last executing test programs: 14m37.147734536s ago: executing program 3 (id=432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800008ec0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000480)={'veth0\x00', &(0x7f0000000340)=@ethtool_eee={0x44, 0xe, 0xfffffffb, 0xb, 0x3, 0xffff, 0x6, 0x10000, [0x4, 0x6]}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0), 0x0) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) 14m35.108290189s ago: executing program 3 (id=440): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000bc0)={0x64, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x10, 0x0, 0x1, [@typed={0x49, 0x121, 0x0, 0x0, @binary="c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd"}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 14m34.848662344s ago: executing program 3 (id=444): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @multicast1}, &(0x7f0000000180)=0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x5, 0xff, 0x0, 0x1, 0x0, '\x00', r1, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f00000006c0)='GPL\x00', 0xaa1d, 0xcd, &(0x7f0000000800)=""/205, 0x41100, 0x10, '\x00', r1, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0xb, 0xffffffff, 0xfffffffb}, 0x10, 0x7368, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[r2, r2, r2, 0xffffffffffffffff, r2, r2, r2, r2, r2], &(0x7f0000000980)}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r7 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x1}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x4, r7, r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 14m32.047982742s ago: executing program 3 (id=451): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x400, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}]}}, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 14m30.16827832s ago: executing program 3 (id=457): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xeb1da000) r0 = userfaultfd(0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) dup(r3) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)="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", 0x109}], 0x1}}], 0x1, 0x4000001) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14m29.792307938s ago: executing program 3 (id=460): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 14m29.572226303s ago: executing program 32 (id=460): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 9m44.606012743s ago: executing program 2 (id=1343): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000700000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 9m43.893753885s ago: executing program 2 (id=1345): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 9m43.088294948s ago: executing program 2 (id=1348): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) setfsuid(0xee00) 9m42.800680522s ago: executing program 2 (id=1349): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRES32], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000380)={[{@barrier_val={'barrier', 0x3d, 0x2}}, {@lazytime}, {@jqfmt_vfsv0}, {@nobarrier}, {@data_ordered}, {@test_dummy_encryption}, {@dioread_nolock}, {@nolazytime}]}, 0xd, 0x607, &(0x7f00000015c0)="$eJzs3c1vFOUfAPDvbF9oKb9fCzEqHqSJMZAoLS1giPEAV0MafIkXL1ZaECnQ0BotklASvJgYL8aYePIAJv4RSuTKSRMTD148GRKihKOJa2Y7U3bb3ba7tN3a+XySpc/MMzPPM2y/nWeefZ7ZAAprMP2nFLE3IqaTiP5kfjGvM7LMwYXtHj64ejp9JVEuv/FnEkm2Lt8+yX72ZTv3RMRPPyaxp2N5uTNzV86PT01NXs6Wh2cvTA/PzF05eO7C+NnJs5MXR18aPXb0yNFjI4daOq9rddadvPH+h/2fjr198+u/k5FvfxtL4ni8mm348MHV/qpNfym1VGqtwRis/J8ky7P6jq3D8beCjuz3pPotTjrbWCGakr9/XRHxVPRHRzx68/rjk9faWjlgQ5WTiDJQUIn4h4LK2wH5vX31/Xws3P0D29T9EwsdAMvjv3OhbzB6Kn0DOx8mUd2tk0REaz1ztXZFxN07YzfO3Bm7EUv6E4GNNX89Ip6uF/9JJf4HoicGKvFfqon/tF1wKvuZrn+9xfKXdhUvj//DLR4ZWM1C/PesGP/RIP7fqYr/d1ssf/BR8r3emvjvbfWUAAAAAAAAoLBun4iIF+t9/l9aHP8Tdcb/9EXE8XUof3DJ8vLP/0v31qEYoI77JyJeqTv+t5SP/h3oyFL/q4wH6ErOnJuaPBQR/4+IA9G1I10eWaGMg5/t+ap6+WZVejAb/5e/0vLvZmMBs3rc69xRe7yJ8dnx9Th3KLr71yOeqTv+N1m8/id1rv/p34PpNZax5/lbpxrlrR7/wEYpfxOxv+71/9FTK5KVn88xXGkPDOetguWe/fjz7xuV32r8e8QEPL70+r9z5fgfSKqf1zPTfBmH5zrLjfJabf93J29WHjnTna37aHx29vJIRHdysiNdW7N+tPk6w3aUx0MeL2n8H3hu5f6/eu3/3oiYX3Ls5K/aOcW5J//p+71RfbT/oX3S+J9o6vrffGL01sAPjcpf2/X/SOVafyBbo/8PFnyZh2l37frlUbgY0DVZm11fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgOShGxK5LS0GK6VBoaiuiLiCdiZ2nq0szsC2cufXBxIs2rfP9/Kf+m3/6F5ST//v+BquXRJcuHI2J3RHzR0VtZHjp9aWqi3ScPAAAAAAAAAAAAAAAAAAAAW0Rfg/n/qT862l07YMN1trsCQNvUif+f21EPYPO5/kNxiX8oLvEPxSX+objEPxSX+IfiEv9QXOIfAAAAAAC2ld37bv+aRMT8y72VV6o7y+tqa82AjVZqdwWAtvGIHyguQ3+guNzjA8kq+T0Nd1ptz5VMn36MnQEAAAAAAAAAAACgcPbvNf8fisr8fygu8/+huPL5//vaXA9g8zV5j6+5ANvUSjP5687/X3UvAAAAAAAAAAAAAGA9zcxdOT8+NTV5eT0TO2KNG3+3EaW3mnhra1RjMxPlcvla+luwVerzH0/kQ+Ef8zjpYZrZqzPWtnE+129tR27f3yQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDWvwEAAP//2PcidQ==") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) shutdown(r3, 0x1) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fbd3", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) sendmmsg(r3, &(0x7f0000007c80)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000a80)="260888", 0x3}], 0x1, &(0x7f0000000c80)}}], 0x1, 0x40010) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000001140)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x220, 0x110, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000040), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @remote, 0x8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2a}, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) write$binfmt_register(r5, &(0x7f0000000440)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 9m40.883444833s ago: executing program 2 (id=1351): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1e, 0x4, 0x1) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) 9m39.428694316s ago: executing program 2 (id=1356): getpriority(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffd4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x4000084) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x5, 0x0, 0x7ffc1ffb}]}) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0x1}, [], {0x4, 0x2}, [], {0x10, 0x7}}, 0x24, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xe2) 9m38.998219823s ago: executing program 33 (id=1356): getpriority(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffd4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x4000084) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x5, 0x0, 0x7ffc1ffb}]}) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0x1}, [], {0x4, 0x2}, [], {0x10, 0x7}}, 0x24, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xe2) 9m4.509380091s ago: executing program 1 (id=1476): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000b00)=[{0x0}], 0x1}}, {{&(0x7f0000000800)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0x4}]}}}], 0x18}}], 0x2, 0x40000) 9m4.338016384s ago: executing program 1 (id=1477): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}}, 0x0) 9m4.153390687s ago: executing program 1 (id=1479): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) waitid$P_PIDFD(0x2, r6, 0x0, 0x8, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 9m3.077950614s ago: executing program 1 (id=1482): dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4c, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, &(0x7f00000003c0)='./file0\x00') recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 9m1.892797742s ago: executing program 1 (id=1487): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000001c0)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@usrjquota}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) truncate(0x0, 0x3000000) setns(0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) 9m1.227882524s ago: executing program 1 (id=1489): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000070000000100010009000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000000)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @opaque="24dc6170e1e0318539"}}}}}, 0x0) syz_emit_ethernet(0xfe0, &(0x7f0000000b40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfd2, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xfbe, 0x0, @gue={{0x1, 0x1, 0x3, 0xb, 0x100, @void}, "c9eb9499fa1240a27e4c8f8633a77451f9b141a80ce47c4b3084a3873bde7cc86b68fb91b595ef699e50fdd0af0c912bdbacf9c00855b3fa23c4e44cb91a4293b30cd6ca9b1d527c8c1de35f14060b92d2a3d32f65463d6aff00803ccc38f9532d6ac75731d55ed51b60b5e9dea86506cdbc06f1f321956731a0b7613526aef3a6e2a7ae6dbfd67b005f701d6735ecad5e6d0eb81165830147f5e7986e2022768ea3cbbe5a90e7708ee406222773aa505a6e6cd2533086045e3818ce39ccb85fa425819655f47bfa47fbe07ceb709e03fd4051c1b293ba5210fa7cc6a402d7c15811afe093fb30ab66a2de7128e4f2135a98af2bf9b52ddae2810f3e873da1e2c51b7821d40f92b3c623abadcb9290d2db7cc5d1e80bd8baedba63f9a87c8cdff655220ebbaba61cd16920321560cb81b5069bb395d64fb2c0ee3a562db7530eabe1157aa8aea46f72c39ab3b9124734abf0755e520f92c6b7a92a5050753fbbb11237956671ef0fd13727753972ccca4f85879d984dd2c707654420712cf8d3735b2b7795a6376ee4f6f90bec61517074d6118d958b066b695dc046a1524583f2071dc76f07e3437ba6fc777501aba49c79deadb3eb1451270baf13fa0961637aa077f15c36d74a359365b8cc4eed3f0c1fef5e0ba9458671e92f6d5d1a02714439e218325b818e44674482344231e74cd21790fc5f1b13467157e3163dfff5a3ab529ea3e9d81cbfdafc466695aa0bcdd4e7d3dd7a84aa82bc0c0a4b4de9ced9e2fce4467cc93d474d2d619dcd90f26e25ed992aa087d1db9cb4138b70e9353b6604a9399741f06bcce1f40246e82a6267dbc512176f80f270887bbbeb8b11204089707093b2101347305df8c4c6396df2ba4379e3bd1f9475bf6353b63b38324b173d3288b670180435f42d0358d47f6c1b33cd49a15a32c942b3262ff5047c4aa0acabe70792894dbdd54cace51727c636830eac72e343fbe3c9b06f55d90f64d00f8312c12fb1dcf48dbb5f102f2081916a13f19e09ebecf49bde7b419422b3ce5d1ee22545e6e10697a249c860de52f2f37db65dc9842cffb3a257b9bf8b18917120e3d0a9f74c937e57c18e5a63107da6ce2aed3755d8a836131ff54f304e6a3dc75975cca66239f77ae951e70e2ba4ae7800ceda38c313d264758fe8031d0581945b4cee73ba0edcf77e8444ceeb92fe5e677223717a0a6831a429ae46da88afd4a4ca36a49d1e530e4bbd678de612727b494d9fcb7741d9d984a4bd8f8f0176ef20008e89b5a7d4c31f37f13ecefeac13813a775f525b63ab801203b695e7c4e172b8141ecd7dfbc56d64a1f4f2a8f2bc3eadbe3cb39d0e4a8b68962a5f5b9df5febb431b6b711c3b7c39a55e9601695c55dac894f6fc66bab433838a4bf827114b6083ffe4f7e1fd2febb56a334063e8244d8fa3a727a7e9e7cdbb67fc1a61fb60f9d96f80a475b54efb563969c6455c3534f7b4a7608d88b92509fada01d9dca67423caba907584005f026f1fad76e70de0e7b6d5cf96127c5a9520f043d60af98f13427c464714955cdcbb1aad01e0b06e935fca9e251af77427ef218936e7378331fd6ec171fedcaff6822eae652a594f4cf3b1a869a1f71996498aca58ee458694ecf9d8dea76a7612e27c282c1776f1db2b3ec83344ad557258437838445471a64340475da994ab756b915af9db51f3aa85a74839e7517e85e17e6319866e4ec0066c1195d311c5d589e4a3d581b21e4fb9dacec4d277b46bf075d433f213c6f2cdc9ea296a1288b3f0a67fc670b3a5924c42981e11f23467ff0ae0ec4aefb6d7dc617c7454cefff5819e7f280d6d443dd4524954e40a270aba0a7949571e64e5d4a9351ced99e8468a8c4515ca7baf600fbf566ef0c59581b53d7ccb590c53c6c8bc6c72e0dbdd39e812e4c18d68c213404130e89fce55e8f54c8bcee5b15966e0f349f5e7a951d7376cc75860d56fd90aa6a4d490f32bdf45ed6b76bf9f26f5af2ca92253f3de28c1ee384359bd20be5800cb3c5436527a2fe8fdbd87636564963a1bc0b1c8f1235eea41d79fb678e3204ea97901d242f14ff3412e9da6879748a4fb5685a4b80c6bf3f1de63d30e1a384745eb1a77ce54648a5a92f58141a80460ae92e40a69f33aef22e7b52c8a2645282d96aa7c163e48d76a613829c8c45fca3e5d8b7594285aa8fd9c2af8aef28a796fc700bd652954dd3c7427c9b15fa8456f84d01db086a1bb74d59f31e6f8dbd110efd0211c729283b457602afeaf4507a1539edc7bffb4f6a165efa79bf66ef064565aae9645350374df2287413293e4b7e5379a248f51bb92e80319a90e0e4081d2ae0cb24cb23946a4fed5f83a949a1c28d5f0f59afff26452839f86dcca7fc3bb9fae89ff1905c5433ce8d1623b9e47e0d2b0130d94dde9de6df6f7c52f345f36b825f0e144e820290e23e87652e2c0a755b1c9c420fe596c88ecf27b49f00d9c4e9f3b0296364cdf24ea68fa131026ec55908ab0d08db67209e75d6de6cd94f33f3a7cc137b227663c27d3ce678c86d62a55f182d0a2d046b22bd44e6ca80325af0afa75a7bdc2830b79b9b45f9c0f42d8c593ef0ef7b2bd2745196a39770a42fc8589a0fc75ef66e86624b4c2c6fb7b0259d40c191149250b06bd4bf2dd25b246d2447b0a95e2ec54a57e7858ea65b92559a318e4b42c814d66c41585dc389bf05ea5df99cb05ea0667ff7db8435d6f6b96533cd9f84f111fae3508f9ea090dee6a71abd87bbdbd5fd6654f9937f1a3977de77112fdc652abfffc11a46b87e6af2799085a20abcf90c65dd7b8792947df0afd284e0c4081ff7efcf21df6b6519b80900eb28b74180bafe2a2a8f21361902cc7fdf0cf79a59d45a9c1fadf4c7a23a70bb998ce4b3ed66e4cf3a7028d45bc305ddbab7889c61db50bf31d100588a96c47417612d16eec3ac31cf267fe88ca67166669989c25571a93f1fba48729baa61af77a6989a83e68ed1dcbe809ef4c6579c48f1e5ca592738c69ddef5ca5f719981ce48472824ed3cb1d15313ab128dafb9e2308320de4029809f1c7b265768b83f7f52029534bffc56d5bf46109b9a0e5469a0da0a51bed60db4ec8322e908809e5c08e50af3b1d5e7a0f9a3da8e9696a26a279e0ac64facdd340fe8e4b512dc21c7586dde8d9ec328ff65b51be81d3b7eac4ec09afe839d56b183a4bd8549156b06294b03f56f8b8908d391f8c41911b8f0016def8b8918bac216baeb30f192ce002b512b68e6ea7e46042c01f2b36b59f9782adb935cd337c280738466bad12a2c3cca298ea052b5dd6deb75b397231673fd07e595bdfb50c0d00044c27066aac9cb578c10fc014a7012191dcba4457eb8531db928f9cd5d4eb5fdb4829c926b077b78599cc6542f3f663c687fae99b69beb5ca25ad222137c51957e9bb2350a35be68c3d869db7f7a5010a8b2a097a91eea7dd5198646affe466365e8f4341e1bb8a74890b40a223a14a433587649523f70ab35bb5f9685057354d837b2de575bb85653552e27225bea5b7b3a4f445a6d1a1082b4e9e02b76c2ef7411d26b250b6cad60f17e7b78dae76a9b76fa7ce30a9b1a5cfee8c00b17a96470df7b33df30bbdd33dcf1de125e4120f4530f68b3eddc908bdb68a7f4b50e8296f47c43f0fc043513d8092a5ecf5524e175069d560af034da116e6f748538d3053dbc981e3f2b4e88a093d815dfe21619479ef035b7b155b1506b8820f874e9cb484c5feefb9d06fb100db907dd679a5987987a4d229007ea24ed7596003fceb70f3412b117b9023b660713f149ec4a22151d289b93cf80be357198fb29c2c2ac4324501f5fa784f1cba868135e7ed5583c30808d1ff182f07fd97a97f13feef3b4e208179a76a8c022e80167e8192e7755d77cc087ded924938eaeb64ed710a2e3f27ec3ac6fbf4532a140c5eaccd38b1e2026d4d5e566ff2fd78c30555e1a4393f798d8ebef960e1ed4c07104cb73f307761d9df6cec6a37389df12123725e6172f21300c4bbb1e2aae81976a6a1a7ab42feaf03fcc9f23a7655febe26412aa2a8a61938f55f43a499cf768482731971e4f75981f9d1ada11c94eaa2c9acd470aea5cf06118dcce983ad9de252476ec7eb396495726689a57f3457b8840ebf10458b2a689ecb9968a77a35303fbb5725e325a96ae1faea7e96157d4c14a311ca28bc7f256fb4b91ba46cc191d42d08e40889308726d60adfb8905a6d95c3367f4ceab97f8885b2fc6d408ba0e3da86ea25ea8a402e72903a2550b8dc97d87ca298ae1a27ee092b18e7efe19065f7fc3538bab9dae2a44c8db79513f0c5e32cc8f423e328d7d3e07a329f9b655099162c9ed49c8499715416db569d5f469a3bba5e5dd69565d121bc1aabc2b0c6db260256b899e5a1cce60080ada086a49ee3c4d2f54f65cdd2d909222de2ac34cff8994a77d7c3e99b2f31319a80f11bc981102521ea643fcd0e7cbffdb9cfb5d8f1046739e3add01a4b827303f9eeca7cb6b58b2b4925d8c3a4093725214d0ad3250f7a1aecd96ceb6db04e9fc388bd6f0f33ee64089c1fca84f3bc17737c6e76388bb92c18fa3bcbc9bfd4267c48e070e28da90679ea5796880bbb490d30e63a5baf07f0bce27f072701d3c6a08f9dcf4a7a2c50fc05d05129f0ab646456a13aface7521675620faed833276a17dbd90bc2e7a3aafb45332c0061439cafade1b66efd1fcf5e34107dadd12dc1fae633fd5654d1f4e44ef25748397f2d51ff22d0f98312a665482f71b59a60510b021d109662a42f360e0961f11148c0b4c54dd4fc5c73f43aebb3cc5d681e533388ed9093712d70695bc4a7c1d7d38aacda95afaf972ff015650a9044719b01edd41133a64f77b39a86882fcf56a8d79a08f7127f9b33a2e45eecafe1a5f36e3488e3575ceb69452e139af90067fc52345fcd7e1f32a48e6026dcc6ca087a6ba3d2942e7e6308833298807b44d6d7209cf8f4e37cec60e9beb51e13b07401302923ea54ba03a31595aae196fcf7b08f7df4bf5f42e9fd5bbde00bad0bf0529b179fab204238af447d70ad91692f0f30876abc674c4b7aac1d58a5d1279966ea65fbd149ab2d98a7c7e69f303471d9d7d0289e929fa4fd75f7cb67f6099d44fce6df86ed0a8464c52545dae100348889676a81e064220e41dd5042c24d7a6287dd02f80a544e9ab681b819cb7f7761d4a83d2a405a70caf5c9f07116058741b98f067e41558564994662871661ff2dc61e5b86816901c9060db754e827da30b141e3e7236faef029ffc18c7d4204841e2181887cebf458d573c7c69e0c1a000b73f0e7de8061515ac25cf7c492b9e41756f161b464e1f14350343d48a28516660d44b4603c3f90f3374aff5eb732c62600c6564b5c5bb270bc5461bc9be6e3e91b44e5a29e393a771daa985ad8cd779a61fef323ebd4fa2ef83a2d499eab96c3be8e78e531ecb3194196c1369cdc2a39e8c9a18c3a1a3956dfc8591f4d70ebe2c1ad2d363564a4cdd2fcedf6f0cfd39a670a7f23d45caaea2724f4b32427aea065306644d807ccf987008c532381070225beb956f7740de8fa9225b79c9d495ccaec3a70a52c65af34bc57b95f74a493a8a1d777d4782bc9d175e44cb0d24028d83b6c2ce40d210f14072955f970aae5768fc8d38fe3932b05b39dd"}}}}}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8m46.044316125s ago: executing program 34 (id=1489): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000070000000100010009000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000000)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @opaque="24dc6170e1e0318539"}}}}}, 0x0) syz_emit_ethernet(0xfe0, &(0x7f0000000b40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfd2, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xfbe, 0x0, @gue={{0x1, 0x1, 0x3, 0xb, 0x100, @void}, "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"}}}}}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13.019435813s ago: executing program 0 (id=3123): r0 = syz_usb_connect$hid(0x0, 0x4c, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[], 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x5, 0x0, 0x2000402) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) r4 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x2) close_range(r1, 0xffffffffffffffff, 0x0) 12.54826993s ago: executing program 6 (id=3124): write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) fcntl$setlease(r0, 0x400, 0x1) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 11.464264057s ago: executing program 6 (id=3127): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x2c, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, 0x0, 0x0, 0xff00) 10.297819496s ago: executing program 6 (id=3129): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x100580) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000b0e000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x1000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000140)='/dev/hwrng\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='\x00') 9.311304712s ago: executing program 4 (id=3130): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$nfs4(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='rdma']) 9.146654565s ago: executing program 5 (id=3131): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 8.840185039s ago: executing program 5 (id=3132): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ptrace$getsig(0x4202, 0x0, 0x7fffffff, &(0x7f0000000640)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000034000)=""/102392, 0x18ff8) r3 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13", 0xb2}, {&(0x7f00000002c0)="9c811ff500139d7d", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x2fb}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 8.081434831s ago: executing program 0 (id=3133): sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b0b, 0x0) 7.122325737s ago: executing program 6 (id=3134): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) 6.975608589s ago: executing program 5 (id=3135): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000240)={0xd11c, 0x8b}, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) readv(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) tkill(r1, 0xb) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 6.860281161s ago: executing program 6 (id=3136): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(r0, &(0x7f0000000000)="2400000058004f0f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 6.586120655s ago: executing program 4 (id=3137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d40)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = getpid() rt_tgsigqueueinfo(r6, 0x0, 0x24, &(0x7f0000000000)={0x17, 0xb, 0x85}) io_setup(0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.399671114s ago: executing program 4 (id=3138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = open(0x0, 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(0x0, 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) execve(0x0, &(0x7f0000000440)={[&(0x7f0000000240)='kmem_cache_free\x00']}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047451, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x18) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000530404802fbd7000000000a0af000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.948307081s ago: executing program 5 (id=3139): r0 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3, 0x4, 0x3}, &(0x7f0000ffe000), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x6156, 0x5) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x3ff, 0x8, 0x40, 0x42, 0x1, 0xa5a}, 0x50) setresgid(0xee00, 0xee01, 0x0) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x555bb9e38da44474, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.643322822s ago: executing program 4 (id=3140): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 3.641499832s ago: executing program 5 (id=3141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) 3.548508773s ago: executing program 0 (id=3142): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x100580) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000140)='/dev/hwrng\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='\x00') 3.424205675s ago: executing program 4 (id=3143): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ptrace$getsig(0x4202, 0x0, 0x7fffffff, &(0x7f0000000640)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000034000)=""/102392, 0x18ff8) r3 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13", 0xb2}, {&(0x7f00000002c0)="9c811ff500139d7d", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x2fb}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 2.027869008s ago: executing program 0 (id=3144): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) 1.729970883s ago: executing program 0 (id=3145): socket(0x10, 0x80002, 0x0) dup(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) 440.289093ms ago: executing program 0 (id=3146): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008011}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 242.851016ms ago: executing program 6 (id=3147): r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1060, 0x80, 0x0, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b70500"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000080)={r9, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0x0, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_SET_BLOCK_SIZE(r8, 0x4c09, 0x6) 121.145517ms ago: executing program 5 (id=3148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000003c0)={&(0x7f0000000340)}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_io_uring_setup(0xd5, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000001300)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000680)="d4", 0x1}], 0x1}}], 0x1, 0x20000050) setsockopt(r4, 0x84, 0x7f, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x87) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 4 (id=3149): io_setup(0x10000, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0), 0x10) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x7a, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='task_rename\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) io_setup(0x9, &(0x7f0000002e40)) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r6, 0x3b86, &(0x7f0000000100)={0x18, r7, 0xffffffffffffffff, 0x1c}) kernel console output (not intermixed with test programs): _read_bulk_cb - nonzero read bulk status received: -71 [ 753.001081][ T966] usb 7-1: USB disconnect, device number 9 [ 753.725766][T14252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2292'. [ 753.884816][T14256] tipc: Enabling of bearer rejected, failed to enable media [ 753.926872][ T5842] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 754.129918][ T5842] usb 7-1: Using ep0 maxpacket: 8 [ 754.140619][ T5842] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 754.155485][ T5842] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 754.174814][ T5842] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 754.192650][ T5842] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 754.207155][ T5842] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 754.216327][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.371578][T14261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2294'. [ 754.383327][T14261] netlink: 'syz.4.2294': attribute type 1 has an invalid length. [ 754.406970][T14261] 8021q: adding VLAN 0 to HW filter on device bond2 [ 754.467002][ T5842] usb 7-1: GET_CAPABILITIES returned 0 [ 754.490108][ T5842] usbtmc 7-1:16.0: can't read capabilities [ 754.692270][T11393] usb 7-1: USB disconnect, device number 10 [ 755.820980][T14284] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2303'. [ 755.868496][T14286] tipc: Enabled bearer , priority 0 [ 755.887229][T14286] syzkaller0: entered promiscuous mode [ 755.892739][T14286] syzkaller0: entered allmulticast mode [ 755.955821][T14286] tipc: Resetting bearer [ 755.986782][ T5842] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 755.997902][T14285] tipc: Resetting bearer [ 756.025610][T14285] tipc: Disabling bearer [ 756.277967][ T5842] usb 7-1: config 8 has an invalid interface number: 101 but max is 0 [ 756.286184][ T5842] usb 7-1: config 8 has no interface number 0 [ 756.310558][ T5842] usb 7-1: config 8 interface 101 has no altsetting 0 [ 756.318758][ T5842] usb 7-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 756.340825][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.385198][T14291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2305'. [ 756.805986][T14278] syzkaller0: entered promiscuous mode [ 756.826716][T14278] syzkaller0: entered allmulticast mode [ 757.012418][T14299] tipc: Enabled bearer , priority 0 [ 757.094288][T14278] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 757.895733][T14277] tipc: Resetting bearer [ 757.931237][T14277] tipc: Disabling bearer [ 757.947074][T10556] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 757.992578][ T5842] usb 7-1: string descriptor 0 read error: -71 [ 758.002518][ T5842] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 758.009819][ T5842] gspca_sunplus: reg_w_riv err -71 [ 758.016331][ T5842] sunplus: probe of 7-1:8.101 failed with error -71 [ 758.025982][ T5842] usb 7-1: USB disconnect, device number 11 [ 758.082053][T14308] dvmrp8: entered allmulticast mode [ 758.168344][T10556] usb 1-1: Using ep0 maxpacket: 8 [ 758.181122][T10556] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 758.198495][T10556] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 758.210733][T10556] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 758.224660][T10556] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 758.245206][T10556] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 758.254749][T10556] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.492295][T10556] usb 1-1: GET_CAPABILITIES returned 0 [ 758.502190][T10556] usbtmc 1-1:16.0: can't read capabilities [ 758.704436][T10556] usb 1-1: USB disconnect, device number 6 [ 759.504355][ T8401] TC_ACT_REPEAT abuse ? [ 759.508977][ C1] TC_ACT_REPEAT abuse ? [ 759.968784][T14325] tipc: Enabled bearer , priority 0 [ 760.001629][T14325] syzkaller0: entered promiscuous mode [ 760.011532][T14325] syzkaller0: entered allmulticast mode [ 760.136989][ T5795] Bluetooth: hci3: command 0x0406 tx timeout [ 760.171169][T14321] tipc: Resetting bearer [ 760.675789][T14321] tipc: Disabling bearer [ 762.932125][T10556] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 763.130285][T14358] TC_ACT_REPEAT abuse ? [ 763.148392][T10556] usb 1-1: config 8 has an invalid interface number: 101 but max is 0 [ 763.157049][T10556] usb 1-1: config 8 has no interface number 0 [ 763.163346][T10556] usb 1-1: config 8 interface 101 has no altsetting 0 [ 763.183790][T10556] usb 1-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 763.285332][T14358] TC_ACT_REPEAT abuse ? [ 763.291653][T10556] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.383026][T14362] tipc: Enabled bearer , priority 0 [ 763.390639][T14362] syzkaller0: entered promiscuous mode [ 763.396155][T14362] syzkaller0: entered allmulticast mode [ 763.459335][T14360] tipc: Resetting bearer [ 763.518406][T14364] befs: (nullb0): No write support. Marking filesystem read-only [ 763.531914][T14364] befs: (nullb0): invalid magic header [ 763.603225][T14360] tipc: Disabling bearer [ 763.623142][T14358] TC_ACT_REPEAT abuse ? [ 763.632910][T14358] TC_ACT_REPEAT abuse ? [ 763.654087][T14363] TC_ACT_REPEAT abuse ? [ 763.765813][T14363] TC_ACT_REPEAT abuse ? [ 763.803050][T14363] TC_ACT_REPEAT abuse ? [ 763.961861][T14365] geneve2: entered promiscuous mode [ 763.984610][T14366] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 763.994791][T14363] TC_ACT_REPEAT abuse ? [ 764.086864][T14367] syzkaller0: entered promiscuous mode [ 764.096831][T14367] syzkaller0: entered allmulticast mode [ 764.278235][T10556] usb 1-1: string descriptor 0 read error: -71 [ 764.291918][T10556] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 764.331986][T10556] gspca_sunplus: reg_w_riv err -71 [ 764.341527][T10556] sunplus: probe of 1-1:8.101 failed with error -71 [ 764.374080][T10556] usb 1-1: USB disconnect, device number 7 [ 764.585216][T14363] net_ratelimit: 95 callbacks suppressed [ 764.585233][T14363] TC_ACT_REPEAT abuse ? [ 764.632204][T14363] TC_ACT_REPEAT abuse ? [ 765.258792][T10409] TC_ACT_REPEAT abuse ? [ 765.263475][ C0] TC_ACT_REPEAT abuse ? [ 765.267804][T14363] TC_ACT_REPEAT abuse ? [ 765.427996][T14363] TC_ACT_REPEAT abuse ? [ 765.519132][T14363] TC_ACT_REPEAT abuse ? [ 765.558511][T14363] TC_ACT_REPEAT abuse ? [ 765.563172][T14363] TC_ACT_REPEAT abuse ? [ 765.652900][T14363] TC_ACT_REPEAT abuse ? [ 767.110785][T14403] tipc: Enabled bearer , priority 0 [ 767.130674][T14403] syzkaller0: entered promiscuous mode [ 767.136172][T14403] syzkaller0: entered allmulticast mode [ 767.195288][T14402] tipc: Resetting bearer [ 767.232584][T14402] tipc: Disabling bearer [ 768.766882][ T9] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 769.018787][ T9] usb 6-1: config 8 has an invalid interface number: 101 but max is 0 [ 769.027837][ T9] usb 6-1: config 8 has no interface number 0 [ 769.069443][ T9] usb 6-1: config 8 interface 101 has no altsetting 0 [ 769.079018][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 769.105182][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.920117][T14414] syzkaller0: entered promiscuous mode [ 769.938299][T14414] syzkaller0: entered allmulticast mode [ 769.955475][T14414] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 770.119167][T14440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2347'. [ 770.214115][ T9] usb 6-1: string descriptor 0 read error: -71 [ 770.236370][ T9] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 770.253449][ T9] gspca_sunplus: reg_w_riv err -71 [ 770.260547][ T9] sunplus: probe of 6-1:8.101 failed with error -71 [ 770.266795][ T5842] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 770.279119][ T9] usb 6-1: USB disconnect, device number 16 [ 770.494515][ T5842] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 770.504515][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.518334][ T5842] usb 7-1: Product: syz [ 770.522544][ T5842] usb 7-1: Manufacturer: syz [ 770.530781][ T5842] usb 7-1: SerialNumber: syz [ 770.538608][ T5842] usb 7-1: config 0 descriptor?? [ 770.552364][ T5842] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 770.574388][ T5842] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 770.595317][ T5842] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 771.057768][T10409] net_ratelimit: 11 callbacks suppressed [ 771.057782][T10409] TC_ACT_REPEAT abuse ? [ 771.068408][ C1] TC_ACT_REPEAT abuse ? [ 771.634593][T14453] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 771.637834][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 771.672487][T14453] CIFS mount error: No usable UNC path provided in device string! [ 771.672487][T14453] [ 771.705389][T14453] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 771.825357][T14456] befs: (nullb0): No write support. Marking filesystem read-only [ 771.835140][T14456] befs: (nullb0): invalid magic header [ 771.887867][ T5774] IPVS: starting estimator thread 0... [ 772.062410][T14457] IPVS: using max 18 ests per chain, 43200 per kthread [ 772.065362][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.210827][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.236982][ T9] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 772.246582][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.287949][ T9] usb 6-1: config 0 descriptor?? [ 772.420098][T14461] TC_ACT_REPEAT abuse ? [ 772.424528][T14461] TC_ACT_REPEAT abuse ? [ 772.446152][T14461] TC_ACT_REPEAT abuse ? [ 772.458477][T14460] TC_ACT_REPEAT abuse ? [ 772.462985][T14460] TC_ACT_REPEAT abuse ? [ 772.721439][ T9] hid-steam 0003:28DE:1142.001E: unknown main item tag 0x0 [ 772.737148][ T9] hid-steam 0003:28DE:1142.001E: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 772.776723][ T5774] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 772.832498][ T9] hid-steam 0003:28DE:1142.001E: Steam wireless receiver connected [ 772.842068][ T9] hid-steam 0003:28DE:1142.001E: No HID_FEATURE_REPORT submitted - nothing to read [ 772.862271][ T9] hid-steam 0003:28DE:1142.001F: unknown main item tag 0x0 [ 772.876428][ T9] hid-steam 0003:28DE:1142.001F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 773.686640][ T5774] usb 1-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 773.706834][ T9] usb 6-1: USB disconnect, device number 17 [ 773.710866][ T5842] usb 7-1: USB disconnect, device number 12 [ 773.737456][ T5774] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 773.771404][ T5774] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 773.789941][ T9] hid-steam 0003:28DE:1142.001E: Steam wireless receiver disconnected [ 773.822537][ T5774] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 773.842960][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.860370][T14475] fido_id[14475]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 773.874882][ T5774] usb 1-1: Product: syz [ 773.881325][ T5774] usb 1-1: Manufacturer: syz [ 773.886075][ T5774] usb 1-1: SerialNumber: syz [ 774.186606][ T5842] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 774.217906][ T5774] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 774.230560][ T5774] cdc_ncm 1-1:1.0: bind() failure [ 774.245558][ T5774] usb 1-1: USB disconnect, device number 8 [ 774.396569][ T5842] usb 7-1: Using ep0 maxpacket: 8 [ 774.412546][ T5842] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 774.428779][ T5842] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 774.441423][ T5842] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 774.457412][ T5842] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 774.470859][ T5842] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 774.482085][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.713145][ T5842] usb 7-1: GET_CAPABILITIES returned 0 [ 774.730182][ T5842] usbtmc 7-1:16.0: can't read capabilities [ 775.137589][ T5842] usb 7-1: USB disconnect, device number 13 [ 776.776876][ C0] TC_ACT_REPEAT abuse ? [ 776.911094][T10409] TC_ACT_REPEAT abuse ? [ 776.915447][ C1] TC_ACT_REPEAT abuse ? [ 777.009242][T14502] Invalid option length (1048180) for dns_resolver key [ 777.274467][T14516] Bluetooth: MGMT ver 1.22 [ 777.633955][T14524] tmpfs: Bad value for 'mpol' [ 778.786681][ T5842] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 779.076549][ T5842] usb 7-1: Using ep0 maxpacket: 8 [ 779.084154][ T5842] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 779.114143][ T5842] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 779.154647][ T5842] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 779.174777][ T5842] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 779.213838][ T5842] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 779.236635][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.461324][T14533] TC_ACT_REPEAT abuse ? [ 779.465824][ C1] TC_ACT_REPEAT abuse ? [ 779.508278][ T5842] usb 7-1: GET_CAPABILITIES returned 0 [ 779.513793][ T5842] usbtmc 7-1:16.0: can't read capabilities [ 779.616605][ T5774] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 779.711433][ T5842] usb 7-1: USB disconnect, device number 14 [ 779.826560][ T5774] usb 6-1: Using ep0 maxpacket: 16 [ 779.850839][ T5774] usb 6-1: unable to get BOS descriptor or descriptor too short [ 779.878434][ T5774] usb 6-1: config 13 has an invalid interface number: 50 but max is 0 [ 779.903973][ T5774] usb 6-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 779.926940][ T5774] usb 6-1: config 13 has no interface number 0 [ 779.936791][ T5774] usb 6-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 779.950032][T14540] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2382'. [ 779.950334][ T5774] usb 6-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 779.976755][ T5774] usb 6-1: config 13 interface 50 has no altsetting 0 [ 779.986377][ T5774] usb 6-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 780.015814][ T5774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.033015][ T5774] usb 6-1: Product: syz [ 780.043912][ T5774] usb 6-1: Manufacturer: syz [ 780.051242][ T5774] usb 6-1: SerialNumber: syz [ 780.064701][T14535] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 780.217169][T14545] TC_ACT_REPEAT abuse ? [ 780.221737][ C1] TC_ACT_REPEAT abuse ? [ 780.309093][ T5774] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 780.335794][ T5774] usb 6-1: MIDIStreaming interface descriptor not found [ 781.222523][ T5774] usb 6-1: USB disconnect, device number 18 [ 782.547346][T10423] TC_ACT_REPEAT abuse ? [ 782.551758][ C0] TC_ACT_REPEAT abuse ? [ 784.159734][T14575] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 784.293904][T14576] loop6: detected capacity change from 0 to 8192 [ 784.342529][T14576] loop6: p2 p3 p4 [ 784.346278][T14576] loop6: partition table partially beyond EOD, truncated [ 784.353605][T14576] loop6: p2 start 2936012800 is beyond EOD, truncated [ 784.360527][T14576] loop6: p3 start 1912602624 is beyond EOD, truncated [ 784.367330][T14576] loop6: p4 size 656640 extends beyond EOD, truncated [ 784.750164][T11360] udevd[11360]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 787.280238][T14610] loop5: detected capacity change from 0 to 8192 [ 788.027848][T14610] loop5: p2 p3 p4 [ 788.031617][T14610] loop5: partition table partially beyond EOD, truncated [ 788.039037][T14610] loop5: p2 start 2936012800 is beyond EOD, truncated [ 788.046012][T14610] loop5: p3 start 1912602624 is beyond EOD, truncated [ 788.052814][T14610] loop5: p4 size 656640 extends beyond EOD, truncated [ 788.298288][T10413] TC_ACT_REPEAT abuse ? [ 788.302740][ C1] TC_ACT_REPEAT abuse ? [ 789.698890][T14602] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.708237][T14602] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.789852][T14602] batman_adv: batadv0: Interface deactivated: dummy0 [ 790.085881][T14602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.129716][T14602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 790.448554][T14602] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.458360][T14602] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.468989][T14602] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.482166][T14602] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.006623][ T5876] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 791.141713][T14635] TC_ACT_REPEAT abuse ? [ 791.146111][ C1] TC_ACT_REPEAT abuse ? [ 791.189617][ T5876] usb 1-1: config 8 has an invalid interface number: 101 but max is 0 [ 791.206677][ T5876] usb 1-1: config 8 has no interface number 0 [ 791.212796][ T5876] usb 1-1: config 8 interface 101 has no altsetting 0 [ 791.225050][ T5876] usb 1-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 791.868415][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.143036][T14623] syzkaller0: entered promiscuous mode [ 792.155146][T14623] syzkaller0: entered allmulticast mode [ 792.172254][T14623] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 792.585371][T14648] loop5: detected capacity change from 0 to 8192 [ 792.649198][T14648] loop5: p2 p3 p4 [ 792.652983][T14648] loop5: partition table partially beyond EOD, truncated [ 792.660367][T14648] loop5: p2 start 2936012800 is beyond EOD, truncated [ 792.667334][T14648] loop5: p3 start 1912602624 is beyond EOD, truncated [ 792.674200][T14648] loop5: p4 size 656640 extends beyond EOD, truncated [ 792.792637][ T5876] usb 1-1: string descriptor 0 read error: -71 [ 792.799532][ T5842] TC_ACT_REPEAT abuse ? [ 792.800919][ T5876] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 792.811082][ T5876] gspca_sunplus: reg_w_riv err -71 [ 792.816305][ T5876] sunplus: probe of 1-1:8.101 failed with error -71 [ 792.830512][ T5876] usb 1-1: USB disconnect, device number 9 [ 793.193590][T11360] udevd[11360]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 793.879801][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 793.918986][ T5842] TC_ACT_REPEAT abuse ? [ 794.056907][ C0] TC_ACT_REPEAT abuse ? [ 794.061271][ T8401] TC_ACT_REPEAT abuse ? [ 794.065658][ C1] TC_ACT_REPEAT abuse ? [ 794.086770][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 794.151403][ T9] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 794.160807][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.190575][ T9] usb 1-1: Product: syz [ 794.207335][ T9] usb 1-1: Manufacturer: syz [ 794.226540][ T9] usb 1-1: SerialNumber: syz [ 794.253468][ T9] usb 1-1: config 0 descriptor?? [ 794.266372][ T9] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 794.791014][ T9] gspca_topro: reg_w err -71 [ 794.826530][ T9] gspca_topro: Sensor soi763a [ 794.857411][ T9] usb 1-1: USB disconnect, device number 10 [ 795.408097][ T966] TC_ACT_REPEAT abuse ? [ 795.839905][T14686] binder: BC_ACQUIRE_RESULT not supported [ 795.861506][T14686] binder: 14685:14686 ioctl c0306201 200000004a40 returned -22 [ 796.614749][T14689] loop5: detected capacity change from 0 to 8192 [ 796.766639][ T5842] TC_ACT_REPEAT abuse ? [ 796.857275][T14689] loop5: p2 p3 p4 [ 796.861278][T14689] loop5: partition table partially beyond EOD, truncated [ 796.872368][T14689] loop5: p2 start 2936012800 is beyond EOD, truncated [ 796.879329][T14689] loop5: p3 start 1912602624 is beyond EOD, truncated [ 796.886232][T14689] loop5: p4 size 656640 extends beyond EOD, truncated [ 797.165845][ T5774] TC_ACT_REPEAT abuse ? [ 797.557118][ T966] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 797.862406][T11360] udevd[11360]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 797.901329][ T966] usb 7-1: config 8 has an invalid interface number: 101 but max is 0 [ 797.964060][ T966] usb 7-1: config 8 has no interface number 0 [ 797.973766][ T5842] TC_ACT_REPEAT abuse ? [ 797.988965][ T966] usb 7-1: config 8 interface 101 has no altsetting 0 [ 798.005411][ T966] usb 7-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 798.024991][ T966] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.170579][T14693] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 799.686967][ T966] usb 7-1: string descriptor 0 read error: -71 [ 799.704155][ T5842] TC_ACT_REPEAT abuse ? [ 799.709328][ T966] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 799.716606][ T966] gspca_sunplus: reg_w_riv err -71 [ 799.723130][ T966] sunplus: probe of 7-1:8.101 failed with error -71 [ 799.742319][ T966] usb 7-1: USB disconnect, device number 15 [ 799.818791][T10409] TC_ACT_REPEAT abuse ? [ 799.823199][ C1] TC_ACT_REPEAT abuse ? [ 799.848978][T14712] TC_ACT_REPEAT abuse ? [ 799.854839][ C0] TC_ACT_REPEAT abuse ? [ 801.176888][ T966] TC_ACT_REPEAT abuse ? [ 802.457089][T14734] TC_ACT_REPEAT abuse ? [ 802.461581][ C0] TC_ACT_REPEAT abuse ? [ 803.104495][ T966] TC_ACT_REPEAT abuse ? [ 804.246825][ T5842] TC_ACT_REPEAT abuse ? [ 804.325078][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2442'. [ 804.357353][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2442'. [ 804.366881][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2442'. [ 804.375856][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2442'. [ 804.384892][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2442'. [ 805.476976][ T5842] TC_ACT_REPEAT abuse ? [ 805.577078][ T8401] TC_ACT_REPEAT abuse ? [ 805.581600][ C1] TC_ACT_REPEAT abuse ? [ 805.685260][T14757] tipc: Enabling of bearer rejected, failed to enable media [ 806.610637][ T5774] TC_ACT_REPEAT abuse ? [ 806.650790][ T5842] TC_ACT_REPEAT abuse ? [ 807.426583][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 807.529657][T14760] loop0: detected capacity change from 0 to 40427 [ 807.544890][T14760] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 807.553319][T14760] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 807.587070][T14760] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 807.626817][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 807.643117][T14760] F2FS-fs (loop0): Found nat_bits in checkpoint [ 807.661079][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 807.678435][ T5842] TC_ACT_REPEAT abuse ? [ 807.724761][ T9] usb 7-1: config 3 has an invalid interface number: 24 but max is 2 [ 807.753880][ T9] usb 7-1: config 3 has an invalid descriptor of length 255, skipping remainder of the config [ 807.790377][T14778] TC_ACT_REPEAT abuse ? [ 807.794868][ C0] TC_ACT_REPEAT abuse ? [ 808.475404][ T9] usb 7-1: config 3 has 1 interface, different from the descriptor's value: 3 [ 808.485222][ T9] usb 7-1: config 3 has no interface number 0 [ 808.494689][ T9] usb 7-1: New USB device found, idVendor=22b8, idProduct=4244, bcdDevice=9d.e8 [ 808.522842][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.557230][T14760] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 808.564603][ T9] usb 7-1: Product: syz [ 808.579032][ T9] usb 7-1: Manufacturer: syz [ 808.585291][T14760] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 808.592949][ T9] usb 7-1: SerialNumber: syz [ 808.796421][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.805904][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.948850][ T5856] TC_ACT_REPEAT abuse ? [ 809.200241][ T9] usb 7-1: USB disconnect, device number 16 [ 809.329173][ T27] audit: type=1326 audit(1757859825.574:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14785 comm="syz.4.2453" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fecdfb8eba9 code=0x0 [ 809.972936][ T5774] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 810.000996][ T5856] TC_ACT_REPEAT abuse ? [ 810.017766][T13294] syz-executor: attempt to access beyond end of device [ 810.017766][T13294] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 810.032042][T13294] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 810.166556][ T5774] usb 6-1: Using ep0 maxpacket: 32 [ 810.178529][ T5774] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.206797][ T5774] usb 6-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 810.221300][ T5774] usb 6-1: config 0 interface 0 has no altsetting 0 [ 810.231412][ T5774] usb 6-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 810.250247][ T5774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.293164][ T5774] usb 6-1: config 0 descriptor?? [ 810.618221][T10409] TC_ACT_REPEAT abuse ? [ 810.622780][ C0] TC_ACT_REPEAT abuse ? [ 810.919430][ T5774] saitek 0003:0738:1705.0020: unknown main item tag 0x2 [ 810.982442][ T5774] saitek 0003:0738:1705.0020: hidraw0: USB HID v0.00 Device [HID 0738:1705] on usb-dummy_hcd.5-1/input0 [ 811.062304][ T5842] TC_ACT_REPEAT abuse ? [ 811.100456][ T5774] usb 6-1: USB disconnect, device number 19 [ 811.262817][T14795] fido_id[14795]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 812.144473][ T5842] TC_ACT_REPEAT abuse ? [ 812.175036][T14803] tipc: Enabling of bearer rejected, failed to enable media [ 812.516370][T14813] loop5: detected capacity change from 0 to 8192 [ 813.314321][ T5842] TC_ACT_REPEAT abuse ? [ 813.860701][T14820] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 813.897745][ C0] TC_ACT_REPEAT abuse ? [ 814.427713][ T5842] TC_ACT_REPEAT abuse ? [ 815.105585][T14830] loop0: detected capacity change from 0 to 512 [ 815.149243][T14830] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 815.204566][T14830] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 815.251001][T14830] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 815.332922][T14830] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 815.397051][T14830] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 815.444705][T14830] EXT4-fs (loop0): orphan cleanup on readonly fs [ 815.497021][ T5842] TC_ACT_REPEAT abuse ? [ 815.509611][T14830] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2464: bg 0: block 34: padding at end of block bitmap is not set [ 815.596808][T14830] Quota error (device loop0): write_blk: dquota write failed [ 815.610514][T14830] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 815.770418][T14830] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.2464: Failed to acquire dquot type 1 [ 816.173586][T14830] EXT4-fs (loop0): 1 truncate cleaned up [ 816.418393][ T5774] TC_ACT_REPEAT abuse ? [ 816.457241][T10388] TC_ACT_REPEAT abuse ? [ 816.461920][ C0] TC_ACT_REPEAT abuse ? [ 816.499425][T14830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 816.520935][T10416] TC_ACT_REPEAT abuse ? [ 816.526592][ T5842] TC_ACT_REPEAT abuse ? [ 816.534686][ T5774] TC_ACT_REPEAT abuse ? [ 816.547170][ T5842] TC_ACT_REPEAT abuse ? [ 817.272267][ T27] audit: type=1326 audit(1757859833.114:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14829 comm="syz.0.2464" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff014d8eba9 code=0x0 [ 817.309638][T13294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.613500][ T5842] TC_ACT_REPEAT abuse ? [ 818.636640][T14859] TC_ACT_REPEAT abuse ? [ 818.641144][ C1] TC_ACT_REPEAT abuse ? [ 819.076158][T14859] loop0: detected capacity change from 0 to 8192 [ 819.686612][ T5774] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 819.908194][ T5774] usb 1-1: config 8 has an invalid interface number: 101 but max is 0 [ 819.926482][ T5774] usb 1-1: config 8 has no interface number 0 [ 819.936608][ T5774] usb 1-1: config 8 interface 101 has no altsetting 0 [ 819.959310][ T5774] usb 1-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 819.986882][ T5774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.842698][T14865] tipc: Enabled bearer , priority 0 [ 821.029535][T14865] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 821.083643][T14863] tipc: Disabling bearer [ 821.146860][ T27] audit: type=1326 audit(1757859837.364:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14877 comm="syz.4.2477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fecdfb8eba9 code=0x0 [ 821.826790][ T5774] usb 1-1: string descriptor 0 read error: -71 [ 821.835231][ T5774] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 821.847537][ T5774] gspca_sunplus: reg_w_riv err -71 [ 821.852731][ T5774] sunplus: probe of 1-1:8.101 failed with error -71 [ 821.863148][ T5774] usb 1-1: USB disconnect, device number 11 [ 821.870109][ T966] net_ratelimit: 6 callbacks suppressed [ 821.870120][ T966] TC_ACT_REPEAT abuse ? [ 822.526354][T10407] TC_ACT_REPEAT abuse ? [ 822.533424][T10388] TC_ACT_REPEAT abuse ? [ 822.538054][ C1] TC_ACT_REPEAT abuse ? [ 822.960150][ T5912] TC_ACT_REPEAT abuse ? [ 823.057298][ T5856] TC_ACT_REPEAT abuse ? [ 823.071271][T11393] TC_ACT_REPEAT abuse ? [ 823.418925][ T5105] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 823.907422][T14901] TC_ACT_REPEAT abuse ? [ 823.911955][T14901] TC_ACT_REPEAT abuse ? [ 823.958139][T14901] TC_ACT_REPEAT abuse ? [ 825.018903][T14911] loop0: detected capacity change from 0 to 512 [ 825.051442][T14911] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 825.062026][T14911] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 825.072392][T14911] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 825.096727][ T5105] Bluetooth: hci0: command 0x0c1a tx timeout [ 825.218653][T14911] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 825.238644][T14911] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 825.345839][T14911] EXT4-fs (loop0): orphan cleanup on readonly fs [ 825.398210][T14911] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2486: bg 0: block 34: padding at end of block bitmap is not set [ 825.501009][T14911] Quota error (device loop0): write_blk: dquota write failed [ 825.514986][T14911] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 825.530588][T14911] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.2486: Failed to acquire dquot type 1 [ 825.575857][T14911] EXT4-fs (loop0): 1 truncate cleaned up [ 825.609593][T14911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 826.267624][ T27] audit: type=1326 audit(1757859842.114:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14910 comm="syz.0.2486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff014d8eba9 code=0x0 [ 826.311024][T13294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.129612][ T966] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 827.375384][ T5842] net_ratelimit: 9 callbacks suppressed [ 827.375399][ T5842] TC_ACT_REPEAT abuse ? [ 827.395583][ T966] usb 1-1: config 8 has an invalid interface number: 101 but max is 0 [ 827.404206][ T966] usb 1-1: config 8 has no interface number 0 [ 827.537553][ T966] usb 1-1: config 8 interface 101 has no altsetting 0 [ 827.545397][ T966] usb 1-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 827.554618][ T966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.688425][ T5105] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 827.698494][ T5105] Bluetooth: hci3: Injecting HCI hardware error event [ 827.709422][ T5795] Bluetooth: hci3: hardware error 0x00 [ 828.159946][T14932] tipc: Enabled bearer , priority 0 [ 828.168257][T14932] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 828.178875][T14932] tipc: Resetting bearer [ 828.197496][T14931] tipc: Disabling bearer [ 828.445520][ T5842] TC_ACT_REPEAT abuse ? [ 828.519114][ T966] usb 1-1: string descriptor 0 read error: -71 [ 828.531453][ T966] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 828.548978][ T966] gspca_sunplus: reg_w_riv err -71 [ 828.564806][ T966] sunplus: probe of 1-1:8.101 failed with error -71 [ 828.597119][ T966] usb 1-1: USB disconnect, device number 12 [ 828.623288][T10423] TC_ACT_REPEAT abuse ? [ 828.627881][ C0] TC_ACT_REPEAT abuse ? [ 829.522829][ T966] TC_ACT_REPEAT abuse ? [ 829.799216][T14960] loop0: detected capacity change from 0 to 512 [ 829.858460][T14960] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 829.907090][ C0] TC_ACT_REPEAT abuse ? [ 829.914615][T14960] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 829.945892][T14960] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 829.972793][T14960] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 829.987123][T14960] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 829.995258][T14960] EXT4-fs (loop0): orphan cleanup on readonly fs [ 830.005398][T14960] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2501: bg 0: block 34: padding at end of block bitmap is not set [ 830.022416][T14960] Quota error (device loop0): write_blk: dquota write failed [ 830.030231][T14960] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 830.064307][T14960] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.2501: Failed to acquire dquot type 1 [ 830.109588][T14960] EXT4-fs (loop0): 1 truncate cleaned up [ 830.136716][ T5795] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 830.159494][T14960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 830.400403][T14965] fuse: Bad value for 'fd' [ 830.558842][ T27] audit: type=1326 audit(1757859846.804:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14958 comm="syz.0.2501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff014d8eba9 code=0x0 [ 830.960658][ T5856] TC_ACT_REPEAT abuse ? [ 831.055376][T13294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.704185][ T5856] TC_ACT_REPEAT abuse ? [ 833.760752][ T5912] TC_ACT_REPEAT abuse ? [ 833.766531][ T5856] TC_ACT_REPEAT abuse ? [ 834.378340][T11393] TC_ACT_REPEAT abuse ? [ 834.388063][T10398] TC_ACT_REPEAT abuse ? [ 834.392490][ C1] TC_ACT_REPEAT abuse ? [ 834.656633][ T5856] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 834.742078][T15001] syz.6.2513: attempt to access beyond end of device [ 834.742078][T15001] nbd6: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 834.755087][T15001] EXT4-fs (nbd6): unable to read superblock [ 834.780997][ T28] TC_ACT_REPEAT abuse ? [ 834.868465][ T5856] usb 6-1: config 8 has an invalid interface number: 101 but max is 0 [ 834.880622][ T5856] usb 6-1: config 8 has no interface number 0 [ 834.887833][ T5856] usb 6-1: config 8 interface 101 has no altsetting 0 [ 834.895549][ T5856] usb 6-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 834.911329][ T5856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.822197][T15011] TC_ACT_REPEAT abuse ? [ 835.828100][T15011] TC_ACT_REPEAT abuse ? [ 835.834456][T15011] TC_ACT_REPEAT abuse ? [ 838.725815][ T966] net_ratelimit: 41 callbacks suppressed [ 838.725833][ T966] TC_ACT_REPEAT abuse ? [ 838.787874][ T8401] TC_ACT_REPEAT abuse ? [ 838.794156][T11393] TC_ACT_REPEAT abuse ? [ 838.799831][ T966] TC_ACT_REPEAT abuse ? [ 838.816942][ T5856] usb 6-1: string descriptor 0 read error: -71 [ 838.824808][ T5856] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 838.872955][ T5856] gspca_sunplus: reg_w_riv err -71 [ 838.896627][ T5856] sunplus: probe of 6-1:8.101 failed with error -71 [ 838.924269][ T5856] usb 6-1: USB disconnect, device number 20 [ 839.817431][ T966] TC_ACT_REPEAT abuse ? [ 840.138767][T10388] TC_ACT_REPEAT abuse ? [ 840.143386][ C1] TC_ACT_REPEAT abuse ? [ 840.816578][T11393] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 840.865043][ T5856] TC_ACT_REPEAT abuse ? [ 841.044005][T11393] usb 1-1: config 8 has an invalid interface number: 101 but max is 0 [ 841.066843][T11393] usb 1-1: config 8 has no interface number 0 [ 841.077785][T11393] usb 1-1: config 8 interface 101 has no altsetting 0 [ 841.084744][T11393] usb 1-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 841.094649][T11393] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.348259][T15045] tipc: Enabled bearer , priority 0 [ 841.365815][T15052] ksmbd: Unknown IPC event: 6, ignore. [ 841.387387][T15045] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 841.410170][T15045] tipc: Resetting bearer [ 841.442620][T15044] tipc: Disabling bearer [ 841.527884][T11393] usb 1-1: string descriptor 0 read error: -71 [ 841.625844][T11393] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 841.646073][T11393] gspca_sunplus: reg_w_riv err -71 [ 841.651826][T11393] sunplus: probe of 1-1:8.101 failed with error -71 [ 841.694858][T11393] usb 1-1: USB disconnect, device number 13 [ 841.921574][ T5856] TC_ACT_REPEAT abuse ? [ 841.980698][T15046] TC_ACT_REPEAT abuse ? [ 843.929954][ T966] net_ratelimit: 1 callbacks suppressed [ 843.929970][ T966] TC_ACT_REPEAT abuse ? [ 843.977952][ T5876] TC_ACT_REPEAT abuse ? [ 844.009564][T15063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2532'. [ 844.427625][T15046] TC_ACT_REPEAT abuse ? [ 844.552786][T15046] TC_ACT_REPEAT abuse ? [ 844.583509][T15046] TC_ACT_REPEAT abuse ? [ 844.619557][ T8401] TC_ACT_REPEAT abuse ? [ 844.625782][ T966] TC_ACT_REPEAT abuse ? [ 844.637057][ T5856] TC_ACT_REPEAT abuse ? [ 844.970314][T15046] TC_ACT_REPEAT abuse ? [ 845.196550][ T5876] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 845.259318][T10388] TC_ACT_REPEAT abuse ? [ 845.395923][ T5876] usb 6-1: Using ep0 maxpacket: 16 [ 845.418257][ T5876] usb 6-1: config 4 has an invalid interface number: 51 but max is 0 [ 845.556574][ T5876] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 845.592054][ T5876] usb 6-1: config 4 has no interface number 0 [ 845.609140][ T5876] usb 6-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 845.631932][ T5876] usb 6-1: config 4 interface 51 has no altsetting 0 [ 845.642859][ T5876] usb 6-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 845.655584][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.665086][ T5876] usb 6-1: Product: syz [ 845.670214][ T5876] usb 6-1: Manufacturer: syz [ 845.674895][ T5876] usb 6-1: SerialNumber: syz [ 845.699803][ T5876] cdc_eem: probe of 6-1:4.51 failed with error -22 [ 846.614959][T15109] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2543'. [ 846.729264][T15109] batman_adv: batadv0: Removing interface: dummy0 [ 846.952578][T15109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.004246][T15109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.964027][ T5856] usb 6-1: USB disconnect, device number 21 [ 848.607346][ T5876] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 848.658374][ T5876] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 848.743744][T15133] fido_id[15133]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 849.733111][T15138] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 1, id = 0 [ 849.798047][ T8401] net_ratelimit: 11 callbacks suppressed [ 849.798078][ T8401] TC_ACT_REPEAT abuse ? [ 849.835607][ T5876] TC_ACT_REPEAT abuse ? [ 849.844828][ T966] TC_ACT_REPEAT abuse ? [ 850.901279][ T966] TC_ACT_REPEAT abuse ? [ 851.018169][T10407] TC_ACT_REPEAT abuse ? [ 851.022740][ C0] TC_ACT_REPEAT abuse ? [ 851.787270][T11393] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 851.803748][T11393] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 851.888227][T15168] TC_ACT_REPEAT abuse ? [ 851.892926][T15168] TC_ACT_REPEAT abuse ? [ 851.903465][T15168] TC_ACT_REPEAT abuse ? [ 851.925575][T15166] fido_id[15166]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 851.938286][T15168] TC_ACT_REPEAT abuse ? [ 851.956725][ T5876] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 852.146699][ T5876] usb 6-1: Using ep0 maxpacket: 8 [ 852.153295][ T5876] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 852.163888][ T5876] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 852.173715][ T5876] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 852.185417][ T5876] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 852.199067][ T5876] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 852.208345][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.425815][ T5876] usb 6-1: GET_CAPABILITIES returned 0 [ 852.431664][ T5876] usbtmc 6-1:16.0: can't read capabilities [ 852.675638][ T5876] usb 6-1: USB disconnect, device number 22 [ 855.185720][ T28] net_ratelimit: 5 callbacks suppressed [ 855.185732][ T28] TC_ACT_REPEAT abuse ? [ 855.429625][T15197] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2571'. [ 855.501708][T10374] TC_ACT_REPEAT abuse ? [ 855.518726][ T28] TC_ACT_REPEAT abuse ? [ 856.016958][ T28] TC_ACT_REPEAT abuse ? [ 856.406606][ T28] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 856.464722][T15204] TC_ACT_REPEAT abuse ? [ 856.482161][T15204] TC_ACT_REPEAT abuse ? [ 856.488339][T15204] TC_ACT_REPEAT abuse ? [ 856.493629][T15204] TC_ACT_REPEAT abuse ? [ 856.501393][T15204] TC_ACT_REPEAT abuse ? [ 856.506427][T15201] TC_ACT_REPEAT abuse ? [ 856.616534][ T28] usb 7-1: Using ep0 maxpacket: 32 [ 856.624569][ T28] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 856.634422][ T28] usb 7-1: config 0 has no interface number 0 [ 856.643520][ T28] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 856.653460][ T28] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.661523][ T28] usb 7-1: Product: syz [ 856.670908][ T28] usb 7-1: Manufacturer: syz [ 856.675060][T11393] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 856.675508][ T28] usb 7-1: SerialNumber: syz [ 856.690815][ T28] usb 7-1: config 0 descriptor?? [ 856.708747][ T28] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 856.718340][ T28] usb 7-1: selecting invalid altsetting 1 [ 856.725152][ T28] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 856.725865][T11393] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 856.751238][ T28] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 856.782775][ T28] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 856.802983][ T28] usb 7-1: media controller created [ 856.837143][T15211] fido_id[15211]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 856.863278][ T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 856.876549][ T966] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 856.972039][ T28] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 856.986759][ T28] zl10353_read_register: readreg error (reg=127, ret==-71) [ 856.994603][ T28] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 857.054719][ T28] usb 7-1: USB disconnect, device number 17 [ 857.076530][ T966] usb 6-1: Using ep0 maxpacket: 8 [ 857.089267][ T966] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 857.111439][ T966] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 857.129324][ T966] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 857.141092][ T966] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 857.154694][ T966] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 857.163806][ T966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.379581][ T966] usb 6-1: GET_CAPABILITIES returned 0 [ 857.385119][ T966] usbtmc 6-1:16.0: can't read capabilities [ 857.801642][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 857.814620][T15208] usbtmc 6-1:16.0: Unable to send data, error -71 [ 858.037108][ T28] usb 6-1: USB disconnect, device number 23 [ 858.232925][T15221] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 858.245081][T15221] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 858.566603][T11393] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 858.658236][T15235] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2587'. [ 858.757872][T11393] usb 1-1: Using ep0 maxpacket: 16 [ 858.813880][T11393] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.00 [ 858.853450][T15238] hfsplus: unable to find HFS+ superblock [ 858.860222][T11393] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.932660][T11393] usb 1-1: config 0 descriptor?? [ 859.541181][T11393] apple 0003:05AC:0292.0024: item fetching failed at offset 3/6 [ 859.549623][T11393] apple 0003:05AC:0292.0024: parse failed [ 859.555557][T11393] apple: probe of 0003:05AC:0292.0024 failed with error -22 [ 859.743594][ T28] usb 1-1: USB disconnect, device number 14 [ 860.186990][T11393] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 860.247873][ T28] net_ratelimit: 11 callbacks suppressed [ 860.247888][ T28] TC_ACT_REPEAT abuse ? [ 860.376929][T11393] usb 7-1: Using ep0 maxpacket: 16 [ 860.397128][T11393] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 860.449879][T11393] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 860.459514][T11393] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.481056][T11393] usb 7-1: Product: syz [ 860.491167][T11393] usb 7-1: Manufacturer: syz [ 860.495758][T11393] usb 7-1: SerialNumber: syz [ 860.524914][T11393] usb 7-1: config 0 descriptor?? [ 861.257221][ T5856] TC_ACT_REPEAT abuse ? [ 861.606108][T15275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2598'. [ 861.742112][T15276] TC_ACT_REPEAT abuse ? [ 861.750946][T15276] TC_ACT_REPEAT abuse ? [ 861.779323][T15276] TC_ACT_REPEAT abuse ? [ 861.795311][T15276] TC_ACT_REPEAT abuse ? [ 861.800844][T15276] TC_ACT_REPEAT abuse ? [ 862.142487][T15282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.174372][T15274] TC_ACT_REPEAT abuse ? [ 862.284975][T15289] TC_ACT_REPEAT abuse ? [ 862.290133][T15289] TC_ACT_REPEAT abuse ? [ 862.851537][T15298] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2604'. [ 862.860619][T15298] bridge_slave_1: left allmulticast mode [ 862.866294][T15298] bridge_slave_1: left promiscuous mode [ 862.875994][T15298] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.897256][T15298] bridge_slave_0: left allmulticast mode [ 862.903114][T15298] bridge_slave_0: left promiscuous mode [ 862.911021][T15298] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.990955][ T5876] usb 7-1: USB disconnect, device number 18 [ 865.416920][ T5856] net_ratelimit: 8 callbacks suppressed [ 865.416933][ T5856] TC_ACT_REPEAT abuse ? [ 865.541191][ T28] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 865.713415][T15351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2624'. [ 865.763783][ T28] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.804626][ T28] usb 7-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 865.807444][T15352] TC_ACT_REPEAT abuse ? [ 865.827197][T15352] TC_ACT_REPEAT abuse ? [ 865.832443][T15352] TC_ACT_REPEAT abuse ? [ 865.840818][ T28] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.846544][T15352] TC_ACT_REPEAT abuse ? [ 865.855503][T15352] TC_ACT_REPEAT abuse ? [ 865.885980][ T28] usb 7-1: config 0 descriptor?? [ 866.066433][T15355] netlink: 34 bytes leftover after parsing attributes in process `syz.5.2625'. [ 866.365760][ T28] hid_mf 0003:0079:1846.0025: unknown main item tag 0x4 [ 866.392953][ T28] hid_mf 0003:0079:1846.0025: item fetching failed at offset 6/7 [ 866.424089][ T28] hid_mf 0003:0079:1846.0025: HID parse failed. [ 866.447222][ T28] hid_mf: probe of 0003:0079:1846.0025 failed with error -22 [ 866.461804][ T5856] TC_ACT_REPEAT abuse ? [ 866.523573][T15350] TC_ACT_REPEAT abuse ? [ 866.562141][ T28] usb 7-1: USB disconnect, device number 19 [ 866.627349][T11393] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 866.744510][T15362] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 1, id = 0 [ 866.817155][T11393] usb 6-1: Using ep0 maxpacket: 8 [ 866.829704][T11393] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 866.856225][T11393] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 866.868566][T11393] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 866.879082][T11393] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 866.893206][T11393] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 866.902708][T11393] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.125328][T11393] usb 6-1: GET_CAPABILITIES returned 0 [ 867.131075][T11393] usbtmc 6-1:16.0: can't read capabilities [ 867.344517][T11393] usb 6-1: USB disconnect, device number 24 [ 867.359577][ T28] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 867.416823][ T28] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 867.500727][ T28] TC_ACT_REPEAT abuse ? [ 867.675409][T15378] fido_id[15378]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 868.456093][T10398] TC_ACT_REPEAT abuse ? [ 869.252299][T15400] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 1, id = 0 [ 870.740436][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.765684][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.810767][ T28] net_ratelimit: 3 callbacks suppressed [ 870.810777][ T28] TC_ACT_REPEAT abuse ? [ 871.226643][ T28] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 871.416793][ T28] usb 1-1: Using ep0 maxpacket: 8 [ 871.425856][ T28] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 871.442094][ T28] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 871.462590][ T28] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 871.478986][ T28] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 871.624037][ T28] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 871.631487][T15407] batman_adv: batadv0: Interface deactivated: dummy0 [ 871.633522][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.619876][ T966] TC_ACT_REPEAT abuse ? [ 872.777176][ T5912] TC_ACT_REPEAT abuse ? [ 872.909695][ T28] usb 1-1: GET_CAPABILITIES returned 0 [ 872.927087][ T28] usbtmc 1-1:16.0: can't read capabilities [ 873.122905][ T28] usb 1-1: USB disconnect, device number 15 [ 873.197412][T15407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 873.224999][ T5912] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 873.235346][ T5912] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 873.280948][T15407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 873.322338][T15439] fido_id[15439]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 873.664923][ T28] TC_ACT_REPEAT abuse ? [ 873.731538][T15407] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.743657][T15407] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.753938][T15407] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.878875][T15407] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.088415][T10416] TC_ACT_REPEAT abuse ? [ 874.092990][ C1] TC_ACT_REPEAT abuse ? [ 874.712712][ T5856] TC_ACT_REPEAT abuse ? [ 875.725695][T15452] loop0: detected capacity change from 0 to 40427 [ 875.736866][T15452] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 875.744622][T15452] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 875.764754][ T28] TC_ACT_REPEAT abuse ? [ 875.782200][T15452] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 875.819931][T15452] F2FS-fs (loop0): Found nat_bits in checkpoint [ 876.161106][T15452] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 876.189362][T15452] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 877.113341][T15452] netlink: 'syz.0.2657': attribute type 30 has an invalid length. [ 877.309810][ T28] TC_ACT_REPEAT abuse ? [ 877.455199][T13294] syz-executor: attempt to access beyond end of device [ 877.455199][T13294] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 877.486807][T13294] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 878.077535][ T5912] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 878.139623][ T5912] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 878.310198][T15487] fido_id[15487]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 878.386889][ T28] TC_ACT_REPEAT abuse ? [ 879.253786][T15498] loop5: detected capacity change from 0 to 8192 [ 879.417180][T10411] TC_ACT_REPEAT abuse ? [ 879.421754][ C0] TC_ACT_REPEAT abuse ? [ 879.442515][ T28] TC_ACT_REPEAT abuse ? [ 880.944632][ T28] TC_ACT_REPEAT abuse ? [ 882.243725][ T966] TC_ACT_REPEAT abuse ? [ 882.680433][ T5876] TC_ACT_REPEAT abuse ? [ 883.034829][T15527] syz.0.2678: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 883.055063][T15527] CPU: 0 PID: 15527 Comm: syz.0.2678 Not tainted syzkaller #0 [ 883.062540][T15527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 883.072610][T15527] Call Trace: [ 883.075889][T15527] [ 883.078833][T15527] dump_stack_lvl+0x16c/0x230 [ 883.083528][T15527] ? show_regs_print_info+0x20/0x20 [ 883.088741][T15527] ? load_image+0x3b0/0x3b0 [ 883.093256][T15527] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 883.099686][T15527] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 883.106205][T15527] warn_alloc+0x210/0x300 [ 883.110554][T15527] ? zone_watermark_ok_safe+0x230/0x230 [ 883.116117][T15527] ? _raw_spin_unlock+0x28/0x40 [ 883.120975][T15527] ? netlink_rcv_skb+0x216/0x480 [ 883.125941][T15527] __vmalloc_node_range+0x662/0x1320 [ 883.131240][T15527] ? __asan_memset+0x22/0x40 [ 883.135864][T15527] ? free_vm_area+0x50/0x50 [ 883.140378][T15527] ? kvmalloc_node+0x70/0x180 [ 883.145066][T15527] ? rcu_is_watching+0x15/0xb0 [ 883.149841][T15527] ? kvmalloc_node+0x70/0x180 [ 883.154525][T15527] ? trace_kmalloc+0x1f/0xa0 [ 883.159127][T15527] kvmalloc_node+0x13f/0x180 [ 883.163729][T15527] ? hash_netport4_resize+0x232/0x1b50 [ 883.169197][T15527] hash_netport4_resize+0x232/0x1b50 [ 883.174489][T15527] ? hash_netport4_uadt+0xc1f/0xed0 [ 883.179695][T15527] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 883.185683][T15527] ? hash_netport4_uadt+0xed0/0xed0 [ 883.190895][T15527] ? hash_netport4_kadt+0x560/0x560 [ 883.196117][T15527] ? _local_bh_enable+0xa0/0xa0 [ 883.200988][T15527] call_ad+0x43f/0xae0 [ 883.205096][T15527] ? ip_set_ad+0x930/0x930 [ 883.209541][T15527] ? __nla_parse+0x40/0x50 [ 883.213973][T15527] ip_set_ad+0x787/0x930 [ 883.218240][T15527] ? trace_raw_output_contention_end+0x30/0xd0 [ 883.224410][T15527] ? ip_set_dump_done+0x1e0/0x1e0 [ 883.229443][T15527] ? rcu_is_watching+0x15/0xb0 [ 883.234256][T15527] nfnetlink_rcv_msg+0xb49/0x1130 [ 883.239289][T15527] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 883.245370][T15527] ? nfnetlink_rcv_msg+0x20e/0x1130 [ 883.250613][T15527] ? nfnetlink_unbind+0x160/0x160 [ 883.255679][T15527] ? __dev_queue_xmit+0x1a64/0x35a0 [ 883.260888][T15527] ? __netlink_deliver_tap+0x5ab/0x830 [ 883.266359][T15527] ? netlink_deliver_tap+0x19c/0x1b0 [ 883.271653][T15527] ? netlink_unicast+0x72c/0x8d0 [ 883.276600][T15527] ? netlink_sendmsg+0x8c1/0xbe0 [ 883.281549][T15527] ? ____sys_sendmsg+0x5bf/0x950 [ 883.286496][T15527] ? ___sys_sendmsg+0x220/0x290 [ 883.291353][T15527] ? __se_sys_sendmsg+0x1a5/0x270 [ 883.296386][T15527] ? do_syscall_64+0x55/0xb0 [ 883.301008][T15527] netlink_rcv_skb+0x216/0x480 [ 883.305785][T15527] ? nfnetlink_unbind+0x160/0x160 [ 883.310817][T15527] ? netlink_ack+0x1110/0x1110 [ 883.315603][T15527] ? apparmor_capable+0x137/0x1a0 [ 883.320633][T15527] ? bpf_lsm_capable+0x9/0x10 [ 883.325320][T15527] ? security_capable+0x89/0xb0 [ 883.330185][T15527] nfnetlink_rcv+0x274/0x2180 [ 883.334877][T15527] ? __local_bh_enable_ip+0x12e/0x1c0 [ 883.340253][T15527] ? lockdep_hardirqs_on+0x98/0x150 [ 883.345464][T15527] ? __local_bh_enable_ip+0x12e/0x1c0 [ 883.350846][T15527] ? _local_bh_enable+0xa0/0xa0 [ 883.355711][T15527] ? __dev_queue_xmit+0x245/0x35a0 [ 883.360831][T15527] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 883.366398][T15527] ? __dev_queue_xmit+0x245/0x35a0 [ 883.371522][T15527] ? ref_tracker_free+0x634/0x7d0 [ 883.376547][T15527] ? __copy_skb_header+0xa7/0x550 [ 883.381590][T15527] ? refcount_inc+0x70/0x70 [ 883.386102][T15527] ? __skb_clone+0x63/0x790 [ 883.390621][T15527] ? __skb_clone+0x480/0x790 [ 883.395232][T15527] ? __netlink_deliver_tap+0x7e8/0x830 [ 883.400698][T15527] ? netlink_deliver_tap+0x2e/0x1b0 [ 883.405906][T15527] ? __lock_acquire+0x7c80/0x7c80 [ 883.410945][T15527] ? netlink_deliver_tap+0x2e/0x1b0 [ 883.416167][T15527] netlink_unicast+0x751/0x8d0 [ 883.420953][T15527] netlink_sendmsg+0x8c1/0xbe0 [ 883.425748][T15527] ? netlink_getsockopt+0x580/0x580 [ 883.430957][T15527] ? aa_sock_msg_perm+0x94/0x150 [ 883.435910][T15527] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 883.441204][T15527] ? security_socket_sendmsg+0x80/0xa0 [ 883.446668][T15527] ? netlink_getsockopt+0x580/0x580 [ 883.451877][T15527] ____sys_sendmsg+0x5bf/0x950 [ 883.456660][T15527] ? __asan_memset+0x22/0x40 [ 883.461257][T15527] ? __sys_sendmsg_sock+0x30/0x30 [ 883.466286][T15527] ? __import_iovec+0x5f2/0x860 [ 883.471157][T15527] ? import_iovec+0x73/0xa0 [ 883.475672][T15527] ___sys_sendmsg+0x220/0x290 [ 883.480363][T15527] ? __sys_sendmsg+0x270/0x270 [ 883.485188][T15527] __se_sys_sendmsg+0x1a5/0x270 [ 883.490058][T15527] ? __x64_sys_sendmsg+0x80/0x80 [ 883.495022][T15527] ? lockdep_hardirqs_on+0x98/0x150 [ 883.500238][T15527] do_syscall_64+0x55/0xb0 [ 883.504660][T15527] ? clear_bhb_loop+0x40/0x90 [ 883.509340][T15527] ? clear_bhb_loop+0x40/0x90 [ 883.514021][T15527] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 883.519930][T15527] RIP: 0033:0x7ff014d8eba9 [ 883.524368][T15527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 883.543987][T15527] RSP: 002b:00007ff012ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 883.552415][T15527] RAX: ffffffffffffffda RBX: 00007ff014fd6180 RCX: 00007ff014d8eba9 [ 883.560400][T15527] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000009 [ 883.568375][T15527] RBP: 00007ff014e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 883.576358][T15527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 883.584334][T15527] R13: 00007ff014fd6218 R14: 00007ff014fd6180 R15: 00007ffe64e46a18 [ 883.592328][T15527] [ 883.596018][T15527] Mem-Info: [ 883.599196][T15527] active_anon:20291 inactive_anon:0 isolated_anon:0 [ 883.599196][T15527] active_file:16776 inactive_file:40228 isolated_file:0 [ 883.599196][T15527] unevictable:1122 dirty:76 writeback:0 [ 883.599196][T15527] slab_reclaimable:11200 slab_unreclaimable:94800 [ 883.599196][T15527] mapped:31601 shmem:14947 pagetables:869 [ 883.599196][T15527] sec_pagetables:0 bounce:0 [ 883.599196][T15527] kernel_misc_reclaimable:0 [ 883.599196][T15527] free:1327425 free_pcp:9061 free_cma:0 [ 883.644505][T15527] Node 0 active_anon:81164kB inactive_anon:0kB active_file:67104kB inactive_file:160708kB unevictable:2952kB isolated(anon):0kB isolated(file):0kB mapped:126404kB dirty:304kB writeback:0kB shmem:58252kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12144kB pagetables:3476kB sec_pagetables:0kB all_unreclaimable? no [ 883.676882][T15527] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 883.707397][T15527] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 883.734472][T15527] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 883.740306][T15527] Node 0 DMA32 free:1401588kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:81116kB inactive_anon:0kB active_file:67104kB inactive_file:159384kB unevictable:2952kB writepending:304kB present:3129332kB managed:2589592kB mlocked:0kB bounce:0kB free_pcp:16972kB local_pcp:15472kB free_cma:0kB [ 883.770880][T15527] lowmem_reserve[]: 0 0 1 1 1 [ 883.775618][T15527] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 883.803051][T15527] lowmem_reserve[]: 0 0 0 0 0 [ 883.807811][T15527] Node 1 Normal free:3892748kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19264kB local_pcp:13056kB free_cma:0kB [ 883.837393][T15527] lowmem_reserve[]: 0 0 0 0 0 [ 883.842126][T15527] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 883.854833][T15527] Node 0 DMA32: 29*4kB (E) 254*8kB (UME) 135*16kB (UM) 393*32kB (UME) 216*64kB (UM) 136*128kB (UME) 101*256kB (UME) 37*512kB (UM) 12*1024kB (UM) 3*2048kB (UM) 315*4096kB (M) = 1401588kB [ 883.873380][T15527] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 883.885280][T15527] Node 1 Normal: 269*4kB (UME) 67*8kB (UME) 54*16kB (UME) 175*32kB (UME) 56*64kB (UE) 9*128kB (UME) 2*256kB (U) 1*512kB (M) 0*1024kB 2*2048kB (UE) 946*4096kB (M) = 3892748kB [ 883.903020][T15527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 883.912612][T15527] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 883.921937][T15527] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 883.931501][T15527] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 883.940832][T15527] 72297 total pagecache pages [ 883.945518][T15527] 0 pages in swap cache [ 883.949713][T15527] Free swap = 124336kB [ 883.953862][T15527] Total swap = 124996kB [ 883.958049][T15527] 2097051 pages RAM [ 883.961850][T15527] 0 pages HighMem/MovableOnly [ 883.966550][T15527] 416139 pages reserved [ 883.970700][T15527] 0 pages cma reserved [ 884.377129][T15534] TC_ACT_REPEAT abuse ? [ 884.381646][ C1] TC_ACT_REPEAT abuse ? [ 884.983219][T10374] TC_ACT_REPEAT abuse ? [ 884.987846][ C1] TC_ACT_REPEAT abuse ? [ 885.005720][ T966] TC_ACT_REPEAT abuse ? [ 886.284157][ T28] TC_ACT_REPEAT abuse ? [ 886.353569][T15554] lo speed is unknown, defaulting to 1000 [ 886.360059][T15554] lo speed is unknown, defaulting to 1000 [ 886.369557][T15554] lo speed is unknown, defaulting to 1000 [ 886.431023][T15554] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 886.632923][T15554] lo speed is unknown, defaulting to 1000 [ 886.645389][T15554] lo speed is unknown, defaulting to 1000 [ 886.659131][T15554] lo speed is unknown, defaulting to 1000 [ 886.674416][T15554] lo speed is unknown, defaulting to 1000 [ 887.156077][T11393] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 887.206867][T11393] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 887.387223][ T5856] TC_ACT_REPEAT abuse ? [ 887.388268][T15565] fido_id[15565]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 887.456792][ T966] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 887.666699][ T966] usb 7-1: Using ep0 maxpacket: 8 [ 887.687973][ T966] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 887.736247][ T966] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 887.756823][ T966] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 887.773294][ T966] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 887.783383][ T966] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 887.796775][ T966] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 887.805929][ T966] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.288247][ T966] usb 7-1: GET_CAPABILITIES returned 0 [ 888.293786][ T966] usbtmc 7-1:16.0: can't read capabilities [ 888.433199][T15577] loop5: detected capacity change from 0 to 8192 [ 888.499525][T15577] loop5: p2 p3 p4 [ 888.503364][T15577] loop5: partition table partially beyond EOD, truncated [ 888.510692][T15577] loop5: p2 start 2936012800 is beyond EOD, truncated [ 888.517527][T15577] loop5: p3 start 1912602624 is beyond EOD, truncated [ 888.524298][T15577] loop5: p4 size 656640 extends beyond EOD, truncated [ 889.043214][ T28] TC_ACT_REPEAT abuse ? [ 889.345653][T15563] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 889.354042][ T28] usb 7-1: USB disconnect, device number 20 [ 889.493885][T11360] udevd[11360]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 890.640726][ T28] TC_ACT_REPEAT abuse ? [ 890.731472][T10374] TC_ACT_REPEAT abuse ? [ 890.736043][ C1] TC_ACT_REPEAT abuse ? [ 890.839355][ T5795] Bluetooth: hci0: unexpected event for opcode 0x0c1b [ 891.017027][ T5876] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 891.406786][ T5876] usb 6-1: device descriptor read/64, error -71 [ 891.778263][T15611] loop6: detected capacity change from 0 to 8192 [ 891.795761][ T966] TC_ACT_REPEAT abuse ? [ 892.200571][T15611] loop6: p2 p3 p4 [ 892.204511][T15611] loop6: partition table partially beyond EOD, truncated [ 892.212714][T15611] loop6: p2 start 2936012800 is beyond EOD, truncated [ 892.219834][T15611] loop6: p3 start 1912602624 is beyond EOD, truncated [ 892.226755][T15611] loop6: p4 size 656640 extends beyond EOD, truncated [ 892.346086][T11393] TC_ACT_REPEAT abuse ? [ 892.350939][ T5876] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 892.587414][ T5876] usb 6-1: device descriptor read/64, error -71 [ 892.649625][T11360] udevd[11360]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 892.725910][ T5876] usb usb6-port1: attempt power cycle [ 892.867576][ T28] TC_ACT_REPEAT abuse ? [ 893.156551][ T5876] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 893.209406][ T5876] usb 6-1: device descriptor read/8, error -71 [ 893.476849][ T5876] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 893.567281][ T5876] usb 6-1: device descriptor read/8, error -71 [ 893.696853][ T5876] usb usb6-port1: unable to enumerate USB device [ 893.832838][T15628] syz.5.2708[15628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 893.832968][T15628] syz.5.2708[15628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 893.897333][ T966] TC_ACT_REPEAT abuse ? [ 894.232496][T15636] TC_ACT_REPEAT abuse ? [ 894.237754][ C0] TC_ACT_REPEAT abuse ? [ 894.366229][T15636] loop0: detected capacity change from 0 to 8192 [ 895.362255][ T966] TC_ACT_REPEAT abuse ? [ 895.975839][T15639] loop6: detected capacity change from 0 to 40427 [ 896.001744][T15639] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 896.031138][T15639] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 896.055721][T15639] F2FS-fs (loop6): invalid crc_offset: 33558524 [ 896.083893][T15639] F2FS-fs (loop6): Found nat_bits in checkpoint [ 896.188542][T15639] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 896.196291][T15639] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 896.222359][T15639] netlink: 'syz.6.2712': attribute type 30 has an invalid length. [ 896.384022][ T966] TC_ACT_REPEAT abuse ? [ 896.666971][T10416] TC_ACT_REPEAT abuse ? [ 896.671550][ C0] TC_ACT_REPEAT abuse ? [ 896.709142][T11355] syz-executor: attempt to access beyond end of device [ 896.709142][T11355] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 896.759705][T11355] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 897.416993][ T966] TC_ACT_REPEAT abuse ? [ 897.766708][ T966] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 897.936668][ T966] usb 7-1: device descriptor read/64, error -71 [ 898.216953][ T966] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 898.396776][ T966] usb 7-1: device descriptor read/64, error -71 [ 898.519198][ T966] usb usb7-port1: attempt power cycle [ 898.531336][ T5842] TC_ACT_REPEAT abuse ? [ 898.936657][ T966] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 898.991758][ T966] usb 7-1: device descriptor read/8, error -71 [ 899.009001][T15681] TC_ACT_REPEAT abuse ? [ 899.013499][T15681] TC_ACT_REPEAT abuse ? [ 899.095965][T15679] loop5: detected capacity change from 0 to 40427 [ 899.112709][T15679] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 899.144506][T15679] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 899.172223][T15679] F2FS-fs (loop5): invalid crc_offset: 33558524 [ 899.225407][T15679] F2FS-fs (loop5): Found nat_bits in checkpoint [ 899.276697][ T966] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 899.339053][ T966] usb 7-1: device descriptor read/8, error -71 [ 899.352882][T15687] ksmbd: Unknown IPC event: 6, ignore. [ 899.452122][T15679] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 899.467268][T15679] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 899.496892][ T966] usb usb7-port1: unable to enumerate USB device [ 899.649254][T15679] netlink: 'syz.5.2724': attribute type 30 has an invalid length. [ 900.083203][ T966] net_ratelimit: 3 callbacks suppressed [ 900.083215][ T966] TC_ACT_REPEAT abuse ? [ 900.235266][T10555] syz-executor: attempt to access beyond end of device [ 900.235266][T10555] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 900.274785][T10555] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 900.803445][T15708] TC_ACT_REPEAT abuse ? [ 900.808098][T15708] TC_ACT_REPEAT abuse ? [ 900.812758][T15708] TC_ACT_REPEAT abuse ? [ 900.823476][T15708] TC_ACT_REPEAT abuse ? [ 900.828190][T15708] TC_ACT_REPEAT abuse ? [ 900.947030][ C0] TC_ACT_REPEAT abuse ? [ 901.478149][ T28] TC_ACT_REPEAT abuse ? [ 901.501204][T15707] TC_ACT_REPEAT abuse ? [ 901.609671][ T5912] TC_ACT_REPEAT abuse ? [ 903.726041][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2739'. [ 904.118826][ T5912] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 904.276586][ T5912] usb 7-1: device descriptor read/64, error -71 [ 904.550207][ T5912] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 905.037976][ T5912] usb 7-1: device descriptor read/64, error -71 [ 905.118230][T15748] net_ratelimit: 10 callbacks suppressed [ 905.118245][T15748] TC_ACT_REPEAT abuse ? [ 905.128831][T15748] TC_ACT_REPEAT abuse ? [ 905.133765][T15748] TC_ACT_REPEAT abuse ? [ 905.143512][T15748] TC_ACT_REPEAT abuse ? [ 905.148786][T15748] TC_ACT_REPEAT abuse ? [ 905.156713][T15747] TC_ACT_REPEAT abuse ? [ 905.157740][ T5912] usb usb7-port1: attempt power cycle [ 905.277494][T15754] TC_ACT_REPEAT abuse ? [ 905.282103][T15754] TC_ACT_REPEAT abuse ? [ 905.327189][T15754] TC_ACT_REPEAT abuse ? [ 905.559391][T15753] TC_ACT_REPEAT abuse ? [ 905.627256][ T5912] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 905.741049][ T5912] usb 7-1: device descriptor read/8, error -71 [ 907.572805][ T5912] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 907.700435][ T5912] usb 7-1: device descriptor read/8, error -71 [ 907.986890][ T5912] usb usb7-port1: unable to enumerate USB device [ 908.764608][T15774] netlink: 'syz.4.2751': attribute type 10 has an invalid length. [ 908.933452][T15774] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 911.356935][ T5842] net_ratelimit: 8 callbacks suppressed [ 911.356951][ T5842] TC_ACT_REPEAT abuse ? [ 911.548507][ T5876] TC_ACT_REPEAT abuse ? [ 911.792559][T15800] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 911.832915][T15800] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 911.852277][T15800] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 911.863192][T15800] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 911.875185][T15800] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 911.884358][T15800] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 911.923003][T15800] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 911.969104][T15800] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 911.992490][T15800] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 912.020577][T15800] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 912.175922][T15794] loop6: detected capacity change from 0 to 40427 [ 912.215505][T15794] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 912.237308][T15794] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 912.265267][T15794] F2FS-fs (loop6): invalid crc_offset: 33558524 [ 912.276704][ T5912] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 912.345069][T15794] F2FS-fs (loop6): Found nat_bits in checkpoint [ 912.384522][ T5842] TC_ACT_REPEAT abuse ? [ 912.437208][ T5912] usb 1-1: device descriptor read/64, error -71 [ 912.478171][T15794] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 912.498182][T15794] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 912.603695][T15794] netlink: 'syz.6.2759': attribute type 30 has an invalid length. [ 912.796589][ T5912] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 912.938417][T11355] syz-executor: attempt to access beyond end of device [ 912.938417][T11355] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 912.952874][T11355] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 912.966698][ T5912] usb 1-1: device descriptor read/64, error -71 [ 913.096879][ T5912] usb usb1-port1: attempt power cycle [ 913.105540][T10413] TC_ACT_REPEAT abuse ? [ 913.110165][ C0] TC_ACT_REPEAT abuse ? [ 913.425243][ T5842] TC_ACT_REPEAT abuse ? [ 913.556688][ T5912] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 913.687265][ T5912] usb 1-1: device descriptor read/8, error -71 [ 914.427790][T15830] loop5: detected capacity change from 0 to 8192 [ 914.523380][ T5842] TC_ACT_REPEAT abuse ? [ 914.687791][ T5159] loop5: p2 p3 p4 [ 914.697092][ T5159] loop5: partition table partially beyond EOD, truncated [ 914.717622][ T5159] loop5: p2 start 2936012800 is beyond EOD, truncated [ 914.724667][ T5159] loop5: p3 start 1912602624 is beyond EOD, truncated [ 914.879922][ T5159] loop5: p4 size 656640 extends beyond EOD, truncated [ 914.926606][ T5912] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 914.967543][ T5912] usb 1-1: device descriptor read/8, error -71 [ 915.126640][ T5912] usb usb1-port1: unable to enumerate USB device [ 915.213130][T11360] udevd[11360]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 915.581036][ T5842] TC_ACT_REPEAT abuse ? [ 916.294601][T15849] netlink: 'syz.5.2771': attribute type 4 has an invalid length. [ 916.520825][ T5912] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 916.552410][ T5912] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 916.611460][T15854] fido_id[15854]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 916.676966][ T5842] TC_ACT_REPEAT abuse ? [ 917.798755][ T5842] TC_ACT_REPEAT abuse ? [ 918.393567][ T5842] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 918.593888][ T5842] usb 7-1: device descriptor read/64, error -71 [ 918.796067][T15873] binder: 15871:15873 ioctl 80089418 2000000002c0 returned -22 [ 919.324443][ T28] TC_ACT_REPEAT abuse ? [ 919.586588][ T5842] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 919.599445][T15886] ksmbd: Unknown IPC event: 6, ignore. [ 919.846597][ T5842] usb 7-1: device descriptor read/64, error -71 [ 920.777199][T11393] TC_ACT_REPEAT abuse ? [ 921.316611][ T28] TC_ACT_REPEAT abuse ? [ 921.426767][ T5842] usb usb7-port1: attempt power cycle [ 922.381290][ T966] TC_ACT_REPEAT abuse ? [ 922.756609][ T5842] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 922.999501][ T5842] usb 6-1: config 8 has an invalid interface number: 101 but max is 0 [ 923.016595][T15918] netlink: 'syz.6.2791': attribute type 21 has an invalid length. [ 923.024725][T15918] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2791'. [ 924.169320][ T5842] usb 6-1: config 8 has no interface number 0 [ 924.211840][ T5842] usb 6-1: config 8 interface 101 has no altsetting 0 [ 924.302123][ T5842] usb 6-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 924.354538][ T28] TC_ACT_REPEAT abuse ? [ 924.399868][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.642058][T15910] syzkaller0: entered promiscuous mode [ 924.656736][T15910] syzkaller0: entered allmulticast mode [ 924.697553][T15910] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 924.740641][ T5912] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 924.936179][ T5842] usb 6-1: string descriptor 0 read error: -71 [ 924.955348][ T5842] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 924.985784][ T5842] gspca_sunplus: reg_w_riv err -71 [ 924.995851][ T5842] sunplus: probe of 6-1:8.101 failed with error -71 [ 925.031622][ T5842] usb 6-1: USB disconnect, device number 29 [ 925.068350][ T5912] usb 7-1: device descriptor read/64, error -71 [ 925.346547][ T5912] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 925.425294][ T5842] TC_ACT_REPEAT abuse ? [ 925.508000][ T5912] usb 7-1: device descriptor read/64, error -71 [ 925.674666][ T5912] usb usb7-port1: attempt power cycle [ 925.905447][T15930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2795'. [ 926.316659][ T5912] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 926.537099][ C0] TC_ACT_REPEAT abuse ? [ 926.643159][ T5842] TC_ACT_REPEAT abuse ? [ 926.681902][ T5912] usb 7-1: device descriptor read/8, error -71 [ 926.956914][ T5912] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 927.020528][ T5912] usb 7-1: device descriptor read/8, error -71 [ 927.194156][ T5912] usb usb7-port1: unable to enumerate USB device [ 927.665862][ T5842] TC_ACT_REPEAT abuse ? [ 928.929676][ T5842] TC_ACT_REPEAT abuse ? [ 930.390861][ T5842] TC_ACT_REPEAT abuse ? [ 930.395139][T11393] TC_ACT_REPEAT abuse ? [ 931.433484][ T5842] TC_ACT_REPEAT abuse ? [ 931.676999][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.683344][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.236794][ T28] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 932.359559][T15607] TC_ACT_REPEAT abuse ? [ 932.364387][ C0] TC_ACT_REPEAT abuse ? [ 932.457653][ T5842] TC_ACT_REPEAT abuse ? [ 932.466559][ T28] usb 7-1: Using ep0 maxpacket: 8 [ 932.505883][ T28] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 932.636607][ T28] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 932.645700][ T28] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.497245][ T28] TC_ACT_REPEAT abuse ? [ 934.551290][ T28] TC_ACT_REPEAT abuse ? [ 935.055013][ T5876] usb 7-1: USB disconnect, device number 36 [ 935.653363][ T28] TC_ACT_REPEAT abuse ? [ 936.711715][ T966] TC_ACT_REPEAT abuse ? [ 937.493592][T10407] TC_ACT_REPEAT abuse ? [ 937.498147][ C1] TC_ACT_REPEAT abuse ? [ 937.526608][T16024] program syz.5.2821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 938.300336][ T966] TC_ACT_REPEAT abuse ? [ 939.345257][ T966] TC_ACT_REPEAT abuse ? [ 939.726798][ T966] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 939.916589][ T966] usb 6-1: Using ep0 maxpacket: 8 [ 939.923710][ T966] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 939.935636][ T966] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 939.998366][ T5876] TC_ACT_REPEAT abuse ? [ 940.377002][ T28] TC_ACT_REPEAT abuse ? [ 940.721535][ T966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.166809][ T966] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 941.396680][ T966] usb 7-1: Using ep0 maxpacket: 32 [ 941.418943][ T28] TC_ACT_REPEAT abuse ? [ 941.424189][ T966] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 941.445403][ T966] usb 7-1: config 0 has no interfaces? [ 941.455791][ T966] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 941.465362][ T966] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.473859][ T966] usb 7-1: Product: syz [ 941.483565][ T966] usb 7-1: Manufacturer: syz [ 941.500854][ T966] usb 7-1: SerialNumber: syz [ 941.512040][ T966] usb 7-1: config 0 descriptor?? [ 941.616057][T16051] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2826'. [ 942.367099][ T5876] usb 7-1: USB disconnect, device number 37 [ 942.458898][ T966] TC_ACT_REPEAT abuse ? [ 942.461042][T11393] usb 6-1: USB disconnect, device number 30 [ 943.497077][ T28] TC_ACT_REPEAT abuse ? [ 943.701278][T10409] TC_ACT_REPEAT abuse ? [ 943.705836][ C0] TC_ACT_REPEAT abuse ? [ 944.094850][T11393] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 944.155826][T11393] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 944.781741][ T966] TC_ACT_REPEAT abuse ? [ 945.838563][ T966] TC_ACT_REPEAT abuse ? [ 946.996691][ T966] TC_ACT_REPEAT abuse ? [ 947.129624][T16109] TC_ACT_REPEAT abuse ? [ 947.134766][ C1] TC_ACT_REPEAT abuse ? [ 947.856586][T11393] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 948.164304][ T5842] TC_ACT_REPEAT abuse ? [ 948.726718][T11393] usb 1-1: Using ep0 maxpacket: 8 [ 948.733822][T11393] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 948.745518][T11393] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 948.755390][T11393] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.959586][T10409] TC_ACT_REPEAT abuse ? [ 948.964136][ C1] TC_ACT_REPEAT abuse ? [ 949.216852][ T966] TC_ACT_REPEAT abuse ? [ 949.407563][T16128] TC_ACT_REPEAT abuse ? [ 950.461565][ T966] net_ratelimit: 8 callbacks suppressed [ 950.461575][ T966] TC_ACT_REPEAT abuse ? [ 950.647731][ T966] usb 1-1: USB disconnect, device number 20 [ 951.711631][ T966] TC_ACT_REPEAT abuse ? [ 952.724408][T10407] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.860159][ T28] TC_ACT_REPEAT abuse ? [ 952.900962][ T5105] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 952.914414][ T5105] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 952.993577][ T5105] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 953.027377][ T5105] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 953.043438][ T5105] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 953.051241][ T5105] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 953.059455][T10407] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.143259][T16155] lo speed is unknown, defaulting to 1000 [ 953.233227][T10407] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.569310][T16166] (null): rxe_set_mtu: Set mtu to 256 [ 953.582770][T16166] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 954.208670][ T28] TC_ACT_REPEAT abuse ? [ 954.505962][T16173] TC_ACT_REPEAT abuse ? [ 954.510568][ C0] TC_ACT_REPEAT abuse ? [ 954.998031][T16173] loop0: detected capacity change from 0 to 8192 [ 955.133366][ T5105] Bluetooth: hci2: command tx timeout [ 955.334543][ T5856] TC_ACT_REPEAT abuse ? [ 955.388887][T10407] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.550908][T16155] chnl_net:caif_netlink_parms(): no params data found [ 956.377692][ T28] TC_ACT_REPEAT abuse ? [ 956.651836][T16155] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.706808][T16155] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.775668][T16189] ksmbd: Unknown IPC event: 6, ignore. [ 956.832642][T16155] bridge_slave_0: entered allmulticast mode [ 956.840577][T16155] bridge_slave_0: entered promiscuous mode [ 956.848908][T16155] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.856253][T16155] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.863720][T16155] bridge_slave_1: entered allmulticast mode [ 956.870543][T16155] bridge_slave_1: entered promiscuous mode [ 956.942534][T16155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.954955][T16155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.976217][T10407] tipc: Left network mode [ 957.176959][ T5105] Bluetooth: hci2: command tx timeout [ 957.266962][ T5774] TC_ACT_REPEAT abuse ? [ 957.426897][ T5842] TC_ACT_REPEAT abuse ? [ 957.618498][T16155] team0: Port device team_slave_0 added [ 957.833041][T16155] team0: Port device team_slave_1 added [ 958.363911][T16155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.385568][T16155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.640369][ T5842] TC_ACT_REPEAT abuse ? [ 958.688812][T16155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.717926][T16155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.724906][T16155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.823235][T16155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.256737][ T5105] Bluetooth: hci2: command tx timeout [ 959.267115][T16155] hsr_slave_0: entered promiscuous mode [ 959.287762][T16155] hsr_slave_1: entered promiscuous mode [ 959.669830][T16203] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input22 [ 959.700099][T16155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 959.707921][T16155] Cannot create hsr debugfs directory [ 959.825843][T16212] loop5: detected capacity change from 0 to 8192 [ 960.005495][ T28] TC_ACT_REPEAT abuse ? [ 960.017770][T16212] loop5: p2 p3 p4 [ 960.021566][T16212] loop5: partition table partially beyond EOD, truncated [ 960.028831][T16212] loop5: p2 start 2936012800 is beyond EOD, truncated [ 960.035614][T16212] loop5: p3 start 1912602624 is beyond EOD, truncated [ 960.042471][T16212] loop5: p4 size 656640 extends beyond EOD, truncated [ 961.155861][ T28] TC_ACT_REPEAT abuse ? [ 961.336593][ T5105] Bluetooth: hci2: command tx timeout [ 961.387388][T13021] udevd[13021]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 962.881195][ T28] TC_ACT_REPEAT abuse ? [ 962.885508][T11393] TC_ACT_REPEAT abuse ? [ 962.938415][T10407] IPVS: stopping backup sync thread 15362 ... [ 963.175828][T10407] bond0: (slave wlan1): Releasing backup interface [ 964.309769][ T5856] TC_ACT_REPEAT abuse ? [ 964.344852][T10407] hsr_slave_0: left promiscuous mode [ 964.377494][T10407] hsr_slave_1: left promiscuous mode [ 964.388695][T10407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 964.420189][T10407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.447598][T10407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.465249][T10407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.484299][T10407] bridge_slave_1: left allmulticast mode [ 964.491197][T10407] bridge_slave_1: left promiscuous mode [ 964.498164][T10407] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.499808][T16249] loop0: detected capacity change from 0 to 40427 [ 964.520147][T10407] bridge_slave_0: left allmulticast mode [ 964.525889][T10407] bridge_slave_0: left promiscuous mode [ 964.533963][T16249] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 964.547833][T16249] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 964.561517][T10407] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.588744][T16249] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 964.627316][T16249] F2FS-fs (loop0): Found nat_bits in checkpoint [ 964.657727][T10407] veth1_macvtap: left promiscuous mode [ 964.666815][T10407] veth0_macvtap: left promiscuous mode [ 964.672478][T10407] veth1_vlan: left promiscuous mode [ 964.697817][T10407] veth0_vlan: left promiscuous mode [ 964.787121][T16249] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 964.794203][T16249] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 964.847582][T16249] netlink: 'syz.0.2870': attribute type 30 has an invalid length. [ 965.750069][ T5842] TC_ACT_REPEAT abuse ? [ 965.834046][T13294] syz-executor: attempt to access beyond end of device [ 965.834046][T13294] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 965.848559][T13294] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 966.285671][T10407] bond2 (unregistering): Released all slaves [ 966.685396][T10407] bond1 (unregistering): Released all slaves [ 966.919587][ T5856] TC_ACT_REPEAT abuse ? [ 967.094032][T16293] TC_ACT_REPEAT abuse ? [ 967.098641][ C0] TC_ACT_REPEAT abuse ? [ 967.170587][T16293] loop0: detected capacity change from 0 to 8192 [ 967.221492][T16293] loop0: p2 p3 p4 [ 967.225317][T16293] loop0: partition table partially beyond EOD, truncated [ 967.232713][T16293] loop0: p2 start 2936012800 is beyond EOD, truncated [ 967.239600][T16293] loop0: p3 start 1912602624 is beyond EOD, truncated [ 967.246381][T16293] loop0: p4 size 656640 extends beyond EOD, truncated [ 967.837528][T10407] team0 (unregistering): Port device team_slave_1 removed [ 967.933479][T10407] team0 (unregistering): Port device team_slave_0 removed [ 967.989132][ T5842] TC_ACT_REPEAT abuse ? [ 967.994193][T10407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 968.043661][T10407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 968.563315][T10407] bond0 (unregistering): Released all slaves [ 968.662861][T16266] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2874'. [ 968.819114][T16295] syzkaller0: entered promiscuous mode [ 968.824629][T16295] syzkaller0: entered allmulticast mode [ 968.881244][T16295] tipc: Enabled bearer , priority 0 [ 968.947709][T16295] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 969.038590][ T5842] TC_ACT_REPEAT abuse ? [ 969.279164][T16295] tipc: Resetting bearer [ 969.380399][T16294] tipc: Resetting bearer [ 969.663783][T16294] tipc: Disabling bearer [ 970.064736][ T28] TC_ACT_REPEAT abuse ? [ 971.176759][ T28] TC_ACT_REPEAT abuse ? [ 971.211876][T16155] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 971.318101][T16155] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 971.360827][T16331] mkiss: ax0: crc mode is auto. [ 971.479182][T16336] Falling back ldisc for ttyS3. [ 971.496707][T16155] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 971.560055][T16341] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 971.760952][T16343] loop6: detected capacity change from 0 to 8192 [ 972.257337][T11393] TC_ACT_REPEAT abuse ? [ 972.478361][ T5856] TC_ACT_REPEAT abuse ? [ 972.526887][T16155] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 972.575869][T16341] qnx6: wrong signature (magic) in superblock #1. [ 972.670419][T16341] qnx6: unable to read the first superblock [ 973.729928][T11393] TC_ACT_REPEAT abuse ? [ 973.746812][ T28] TC_ACT_REPEAT abuse ? [ 973.950741][T16155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.051396][T16155] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.115105][T10407] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.122239][T10407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.229101][T10407] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.236222][T10407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 974.777278][ T5842] TC_ACT_REPEAT abuse ? [ 975.367641][T16155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.475164][T16370] loop6: detected capacity change from 0 to 40427 [ 975.524864][T16370] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 975.570276][T16370] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 975.613448][T16370] F2FS-fs (loop6): invalid crc_offset: 33558524 [ 975.726282][T16370] F2FS-fs (loop6): Found nat_bits in checkpoint [ 975.831987][ T5856] TC_ACT_REPEAT abuse ? [ 976.432418][T16370] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 976.446570][T16370] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 976.495683][T16370] netlink: 'syz.6.2889': attribute type 30 has an invalid length. [ 976.955326][ T5842] TC_ACT_REPEAT abuse ? [ 977.144002][T10411] TC_ACT_REPEAT abuse ? [ 977.155851][ T5842] TC_ACT_REPEAT abuse ? [ 977.162157][ T966] TC_ACT_REPEAT abuse ? [ 977.368152][T11355] syz-executor: attempt to access beyond end of device [ 977.368152][T11355] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 977.389175][T11355] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 977.811125][T16416] TC_ACT_REPEAT abuse ? [ 977.815605][ C0] TC_ACT_REPEAT abuse ? [ 977.887711][T16416] loop0: detected capacity change from 0 to 8192 [ 979.125944][T16155] veth0_vlan: entered promiscuous mode [ 979.250892][T16155] veth1_vlan: entered promiscuous mode [ 979.381082][T16155] veth0_macvtap: entered promiscuous mode [ 979.432624][T16155] veth1_macvtap: entered promiscuous mode [ 979.507179][ T28] net_ratelimit: 1 callbacks suppressed [ 979.507192][ T28] TC_ACT_REPEAT abuse ? [ 979.513243][T16155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 979.549316][T16155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.562110][T16155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 979.626953][T16155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.656300][T16155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.697542][T16155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 979.756110][T16155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.817246][T16155] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.847040][T16155] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.991606][T16155] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.086287][T16439] hub 9-0:1.0: USB hub found [ 980.096832][T16439] hub 9-0:1.0: 1 port detected [ 980.861271][ T28] TC_ACT_REPEAT abuse ? [ 981.859755][ T8401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.871969][ T8401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.047399][T10409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.085467][ T28] TC_ACT_REPEAT abuse ? [ 982.160128][T10409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.197046][T16444] ksmbd: Unknown IPC event: 6, ignore. [ 982.858360][T10416] TC_ACT_REPEAT abuse ? [ 982.866903][ T5774] TC_ACT_REPEAT abuse ? [ 982.881219][ T5876] TC_ACT_REPEAT abuse ? [ 982.893494][ T28] TC_ACT_REPEAT abuse ? [ 982.992614][T16445] syz.5.2899 (16445): drop_caches: 2 [ 985.222405][ T5912] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 985.264537][ T5912] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 985.525647][T16483] fido_id[16483]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 985.528210][T14621] TC_ACT_REPEAT abuse ? [ 987.034653][T16505] loop5: detected capacity change from 0 to 8192 [ 987.231314][ T966] TC_ACT_REPEAT abuse ? [ 988.376677][ T966] TC_ACT_REPEAT abuse ? [ 990.497004][ T966] TC_ACT_REPEAT abuse ? [ 992.432047][ T28] TC_ACT_REPEAT abuse ? [ 992.461869][ T5912] TC_ACT_REPEAT abuse ? [ 992.673030][T16558] kvm: kvm [16557]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 993.112139][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.124040][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.505185][ T28] TC_ACT_REPEAT abuse ? [ 994.874004][ T28] TC_ACT_REPEAT abuse ? [ 996.146307][ T28] TC_ACT_REPEAT abuse ? [ 996.709839][T16619] kvm: kvm [16616]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1d00001b06 [ 997.208748][T14621] TC_ACT_REPEAT abuse ? [ 997.425697][T14621] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 997.460739][T14621] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 997.665010][T16636] fido_id[16636]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 998.763442][ T28] TC_ACT_REPEAT abuse ? [ 999.191395][T16642] TC_ACT_REPEAT abuse ? [ 999.199487][T16642] TC_ACT_REPEAT abuse ? [ 999.206254][T16642] TC_ACT_REPEAT abuse ? [ 999.232136][T16642] TC_ACT_REPEAT abuse ? [ 999.237542][T16642] TC_ACT_REPEAT abuse ? [ 999.243359][T16642] TC_ACT_REPEAT abuse ? [ 999.248841][T16642] TC_ACT_REPEAT abuse ? [ 999.254220][T16642] TC_ACT_REPEAT abuse ? [ 999.260377][T16642] TC_ACT_REPEAT abuse ? [ 1002.049114][T16664] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1002.056231][T16664] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1002.104602][T16664] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1002.975686][T16683] vivid-000: disconnect [ 1003.201700][ T5876] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1003.474965][ T5876] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1003.558250][T16682] vivid-000: reconnect [ 1003.986941][ T5105] Bluetooth: hci2: command 0x0c1a tx timeout [ 1004.060903][T14621] net_ratelimit: 31 callbacks suppressed [ 1004.060918][T14621] TC_ACT_REPEAT abuse ? [ 1004.132147][T16694] tipc: Enabled bearer , priority 0 [ 1004.150949][T16694] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1004.173785][T16694] tipc: Resetting bearer [ 1004.219835][T16692] tipc: Disabling bearer [ 1005.743572][ T966] TC_ACT_REPEAT abuse ? [ 1006.056691][ T5105] Bluetooth: hci2: command 0x0c1a tx timeout [ 1006.264345][T16724] tipc: Enabled bearer , priority 0 [ 1006.273120][T16724] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1006.388155][T16726] tipc: Resetting bearer [ 1006.423153][T16721] tipc: Disabling bearer [ 1006.487445][T16732] hub 9-0:1.0: USB hub found [ 1006.493879][T16732] hub 9-0:1.0: 1 port detected [ 1007.136335][T14621] TC_ACT_REPEAT abuse ? [ 1007.464825][T16739] kvm: kvm [16738]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 1007.497657][T16739] kvm: kvm [16738]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 1007.509498][T16739] kvm: kvm [16738]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 1007.566609][T14621] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1007.846627][T14621] usb 7-1: Using ep0 maxpacket: 16 [ 1007.857438][T14621] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.915803][T14621] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.926535][T14621] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1007.934407][T14621] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1007.943801][T14621] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.954607][T14621] usb 7-1: config 0 descriptor?? [ 1008.136877][ T966] TC_ACT_REPEAT abuse ? [ 1008.141375][ T5105] Bluetooth: hci2: command 0x0c1a tx timeout [ 1008.383136][T14621] hid (null): report_id 0 is invalid [ 1008.389733][T14621] hid (null): invalid report_count -737697329 [ 1008.439433][T16750] lo speed is unknown, defaulting to 1000 [ 1008.596609][T14621] usb 7-1: USB disconnect, device number 38 [ 1009.177168][T14621] TC_ACT_REPEAT abuse ? [ 1010.218681][ T966] TC_ACT_REPEAT abuse ? [ 1010.323126][T16765] kvm: kvm [16764]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 1010.381589][T16765] kvm: kvm [16764]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 1010.430239][T16765] kvm: kvm [16764]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 1010.458683][T16765] kvm: kvm [16764]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 1010.470036][T16765] kvm: kvm [16764]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 1010.479625][T16765] kvm: kvm [16764]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 1010.492644][T16765] kvm: kvm [16764]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 1011.949934][ T5876] TC_ACT_REPEAT abuse ? [ 1011.954288][ T28] TC_ACT_REPEAT abuse ? [ 1013.047517][T14621] TC_ACT_REPEAT abuse ? [ 1013.060895][T16779] loop4: detected capacity change from 0 to 40427 [ 1013.285511][T16779] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1013.308032][T16779] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1013.458239][T16779] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 1013.473721][T16779] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-4) [ 1014.167098][ T28] TC_ACT_REPEAT abuse ? [ 1015.178368][T14621] TC_ACT_REPEAT abuse ? [ 1016.306816][ T28] TC_ACT_REPEAT abuse ? [ 1017.511615][ T28] TC_ACT_REPEAT abuse ? [ 1017.688948][T16872] loop5: detected capacity change from 0 to 8192 [ 1017.737366][T16872] loop5: p2 p3 p4 [ 1017.741259][T16872] loop5: partition table partially beyond EOD, truncated [ 1017.748677][T16872] loop5: p2 start 2936012800 is beyond EOD, truncated [ 1017.755583][T16872] loop5: p3 start 1912602624 is beyond EOD, truncated [ 1017.762523][T16872] loop5: p4 size 656640 extends beyond EOD, truncated [ 1018.462845][T16853] loop6: detected capacity change from 0 to 40427 [ 1018.516597][T16853] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1018.524505][T16853] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1018.655493][ T966] TC_ACT_REPEAT abuse ? [ 1018.743799][T16880] hub 9-0:1.0: USB hub found [ 1018.748859][T16880] hub 9-0:1.0: 1 port detected [ 1019.511429][T16853] F2FS-fs (loop6): invalid crc_offset: 33558524 [ 1019.522401][T16876] TC_ACT_REPEAT abuse ? [ 1019.526775][T16876] TC_ACT_REPEAT abuse ? [ 1019.531104][T16876] TC_ACT_REPEAT abuse ? [ 1019.537167][T16876] TC_ACT_REPEAT abuse ? [ 1019.541630][T16876] TC_ACT_REPEAT abuse ? [ 1019.545981][T16876] TC_ACT_REPEAT abuse ? [ 1019.582712][T16853] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1019.750067][T13021] udevd[13021]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1020.221889][T16873] net_ratelimit: 25 callbacks suppressed [ 1020.221898][T16873] TC_ACT_REPEAT abuse ? [ 1020.697422][ T28] TC_ACT_REPEAT abuse ? [ 1021.274449][ T5912] TC_ACT_REPEAT abuse ? [ 1021.745101][ T966] TC_ACT_REPEAT abuse ? [ 1022.806830][ T966] TC_ACT_REPEAT abuse ? [ 1023.799291][T16930] loop4: detected capacity change from 0 to 8192 [ 1024.376744][T14621] TC_ACT_REPEAT abuse ? [ 1024.675814][T16936] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 1, id = 0 [ 1026.694002][ T28] TC_ACT_REPEAT abuse ? [ 1028.742658][ T28] TC_ACT_REPEAT abuse ? [ 1030.011388][ T28] TC_ACT_REPEAT abuse ? [ 1030.859192][ T5912] TC_ACT_REPEAT abuse ? [ 1031.024667][ T28] TC_ACT_REPEAT abuse ? [ 1032.163455][ T28] TC_ACT_REPEAT abuse ? [ 1033.195103][ T966] TC_ACT_REPEAT abuse ? [ 1033.475955][T17020] TC_ACT_REPEAT abuse ? [ 1033.480899][T17020] TC_ACT_REPEAT abuse ? [ 1033.485868][T17020] TC_ACT_REPEAT abuse ? [ 1033.493174][T17020] TC_ACT_REPEAT abuse ? [ 1033.497950][T17020] TC_ACT_REPEAT abuse ? [ 1033.681894][T11393] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1034.267268][ T966] TC_ACT_REPEAT abuse ? [ 1034.282798][T17020] TC_ACT_REPEAT abuse ? [ 1034.288517][T17020] TC_ACT_REPEAT abuse ? [ 1034.368370][T11393] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1034.391115][T11393] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1034.405616][T11393] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1034.467041][T11393] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1034.480016][T11393] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.492696][T11393] usb 7-1: Product: syz [ 1034.504628][T11393] usb 7-1: Manufacturer: syz [ 1034.509439][T11393] usb 7-1: SerialNumber: syz [ 1034.522921][T11393] usb 7-1: config 0 descriptor?? [ 1034.943071][T11393] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1035.176184][T11393] usb 7-1: USB disconnect, device number 39 [ 1035.224560][T17034] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 1, id = 0 [ 1035.807262][T11393] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1036.141605][T11393] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1036.166522][T11393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.183749][T11393] usb 1-1: Product: syz [ 1036.190222][T11393] usb 1-1: Manufacturer: syz [ 1036.195056][T11393] usb 1-1: SerialNumber: syz [ 1036.209303][T11393] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1036.284926][ T5774] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1036.469097][T17055] ksmbd: Unknown IPC event: 6, ignore. [ 1036.886575][ T966] usb 1-1: USB disconnect, device number 21 [ 1037.763287][ T28] net_ratelimit: 7 callbacks suppressed [ 1037.763303][ T28] TC_ACT_REPEAT abuse ? [ 1038.017797][ T5774] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1038.025411][ T5774] ath9k_htc: Failed to initialize the device [ 1038.039057][ T966] usb 1-1: ath9k_htc: USB layer deinitialized [ 1038.779902][T11393] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1038.787969][ T966] TC_ACT_REPEAT abuse ? [ 1039.166766][T11393] usb 5-1: Using ep0 maxpacket: 8 [ 1039.212740][T11393] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1039.229934][T11393] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1039.240065][T11393] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1039.250085][T11393] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1039.260457][T11393] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1039.274105][T11393] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1039.286813][T11393] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.482419][T17079] syz.6.3046 (17079): drop_caches: 2 [ 1039.504326][T11393] usb 5-1: GET_CAPABILITIES returned 0 [ 1039.541715][T11393] usbtmc 5-1:16.0: can't read capabilities [ 1039.696613][ T5774] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1040.426738][T17097] usbtmc 5-1:16.0: INITIATE_CLEAR returned 2c [ 1040.438704][ T28] TC_ACT_REPEAT abuse ? [ 1040.506800][ T5912] TC_ACT_REPEAT abuse ? [ 1040.523604][ T5774] usb 1-1: Using ep0 maxpacket: 8 [ 1040.548359][ T5774] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1040.548377][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.548388][ T5774] usb 1-1: Product: syz [ 1040.548396][ T5774] usb 1-1: Manufacturer: syz [ 1040.548404][ T5774] usb 1-1: SerialNumber: syz [ 1040.549907][ T5774] usb 1-1: config 0 descriptor?? [ 1040.625189][T11393] usb 5-1: USB disconnect, device number 5 [ 1040.909752][ T5774] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1041.638091][ T28] TC_ACT_REPEAT abuse ? [ 1042.118080][ T5774] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1042.155762][ T5774] usb 1-1: USB disconnect, device number 22 [ 1042.700868][ T966] TC_ACT_REPEAT abuse ? [ 1043.754250][ T28] TC_ACT_REPEAT abuse ? [ 1043.760298][ T966] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1043.946696][ T966] usb 6-1: Using ep0 maxpacket: 8 [ 1044.051955][ T966] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1044.061895][ T966] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1044.074981][ T966] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1044.086429][ T966] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1044.187074][ T966] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1044.202861][ T966] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1044.214182][ T966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.267444][ T966] usbtmc: probe of 6-1:16.0 failed with error -22 [ 1044.889370][ T28] TC_ACT_REPEAT abuse ? [ 1045.908964][ T28] TC_ACT_REPEAT abuse ? [ 1046.654142][ T28] usb 6-1: USB disconnect, device number 31 [ 1046.996955][ T28] TC_ACT_REPEAT abuse ? [ 1048.064515][ T5856] TC_ACT_REPEAT abuse ? [ 1050.056947][ T5912] TC_ACT_REPEAT abuse ? [ 1050.094831][ T28] TC_ACT_REPEAT abuse ? [ 1050.196606][T11393] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1050.494781][T11393] usb 7-1: Using ep0 maxpacket: 8 [ 1050.561480][T11393] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1050.658102][T11393] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1050.744073][T11393] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1050.767975][T11393] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1050.796711][T17183] syzkaller0: entered promiscuous mode [ 1050.807230][T11393] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1050.826683][T17183] syzkaller0: entered allmulticast mode [ 1050.843274][T17183] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1050.851847][T11393] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1050.883281][T11393] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.923080][T11393] usbtmc: probe of 7-1:16.0 failed with error -22 [ 1051.102026][ T28] TC_ACT_REPEAT abuse ? [ 1051.485468][ T28] usb 7-1: USB disconnect, device number 40 [ 1052.729355][ T28] TC_ACT_REPEAT abuse ? [ 1053.839034][ T28] TC_ACT_REPEAT abuse ? [ 1055.383315][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.389802][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.711735][ T28] TC_ACT_REPEAT abuse ? [ 1056.137003][ T28] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1056.437960][ T28] usb 6-1: Using ep0 maxpacket: 8 [ 1056.446203][ T28] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1056.456046][ T28] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1056.466601][ T28] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1056.476428][ T28] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1056.486989][ T28] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1056.500073][ T28] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1056.546664][ T28] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.578889][ T28] usbtmc: probe of 6-1:16.0 failed with error -22 [ 1056.867816][T14621] TC_ACT_REPEAT abuse ? [ 1056.912126][T17242] TC_ACT_REPEAT abuse ? [ 1056.917404][ C0] TC_ACT_REPEAT abuse ? [ 1057.975688][T14621] TC_ACT_REPEAT abuse ? [ 1058.656678][ T5774] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1058.904870][ T5912] usb 6-1: USB disconnect, device number 32 [ 1059.031751][T14621] TC_ACT_REPEAT abuse ? [ 1059.677170][T11393] TC_ACT_REPEAT abuse ? [ 1060.064278][T14621] TC_ACT_REPEAT abuse ? [ 1061.140683][T17279] TC_ACT_REPEAT abuse ? [ 1061.145203][ C1] TC_ACT_REPEAT abuse ? [ 1061.184040][ T28] TC_ACT_REPEAT abuse ? [ 1061.606694][ T28] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1061.834038][ T28] usb 5-1: Using ep0 maxpacket: 8 [ 1061.843955][ T28] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1061.843983][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.856054][ T28] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1061.856073][ T28] pvrusb2: ********** [ 1061.856080][ T28] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1061.856092][ T28] pvrusb2: Important functionality might not be entirely working. [ 1061.856100][ T28] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1061.856110][ T28] pvrusb2: ********** [ 1062.089846][ T2315] pvrusb2: Invalid write control endpoint [ 1062.234382][ T28] TC_ACT_REPEAT abuse ? [ 1062.282571][T17284] pvrusb2: Invalid write control endpoint [ 1062.295640][ T5912] usb 5-1: USB disconnect, device number 6 [ 1062.319103][ T2315] pvrusb2: Invalid write control endpoint [ 1062.348331][ T2315] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1062.410624][ T2315] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1062.440118][ T2315] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1062.476483][ T2315] pvrusb2: Device being rendered inoperable [ 1062.496660][ T2315] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1062.504010][ T2315] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1062.587554][ T2315] pvrusb2: Attached sub-driver cx25840 [ 1062.593467][ T2315] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1062.627640][ T2315] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1062.696870][ T5774] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1062.894462][ T5774] usb 6-1: Using ep0 maxpacket: 8 [ 1062.926404][ T5774] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1062.948471][ T5774] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1062.982411][ T5774] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1062.999996][ T5774] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1063.000464][T17301] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1063.012266][ T5774] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1063.025178][T17301] overlayfs: missing 'lowerdir' [ 1063.058671][ T5774] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1063.071484][ T5774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.091575][ T5774] usbtmc: probe of 6-1:16.0 failed with error -22 [ 1063.418661][ T28] TC_ACT_REPEAT abuse ? [ 1063.736637][T14621] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1063.926517][T14621] usb 1-1: Using ep0 maxpacket: 8 [ 1063.947121][T14621] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 1063.975783][T14621] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 1063.987502][T14621] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1064.000586][T14621] usb 1-1: config 0 has no interface number 0 [ 1064.012369][T14621] usb 1-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1064.048357][T14621] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1064.066533][T14621] usb 1-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1064.074727][T14621] usb 1-1: Product: syz [ 1064.079516][T14621] usb 1-1: Manufacturer: syz [ 1064.094958][T14621] usb 1-1: config 0 descriptor?? [ 1064.333301][T14621] usb 1-1: USB disconnect, device number 24 [ 1064.457601][ T966] TC_ACT_REPEAT abuse ? [ 1065.472769][T11393] usb 6-1: USB disconnect, device number 33 [ 1065.678063][T14621] TC_ACT_REPEAT abuse ? [ 1066.586538][ T5912] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1066.767063][ T966] TC_ACT_REPEAT abuse ? [ 1066.886763][T11393] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1067.740255][T11393] usb 6-1: Using ep0 maxpacket: 16 [ 1067.817009][ T966] TC_ACT_REPEAT abuse ? [ 1067.862933][T11393] usb 6-1: config 0 has an invalid interface number: 145 but max is 0 [ 1067.999499][T11393] usb 6-1: config 0 has no interface number 0 [ 1068.254206][T17348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3128'. [ 1068.717393][T11393] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1068.728510][T11393] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.736684][ T5912] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1068.744492][T11393] usb 6-1: Product: syz [ 1068.748954][T11393] usb 6-1: Manufacturer: syz [ 1068.753563][T11393] usb 6-1: SerialNumber: syz [ 1068.758801][ T5912] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1068.766384][ T5912] usb 1-1: can't read configurations, error -71 [ 1068.778402][T11393] usb 6-1: config 0 descriptor?? [ 1068.843296][T11393] usb 6-1: can't set config #0, error -71 [ 1068.857882][ T966] TC_ACT_REPEAT abuse ? [ 1068.870713][T11393] usb 6-1: USB disconnect, device number 34 [ 1069.257572][ T9] TC_ACT_REPEAT abuse ? [ 1069.898861][ T966] TC_ACT_REPEAT abuse ? [ 1070.476619][ T5912] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1070.687458][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 1070.724618][ T5912] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1070.760023][ T5912] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1070.784972][ T5912] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1070.835713][ T5912] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1070.870884][ T5912] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1070.937173][ T966] TC_ACT_REPEAT abuse ? [ 1070.966565][ T5912] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1070.989662][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.039402][ T5912] usbtmc: probe of 1-1:16.0 failed with error -22 [ 1071.217640][T14621] libceph: connect (1)[c::]:6789 error -101 [ 1071.223698][T14621] libceph: mon0 (1)[c::]:6789 connect error [ 1071.536371][T14621] libceph: connect (1)[c::]:6789 error -101 [ 1071.551505][T17384] ceph: No mds server is up or the cluster is laggy [ 1071.559516][T14621] libceph: mon0 (1)[c::]:6789 connect error [ 1072.630225][T14621] libceph: connect (1)[c::]:6789 error -101 [ 1072.636307][T14621] libceph: mon0 (1)[c::]:6789 connect error [ 1072.642992][ T966] TC_ACT_REPEAT abuse ? [ 1073.213527][ T27] audit: type=1107 audit(1757860089.334:597): pid=17410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¯' [ 1074.389104][ T966] TC_ACT_REPEAT abuse ? [ 1074.446981][ T5912] usb 1-1: USB disconnect, device number 27 [ 1074.598158][T17426] random: crng reseeded on system resumption [ 1075.929169][ T966] TC_ACT_REPEAT abuse ? [ 1077.449900][T14621] TC_ACT_REPEAT abuse ? [ 1077.885206][T17446] syzkaller0: entered promiscuous mode [ 1077.895146][T17446] syzkaller0: entered allmulticast mode [ 1077.912471][T17446] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1077.950403][T17451] [ 1077.952731][T17451] ================================================ [ 1077.959199][T17451] WARNING: lock held when returning to user space! [ 1077.965677][T17451] syzkaller #0 Not tainted [ 1077.970063][T17451] ------------------------------------------------ [ 1077.976529][T17451] syz.6.3147/17451 is leaving the kernel with locks still held! [ 1077.984125][T17451] 1 lock held by syz.6.3147/17451: [ 1077.989206][T17451] #0: ffff8880213ddb60 (&lo->lo_mutex){+.+.}-{3:3}, at: loop_set_block_size+0x7c/0x480 [ 1078.573080][T14621] TC_ACT_REPEAT abuse ? [ 1078.896674][T17338] TC_ACT_REPEAT abuse ? [ 1079.576715][T14621] TC_ACT_REPEAT abuse ? [ 1080.616664][ T28] TC_ACT_REPEAT abuse ? [ 1081.656643][T14621] TC_ACT_REPEAT abuse ? [ 1082.697737][ T28] TC_ACT_REPEAT abuse ? [ 1083.736689][T14621] TC_ACT_REPEAT abuse ? [ 1084.777518][ T28] TC_ACT_REPEAT abuse ? [ 1085.826698][T14621] TC_ACT_REPEAT abuse ? [ 1086.857213][T14621] TC_ACT_REPEAT abuse ? [ 1087.896805][ T28] TC_ACT_REPEAT abuse ?