Quotacheck needed: Please wait. [ 608.908153][ T4332] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 608.989070][ T8559] XFS (loop0): Quotacheck: Done. [ 609.088053][ T4332] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 609.097325][ T4332] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 609.161093][ T4332] usb 5-1: Product: syz [ 609.165676][ T4332] usb 5-1: Manufacturer: syz [ 609.176985][ T4332] usb 5-1: SerialNumber: syz [ 609.194010][ T4332] usb 5-1: config 0 descriptor?? [ 609.238055][ T8572] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 609.265645][ T8598] loop2: detected capacity change from 0 to 512 [ 609.396949][ T8598] EXT4-fs (loop2): inline encryption not supported [ 609.413717][ T8601] input: syz1 as /devices/virtual/input/input69 [ 609.425720][ T8598] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 609.507236][ T8601] loop1: detected capacity change from 0 to 1024 [ 609.508482][ T8572] udc-core: couldn't find an available UDC or it's busy [ 609.583672][ T8572] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 609.593873][ T8601] EXT4-fs (loop1): Test dummy encryption mode enabled [ 609.601498][ T8601] EXT4-fs (loop1): Ignoring removed orlov option [ 609.755610][ T23] usb 5-1: USB disconnect, device number 40 [ 609.778084][ T8601] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 609.791378][ T8598] EXT4-fs (loop2): 1 orphan inode deleted [ 609.869826][ T8598] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,minixdf,acl,sb=0x0000000000000007,jqfmt=vfsv0,user_xattr,stripe=0x0000000000000374,,errors=continue. Quota mode: writeback. [ 609.928448][ T8598] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.201470][ T8611] loop3: detected capacity change from 0 to 1024 [ 610.265440][ T8611] EXT4-fs (loop3): Test dummy encryption mode enabled [ 610.272670][ T8611] EXT4-fs (loop3): Ignoring removed orlov option [ 610.356497][ T8611] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 610.594933][ T8615] loop2: detected capacity change from 0 to 512 [ 610.607144][ T4166] XFS (loop0): Unmounting Filesystem [ 610.756019][ T8615] EXT4-fs (loop2): inline encryption not supported [ 610.762750][ T8615] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 610.920261][ T8615] EXT4-fs (loop2): 1 orphan inode deleted [ 610.926732][ T8615] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,minixdf,acl,sb=0x0000000000000007,jqfmt=vfsv0,user_xattr,stripe=0x0000000000000374,,errors=continue. Quota mode: writeback. [ 610.997798][ T8615] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 611.078574][ T4332] kernel read not supported for file / (pid: 4332 comm: kworker/0:6) [ 611.225053][ T8626] input: syz1 as /devices/virtual/input/input71 [ 611.311445][ T8626] loop3: detected capacity change from 0 to 1024 [ 611.388675][ T8626] EXT4-fs (loop3): Test dummy encryption mode enabled [ 611.396181][ T8626] EXT4-fs (loop3): Ignoring removed orlov option [ 611.558642][ T8626] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 611.954498][ T8616] loop1: detected capacity change from 0 to 32768 [ 612.067383][ T8618] loop4: detected capacity change from 0 to 32768 [ 612.129048][ T8616] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1060 (8616) [ 612.284047][ T8618] XFS (loop4): Mounting V5 Filesystem [ 612.348213][ T8616] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 612.373803][ T8651] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1061'. [ 612.449218][ T8616] BTRFS info (device loop1): using free space tree [ 612.455779][ T8616] BTRFS info (device loop1): has skinny extents [ 612.505239][ T8656] kvm: vcpu 0: requested 1152 ns lapic timer period limited to 200000 ns [ 612.577238][ T8618] XFS (loop4): Ending clean mount [ 612.626791][ T8618] XFS (loop4): Quotacheck needed: Please wait. [ 612.708056][ T8616] BTRFS info (device loop1): enabling ssd optimizations [ 612.818614][ T8618] XFS (loop4): Quotacheck: Done. [ 612.944384][ T8676] loop0: detected capacity change from 0 to 256 [ 613.010228][ T8669] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 613.027785][ T8669] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 613.056988][ T8676] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3620664b, utbl_chksum : 0xe619d30d) [ 613.443227][ T8680] input: syz1 as /devices/virtual/input/input72 [ 613.534086][ T8680] loop3: detected capacity change from 0 to 1024 [ 613.600253][ T8680] EXT4-fs (loop3): Test dummy encryption mode enabled [ 613.607962][ T8680] EXT4-fs (loop3): Ignoring removed orlov option [ 613.915047][ T8688] input: syz1 as /devices/virtual/input/input73 [ 613.924260][ T8680] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 614.372043][ T4174] XFS (loop4): Unmounting Filesystem [ 614.607943][ T4684] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 614.857836][ T4684] usb 3-1: Using ep0 maxpacket: 32 [ 614.863615][ T8709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1070'. [ 614.934790][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1070'. [ 615.018293][ T4684] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 615.199092][ T4684] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 615.232950][ T8715] input: syz1 as /devices/virtual/input/input74 [ 615.324392][ T8715] loop4: detected capacity change from 0 to 1024 [ 615.333795][ T4684] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 615.346508][ T4684] usb 3-1: Product: syz [ 615.353167][ T4684] usb 3-1: Manufacturer: syz [ 615.360721][ T4684] usb 3-1: SerialNumber: syz [ 615.391207][ T4684] usb 3-1: config 0 descriptor?? [ 615.414787][ T8695] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 615.423663][ T8715] EXT4-fs (loop4): Test dummy encryption mode enabled [ 615.436618][ T8715] EXT4-fs (loop4): Ignoring removed orlov option [ 615.547997][ T8715] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 615.724932][ T8695] udc-core: couldn't find an available UDC or it's busy [ 615.787739][ T8695] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 615.856977][ T7] usb 3-1: USB disconnect, device number 40 [ 616.119595][ T8710] loop3: detected capacity change from 0 to 32768 [ 616.231183][ T8710] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1077 (8710) [ 617.137134][ T8712] loop1: detected capacity change from 0 to 32768 [ 617.198245][ T8710] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 617.251618][ T8710] BTRFS info (device loop3): using free space tree [ 617.260694][ T8710] BTRFS info (device loop3): has skinny extents [ 617.292646][ T8728] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1082'. [ 617.337941][ T8712] XFS (loop1): Mounting V5 Filesystem [ 617.423452][ T8710] BTRFS info (device loop3): enabling ssd optimizations [ 617.622498][ T8712] XFS (loop1): Ending clean mount [ 617.645074][ T8712] XFS (loop1): Quotacheck needed: Please wait. [ 617.699408][ T8755] kvm: vcpu 0: requested 1152 ns lapic timer period limited to 200000 ns [ 617.732441][ T8721] loop0: detected capacity change from 0 to 32768 [ 617.763727][ T8712] XFS (loop1): Quotacheck: Done. [ 617.956994][ T8721] XFS (loop0): Mounting V5 Filesystem [ 618.243936][ T8721] XFS (loop0): Ending clean mount [ 618.270023][ T8721] XFS (loop0): Quotacheck needed: Please wait. [ 618.381023][ T8770] loop4: detected capacity change from 0 to 16 [ 618.382213][ T8721] XFS (loop0): Quotacheck: Done. [ 618.492568][ T8770] erofs: (device loop4): mounted with root inode @ nid 36. [ 619.689625][ T4165] XFS (loop1): Unmounting Filesystem [ 620.100993][ T8790] input: syz1 as /devices/virtual/input/input75 [ 620.182023][ T8790] loop3: detected capacity change from 0 to 1024 [ 620.253876][ T8790] EXT4-fs (loop3): Test dummy encryption mode enabled [ 620.261493][ T8790] EXT4-fs (loop3): Ignoring removed orlov option [ 620.519997][ T8790] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 620.642207][ T4166] XFS (loop0): Unmounting Filesystem [ 620.663034][ T8794] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1088'. [ 620.767913][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1088'. [ 620.848513][ T8796] loop3: detected capacity change from 0 to 128 [ 621.601405][ T8804] input: syz1 as /devices/virtual/input/input76 [ 621.611731][ T26] audit: type=1800 audit(1744484208.522:64): pid=8802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1089" name="file1" dev="loop3" ino=1048611 res=0 errno=0 [ 621.752820][ T8804] loop1: detected capacity change from 0 to 1024 [ 622.107512][ T8804] EXT4-fs (loop1): Test dummy encryption mode enabled [ 622.114522][ T8804] EXT4-fs (loop1): Ignoring removed orlov option [ 622.146610][ T8804] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 623.949447][ T8822] loop1: detected capacity change from 0 to 16 [ 624.062104][ T8822] erofs: (device loop1): mounted with root inode @ nid 36. [ 624.180549][ T8825] input: syz1 as /devices/virtual/input/input77 [ 624.266648][ T8825] loop2: detected capacity change from 0 to 1024 [ 624.274859][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.284755][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.409431][ T8825] EXT4-fs (loop2): Test dummy encryption mode enabled [ 624.416891][ T8825] EXT4-fs (loop2): Ignoring removed orlov option [ 624.604003][ T8825] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 625.297069][ T8819] loop3: detected capacity change from 0 to 32768 [ 625.387479][ T8819] XFS (loop3): Mounting V5 Filesystem [ 625.670149][ T8819] XFS (loop3): Ending clean mount [ 625.678052][ T8819] XFS (loop3): Quotacheck needed: Please wait. [ 625.896925][ T8819] XFS (loop3): Quotacheck: Done. [ 626.115631][ T8849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1100'. [ 626.157363][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1100'. [ 626.223527][ T8834] loop2: detected capacity change from 0 to 32768 [ 626.415621][ T4173] XFS (loop3): Unmounting Filesystem [ 626.455034][ T8834] XFS (loop2): Mounting V5 Filesystem [ 626.668914][ T8834] XFS (loop2): Ending clean mount [ 626.683082][ T8844] loop4: detected capacity change from 0 to 32768 [ 626.696152][ T8834] XFS (loop2): Quotacheck needed: Please wait. [ 626.884611][ T8834] XFS (loop2): Quotacheck: Done. [ 626.956662][ T8858] loop0: detected capacity change from 0 to 32768 [ 626.974050][ T8844] XFS (loop4): Mounting V5 Filesystem [ 627.164731][ T8851] loop1: detected capacity change from 0 to 32768 [ 627.175813][ T8858] XFS (loop0): Mounting V5 Filesystem [ 627.215480][ T8844] XFS (loop4): Ending clean mount [ 627.245355][ T8844] XFS (loop4): Quotacheck needed: Please wait. [ 627.271854][ T8858] XFS (loop0): Ending clean mount [ 627.283828][ T8858] XFS (loop0): Quotacheck needed: Please wait. [ 627.301300][ T8851] XFS (loop1): Mounting V5 Filesystem [ 627.347390][ T4170] XFS (loop2): Unmounting Filesystem [ 627.434812][ T8844] XFS (loop4): Quotacheck: Done. [ 627.552708][ T8858] XFS (loop0): Quotacheck: Done. [ 627.674649][ T8851] XFS (loop1): Ending clean mount [ 627.710842][ T8851] XFS (loop1): Quotacheck needed: Please wait. [ 627.823103][ T8851] XFS (loop1): Quotacheck: Done. [ 628.200216][ T8872] loop3: detected capacity change from 0 to 32768 [ 628.386267][ T8872] XFS (loop3): Mounting V5 Filesystem [ 628.407095][ T4174] XFS (loop4): Unmounting Filesystem [ 628.422800][ T4166] XFS (loop0): Unmounting Filesystem [ 628.505819][ T8889] loop2: detected capacity change from 0 to 32768 [ 628.551966][ T8872] XFS (loop3): Ending clean mount [ 628.565156][ T8872] XFS (loop3): Quotacheck needed: Please wait. [ 628.658898][ T8889] XFS (loop2): Mounting V5 Filesystem [ 628.747425][ T8872] XFS (loop3): Quotacheck: Done. [ 628.769737][ T4165] XFS (loop1): Unmounting Filesystem [ 628.928304][ T8889] XFS (loop2): Ending clean mount [ 628.940302][ T8889] XFS (loop2): Quotacheck needed: Please wait. [ 629.133593][ T8889] XFS (loop2): Quotacheck: Done. [ 629.408321][ T4173] XFS (loop3): Unmounting Filesystem [ 630.271199][ T4170] XFS (loop2): Unmounting Filesystem [ 631.074266][ T8921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1111'. [ 631.347742][ T4684] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 631.551496][ T8930] loop3: detected capacity change from 0 to 256 [ 631.607866][ T4684] usb 2-1: Using ep0 maxpacket: 32 [ 631.621043][ T8930] exfat: Unknown parameter 'zero_size_dir' [ 631.728083][ T4684] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 632.657891][ T4684] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 632.668199][ T4684] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 632.676506][ T4684] usb 2-1: Product: syz [ 632.680991][ T4684] usb 2-1: Manufacturer: syz [ 632.685781][ T4684] usb 2-1: SerialNumber: syz [ 632.702022][ T4684] usb 2-1: config 0 descriptor?? [ 632.732923][ T8919] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 632.999639][ T8919] udc-core: couldn't find an available UDC or it's busy [ 633.006626][ T8919] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 633.114844][ T8928] loop0: detected capacity change from 0 to 32768 [ 633.120216][ T8945] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1118'. [ 633.175612][ T1108] usb 2-1: USB disconnect, device number 55 [ 633.345890][ T8951] kvm: vcpu 0: requested 1152 ns lapic timer period limited to 200000 ns [ 633.408780][ T8928] XFS (loop0): Mounting V5 Filesystem [ 633.765640][ T8928] XFS (loop0): Ending clean mount [ 633.777030][ T8928] XFS (loop0): Quotacheck needed: Please wait. [ 633.803120][ T8960] loop4: detected capacity change from 0 to 256 [ 633.860146][ T8960] exfat: Unknown parameter 'zero_size_dir' [ 633.872878][ T8928] XFS (loop0): Quotacheck: Done. [ 635.157977][ T8979] input: syz1 as /devices/virtual/input/input78 [ 635.244041][ T8979] loop1: detected capacity change from 0 to 1024 [ 635.479374][ T8979] EXT4-fs (loop1): Test dummy encryption mode enabled [ 635.486841][ T8979] EXT4-fs (loop1): Ignoring removed orlov option [ 635.689935][ T8979] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 637.079618][ T4166] XFS (loop0): Unmounting Filesystem [ 637.887716][ T8782] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 638.237738][ T4684] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 639.317786][ T8782] usb 5-1: config 0 has no interfaces? [ 639.355450][ T8991] loop3: detected capacity change from 0 to 32768 [ 639.437809][ T4684] usb 3-1: Using ep0 maxpacket: 32 [ 639.529987][ T8991] XFS (loop3): Mounting V5 Filesystem [ 639.557884][ T4684] usb 3-1: config index 0 descriptor too short (expected 8978, got 18) [ 639.567167][ T8987] loop1: detected capacity change from 0 to 32768 [ 639.570569][ T4684] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 639.583889][ T9012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.723899][ T8987] XFS (loop1): Mounting V5 Filesystem [ 639.749089][ T4684] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 639.818178][ T8782] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 639.819287][ T4684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.827926][ T8782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.842456][ T4684] usb 3-1: Product: syz [ 639.848403][ T4684] usb 3-1: Manufacturer: syz [ 639.853126][ T4684] usb 3-1: SerialNumber: syz [ 639.860682][ T4684] usb 3-1: config 0 descriptor?? [ 639.865858][ T8991] XFS (loop3): Ending clean mount [ 639.875938][ T8782] usb 5-1: Product: syz [ 639.882139][ T8991] XFS (loop3): Quotacheck needed: Please wait. [ 639.910428][ T8782] usb 5-1: Manufacturer: syz [ 639.915075][ T8782] usb 5-1: SerialNumber: syz [ 639.946082][ T8782] usb 5-1: config 0 descriptor?? [ 640.016173][ T8991] XFS (loop3): Quotacheck: Done. [ 640.062278][ T8987] XFS (loop1): Ending clean mount [ 640.071806][ T8987] XFS (loop1): Quotacheck needed: Please wait. [ 640.156504][ T8987] XFS (loop1): Quotacheck: Done. [ 640.328559][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 640.331640][ T4165] XFS (loop1): Unmounting Filesystem [ 640.746432][ T4173] XFS (loop3): Unmounting Filesystem [ 640.872287][ T9033] loop0: detected capacity change from 0 to 512 [ 640.956759][ T9033] EXT4-fs (loop0): Ignoring removed oldalloc option [ 640.981542][ T9033] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 641.002294][ T9033] EXT4-fs (loop0): 1 truncate cleaned up [ 641.012053][ T9033] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 643.164275][ T23] usb 3-1: USB disconnect, device number 41 [ 643.406786][ T9039] loop2: detected capacity change from 0 to 512 [ 643.462670][ T9043] loop0: detected capacity change from 0 to 512 [ 643.541832][ T9043] EXT4-fs (loop0): Ignoring removed oldalloc option [ 643.553396][ T9039] EXT4-fs (loop2): Ignoring removed oldalloc option [ 643.567890][ T9043] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 643.587488][ T9039] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 643.627461][ T9043] EXT4-fs (loop0): 1 truncate cleaned up [ 643.666138][ T9043] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 643.666904][ T9039] EXT4-fs (loop2): 1 truncate cleaned up [ 643.717723][ T9039] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 645.434827][ T9057] syz.0.1142 uses obsolete (PF_INET,SOCK_PACKET) [ 645.449949][ T9057] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 645.480108][ T9057] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 645.490004][ T9057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 645.497525][ T9057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 647.068006][ T9058] loop3: detected capacity change from 0 to 512 [ 647.085904][ T9057] device bridge_slave_0 left promiscuous mode [ 647.094894][ T9057] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.139629][ T9057] device bridge_slave_1 left promiscuous mode [ 647.153879][ T9057] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.281701][ T9058] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 647.303852][ T9057] bond0: (slave bond_slave_0): Releasing backup interface [ 647.334254][ T9058] EXT4-fs (loop3): 1 truncate cleaned up [ 647.478595][ T9058] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 647.558128][ T9057] bond0: (slave bond_slave_1): Releasing backup interface [ 647.731083][ T9069] loop2: detected capacity change from 0 to 256 [ 647.958404][ T9069] exfat: Unknown parameter 'zero_size_dir' [ 648.348953][ T9057] team0: Port device team_slave_0 removed [ 648.445600][ T8781] usb 5-1: USB disconnect, device number 41 [ 648.553804][ T9057] team0: Port device team_slave_1 removed [ 648.615364][ T9057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.657780][ T9057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.799723][ T9076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1146'. [ 648.815927][ T9057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.826573][ T9057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.852441][ T9057] bond1: (slave gretap1): Releasing active interface [ 650.110050][ T9088] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1150'. [ 651.380408][ T9101] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 651.602679][ T9101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 651.663447][ T9101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 651.715822][ T9101] device bridge_slave_0 left promiscuous mode [ 651.794941][ T9116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.860592][ T9101] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.958724][ T9101] device bridge_slave_1 left promiscuous mode [ 651.961524][ T9119] loop2: detected capacity change from 0 to 512 [ 651.964975][ T9101] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.001555][ T9101] bond0: (slave bond_slave_0): Releasing backup interface [ 652.023585][ T9101] bond0: (slave bond_slave_1): Releasing backup interface [ 652.074898][ T9119] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 652.079307][ T9101] team0: Port device team_slave_0 removed [ 652.115876][ T9101] team0: Port device team_slave_1 removed [ 652.131604][ T9101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.132059][ T9119] EXT4-fs (loop2): 1 truncate cleaned up [ 652.139705][ T9101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.154304][ T9101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.159827][ T9119] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 652.163106][ T9101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.421781][ T9125] loop3: detected capacity change from 0 to 256 [ 652.496050][ T9128] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1162'. [ 652.498896][ T9125] exfat: Unknown parameter 'zero_size_dir' [ 652.747181][ T9129] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 652.757090][ T9129] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 652.764940][ T9129] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 654.553841][ T9139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.944651][ T9147] loop4: detected capacity change from 0 to 256 [ 655.028852][ T9149] loop2: detected capacity change from 0 to 256 [ 655.129161][ T9147] exfat: Unknown parameter 'zero_size_dir' [ 655.154014][ T9149] exfat: Unknown parameter 'zero_size_dir' [ 655.171537][ T9151] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 655.269676][ T9153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.037348][ T9151] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 656.150766][ T9151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 656.208704][ T9151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 656.300695][ T9166] loop1: detected capacity change from 0 to 256 [ 656.388474][ T9166] exfat: Unknown parameter 'zero_size_dir' [ 657.084973][ T9180] loop4: detected capacity change from 0 to 128 [ 657.145058][ T9182] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 657.175940][ T9182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 657.196375][ T9182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 657.216070][ T9185] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 657.278277][ T9185] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 658.206855][ T9193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.418332][ T9197] loop3: detected capacity change from 0 to 256 [ 658.469247][ T9197] exfat: Unknown parameter 'zero_size_dir' [ 658.976407][ T9195] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 659.109296][ T9195] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 659.558078][ T9203] loop0: detected capacity change from 0 to 256 [ 659.609773][ T9205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.620116][ T9203] exfat: Unknown parameter 'zero_size_dir' [ 660.849053][ T9223] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 660.865226][ T9226] loop1: detected capacity change from 0 to 128 [ 660.935563][ T9223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 661.402011][ T9223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 662.362884][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 662.461781][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 662.617178][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 662.788126][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 662.814347][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 662.847177][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 662.872768][ T9246] device bridge_slave_0 left promiscuous mode [ 662.888039][ T9246] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.899677][ T9246] device bridge_slave_1 left promiscuous mode [ 662.906642][ T9246] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.950020][ T9246] bond0: (slave bond_slave_0): Releasing backup interface [ 662.993079][ T9246] bond0: (slave bond_slave_1): Releasing backup interface [ 663.045025][ T9246] team0: Port device team_slave_0 removed [ 663.064837][ T9246] team0: Port device team_slave_1 removed [ 663.071716][ T9246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.082017][ T9246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.090895][ T9246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.098936][ T9246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.114350][ T9246] bond1: (slave gretap1): Releasing active interface [ 663.160049][ T9262] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 663.172957][ T9262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 663.181143][ T9262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 663.191319][ T9262] device bridge_slave_0 left promiscuous mode [ 663.197511][ T9262] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.208496][ T9262] device bridge_slave_1 left promiscuous mode [ 663.214710][ T9262] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.225164][ T9262] bond0: (slave bond_slave_0): Releasing backup interface [ 663.244430][ T9262] bond0: (slave bond_slave_1): Releasing backup interface [ 663.287080][ T9262] team0: Port device team_slave_0 removed [ 663.320348][ T9262] team0: Port device team_slave_1 removed [ 663.326757][ T9262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.341564][ T9262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.351715][ T9262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.359219][ T9262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.375815][ T9262] bond1: (slave gretap1): Releasing active interface [ 663.400834][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 663.420593][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 663.430435][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 663.440570][ T9263] device bridge_slave_0 left promiscuous mode [ 663.446761][ T9263] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.458861][ T9263] device bridge_slave_1 left promiscuous mode [ 663.465077][ T9263] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.475877][ T9263] bond0: (slave bond_slave_0): Releasing backup interface [ 663.494406][ T9263] bond0: (slave bond_slave_1): Releasing backup interface [ 663.547604][ T9263] team0: Port device team_slave_0 removed [ 663.565540][ T9263] team0: Port device team_slave_1 removed [ 663.578919][ T9263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.586393][ T9263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.595243][ T9263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.604304][ T9263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.623702][ T9263] bond1: (slave gretap1): Releasing active interface [ 663.947990][ T9272] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 664.189557][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 664.714718][ T9278] loop4: detected capacity change from 0 to 512 [ 664.740560][ T9277] loop3: detected capacity change from 0 to 256 [ 664.748031][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 664.843818][ T9277] exfat: Unknown parameter 'zero_size_dir' [ 664.845027][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 664.850013][ T9278] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 664.866082][ T9280] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1200'. [ 664.884151][ T9278] EXT4-fs (loop4): 1 truncate cleaned up [ 664.896850][ T9278] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 665.166904][ T9284] kvm: vcpu 0: requested 1152 ns lapic timer period limited to 200000 ns [ 667.713421][ T9302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.762789][ T9305] loop3: detected capacity change from 0 to 128 [ 667.827352][ T9308] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 667.852951][ T9308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 667.964053][ T9308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 669.256575][ T9325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 671.044766][ T9345] loop1: detected capacity change from 0 to 256 [ 671.176037][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 671.197130][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 671.230231][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 671.972657][ T9355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.001240][ T9345] exfat: Unknown parameter 'zero_size_dir' [ 672.084436][ T9348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.374893][ T9369] loop4: detected capacity change from 0 to 128 [ 677.061918][ T9396] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 677.091538][ T9396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 677.099636][ T1108] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 677.158539][ T9396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 678.667844][ T1108] usb 1-1: device descriptor read/all, error -71 [ 678.687722][ T9406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.697836][ T9419] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1235'. [ 681.947469][ T9434] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1239'. [ 685.358831][ T9454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.680872][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.687335][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.685619][ T9478] loop0: detected capacity change from 0 to 128 [ 687.707790][ T8689] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 688.010441][ T8689] usb 5-1: Using ep0 maxpacket: 16 [ 688.457711][ T1108] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 688.851535][ T8689] usb 5-1: unable to read config index 0 descriptor/all [ 688.859630][ T8689] usb 5-1: can't read configurations, error -71 [ 689.616349][ T9493] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1255'. [ 689.617953][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 690.907686][ T23] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 691.027821][ T1108] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 691.095616][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.110299][ T9496] overlayfs: failed to resolve './file0': -2 [ 691.123689][ T1108] usb 4-1: Product: syz [ 691.135557][ T1108] usb 4-1: Manufacturer: syz [ 691.537879][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 691.951648][ T1108] usb 4-1: SerialNumber: syz [ 692.057004][ T1108] usb 4-1: config 0 descriptor?? [ 692.142300][ T1108] usb 4-1: can't set config #0, error -71 [ 692.193970][ T1108] usb 4-1: USB disconnect, device number 37 [ 692.238283][ T9502] ================================================================== [ 692.246909][ T9502] BUG: KASAN: use-after-free in ax25_fillin_cb+0x460/0x660 [ 692.254189][ T9502] Read of size 4 at addr ffff888022f49538 by task syz.4.1257/9502 [ 692.262020][ T9502] [ 692.264372][ T9502] CPU: 1 PID: 9502 Comm: syz.4.1257 Not tainted 5.15.180-syzkaller #0 [ 692.272543][ T9502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 692.282633][ T9502] Call Trace: [ 692.285942][ T9502] [ 692.288892][ T9502] dump_stack_lvl+0x1e3/0x2d0 [ 692.293725][ T9502] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 692.299393][ T9502] ? _printk+0xd1/0x120 [ 692.303578][ T9502] ? __wake_up_klogd+0xcc/0x100 [ 692.308469][ T9502] ? panic+0x860/0x860 [ 692.312558][ T9502] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 692.318046][ T9502] ? __lock_acquire+0x1ff0/0x1ff0 [ 692.323096][ T9502] print_address_description+0x63/0x3b0 [ 692.328670][ T9502] ? ax25_fillin_cb+0x460/0x660 [ 692.333549][ T9502] kasan_report+0x16b/0x1c0 [ 692.338087][ T9502] ? ax25_fillin_cb+0x460/0x660 [ 692.342970][ T9502] ax25_fillin_cb+0x460/0x660 [ 692.347679][ T9502] ax25_setsockopt+0xab7/0xe70 [ 692.352473][ T9502] ? ax25_shutdown+0x10/0x10 [ 692.357103][ T9502] ? aa_sock_opt_perm+0x79/0x110 [ 692.362081][ T9502] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 692.367654][ T9502] ? security_socket_setsockopt+0x7d/0xa0 [ 692.373397][ T9502] ? ax25_shutdown+0x10/0x10 [ 692.378016][ T9502] __sys_setsockopt+0x57e/0x990 [ 692.382895][ T9502] ? __ia32_sys_recv+0xb0/0xb0 [ 692.387691][ T9502] ? syscall_enter_from_user_mode+0x2e/0x240 [ 692.393703][ T9502] __x64_sys_setsockopt+0xb1/0xc0 [ 692.398765][ T9502] do_syscall_64+0x3b/0xb0 [ 692.403207][ T9502] ? clear_bhb_loop+0x15/0x70 [ 692.407904][ T9502] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 692.413816][ T9502] RIP: 0033:0x7f97c61be169 [ 692.418246][ T9502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.437871][ T9502] RSP: 002b:00007f97c4027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 692.446326][ T9502] RAX: ffffffffffffffda RBX: 00007f97c63d6fa0 RCX: 00007f97c61be169 [ 692.454329][ T9502] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000007 [ 692.462326][ T9502] RBP: 00007f97c623f990 R08: 0000000000000010 R09: 0000000000000000 [ 692.470319][ T9502] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.478311][ T9502] R13: 0000000000000000 R14: 00007f97c63d6fa0 R15: 00007ffd28ec0728 [ 692.486319][ T9502] [ 692.489351][ T9502] [ 692.491686][ T9502] Allocated by task 9027: [ 692.496020][ T9502] ____kasan_kmalloc+0xba/0xf0 [ 692.500803][ T9502] kmem_cache_alloc_trace+0x143/0x290 [ 692.506192][ T9502] ax25_dev_device_up+0x51/0x5a0 [ 692.511146][ T9502] ax25_device_event+0x4a0/0x510 [ 692.516096][ T9502] raw_notifier_call_chain+0xd0/0x170 [ 692.521482][ T9502] __dev_notify_flags+0x1fd/0x3f0 [ 692.526526][ T9502] dev_change_flags+0xe7/0x190 [ 692.531305][ T9502] dev_ifsioc+0x147/0x10c0 [ 692.535745][ T9502] dev_ioctl+0x504/0xf60 [ 692.540010][ T9502] sock_do_ioctl+0x34f/0x5a0 [ 692.544619][ T9502] sock_ioctl+0x484/0x770 [ 692.548968][ T9502] __se_sys_ioctl+0xf1/0x160 [ 692.553577][ T9502] do_syscall_64+0x3b/0xb0 [ 692.558013][ T9502] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 692.563923][ T9502] [ 692.566254][ T9502] Freed by task 9485: [ 692.570238][ T9502] kasan_set_track+0x4b/0x80 [ 692.574850][ T9502] kasan_set_free_info+0x1f/0x40 [ 692.579802][ T9502] ____kasan_slab_free+0xd8/0x120 [ 692.584845][ T9502] slab_free_freelist_hook+0xdd/0x160 [ 692.590236][ T9502] kfree+0xf1/0x270 [ 692.594061][ T9502] ax25_release+0x3b3/0x840 [ 692.598583][ T9502] sock_close+0xcd/0x230 [ 692.602851][ T9502] __fput+0x3fe/0x8e0 [ 692.606855][ T9502] task_work_run+0x129/0x1a0 [ 692.611467][ T9502] exit_to_user_mode_loop+0x106/0x130 [ 692.616860][ T9502] exit_to_user_mode_prepare+0xb1/0x140 [ 692.622430][ T9502] syscall_exit_to_user_mode+0x5d/0x240 [ 692.627993][ T9502] do_syscall_64+0x47/0xb0 [ 692.632428][ T9502] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 692.638343][ T9502] [ 692.640680][ T9502] Last potentially related work creation: [ 692.646403][ T9502] kasan_save_stack+0x36/0x60 [ 692.651099][ T9502] kasan_record_aux_stack+0xba/0x100 [ 692.656412][ T9502] kvfree_call_rcu+0x118/0x8a0 [ 692.661200][ T9502] ipmr_rules_exit+0x1d5/0x1f0 [ 692.665988][ T9502] cleanup_net+0x7f1/0xc90 [ 692.670422][ T9502] process_one_work+0x8a1/0x10c0 [ 692.675380][ T9502] worker_thread+0xaca/0x1280 [ 692.680073][ T9502] kthread+0x3f6/0x4f0 [ 692.684153][ T9502] ret_from_fork+0x1f/0x30 [ 692.688590][ T9502] [ 692.690922][ T9502] Second to last potentially related work creation: [ 692.697512][ T9502] kasan_save_stack+0x36/0x60 [ 692.702202][ T9502] kasan_record_aux_stack+0xba/0x100 [ 692.707502][ T9502] call_rcu+0x1c4/0xa70 [ 692.711674][ T9502] inetdev_event+0x84c/0x14d0 [ 692.716386][ T9502] raw_notifier_call_chain+0xd0/0x170 [ 692.721782][ T9502] unregister_netdevice_many+0xe98/0x1840 [ 692.727517][ T9502] unregister_netdevice_queue+0x2e6/0x350 [ 692.733251][ T9502] __tun_detach+0x6b6/0x1600 [ 692.737845][ T9502] tun_chr_close+0x104/0x1b0 [ 692.742450][ T9502] __fput+0x3fe/0x8e0 [ 692.746455][ T9502] task_work_run+0x129/0x1a0 [ 692.751068][ T9502] exit_to_user_mode_loop+0x106/0x130 [ 692.756439][ T9502] exit_to_user_mode_prepare+0xb1/0x140 [ 692.761985][ T9502] syscall_exit_to_user_mode+0x5d/0x240 [ 692.767530][ T9502] do_syscall_64+0x47/0xb0 [ 692.771972][ T9502] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 692.777987][ T9502] [ 692.780304][ T9502] The buggy address belongs to the object at ffff888022f49500 [ 692.780304][ T9502] which belongs to the cache kmalloc-192 of size 192 [ 692.794354][ T9502] The buggy address is located 56 bytes inside of [ 692.794354][ T9502] 192-byte region [ffff888022f49500, ffff888022f495c0) [ 692.807579][ T9502] The buggy address belongs to the page: [ 692.813214][ T9502] page:ffffea00008bd240 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888022f49800 pfn:0x22f49 [ 692.824662][ T9502] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 692.832221][ T9502] raw: 00fff00000000200 ffffea0001573588 ffffea0000ab6248 ffff888017441a00 [ 692.840817][ T9502] raw: ffff888022f49800 000000000010000d 00000001ffffffff 0000000000000000 [ 692.849451][ T9502] page dumped because: kasan: bad access detected [ 692.855884][ T9502] page_owner tracks the page as allocated [ 692.861616][ T9502] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 10459199700, free_ts 10453869231 [ 692.877385][ T9502] get_page_from_freelist+0x3b78/0x3d40 [ 692.882943][ T9502] __alloc_pages+0x272/0x700 [ 692.887559][ T9502] alloc_page_interleave+0x22/0x1c0 [ 692.892783][ T9502] new_slab+0xbb/0x4b0 [ 692.896872][ T9502] ___slab_alloc+0x6f6/0xe10 [ 692.901458][ T9502] __kmalloc+0x1c9/0x300 [ 692.905694][ T9502] usb_alloc_urb+0x36/0x130 [ 692.910192][ T9502] usb_control_msg+0x185/0x4c0 [ 692.914975][ T9502] usb_get_string+0xa3/0x3b0 [ 692.919556][ T9502] usb_string_sub+0x72/0x420 [ 692.924169][ T9502] usb_string+0x1c3/0x790 [ 692.928489][ T9502] usb_cache_string+0x79/0xf0 [ 692.933160][ T9502] usb_new_device+0x291/0x18f0 [ 692.937922][ T9502] register_root_hub+0x25f/0x540 [ 692.942872][ T9502] usb_add_hcd+0xc4e/0x1250 [ 692.947477][ T9502] vhci_hcd_probe+0x1f0/0x3b0 [ 692.952155][ T9502] page last free stack trace: [ 692.956816][ T9502] free_unref_page_prepare+0xc34/0xcf0 [ 692.962268][ T9502] free_unref_page+0x95/0x2d0 [ 692.966939][ T9502] __vunmap+0x8b3/0xa50 [ 692.971088][ T9502] free_work+0x57/0x80 [ 692.975148][ T9502] process_one_work+0x8a1/0x10c0 [ 692.980080][ T9502] worker_thread+0xaca/0x1280 [ 692.984747][ T9502] kthread+0x3f6/0x4f0 [ 692.988811][ T9502] ret_from_fork+0x1f/0x30 [ 692.993248][ T9502] [ 692.995577][ T9502] Memory state around the buggy address: [ 693.001205][ T9502] ffff888022f49400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 693.009257][ T9502] ffff888022f49480: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 693.017309][ T9502] >ffff888022f49500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 693.025360][ T9502] ^ [ 693.031244][ T9502] ffff888022f49580: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc SYZFAIL: failed to send rpc fd=3 want=9024 sent=0 n=-1 (errno 32: Broken pipe) [ 693.039303][ T9502] ffff888022f49600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 693.047367][ T9502] ================================================================== [ 693.055417][ T9502] Disabling lock debugging due to kernel taint [ 693.067360][ T9502] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 693.074590][ T9502] CPU: 1 PID: 9502 Comm: syz.4.1257 Tainted: G B 5.15.180-syzkaller #0 [ 693.084155][ T9502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 693.094224][ T9502] Call Trace: [ 693.097510][ T9502] [ 693.100450][ T9502] dump_stack_lvl+0x1e3/0x2d0 [ 693.105138][ T9502] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 693.110774][ T9502] ? panic+0x860/0x860 [ 693.114852][ T9502] ? preempt_schedule_common+0xa6/0xd0 [ 693.120351][ T9502] ? preempt_schedule+0xd9/0xe0 [ 693.125232][ T9502] panic+0x318/0x860 [ 693.129129][ T9502] ? check_panic_on_warn+0x1d/0xa0 [ 693.134239][ T9502] ? fb_is_primary_device+0xd0/0xd0 [ 693.139436][ T9502] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 693.145413][ T9502] ? _raw_spin_unlock+0x40/0x40 [ 693.150263][ T9502] check_panic_on_warn+0x7e/0xa0 [ 693.155209][ T9502] ? ax25_fillin_cb+0x460/0x660 [ 693.160071][ T9502] end_report+0x6d/0xf0 [ 693.164225][ T9502] kasan_report+0x18e/0x1c0 [ 693.168730][ T9502] ? ax25_fillin_cb+0x460/0x660 [ 693.173581][ T9502] ax25_fillin_cb+0x460/0x660 [ 693.178259][ T9502] ax25_setsockopt+0xab7/0xe70 [ 693.183027][ T9502] ? ax25_shutdown+0x10/0x10 [ 693.187636][ T9502] ? aa_sock_opt_perm+0x79/0x110 [ 693.192592][ T9502] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 693.198157][ T9502] ? security_socket_setsockopt+0x7d/0xa0 [ 693.203893][ T9502] ? ax25_shutdown+0x10/0x10 [ 693.208488][ T9502] __sys_setsockopt+0x57e/0x990 [ 693.213343][ T9502] ? __ia32_sys_recv+0xb0/0xb0 [ 693.218108][ T9502] ? syscall_enter_from_user_mode+0x2e/0x240 [ 693.224089][ T9502] __x64_sys_setsockopt+0xb1/0xc0 [ 693.229115][ T9502] do_syscall_64+0x3b/0xb0 [ 693.233530][ T9502] ? clear_bhb_loop+0x15/0x70 [ 693.238242][ T9502] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 693.244138][ T9502] RIP: 0033:0x7f97c61be169 [ 693.248551][ T9502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.268155][ T9502] RSP: 002b:00007f97c4027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 693.276576][ T9502] RAX: ffffffffffffffda RBX: 00007f97c63d6fa0 RCX: 00007f97c61be169 [ 693.284550][ T9502] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000007 [ 693.292630][ T9502] RBP: 00007f97c623f990 R08: 0000000000000010 R09: 0000000000000000 [ 693.300603][ T9502] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.308572][ T9502] R13: 0000000000000000 R14: 00007f97c63d6fa0 R15: 00007ffd28ec0728 [ 693.316550][ T9502] [ 693.319845][ T9502] Kernel Offset: disabled [ 693.324173][ T9502] Rebooting in 86400 seconds..