last executing test programs: 12m28.180589403s ago: executing program 2 (id=139): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) waitid$P_PIDFD(0x2, r6, 0x0, 0x8, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 12m26.988327911s ago: executing program 2 (id=143): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2]}}) 12m26.564054348s ago: executing program 2 (id=146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0xc576, 0x400, 0xa, 0xffffff}, &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 12m26.353413021s ago: executing program 2 (id=148): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000540)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c0036b5"], 0xfd, 0x299, &(0x7f00000024c0)="$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") r0 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000100)={0x0}) 12m25.82802445s ago: executing program 2 (id=151): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) waitid$P_PIDFD(0x2, r6, 0x0, 0x8, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 12m25.460908186s ago: executing program 2 (id=153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000000000000034d564b"]) 12m24.895570085s ago: executing program 32 (id=153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000000000000034d564b"]) 49.884242937s ago: executing program 3 (id=2132): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = syz_open_dev$media(0x0, 0x10001, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) ptrace(0x10, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4040010) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) socket$phonet(0x23, 0x2, 0x1) syz_open_dev$usbfs(0x0, 0x76, 0x101301) pselect6(0x40, &(0x7f00000001c0)={0x300, 0xff, 0xfffffffffffff0af, 0xffffffffffffffff, 0x0, 0x10000, 0x103, 0x3}, 0x0, &(0x7f00000002c0)={0x3fe, 0x8000000005, 0x3, 0x7, 0x9, 0x45ff, 0xd68d, 0x40000000000}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4049a, &(0x7f00000000c0)={0x0, 0x523c, 0x1988, 0x8000, 0x8a}, &(0x7f0000000340), &(0x7f0000000240)) 48.40451459s ago: executing program 3 (id=2136): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0) 47.928460047s ago: executing program 3 (id=2139): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x42a1, 0x20}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gre={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}, @IFLA_MTU={0x8, 0x4, 0xb5}]}, 0x5c}}, 0x0) 47.428351875s ago: executing program 3 (id=2142): mkdir(0x0, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x108) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000bc0)={0x64, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x10, 0x0, 0x1, [@typed={0x49, 0x121, 0x0, 0x0, @binary="c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd"}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_read_part_table(0x1063, &(0x7f0000001080)="$eJzsz81JBTEUBeCTiZkfN5ZgG3YgFuBeECzACsRmBDe2JuJSiMyMvhLee4vvWyQh93IuN5zUvB714qZk7C25u/r7/37arjo9fPVNMpSX5HpM0qd89sxvbe8d0g55t8vrUtfHx5700x/3wnNKxqSk/k9tl7l/P+auAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCufgMAAP//Ou0UQA==") 46.239306464s ago: executing program 3 (id=2145): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x200000, 0x0) 39.128564497s ago: executing program 3 (id=2148): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8], 0x48) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000001c0)=0x5ca) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2208412, &(0x7f0000000b40)=ANY=[], 0x1, 0x5579, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0414f9f407000904000a000000000000000000000004001e0001000000", 0x24) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000300)) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) fallocate(r0, 0x8, 0x4000, 0x4000) 14.636403467s ago: executing program 1 (id=2206): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 14.246215673s ago: executing program 1 (id=2207): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$getsig(0x4202, 0x0, 0x7fffffff, &(0x7f0000000640)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000034000)=""/102392, 0x18ff8) r2 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13", 0xb2}, {&(0x7f00000002c0)="9c811ff500139d7d", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x2fb}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 11.128007153s ago: executing program 0 (id=2212): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) mount(&(0x7f0000000140)=@nullb, 0x0, &(0x7f0000000080)='qnx6\x00', 0x200000, 0x0) 10.561655372s ago: executing program 1 (id=2214): openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x42801, 0x0) 8.470301475s ago: executing program 0 (id=2217): mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SEM_INFO(0x0, 0x4, 0x13, 0x0) timerfd_create(0x0, 0x0) r3 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x20, 0x40000333}, &(0x7f00000006c0), &(0x7f00000020c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff", @ANYRES32, @ANYBLOB='\x00\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x34, r6, 0x603, 0x70bd30, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xec}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r4, 0x58, &(0x7f0000000340)}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={0x0, 0x1f0}, 0x1, 0x0, 0x0, 0x20000804}, 0x4080) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 7.298167753s ago: executing program 0 (id=2219): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x79d987e41f219aec, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) alarm(0x8000000000000001) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x8, 0xc, 0x0, 0x8, 0x0, 0x10, 0x3, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x40, '\x00', 0x0, 0x6}) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r7 = dup(r1) write$FUSE_BMAP(r7, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=fscache']) 7.156459876s ago: executing program 1 (id=2220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000070000008608ffffffff0602c117b5814f4bac0b5d03871d53"], 0x18}}], 0x1, 0x4040880) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r6 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x0, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000180)=0xfffffffa, 0xfffffffffffffed4) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r7) mmap$IORING_OFF_CQ_RING(&(0x7f000085a000/0x1000)=nil, 0x1000, 0x2000009, 0x40010, r7, 0x8000000) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x541b, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 5.206820287s ago: executing program 0 (id=2222): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$getsig(0x4202, 0x0, 0x7fffffff, &(0x7f0000000640)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000034000)=""/102392, 0x18ff8) r2 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13", 0xb2}, {&(0x7f00000002c0)="9c811ff500139d7d", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x2fb}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 5.114947088s ago: executing program 1 (id=2223): socket$inet6(0xa, 0x3, 0x8000000003c) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@tail_call, @jmp={0x5, 0x1, 0xd, 0x8, 0x9, 0xfffffffffffffff0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x3ff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r0], &(0x7f00000005c0), 0x10, 0x2}, 0x94) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x2020) 4.99629122s ago: executing program 4 (id=2224): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8000009, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e23, 0x0, 0x4e1d, 0x1003, 0x2, 0x20, 0x80, 0x11}, {0x80000000, 0x9, 0x8, 0x3, 0xc, 0x81, 0xff, 0x408}, {0xb, 0x4d, 0x3, 0x4}, 0x85, 0xfffffffc, 0x1, 0x0, 0x3, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x4, 0x8, 0x1000000}}, 0xe8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000001280), 0x6) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000280)={0x0, 0x400, 0x2, {0x1, @pix_mp={0x17a5499b, 0x2, 0x38414762, 0x2, 0xa, [{0x4, 0x2}, {0x3, 0x2}, {0x100, 0x200}, {0x40, 0x6b}, {0x1}, {0x4, 0x6}, {0x80000000, 0x6cc}, {0xe, 0x2}], 0xff, 0x4, 0x7, 0x0, 0x6}}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r1}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x11, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1316}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000100)={0x0, 0x2, 0x1, 0x3e, 0x200, &(0x7f0000000180)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000000000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413fcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949e496f2e2a3c175858575713be5ee3fff4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff4175b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a2b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6d07002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b188cd35df2cd7963e43b7f9c03bebfb889c02f484f63520cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r7 = socket$alg(0x26, 0x5, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r8, 0x2, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x64e7, r7, 0x0, 0x0, 0x8}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x80, r9, &(0x7f0000000440), 0x0, 0x8}]) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000000906010200000014d47c1e3643b9ce5f5363ec57a86bc20444328d58af9e0000000000000073797a310000000f050001000140ffffffff0c000280080001407f000001000000000000adfec22234cc5855150b0ab18b956778a24c8f5062fdf458dd41b228bfe866c94375b994ef13ab1994264869f6271a3f00fd5bbdd20b329a0b33941ed49b51a529a2c64b3c"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000050) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) syz_usbip_server_init(0x5) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c90012000e00050014060a000a3d6e55ea9f19"], 0x17) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x100000) 3.028585281s ago: executing program 1 (id=2225): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x200000, 0x0) 1.89279216s ago: executing program 4 (id=2226): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x1000840, &(0x7f00000028c0)={[{@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@shortname_win95}, {@shortname_winnt}, {@fat=@check_normal}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@uni_xlateno}, {@utf8}, {@shortname_lower}, {@shortname_mixed}, {@utf8}, {@utf8no}, {@rodir}]}, 0x3, 0x368, &(0x7f0000002440)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 1.584503554s ago: executing program 4 (id=2227): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x0) vmsplice(r4, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) 1.364674138s ago: executing program 4 (id=2228): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c00)=ANY=[], 0x110) 1.287083399s ago: executing program 0 (id=2229): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0xfff1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008011}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 944.346315ms ago: executing program 4 (id=2230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002340)=0x8) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0xa, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRESDEC=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES32], 0xfe, 0x625a, &(0x7f0000006680)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0x0) getdents(r0, 0x0, 0x58) 816.321677ms ago: executing program 0 (id=2231): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x443f, &(0x7f00000088c0)="$eJzs3c1PHOcdAOB3BlyD6w9wfXClSl2pllq1FQKf2mKpGGNjsKkrt7aqXtYLrG3ahbVgqXqwFHKzlFOkHKIcrETKjZPFIVfnT8glR+dsKTnkEimSFaLdnYWdYVds0C7EzvMcmJ33e/c3H+8chjdOVB4ureWW1nKFlVx54f7axdz/yqX15WKID0nL/o8dXv90phfHyVEfez9lt65c+8fdiyF8uvj5y+3t7e1Q1R9aGmv6/M3Xjxeatw1xpk613datdcu/Qwjn9oyrqi+E8K9PQohCCJeTtMlkOxhCOBXqeXcfv3Mv16XRPHtRvJR/Nfdka/zC7ObTrfbfPQrhg9Iv//hg+cvf9I1/8fsudQ8AAAAAAAAAAAAAAAAAwGtu+vatO38fHQvPo9C/Ge19X3c62bZ7P3a7a37d+y8LAAAAAAAAAAAAAAAAAAAAP1K77//norMt3v+fSrYTbepv/7VNxvHujpPemPnbramro2PJ+u/Rnvw/JUlfXe4Lwy3Wfc+u/345U7/1+u97+zmoxvga/Q6FKB7ZfmsnfyjE8chICB8lC7+fj07EpfJa5Q/3y+sri10bxmsrHf/66v2p6CQL+nca/8lM+71f//8Xe46m6v697h1ib7R0/Pvalvv47aij+F/J1DuM+HNw6fj319IGmwtM1C8A1fi/279//Kcy7fcq/qdDCLmoOtZc6gpQncNU09vNV0hLx/9YLS116Ux+yHbn/7eZ+F/NtN8u/me69g1aX/83sjciWkrH/2e1tIFUid3zfzje//y/lmn/KO7/1fFvuP93JB3/5KGtP1Wk9kt2ev2fzrTfq/jfiZNxno5SR8BmVE9v9//qSEvHf2BP/u7zX9zR/O96pv5hPf81+q09/zU9h/wuqj//0Vo6/oNty3V6/s9k6vX6+j9Rm/9xUOn4n6ilpefOQ7W/ncZ/NtN+r+Jfm5UMNOK/ez357ng9/UPzv46k4//zemLcXGKj9rc2/4v2n//fyLR/FPO/6vg34t72+qZIx/9k23LV+H/Wwf3/ZqZe7+Mfwqi5/oGl43+qbbna+T+wf/znMvV6Hf/f9rJxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNfAZLIdClE8ktqP45GREK4k++fDiWi+sJifL5UX/rsWwlSSngtnowel8nyhlF9aKS8W84VSqbwQwtUk/1wYiNZK5Up+ufDo2k5bg9HDYmG1Ml8sVEII00n6r8KpRlvzS5XlwqMQwvWdvDNxefXRw8JKfnFp9S+jo6OjYWZnDMNR8f+V4kql3ns9N4TZnbpDUdPgatk3dsZyMvpPeX11pVCqpd9sqlMqLxRKTXXmkrz3wnBUWV1fWShUivlS+UGjv6M0kWynZm7/8/bNsT3596L6dvJwhwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAD/R8/M/vhxD663txCGGi8SFqVf7Zi+Kl/Ku5J1vjF2Y3n269bFcOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB7duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrBLxygRA1EYgN+Mhdp5DKuQdLYJimhhRPAEegwPE4/iJbyDhYWthQhmBjTuQprd6vuaB/l5eT8kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsc3k33t+2XUSKo6/DiJfH17ff+XWZ0zDPvNg/2FNPduPqZjy/aLvy3dO//Kw8eu/zT/r58fQQG2b1PPzdX/5Ps3rneGuvaVjXv/ard08i5SYi+pKfppybZt27AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhmBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86ir4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//78SIGU=") setxattr$system_posix_acl(&(0x7f0000000c00)='.\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000f00)={{}, {}, [{0x2, 0x6}, {}, {0x2, 0x1}, {0x2, 0x2}, {0x2, 0x2}, {0x2, 0x6}], {}, [{0x8, 0x4}]}, 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x8, {0x5, 0x2, 0x0, 0x4000000000008, 0x0, 0x4, {0x4, 0xfffffffffffffffb, 0x100, 0xa5, 0xa, 0x8, 0x800008, 0xfff, 0x10000008, 0x1000, 0x28001, 0x0, 0x0, 0x5, 0x7f}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) readv(r1, &(0x7f0000001240)=[{&(0x7f0000000280)=""/56, 0x38}, {&(0x7f00000002c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/74, 0x4a}, {&(0x7f0000000d80)=""/253, 0xfd}, {0x0}, {&(0x7f0000000f80)=""/226, 0xe2}, {&(0x7f0000001080)=""/129, 0x81}, {&(0x7f00000003c0)=""/38, 0x26}], 0x8) ioctl$FS_IOC_SETFLAGS(r1, 0xc0606610, &(0x7f0000000040)=0x60) syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 0s ago: executing program 4 (id=2232): syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) kernel console output (not intermixed with test programs): b338eba9 code=0x0 [ 354.980839][ T6432] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.205025][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.696'. [ 355.720128][ T5955] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 355.934941][ T5955] usb 2-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 355.998384][ T5955] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 356.037216][ T5955] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 356.064555][ T5955] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 356.092386][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.148527][ T5955] usb 2-1: Product: syz [ 356.171085][ T5955] usb 2-1: Manufacturer: syz [ 356.182557][ T5955] usb 2-1: SerialNumber: syz [ 356.697789][ T5955] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 356.727852][ T5955] cdc_ncm 2-1:1.0: bind() failure [ 356.764546][ T5955] usb 2-1: USB disconnect, device number 7 [ 357.363299][ T8580] loop4: detected capacity change from 0 to 40427 [ 357.402299][ T8580] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 357.420486][ T8580] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 357.599285][ T6137] net_ratelimit: 4 callbacks suppressed [ 357.599324][ T6137] TC_ACT_REPEAT abuse ? [ 357.609594][ C1] TC_ACT_REPEAT abuse ? [ 357.619555][ T8580] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 357.668367][ T28] audit: type=1326 audit(1757859705.292:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.3.706" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27b458eba9 code=0x0 [ 357.771103][ T8580] F2FS-fs (loop4): Found nat_bits in checkpoint [ 358.295912][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.707'. [ 358.529552][ T8580] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 358.574593][ T8580] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 358.620350][ T8580] netlink: 'syz.4.700': attribute type 30 has an invalid length. [ 359.040529][ T8611] netlink: 168 bytes leftover after parsing attributes in process `syz.3.708'. [ 360.074825][ T2922] TC_ACT_REPEAT abuse ? [ 360.079470][ C1] TC_ACT_REPEAT abuse ? [ 360.410048][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.712'. [ 360.671232][ T8624] TC_ACT_REPEAT abuse ? [ 360.675894][ C1] TC_ACT_REPEAT abuse ? [ 361.693966][ T970] IPVS: starting estimator thread 0... [ 361.711656][ T8629] TC_ACT_REPEAT abuse ? [ 361.782205][ T5955] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 361.792529][ T8630] IPVS: using max 16 ests per chain, 38400 per kthread [ 362.155856][ T5955] usb 1-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 362.932285][ T5955] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 363.465692][ T5955] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 363.494778][ T5955] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 363.608814][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.617759][ T5955] usb 1-1: Product: syz [ 363.622007][ T5955] usb 1-1: Manufacturer: syz [ 363.627134][ T5955] usb 1-1: SerialNumber: syz [ 363.702785][ T8645] TC_ACT_REPEAT abuse ? [ 363.707374][ T8645] TC_ACT_REPEAT abuse ? [ 363.722528][ T8645] TC_ACT_REPEAT abuse ? [ 363.728579][ T8645] TC_ACT_REPEAT abuse ? [ 363.742497][ T8645] TC_ACT_REPEAT abuse ? [ 363.748057][ T8645] TC_ACT_REPEAT abuse ? [ 363.772526][ T8644] TC_ACT_REPEAT abuse ? [ 363.913436][ T5955] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 363.920328][ T5955] cdc_ncm 1-1:1.0: bind() failure [ 363.982313][ T5955] usb 1-1: USB disconnect, device number 14 [ 364.584747][ T8657] TC_ACT_REPEAT abuse ? [ 364.589335][ C1] TC_ACT_REPEAT abuse ? [ 365.454419][ T6011] TC_ACT_REPEAT abuse ? [ 365.598357][ T8643] loop4: detected capacity change from 0 to 40427 [ 365.652383][ T8643] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 365.709941][ T8643] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 365.810469][ T8643] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 365.862693][ T8643] F2FS-fs (loop4): Found nat_bits in checkpoint [ 365.982331][ T8643] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 366.009946][ T8643] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 366.071791][ T8643] netlink: 'syz.4.719': attribute type 30 has an invalid length. [ 367.260800][ T6432] syz-executor: attempt to access beyond end of device [ 367.260800][ T6432] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 367.343080][ T6432] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 367.760145][ T8687] loop0: detected capacity change from 0 to 8192 [ 370.953929][ T2922] net_ratelimit: 1 callbacks suppressed [ 370.953948][ T2922] TC_ACT_REPEAT abuse ? [ 370.964290][ C0] TC_ACT_REPEAT abuse ? [ 372.235198][ T5955] TC_ACT_REPEAT abuse ? [ 372.240363][ C0] TC_ACT_REPEAT abuse ? [ 372.468484][ T2922] TC_ACT_REPEAT abuse ? [ 372.474187][ C0] TC_ACT_REPEAT abuse ? [ 372.720827][ T28] audit: type=1326 audit(1757859720.342:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8702 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8f18eba9 code=0x7fc00000 [ 373.861321][ T8727] TC_ACT_REPEAT abuse ? [ 373.867218][ C0] TC_ACT_REPEAT abuse ? [ 374.028635][ T8727] loop1: detected capacity change from 0 to 8192 [ 374.132315][ T970] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 374.170734][ T8727] loop1: p2 p3 p4 [ 374.174827][ T8727] loop1: partition table partially beyond EOD, truncated [ 374.183562][ T8727] loop1: p2 start 2936012800 is beyond EOD, truncated [ 374.190485][ T8727] loop1: p3 start 1912602624 is beyond EOD, truncated [ 374.197732][ T8727] loop1: p4 size 656640 extends beyond EOD, truncated [ 374.371741][ T5158] loop1: p2 p3 p4 [ 374.379107][ T5158] loop1: partition table partially beyond EOD, truncated [ 374.391362][ T5158] loop1: p2 start 2936012800 is beyond EOD, truncated [ 374.401303][ T5158] loop1: p3 start 1912602624 is beyond EOD, truncated [ 374.446157][ T5158] loop1: p4 size 656640 extends beyond EOD, truncated [ 374.546885][ T970] usb 5-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 374.609801][ T970] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 374.664505][ T970] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 374.803249][ T2922] TC_ACT_REPEAT abuse ? [ 374.807929][ C1] TC_ACT_REPEAT abuse ? [ 374.840087][ T970] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 374.872710][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.927909][ T970] usb 5-1: Product: syz [ 374.945832][ T970] usb 5-1: Manufacturer: syz [ 374.961305][ T970] usb 5-1: SerialNumber: syz [ 375.301043][ T970] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 376.041688][ T970] cdc_ncm 5-1:1.0: bind() failure [ 376.062328][ T970] usb 5-1: USB disconnect, device number 11 [ 376.086438][ T6170] udevd[6170]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 376.164841][ T6178] udevd[6178]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 376.657028][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.750'. [ 376.713393][ T1098] TC_ACT_REPEAT abuse ? [ 376.718212][ C1] TC_ACT_REPEAT abuse ? [ 377.205564][ T8757] TC_ACT_REPEAT abuse ? [ 377.213599][ T8757] TC_ACT_REPEAT abuse ? [ 377.223136][ T8757] TC_ACT_REPEAT abuse ? [ 377.378088][ T8757] TC_ACT_REPEAT abuse ? [ 377.386153][ T8757] TC_ACT_REPEAT abuse ? [ 377.397192][ T8757] TC_ACT_REPEAT abuse ? [ 377.402518][ T8757] TC_ACT_REPEAT abuse ? [ 377.408326][ T8757] TC_ACT_REPEAT abuse ? [ 378.041220][ T8768] loop0: detected capacity change from 0 to 8192 [ 380.545199][ T8791] loop4: detected capacity change from 0 to 512 [ 380.558414][ T8791] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 380.569358][ T8791] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 380.581962][ T8791] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 380.597560][ T8791] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 380.657172][ T8791] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 380.674110][ T8791] EXT4-fs (loop4): orphan cleanup on readonly fs [ 380.692134][ T8791] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.760: bg 0: block 34: padding at end of block bitmap is not set [ 380.711034][ T8791] Quota error (device loop4): write_blk: dquota write failed [ 380.720806][ T8791] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 380.884656][ T8791] EXT4-fs error (device loop4): ext4_acquire_dquot:6940: comm syz.4.760: Failed to acquire dquot type 1 [ 380.903836][ T8791] EXT4-fs (loop4): 1 truncate cleaned up [ 380.931466][ T8791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 381.363150][ T28] audit: type=1326 audit(1757859728.932:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8790 comm="syz.4.760" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30b338eba9 code=0x0 [ 381.853299][ T6432] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.415860][ T8812] net_ratelimit: 29 callbacks suppressed [ 382.415878][ T8812] TC_ACT_REPEAT abuse ? [ 382.426530][ C0] TC_ACT_REPEAT abuse ? [ 382.508101][ T8812] loop4: detected capacity change from 0 to 8192 [ 383.102940][ T34] TC_ACT_REPEAT abuse ? [ 383.107627][ C1] TC_ACT_REPEAT abuse ? [ 383.763228][ T8822] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 384.252175][ T5879] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 384.291597][ T8830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.774'. [ 384.324255][ T8830] TC_ACT_REPEAT abuse ? [ 384.328944][ T8830] TC_ACT_REPEAT abuse ? [ 384.333837][ T8830] TC_ACT_REPEAT abuse ? [ 384.338397][ T8830] TC_ACT_REPEAT abuse ? [ 384.342834][ T8830] TC_ACT_REPEAT abuse ? [ 384.350201][ T8829] TC_ACT_REPEAT abuse ? [ 384.456622][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 384.464296][ T5879] usb 5-1: config 0 has an invalid descriptor of length 198, skipping remainder of the config [ 388.245377][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.251761][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.297151][ T2922] net_ratelimit: 2 callbacks suppressed [ 388.297169][ T2922] TC_ACT_REPEAT abuse ? [ 388.307524][ C0] TC_ACT_REPEAT abuse ? [ 388.342563][ T5879] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 40, using maximum allowed: 30 [ 388.472766][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 40 [ 388.578850][ T5879] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 388.651216][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.806450][ T5879] usb 5-1: config 0 descriptor?? [ 390.153729][ T8845] TC_ACT_REPEAT abuse ? [ 390.158305][ C1] TC_ACT_REPEAT abuse ? [ 390.471964][ T8844] loop4: detected capacity change from 0 to 8192 [ 390.495388][ T2922] TC_ACT_REPEAT abuse ? [ 390.500006][ C1] TC_ACT_REPEAT abuse ? [ 390.545694][ T6137] TC_ACT_REPEAT abuse ? [ 390.550395][ C1] TC_ACT_REPEAT abuse ? [ 390.560650][ T5955] TC_ACT_REPEAT abuse ? [ 390.565385][ C0] TC_ACT_REPEAT abuse ? [ 390.588328][ T5879] usb 5-1: can't set config #0, error -71 [ 390.612593][ T8844] loop4: p2 p3 p4 [ 390.616452][ T8844] loop4: partition table partially beyond EOD, truncated [ 390.623919][ T8844] loop4: p2 start 2936012800 is beyond EOD, truncated [ 390.630736][ T8844] loop4: p3 start 1912602624 is beyond EOD, truncated [ 390.637663][ T8844] loop4: p4 size 656640 extends beyond EOD, truncated [ 390.714310][ T5879] usb 5-1: USB disconnect, device number 12 [ 391.083473][ T8857] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 391.412840][ T8848] udevd[8848]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 391.500301][ T8868] tipc: Enabled bearer , priority 0 [ 391.529363][ T8868] syzkaller0: entered promiscuous mode [ 391.547895][ T8868] syzkaller0: entered allmulticast mode [ 391.670988][ T8868] tipc: Resetting bearer [ 392.070659][ T8867] tipc: Resetting bearer [ 392.561543][ T970] tipc: Node number set to 1603607620 [ 392.635002][ T8867] tipc: Disabling bearer [ 393.334407][ T8888] net_ratelimit: 5 callbacks suppressed [ 393.334423][ T8888] TC_ACT_REPEAT abuse ? [ 393.344780][ C0] TC_ACT_REPEAT abuse ? [ 393.426409][ T8888] loop4: detected capacity change from 0 to 8192 [ 394.074864][ T1098] TC_ACT_REPEAT abuse ? [ 394.079589][ C0] TC_ACT_REPEAT abuse ? [ 394.549325][ T8892] TC_ACT_REPEAT abuse ? [ 394.578362][ T8892] TC_ACT_REPEAT abuse ? [ 394.594159][ T8892] TC_ACT_REPEAT abuse ? [ 394.619597][ T8893] TC_ACT_REPEAT abuse ? [ 394.640032][ T8893] TC_ACT_REPEAT abuse ? [ 394.696616][ T8893] TC_ACT_REPEAT abuse ? [ 395.286056][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 395.732763][ T8899] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 395.759765][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 395.787134][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 395.799060][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 395.838901][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 397.330303][ T8890] loop1: detected capacity change from 0 to 40427 [ 397.341148][ T8890] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 397.361362][ T8890] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 397.383954][ T8890] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 397.397943][ T8890] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-4) [ 399.731086][ T8929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.799'. [ 399.794144][ T2908] net_ratelimit: 55 callbacks suppressed [ 399.794158][ T2908] TC_ACT_REPEAT abuse ? [ 399.804875][ C0] TC_ACT_REPEAT abuse ? [ 401.683534][ T6137] TC_ACT_REPEAT abuse ? [ 401.688065][ C1] TC_ACT_REPEAT abuse ? [ 402.030658][ T8948] TC_ACT_REPEAT abuse ? [ 402.035392][ C0] TC_ACT_REPEAT abuse ? [ 402.713405][ T6137] TC_ACT_REPEAT abuse ? [ 402.718022][ C1] TC_ACT_REPEAT abuse ? [ 403.482792][ T8956] TC_ACT_REPEAT abuse ? [ 403.488217][ C0] TC_ACT_REPEAT abuse ? [ 403.886599][ T8947] loop0: detected capacity change from 0 to 40427 [ 403.922845][ T8947] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 403.950440][ T8947] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 403.975895][ T8947] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 404.082240][ T8947] F2FS-fs (loop0): Found nat_bits in checkpoint [ 404.277664][ T8947] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 404.292006][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 404.502416][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 404.613158][ T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 404.660326][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 404.734778][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 404.862957][ T8947] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 404.870596][ T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 404.937032][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 404.998784][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.279164][ T27] usb 2-1: GET_CAPABILITIES returned 0 [ 405.300620][ T27] usbtmc 2-1:16.0: can't read capabilities [ 405.513006][ C0] net_ratelimit: 5 callbacks suppressed [ 405.513024][ C0] TC_ACT_REPEAT abuse ? [ 405.527279][ T6137] TC_ACT_REPEAT abuse ? [ 405.531869][ C1] TC_ACT_REPEAT abuse ? [ 405.577845][ T27] usb 2-1: USB disconnect, device number 8 [ 405.983903][ T8981] loop0: detected capacity change from 0 to 8192 [ 406.629356][ T8981] loop0: p2 p3 p4 [ 406.633245][ T8981] loop0: partition table partially beyond EOD, truncated [ 406.640507][ T8981] loop0: p2 start 2936012800 is beyond EOD, truncated [ 406.647434][ T8981] loop0: p3 start 1912602624 is beyond EOD, truncated [ 406.654380][ T8981] loop0: p4 size 656640 extends beyond EOD, truncated [ 406.786047][ T5158] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 406.826816][ T5158] Buffer I/O error on dev loop0, logical block 0, async page read [ 406.864527][ T5158] ldm_validate_partition_table(): Disk read failed. [ 406.891569][ T5158] Dev loop0: unable to read RDB block 0 [ 406.908580][ T5158] loop0: unable to read partition table [ 406.922320][ T5158] loop0: partition table beyond EOD, truncated [ 407.150422][ T8848] udevd[8848]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 407.426232][ T8985] kvm: pic: non byte read [ 407.433616][ T6137] TC_ACT_REPEAT abuse ? [ 407.438190][ C1] TC_ACT_REPEAT abuse ? [ 407.472290][ T8985] kvm: pic: level sensitive irq not supported [ 407.472525][ T8985] kvm: pic: non byte read [ 407.495973][ T8985] kvm: pic: level sensitive irq not supported [ 407.496048][ T8985] kvm: pic: non byte read [ 407.932138][ T5879] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 408.031825][ T8997] serio: Serial port ptm0 [ 408.074126][ T6011] TC_ACT_REPEAT abuse ? [ 408.078801][ C1] TC_ACT_REPEAT abuse ? [ 408.126357][ T5879] usb 2-1: Using ep0 maxpacket: 16 [ 408.148222][ T5879] usb 2-1: config 0 has no interfaces? [ 408.165632][ T5879] usb 2-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 408.195679][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.232209][ T5879] usb 2-1: Product: syz [ 408.252084][ T5879] usb 2-1: Manufacturer: syz [ 408.267699][ T5879] usb 2-1: SerialNumber: syz [ 408.294863][ T5879] usb 2-1: config 0 descriptor?? [ 408.486700][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'. [ 408.671221][ T8991] ptrace attach of "./syz-executor exec"[5790] was attempted by "./syz-executor exec"[8991] [ 409.001040][ T9011] TC_ACT_REPEAT abuse ? [ 409.005700][ C0] TC_ACT_REPEAT abuse ? [ 409.087680][ T9011] loop4: detected capacity change from 0 to 8192 [ 409.652157][ T9011] loop4: p2 p3 p4 [ 409.656021][ T9011] loop4: partition table partially beyond EOD, truncated [ 409.663360][ T9011] loop4: p2 start 2936012800 is beyond EOD, truncated [ 409.670260][ T9011] loop4: p3 start 1912602624 is beyond EOD, truncated [ 409.677307][ T9011] loop4: p4 size 656640 extends beyond EOD, truncated [ 409.822196][ T5158] loop4: p2 p3 p4 [ 409.826011][ T5158] loop4: partition table partially beyond EOD, truncated [ 409.949501][ T5158] loop4: p2 start 2936012800 is beyond EOD, truncated [ 409.956724][ T5158] loop4: p3 start 1912602624 is beyond EOD, truncated [ 409.964084][ T5158] loop4: p4 size 656640 extends beyond EOD, truncated [ 410.164222][ T8848] udevd[8848]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 410.230254][ T8848] udevd[8848]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 410.382292][ T27] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 411.143711][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 411.165703][ T27] usb 5-1: unable to get BOS descriptor or descriptor too short [ 411.188362][ T27] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 411.199906][ T27] usb 5-1: config 0 has no interface number 0 [ 411.206524][ T27] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 411.220490][ T27] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 411.235290][ T27] usb 5-1: config 0 interface 88 has no altsetting 0 [ 411.256195][ T27] usb 5-1: string descriptor 0 read error: -22 [ 411.277608][ T27] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 411.288626][ T6137] TC_ACT_REPEAT abuse ? [ 411.293400][ C0] TC_ACT_REPEAT abuse ? [ 411.318131][ T27] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 411.336946][ T27] usb 5-1: config 0 descriptor?? [ 411.380802][ T27] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input15 [ 411.514005][ T5955] usb 2-1: USB disconnect, device number 9 [ 411.571212][ T8842] udevd[8842]: Error opening device "/dev/input/event4": Input/output error [ 411.610210][ T8842] udevd[8842]: Unable to EVIOCGABS device "/dev/input/event4" [ 411.642346][ T5879] usb 5-1: USB disconnect, device number 13 [ 411.648813][ T8842] udevd[8842]: Unable to EVIOCGABS device "/dev/input/event4" [ 412.318502][ T9037] loop0: detected capacity change from 0 to 8192 [ 412.492719][ T27] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 412.700027][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.711297][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 412.730158][ T27] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 413.002345][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 413.031080][ T27] usb 2-1: SerialNumber: syz [ 413.199514][ T34] TC_ACT_REPEAT abuse ? [ 413.204287][ C1] TC_ACT_REPEAT abuse ? [ 413.230074][ T6137] TC_ACT_REPEAT abuse ? [ 413.235044][ C1] TC_ACT_REPEAT abuse ? [ 413.342920][ T27] usb 2-1: 0:2 : does not exist [ 413.412569][ T27] usb 2-1: USB disconnect, device number 10 [ 413.526433][ T8842] udevd[8842]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 415.026197][ T9054] TC_ACT_REPEAT abuse ? [ 415.037368][ T9054] TC_ACT_REPEAT abuse ? [ 415.044589][ T9054] TC_ACT_REPEAT abuse ? [ 415.053255][ T9053] TC_ACT_REPEAT abuse ? [ 415.074425][ T9041] loop4: detected capacity change from 0 to 40427 [ 415.101828][ T9041] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 415.142978][ T9041] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 415.170847][ T9041] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 415.204834][ T9041] F2FS-fs (loop4): Found nat_bits in checkpoint [ 415.421021][ T9041] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 415.424292][ T27] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 415.456385][ T9041] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 417.097891][ T1098] net_ratelimit: 3 callbacks suppressed [ 417.097911][ T1098] TC_ACT_REPEAT abuse ? [ 417.108237][ C0] TC_ACT_REPEAT abuse ? [ 417.214492][ T6432] syz-executor: attempt to access beyond end of device [ 417.214492][ T6432] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 417.231445][ T6432] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 417.239020][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 417.246601][ T27] usb 1-1: no configurations [ 417.251727][ T27] usb 1-1: can't read configurations, error -22 [ 417.402225][ T27] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 417.472242][ T5879] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 417.602111][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 417.608232][ T27] usb 1-1: no configurations [ 417.619374][ T27] usb 1-1: can't read configurations, error -22 [ 417.626468][ T27] usb usb1-port1: attempt power cycle [ 417.687129][ T5879] usb 2-1: config 8 has an invalid interface number: 101 but max is 0 [ 417.699165][ T5879] usb 2-1: config 8 has no interface number 0 [ 417.707467][ T5879] usb 2-1: config 8 interface 101 has no altsetting 0 [ 417.719425][ T5879] usb 2-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 417.729195][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.062751][ T27] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 418.320219][ T6011] TC_ACT_REPEAT abuse ? [ 418.325047][ C1] TC_ACT_REPEAT abuse ? [ 418.396180][ T27] usb 1-1: device descriptor read/8, error -71 [ 418.453129][ T9072] syzkaller0: entered promiscuous mode [ 418.458782][ T9072] syzkaller0: entered allmulticast mode [ 418.501914][ T9072] tipc: Enabled bearer , priority 0 [ 418.533519][ T9072] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 418.624898][ T9071] tipc: Resetting bearer [ 418.735557][ T9071] tipc: Disabling bearer [ 418.802206][ T5879] usb 2-1: string descriptor 0 read error: -71 [ 418.834018][ T5879] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 418.854694][ T5879] gspca_sunplus: reg_w_riv err -71 [ 418.868106][ T5879] sunplus: probe of 2-1:8.101 failed with error -71 [ 418.883740][ T5879] usb 2-1: USB disconnect, device number 11 [ 419.053964][ T6137] TC_ACT_REPEAT abuse ? [ 419.058801][ C1] TC_ACT_REPEAT abuse ? [ 419.151581][ T9096] TC_ACT_REPEAT abuse ? [ 419.156437][ C0] TC_ACT_REPEAT abuse ? [ 419.238384][ T9096] loop4: detected capacity change from 0 to 8192 [ 419.896805][ T9096] loop4: p2 p3 p4 [ 419.900732][ T9096] loop4: partition table partially beyond EOD, truncated [ 419.908145][ T9096] loop4: p2 start 2936012800 is beyond EOD, truncated [ 419.915113][ T9096] loop4: p3 start 1912602624 is beyond EOD, truncated [ 419.922068][ T9096] loop4: p4 size 656640 extends beyond EOD, truncated [ 421.031869][ T8848] udevd[8848]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 421.218808][ T8848] udevd[8848]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 422.262198][ T9102] loop4: detected capacity change from 0 to 40427 [ 422.291408][ T9102] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 422.332213][ T9102] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 422.378662][ T9102] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 422.433268][ T9102] F2FS-fs (loop4): Found nat_bits in checkpoint [ 423.419038][ T2922] TC_ACT_REPEAT abuse ? [ 423.423827][ C0] TC_ACT_REPEAT abuse ? [ 423.440775][ T2922] TC_ACT_REPEAT abuse ? [ 423.445327][ C0] TC_ACT_REPEAT abuse ? [ 423.466431][ T9133] befs: (nullb0): No write support. Marking filesystem read-only [ 423.490341][ T9133] befs: (nullb0): invalid magic header [ 423.789196][ T5955] IPVS: starting estimator thread 0... [ 423.884854][ T9140] TC_ACT_REPEAT abuse ? [ 423.889599][ C0] TC_ACT_REPEAT abuse ? [ 424.102779][ T9138] IPVS: using max 16 ests per chain, 38400 per kthread [ 424.722773][ T1098] TC_ACT_REPEAT abuse ? [ 424.727501][ C1] TC_ACT_REPEAT abuse ? [ 426.186104][ T9149] netlink: set zone limit has 8 unknown bytes [ 427.148658][ T9155] netlink: 16 bytes leftover after parsing attributes in process `syz.4.869'. [ 427.687324][ T9167] loop0: detected capacity change from 0 to 8192 [ 428.326109][ T9167] loop0: p2 p3 p4 [ 428.329927][ T9167] loop0: partition table partially beyond EOD, truncated [ 428.337309][ T9167] loop0: p2 start 2936012800 is beyond EOD, truncated [ 428.344408][ T9167] loop0: p3 start 1912602624 is beyond EOD, truncated [ 428.351216][ T9167] loop0: p4 size 656640 extends beyond EOD, truncated [ 428.577624][ T6011] TC_ACT_REPEAT abuse ? [ 428.582231][ C0] TC_ACT_REPEAT abuse ? [ 428.936782][ T8848] udevd[8848]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 430.575793][ T34] TC_ACT_REPEAT abuse ? [ 430.580312][ C1] TC_ACT_REPEAT abuse ? [ 430.600691][ T6011] TC_ACT_REPEAT abuse ? [ 430.605437][ C1] TC_ACT_REPEAT abuse ? [ 430.866828][ T8848] udevd[8848]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 432.020090][ T9181] binder: 9178:9181 unknown command 1915712101 [ 432.037275][ T9181] binder: 9178:9181 ioctl c0306201 200000000080 returned -22 [ 433.695106][ T27] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 433.723120][ T6011] TC_ACT_REPEAT abuse ? [ 433.727752][ C0] TC_ACT_REPEAT abuse ? [ 433.819407][ T9207] TC_ACT_REPEAT abuse ? [ 433.824539][ C0] TC_ACT_REPEAT abuse ? [ 433.907101][ T9207] loop4: detected capacity change from 0 to 8192 [ 434.686795][ T27] usb 2-1: no configurations [ 434.724078][ T27] usb 2-1: can't read configurations, error -22 [ 435.612188][ T27] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 435.673233][ T9216] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 435.764024][ T9216] CIFS mount error: No usable UNC path provided in device string! [ 435.764024][ T9216] [ 435.788539][ T9216] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 436.042236][ T970] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 436.265537][ T970] usb 1-1: Using ep0 maxpacket: 16 [ 436.272195][ T48] TC_ACT_REPEAT abuse ? [ 436.276929][ C1] TC_ACT_REPEAT abuse ? [ 436.283013][ T6137] TC_ACT_REPEAT abuse ? [ 436.287628][ C1] TC_ACT_REPEAT abuse ? [ 436.305182][ T970] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 437.282527][ T970] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.308982][ T970] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 437.324159][ T970] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 437.352556][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.360717][ T970] usb 1-1: Product: syz [ 437.372181][ T970] usb 1-1: Manufacturer: syz [ 437.376864][ T970] usb 1-1: SerialNumber: syz [ 437.776360][ T9225] loop4: detected capacity change from 0 to 40427 [ 437.819099][ T9225] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 437.861002][ T9225] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 437.882986][ T9225] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 437.907678][ T9225] F2FS-fs (loop4): Found nat_bits in checkpoint [ 437.922835][ T970] usb 1-1: 0:2 : does not exist [ 438.890129][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 438.897742][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 438.905623][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 438.914442][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 438.922078][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 438.929687][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 438.952513][ T970] usb 1-1: USB disconnect, device number 19 [ 439.067615][ T8848] udevd[8848]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.424966][ T9247] TC_ACT_REPEAT abuse ? [ 439.429575][ C0] TC_ACT_REPEAT abuse ? [ 439.548187][ T6137] TC_ACT_REPEAT abuse ? [ 439.553014][ C0] TC_ACT_REPEAT abuse ? [ 440.630233][ T28] audit: type=1326 audit(1757859788.252:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b458eba9 code=0x7ffc0000 [ 440.720543][ T28] audit: type=1326 audit(1757859788.282:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b458eba9 code=0x7ffc0000 [ 440.792334][ T28] audit: type=1326 audit(1757859788.282:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f27b458eba9 code=0x7ffc0000 [ 440.824374][ T28] audit: type=1326 audit(1757859788.302:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b458eba9 code=0x7ffc0000 [ 440.902216][ T28] audit: type=1326 audit(1757859788.302:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b458eba9 code=0x7ffc0000 [ 440.969492][ T28] audit: type=1326 audit(1757859788.312:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f27b458eba9 code=0x7ffc0000 [ 440.998356][ T28] audit: type=1326 audit(1757859788.312:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b458eba9 code=0x7ffc0000 [ 441.021594][ T28] audit: type=1326 audit(1757859788.312:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b458eba9 code=0x7ffc0000 [ 441.044585][ T28] audit: type=1326 audit(1757859788.402:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f27b458eba9 code=0x7ffc0000 [ 441.067799][ T28] audit: type=1326 audit(1757859788.452:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b458eba9 code=0x7ffc0000 [ 441.102333][ T5839] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 441.294482][ T5839] usb 2-1: config 8 has an invalid interface number: 101 but max is 0 [ 441.318844][ T5839] usb 2-1: config 8 has no interface number 0 [ 441.339790][ T5839] usb 2-1: config 8 interface 101 has no altsetting 0 [ 441.437574][ T5839] usb 2-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 441.471247][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.751911][ T9258] syzkaller0: entered promiscuous mode [ 441.765306][ T9258] syzkaller0: entered allmulticast mode [ 441.781830][ T9258] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 441.941758][ T5839] usb 2-1: string descriptor 0 read error: -71 [ 441.954204][ T5839] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 441.971583][ T5839] gspca_sunplus: reg_w_riv err -71 [ 441.980942][ T5839] sunplus: probe of 2-1:8.101 failed with error -71 [ 442.000615][ T34] TC_ACT_REPEAT abuse ? [ 442.003769][ T5839] usb 2-1: USB disconnect, device number 14 [ 442.005439][ C0] TC_ACT_REPEAT abuse ? [ 442.019667][ T2922] TC_ACT_REPEAT abuse ? [ 442.024558][ C0] TC_ACT_REPEAT abuse ? [ 444.285033][ T9278] loop0: detected capacity change from 0 to 8192 [ 445.203755][ T2908] TC_ACT_REPEAT abuse ? [ 445.208502][ C0] TC_ACT_REPEAT abuse ? [ 445.362652][ T5865] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 445.732133][ T9304] TC_ACT_REPEAT abuse ? [ 445.736761][ C0] TC_ACT_REPEAT abuse ? [ 445.893488][ T5865] usb 1-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 446.541626][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.548168][ T5865] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 446.558501][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.580914][ T5865] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 446.615765][ T5865] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 446.625266][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.655628][ T5865] usb 1-1: Product: syz [ 446.659865][ T5865] usb 1-1: Manufacturer: syz [ 446.683600][ T5865] usb 1-1: SerialNumber: syz [ 447.107301][ T5865] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 447.135302][ T5865] cdc_ncm 1-1:1.0: bind() failure [ 447.186292][ T5865] usb 1-1: USB disconnect, device number 20 [ 447.775539][ T2922] TC_ACT_REPEAT abuse ? [ 447.780277][ C1] TC_ACT_REPEAT abuse ? [ 447.808349][ T1098] TC_ACT_REPEAT abuse ? [ 447.813081][ C1] TC_ACT_REPEAT abuse ? [ 449.486894][ T9334] TC_ACT_REPEAT abuse ? [ 449.492416][ C0] TC_ACT_REPEAT abuse ? [ 450.472503][ T5879] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 450.535130][ T9323] loop1: detected capacity change from 0 to 40427 [ 450.546375][ T9323] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 450.611426][ T9323] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 450.909558][ T9323] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 450.953177][ T2922] TC_ACT_REPEAT abuse ? [ 450.957824][ C1] TC_ACT_REPEAT abuse ? [ 450.973824][ T5879] usb 5-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 451.029878][ T9323] F2FS-fs (loop1): Found nat_bits in checkpoint [ 451.038563][ T5879] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 451.049417][ T5879] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 451.065433][ T5879] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 451.083238][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.119776][ T5879] usb 5-1: Product: syz [ 451.137365][ T5879] usb 5-1: Manufacturer: syz [ 451.145500][ T9323] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 451.153218][ T5879] usb 5-1: SerialNumber: syz [ 451.155384][ T9323] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 452.118039][ T5790] syz-executor: attempt to access beyond end of device [ 452.118039][ T5790] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 452.211888][ T5790] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 452.243618][ T5879] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 452.250678][ T5879] cdc_ncm 5-1:1.0: bind() failure [ 452.325485][ T5879] usb 5-1: USB disconnect, device number 14 [ 452.472313][ T5865] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 452.686631][ T5865] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 452.708946][ T5865] usb 1-1: config index 0 descriptor too short (expected 49341, got 27) [ 452.727918][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.789834][ T5865] usb 1-1: config 0 has no interfaces? [ 452.814660][ T5865] usb 1-1: config index 1 descriptor too short (expected 49341, got 27) [ 452.833397][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.854005][ T5865] usb 1-1: config 0 has no interfaces? [ 452.861336][ T5865] usb 1-1: config index 2 descriptor too short (expected 49341, got 27) [ 452.883316][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.906987][ T5865] usb 1-1: config 0 has no interfaces? [ 452.938075][ T5865] usb 1-1: config index 3 descriptor too short (expected 49341, got 27) [ 452.963548][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.006584][ T5865] usb 1-1: config 0 has no interfaces? [ 453.277664][ T5865] usb 1-1: config index 4 descriptor too short (expected 49341, got 27) [ 453.287317][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.297840][ T5865] usb 1-1: config 0 has no interfaces? [ 453.308125][ T5865] usb 1-1: config index 5 descriptor too short (expected 49341, got 27) [ 453.320554][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.514359][ T1098] TC_ACT_REPEAT abuse ? [ 453.519043][ C0] TC_ACT_REPEAT abuse ? [ 453.525540][ T2908] TC_ACT_REPEAT abuse ? [ 453.530173][ C0] TC_ACT_REPEAT abuse ? [ 454.012472][ T5865] usb 1-1: config 0 has no interfaces? [ 454.035719][ T5865] usb 1-1: config index 6 descriptor too short (expected 49341, got 27) [ 454.044697][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.072142][ T5865] usb 1-1: config 0 has no interfaces? [ 454.090874][ T5865] usb 1-1: config index 7 descriptor too short (expected 49341, got 27) [ 454.102628][ T5879] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 454.109707][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.133691][ T5865] usb 1-1: config 0 has no interfaces? [ 454.142909][ T5865] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 454.154332][ T5865] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 454.163189][ T5865] usb 1-1: Product: syz [ 454.167408][ T5865] usb 1-1: Manufacturer: syz [ 454.172335][ T5865] usb 1-1: SerialNumber: syz [ 454.180692][ T5865] usb 1-1: config 0 descriptor?? [ 454.443731][ T5865] usb 1-1: USB disconnect, device number 21 [ 454.822230][ T5879] usb 2-1: Using ep0 maxpacket: 8 [ 454.833651][ T5879] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 454.848689][ T5879] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 454.867333][ T5879] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 454.877965][ T5879] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.895799][ T5879] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 454.906134][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.128636][ T5879] usb 2-1: usb_control_msg returned -71 [ 456.222647][ T5879] usbtmc 2-1:16.0: can't read capabilities [ 456.248903][ T5879] usb 2-1: USB disconnect, device number 15 [ 456.572122][ T5865] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 456.717493][ T2922] TC_ACT_REPEAT abuse ? [ 456.722144][ C0] TC_ACT_REPEAT abuse ? [ 456.774141][ T5865] usb 5-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 456.798051][ T5865] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 456.820946][ T5865] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 456.860515][ T5865] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 456.878680][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.889757][ T5865] usb 5-1: Product: syz [ 456.916121][ T5865] usb 5-1: Manufacturer: syz [ 456.920807][ T5865] usb 5-1: SerialNumber: syz [ 457.462117][ T9425] tipc: Started in network mode [ 457.467154][ T9425] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 457.480005][ T9425] tipc: Enabled bearer , priority 10 [ 457.546198][ T5865] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 457.575946][ T5865] cdc_ncm 5-1:1.0: bind() failure [ 457.621915][ T5865] usb 5-1: USB disconnect, device number 15 [ 458.478881][ T8] tipc: Node number set to 4269801488 [ 459.559587][ T6137] TC_ACT_REPEAT abuse ? [ 459.564360][ C1] TC_ACT_REPEAT abuse ? [ 459.693939][ T5879] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 459.702319][ T9442] wireguard0: entered promiscuous mode [ 459.707961][ T9442] wireguard0: entered allmulticast mode [ 459.858604][ T9453] netlink: 'syz.1.961': attribute type 1 has an invalid length. [ 460.283033][ T5879] usb 1-1: Using ep0 maxpacket: 8 [ 460.395628][ T5879] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 460.488954][ T5879] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 460.598164][ T5879] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 460.682165][ T5879] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 460.751470][ T5879] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 460.785914][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.071129][ T5879] usb 1-1: usb_control_msg returned -71 [ 461.095367][ T5879] usbtmc 1-1:16.0: can't read capabilities [ 461.254959][ T5879] usb 1-1: USB disconnect, device number 22 [ 461.842938][ C1] TC_ACT_REPEAT abuse ? [ 462.482730][ T6137] TC_ACT_REPEAT abuse ? [ 462.487261][ C1] TC_ACT_REPEAT abuse ? [ 463.281071][ T5879] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 463.474204][ T5879] usb 2-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 463.665448][ T5879] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 464.109217][ T5879] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 464.498295][ T5879] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 464.550967][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.612827][ T5879] usb 2-1: Product: syz [ 464.642229][ T5879] usb 2-1: Manufacturer: syz [ 464.664197][ T5879] usb 2-1: SerialNumber: syz [ 464.871959][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.972'. [ 464.882617][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.972'. [ 464.891907][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.972'. [ 464.901027][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.972'. [ 465.035259][ T6137] TC_ACT_REPEAT abuse ? [ 465.040296][ C1] TC_ACT_REPEAT abuse ? [ 465.179216][ T5879] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 465.197518][ T5879] cdc_ncm 2-1:1.0: bind() failure [ 465.218720][ T5879] usb 2-1: USB disconnect, device number 16 [ 467.707684][ T1098] TC_ACT_REPEAT abuse ? [ 467.712477][ C1] TC_ACT_REPEAT abuse ? [ 470.176021][ T6137] TC_ACT_REPEAT abuse ? [ 470.180723][ C1] TC_ACT_REPEAT abuse ? [ 472.083688][ T1098] TC_ACT_REPEAT abuse ? [ 472.088364][ C1] TC_ACT_REPEAT abuse ? [ 473.209202][ T9569] trusted_key: encrypted_key: key user:syz not found [ 473.992768][ T6011] TC_ACT_REPEAT abuse ? [ 474.004116][ C1] TC_ACT_REPEAT abuse ? [ 475.371554][ T34] TC_ACT_REPEAT abuse ? [ 475.376406][ C0] TC_ACT_REPEAT abuse ? [ 476.092157][ T5955] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 476.272398][ T5955] usb 2-1: Using ep0 maxpacket: 8 [ 476.279836][ T5955] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 476.297289][ T5955] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 476.308416][ T5955] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 476.327238][ T5955] usb 2-1: Product: syz [ 476.331481][ T5955] usb 2-1: Manufacturer: syz [ 476.346676][ T5955] usb 2-1: SerialNumber: syz [ 476.391845][ T9599] overlayfs: failed to clone lowerpath [ 476.732679][ T5955] usb 2-1: Invalid connection information received from device [ 477.073430][ T9604] 9pnet_fd: Insufficient options for proto=fd [ 477.196114][ T9605] TC_ACT_REPEAT abuse ? [ 477.235440][ T9605] TC_ACT_REPEAT abuse ? [ 477.401197][ T9605] TC_ACT_REPEAT abuse ? [ 477.420674][ T9605] TC_ACT_REPEAT abuse ? [ 477.445403][ T9605] TC_ACT_REPEAT abuse ? [ 477.837636][ T6137] TC_ACT_REPEAT abuse ? [ 479.272800][ C1] net_ratelimit: 5 callbacks suppressed [ 479.272825][ C1] TC_ACT_REPEAT abuse ? [ 479.283997][ C1] TC_ACT_REPEAT abuse ? [ 479.288788][ C1] TC_ACT_REPEAT abuse ? [ 479.294985][ C1] TC_ACT_REPEAT abuse ? [ 479.300302][ C1] TC_ACT_REPEAT abuse ? [ 479.305322][ C1] TC_ACT_REPEAT abuse ? [ 479.354004][ C1] TC_ACT_REPEAT abuse ? [ 479.358905][ C1] TC_ACT_REPEAT abuse ? [ 479.363929][ C1] TC_ACT_REPEAT abuse ? [ 479.369670][ C1] TC_ACT_REPEAT abuse ? [ 479.459332][ T5865] usb 2-1: USB disconnect, device number 17 [ 481.556183][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 481.556200][ T28] audit: type=1800 audit(1757859829.172:380): pid=9641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1019" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 482.751231][ T5955] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 482.968661][ T5955] usb 2-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 482.989531][ T5955] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 483.014327][ T5955] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 483.045032][ T5955] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 483.062178][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.086661][ T5955] usb 2-1: Product: syz [ 483.094845][ T5955] usb 2-1: Manufacturer: syz [ 483.172278][ T5955] usb 2-1: SerialNumber: syz [ 484.278221][ T5955] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 484.297784][ T5955] cdc_ncm 2-1:1.0: bind() failure [ 484.318309][ T5955] usb 2-1: USB disconnect, device number 18 [ 485.804730][ T9676] loop0: detected capacity change from 0 to 40427 [ 485.817058][ T9676] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 485.834609][ T9676] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 485.851932][ T9676] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 485.985289][ T9676] F2FS-fs (loop0): Found nat_bits in checkpoint [ 486.108070][ T9676] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 486.120425][ T9676] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 486.864882][ T2922] net_ratelimit: 14 callbacks suppressed [ 486.864902][ T2922] TC_ACT_REPEAT abuse ? [ 486.875306][ C1] TC_ACT_REPEAT abuse ? [ 486.894580][ T6137] TC_ACT_REPEAT abuse ? [ 486.899196][ C1] TC_ACT_REPEAT abuse ? [ 487.152811][ T5787] syz-executor: attempt to access beyond end of device [ 487.152811][ T5787] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 487.155904][ T9701] TC_ACT_REPEAT abuse ? [ 487.174235][ T9701] TC_ACT_REPEAT abuse ? [ 487.178827][ T9701] TC_ACT_REPEAT abuse ? [ 487.185838][ T9700] TC_ACT_REPEAT abuse ? [ 487.194467][ T9700] TC_ACT_REPEAT abuse ? [ 487.201827][ T5787] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 487.449015][ T9710] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 489.060188][ T9727] overlayfs: failed to clone upperpath [ 489.356390][ T48] TC_ACT_REPEAT abuse ? [ 489.771020][ T5839] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 490.136263][ T5839] usb 1-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 490.178599][ T5839] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 490.213846][ T5839] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 490.255206][ T5839] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 490.266006][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.274747][ T5839] usb 1-1: Product: syz [ 490.281925][ T5839] usb 1-1: Manufacturer: syz [ 490.287348][ T5839] usb 1-1: SerialNumber: syz [ 490.307652][ T9743] capability: warning: `syz.3.1053' uses deprecated v2 capabilities in a way that may be insecure [ 490.463108][ T9729] loop1: detected capacity change from 0 to 40427 [ 490.480417][ T9729] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 490.490597][ T9729] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 490.517567][ T9729] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 490.551902][ T9729] F2FS-fs (loop1): Found nat_bits in checkpoint [ 490.728727][ T5839] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 490.737421][ T9729] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 490.748302][ T9729] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 490.752764][ T5839] cdc_ncm 1-1:1.0: bind() failure [ 490.780241][ T5839] usb 1-1: USB disconnect, device number 23 [ 491.750553][ T5790] syz-executor: attempt to access beyond end of device [ 491.750553][ T5790] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 491.774222][ T5790] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 491.976581][ T9766] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1059'. [ 492.965179][ T34] net_ratelimit: 3 callbacks suppressed [ 492.965193][ T34] TC_ACT_REPEAT abuse ? [ 492.975453][ C1] TC_ACT_REPEAT abuse ? [ 493.455077][ T9779] TC_ACT_REPEAT abuse ? [ 493.459646][ C0] TC_ACT_REPEAT abuse ? [ 494.306526][ T9782] TC_ACT_REPEAT abuse ? [ 494.311136][ T9782] TC_ACT_REPEAT abuse ? [ 494.346350][ T9782] TC_ACT_REPEAT abuse ? [ 494.369013][ T9782] TC_ACT_REPEAT abuse ? [ 494.386654][ T9782] TC_ACT_REPEAT abuse ? [ 494.392134][ T9780] TC_ACT_REPEAT abuse ? [ 494.877196][ T9788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1058'. [ 495.560525][ T9789] lo: Caught tx_queue_len zero misconfig [ 495.600859][ T9789] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 497.012191][ T5839] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 497.384223][ T5839] usb 2-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 497.399070][ T5839] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 497.409027][ T5839] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 498.317441][ T6137] net_ratelimit: 2 callbacks suppressed [ 498.317461][ T6137] TC_ACT_REPEAT abuse ? [ 498.327912][ C0] TC_ACT_REPEAT abuse ? [ 498.364659][ T5839] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 498.388538][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.396720][ T5839] usb 2-1: Product: syz [ 498.400918][ T5839] usb 2-1: Manufacturer: syz [ 498.405852][ T5839] usb 2-1: SerialNumber: syz [ 498.658665][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1076'. [ 498.816268][ T5839] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 498.842524][ T5839] cdc_ncm 2-1:1.0: bind() failure [ 498.852757][ T5839] usb 2-1: USB disconnect, device number 19 [ 499.892289][ T9839] TC_ACT_REPEAT abuse ? [ 499.896982][ C1] TC_ACT_REPEAT abuse ? [ 500.873127][ T34] TC_ACT_REPEAT abuse ? [ 500.877837][ C0] TC_ACT_REPEAT abuse ? [ 502.246414][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1087'. [ 503.587831][ T9873] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 1, id = 0 [ 504.073812][ T2922] TC_ACT_REPEAT abuse ? [ 504.078494][ C0] TC_ACT_REPEAT abuse ? [ 505.993095][ T6011] TC_ACT_REPEAT abuse ? [ 505.997734][ C0] TC_ACT_REPEAT abuse ? [ 506.382328][ T9902] Bluetooth: MGMT ver 1.22 [ 506.723089][ T9904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1102'. [ 506.853539][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1106'. [ 506.924151][ T5955] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 507.072298][ T9919] TC_ACT_REPEAT abuse ? [ 507.076859][ T9919] TC_ACT_REPEAT abuse ? [ 507.081369][ T9919] TC_ACT_REPEAT abuse ? [ 507.446305][ T5955] usb 2-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 507.458642][ T5955] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 507.761105][ T5955] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 507.772882][ T9919] TC_ACT_REPEAT abuse ? [ 507.778609][ T9919] TC_ACT_REPEAT abuse ? [ 507.783261][ T9919] TC_ACT_REPEAT abuse ? [ 507.822542][ T5955] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 507.831748][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.870879][ T5955] usb 2-1: Product: syz [ 507.881280][ T5955] usb 2-1: Manufacturer: syz [ 507.886794][ T5955] usb 2-1: SerialNumber: syz [ 507.917542][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.924188][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.572526][ T5955] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 508.610810][ T5955] cdc_ncm 2-1:1.0: bind() failure [ 508.656937][ T5955] usb 2-1: USB disconnect, device number 20 [ 509.895325][ T34] net_ratelimit: 36 callbacks suppressed [ 509.895339][ T34] TC_ACT_REPEAT abuse ? [ 509.905687][ C1] TC_ACT_REPEAT abuse ? [ 510.792193][ T5865] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 511.144731][ T5865] usb 2-1: config 8 has an invalid interface number: 101 but max is 0 [ 511.158917][ T5865] usb 2-1: config 8 has no interface number 0 [ 511.167101][ T5865] usb 2-1: config 8 interface 101 has no altsetting 0 [ 511.180585][ T5865] usb 2-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 511.191720][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.188855][ T6011] TC_ACT_REPEAT abuse ? [ 512.193532][ C0] TC_ACT_REPEAT abuse ? [ 512.240895][ T9958] tipc: Enabled bearer , priority 0 [ 512.282899][ T9958] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 512.338191][ T9958] tipc: Resetting bearer [ 512.547098][ T9957] tipc: Disabling bearer [ 512.804678][ T5865] usb 2-1: string descriptor 0 read error: -71 [ 512.865484][ T5865] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 512.880281][ T5865] gspca_sunplus: reg_w_riv err -71 [ 512.886222][ T5865] sunplus: probe of 2-1:8.101 failed with error -71 [ 512.917818][ T5865] usb 2-1: USB disconnect, device number 21 [ 513.608243][ T9988] fuse: Bad value for 'fd' [ 514.437926][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1133'. [ 516.368274][T10018] tipc: Enabling of bearer rejected, failed to enable media [ 516.536323][T10013] loop0: detected capacity change from 0 to 40427 [ 516.571872][T10013] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 516.593462][T10013] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 516.616734][T10013] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 516.705022][T10013] F2FS-fs (loop0): Found nat_bits in checkpoint [ 516.871910][T10013] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 516.882247][T10013] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 517.514095][ T48] TC_ACT_REPEAT abuse ? [ 517.518721][ C1] TC_ACT_REPEAT abuse ? [ 517.834665][ T5787] syz-executor: attempt to access beyond end of device [ 517.834665][ T5787] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 517.892490][ T5787] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 520.592212][ T5955] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 520.698741][T10079] netlink: 'syz.1.1150': attribute type 4 has an invalid length. [ 520.835564][ T5955] usb 1-1: config 8 has an invalid interface number: 101 but max is 0 [ 520.872578][ T5955] usb 1-1: config 8 has no interface number 0 [ 520.882709][ T5955] usb 1-1: config 8 interface 101 has no altsetting 0 [ 520.906774][ T5955] usb 1-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 520.936582][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.236373][T10075] tipc: Enabled bearer , priority 0 [ 521.254972][T10075] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 521.321064][T10075] tipc: Resetting bearer [ 521.383899][T10074] tipc: Disabling bearer [ 521.463796][ T5955] usb 1-1: string descriptor 0 read error: -71 [ 521.474374][ T5955] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 521.519672][ T5955] gspca_sunplus: reg_w_riv err -71 [ 521.532675][ T5955] sunplus: probe of 1-1:8.101 failed with error -71 [ 521.611607][ T5955] usb 1-1: USB disconnect, device number 24 [ 521.693749][T10083] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1154'. [ 522.421816][T10078] netlink: 'syz.4.1153': attribute type 30 has an invalid length. [ 522.977779][T10098] capability: warning: `syz.0.1159' uses 32-bit capabilities (legacy support in use) [ 523.292824][ T48] TC_ACT_REPEAT abuse ? [ 523.297628][ C0] TC_ACT_REPEAT abuse ? [ 523.331143][ T5955] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 523.666533][ T5955] usb 1-1: Using ep0 maxpacket: 8 [ 523.692947][ T5955] usb 1-1: unable to get BOS descriptor or descriptor too short [ 523.736305][ T5955] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xEE, skipping [ 523.786696][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 523.815809][ T5955] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 523.840243][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 523.869717][ T5955] usb 1-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 523.927400][T10104] ksmbd: Unknown IPC event: 6, ignore. [ 523.981479][ T5955] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 524.009432][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.020689][ T5955] usb 1-1: Product: syz [ 524.031015][ T5955] usb 1-1: Manufacturer: syz [ 524.038688][ T5955] usb 1-1: SerialNumber: syz [ 524.061778][ T5955] usb 1-1: config 0 descriptor?? [ 524.069254][T10098] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 524.085844][ T5955] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 524.304758][ T5955] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 524.848431][ T9217] udevd[9217]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.941932][T10120] tipc: Enabling of bearer rejected, failed to enable media [ 525.702389][ T5955] usb 1-1: USB disconnect, device number 25 [ 525.804713][T10132] overlayfs: failed to clone upperpath [ 528.231015][T10156] overlayfs: failed to clone upperpath [ 528.252132][ T5865] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 528.432523][ T5865] usb 2-1: Using ep0 maxpacket: 8 [ 528.440279][ T5865] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 528.460676][ T5865] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 528.499639][ T5865] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 528.524549][ T5865] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.576469][ T5865] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 528.605918][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.871121][ T5865] usb 2-1: GET_CAPABILITIES returned 0 [ 528.905849][ T5865] usbtmc 2-1:16.0: can't read capabilities [ 529.033409][ T34] TC_ACT_REPEAT abuse ? [ 529.038031][ C0] TC_ACT_REPEAT abuse ? [ 529.130431][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 529.151653][T10153] usbtmc 2-1:16.0: Unable to send data, error -71 [ 529.212165][ T5955] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 529.378636][ T5879] usb 2-1: USB disconnect, device number 22 [ 529.453915][ T5955] usb 1-1: config 8 has an invalid interface number: 101 but max is 0 [ 529.471562][ T5955] usb 1-1: config 8 has no interface number 0 [ 529.478857][ T5955] usb 1-1: config 8 interface 101 has no altsetting 0 [ 529.487602][ T5955] usb 1-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 529.498441][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.776323][T10160] tipc: Enabled bearer , priority 0 [ 529.810560][T10160] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 529.857722][T10160] tipc: Resetting bearer [ 530.055653][T10159] tipc: Disabling bearer [ 530.303992][ T5955] usb 1-1: string descriptor 0 read error: -71 [ 530.360331][ T5955] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 530.370813][T10176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1186'. [ 530.399499][ T5955] gspca_sunplus: reg_w_riv err -71 [ 530.407479][ T5955] sunplus: probe of 1-1:8.101 failed with error -71 [ 530.483272][ T5955] usb 1-1: USB disconnect, device number 26 [ 532.571500][T10186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.603291][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1191'. [ 532.653519][T10188] bridge_slave_1: left allmulticast mode [ 532.672513][T10188] bridge_slave_1: left promiscuous mode [ 532.704115][T10188] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.741884][T10188] bridge_slave_0: left allmulticast mode [ 532.750762][T10188] bridge_slave_0: left promiscuous mode [ 532.757356][T10188] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.615415][T10216] tipc: Enabling of bearer rejected, failed to enable media [ 534.792895][ T34] TC_ACT_REPEAT abuse ? [ 534.797500][ C1] TC_ACT_REPEAT abuse ? [ 534.941867][T10226] hfsplus: unable to find HFS+ superblock [ 535.747886][T10236] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1204'. [ 536.977691][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1207'. [ 536.994491][T10242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1207'. [ 540.554056][ T48] TC_ACT_REPEAT abuse ? [ 540.558733][ C1] TC_ACT_REPEAT abuse ? [ 542.064400][T10291] Trying to write to read-only block-device nullb0 [ 545.673074][ T6137] TC_ACT_REPEAT abuse ? [ 545.677704][ C0] TC_ACT_REPEAT abuse ? [ 546.647558][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1232'. [ 546.786012][T10328] ksmbd: Unknown IPC event: 6, ignore. [ 551.557654][ T2922] TC_ACT_REPEAT abuse ? [ 551.562459][ C1] TC_ACT_REPEAT abuse ? [ 556.313468][T10410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1257'. [ 557.329812][ T48] TC_ACT_REPEAT abuse ? [ 557.334500][ C1] TC_ACT_REPEAT abuse ? [ 558.172363][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 560.182260][ T9] usb 1-1: device descriptor read/64, error -71 [ 560.232550][T10432] TC_ACT_REPEAT abuse ? [ 560.237095][T10432] TC_ACT_REPEAT abuse ? [ 560.442259][ C0] TC_ACT_REPEAT abuse ? [ 560.447142][ C0] TC_ACT_REPEAT abuse ? [ 560.462248][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 561.384831][ T9] usb 1-1: device descriptor read/64, error -71 [ 561.502366][ T9] usb usb1-port1: attempt power cycle [ 563.073353][ T6137] TC_ACT_REPEAT abuse ? [ 563.078025][ C1] TC_ACT_REPEAT abuse ? [ 566.128328][T10496] dvmrp8: entered allmulticast mode [ 566.906033][T10498] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1287'. [ 568.724998][ T48] TC_ACT_REPEAT abuse ? [ 568.729611][ C1] TC_ACT_REPEAT abuse ? [ 569.356245][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.362773][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.687398][ T28] audit: type=1326 audit(1757859917.112:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.0.1300" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee8f18eba9 code=0x0 [ 571.198108][T10542] ksmbd: Unknown IPC event: 6, ignore. [ 572.220655][T10558] syz_tun: entered allmulticast mode [ 573.252287][ T5865] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 573.401834][T10572] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1314'. [ 573.426658][T10572] netlink: get zone limit has 8 unknown bytes [ 573.472320][ T5865] usb 2-1: Using ep0 maxpacket: 16 [ 573.487575][ T5865] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 573.508203][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.603731][ T5865] usb 2-1: config 0 descriptor?? [ 573.639016][ T5865] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 573.834659][ T2908] TC_ACT_REPEAT abuse ? [ 573.839319][ C0] TC_ACT_REPEAT abuse ? [ 574.349275][ T5865] gspca_sonixj: reg_w1 err -71 [ 574.354995][ T5865] sonixj: probe of 2-1:0.0 failed with error -71 [ 574.376206][ T5865] usb 2-1: USB disconnect, device number 23 [ 575.043007][T10595] tmpfs: Unknown parameter '0x0000000000000005' [ 576.193602][T10606] loop1: detected capacity change from 0 to 8192 [ 576.826206][T10606] loop1: p2 p3 p4 [ 576.830021][T10606] loop1: partition table partially beyond EOD, truncated [ 576.838022][T10606] loop1: p2 start 2936012800 is beyond EOD, truncated [ 576.844912][T10606] loop1: p3 start 1912602624 is beyond EOD, truncated [ 576.851889][T10606] loop1: p4 size 656640 extends beyond EOD, truncated [ 576.958349][ T5158] loop1: p2 p3 p4 [ 576.978618][ T5158] loop1: partition table partially beyond EOD, truncated [ 576.996307][ T5158] loop1: p2 start 2936012800 is beyond EOD, truncated [ 577.012358][ T5158] loop1: p3 start 1912602624 is beyond EOD, truncated [ 577.026769][ T5158] loop1: p4 size 656640 extends beyond EOD, truncated [ 577.444638][T10115] udevd[10115]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 578.484888][T10115] udevd[10115]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 578.731315][T10628] netlink: 'syz.1.1333': attribute type 10 has an invalid length. [ 578.742696][T10628] bond0: (slave wlan1): Opening slave failed [ 578.969654][ T6137] TC_ACT_REPEAT abuse ? [ 578.974459][ C0] TC_ACT_REPEAT abuse ? [ 582.198434][T10663] binder: 10661:10663 ioctl 80089418 2000000002c0 returned -22 [ 582.231332][T10663] usb usb7: usbfs: process 10663 (syz.1.1347) did not claim interface 0 before use [ 583.085196][T10668] loop0: detected capacity change from 0 to 40427 [ 583.111750][T10668] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 583.136323][T10668] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 583.152337][T10668] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 583.198973][T10668] F2FS-fs (loop0): Found nat_bits in checkpoint [ 583.348354][T10668] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 583.358684][T10668] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 583.434349][T10668] netlink: 'syz.0.1349': attribute type 30 has an invalid length. [ 583.863905][ T5787] syz-executor: attempt to access beyond end of device [ 583.863905][ T5787] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 583.908119][ T5787] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 588.645199][T10755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1377'. [ 594.215226][T10817] TC_ACT_REPEAT abuse ? [ 594.220836][ C0] TC_ACT_REPEAT abuse ? [ 595.082115][ T8] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 595.292229][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 595.303555][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.334349][ T8] usb 1-1: config 0 has no interfaces? [ 595.367299][ T8] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 595.385290][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.414098][ T8] usb 1-1: Product: syz [ 595.418392][ T8] usb 1-1: Manufacturer: syz [ 595.429485][ T8] usb 1-1: SerialNumber: syz [ 595.440993][ T8] usb 1-1: config 0 descriptor?? [ 596.343557][ T5865] usb 1-1: USB disconnect, device number 30 [ 596.674561][T10827] loop1: detected capacity change from 0 to 40427 [ 596.692093][T10827] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 596.705040][T10827] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 596.719028][T10827] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 596.755647][T10827] F2FS-fs (loop1): Found nat_bits in checkpoint [ 596.815028][T10827] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 596.825654][T10827] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 596.851596][T10827] netlink: 'syz.1.1400': attribute type 30 has an invalid length. [ 597.310293][ T5790] syz-executor: attempt to access beyond end of device [ 597.310293][ T5790] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 597.352267][ T5790] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 597.482213][ T8] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 598.407324][ T34] TC_ACT_REPEAT abuse ? [ 598.411802][ C1] TC_ACT_REPEAT abuse ? [ 598.450370][ T8] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 598.488405][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.594898][ T8] usb 1-1: Product: syz [ 598.599157][ T8] usb 1-1: Manufacturer: syz [ 598.604427][ T8] usb 1-1: SerialNumber: syz [ 598.612604][ T8] usb 1-1: config 0 descriptor?? [ 598.711391][T10854] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1410'. [ 598.832798][ T8] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 599.695880][T10871] ksmbd: Unknown IPC event: 6, ignore. [ 600.301474][ T8] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 601.974789][ T8] usb 1-1: USB disconnect, device number 31 [ 603.527028][T10892] netlink: 'syz.4.1423': attribute type 21 has an invalid length. [ 603.535452][T10892] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1423'. [ 603.946627][ T48] TC_ACT_REPEAT abuse ? [ 603.951129][ C0] TC_ACT_REPEAT abuse ? [ 607.298472][T10931] TC_ACT_REPEAT abuse ? [ 607.303345][ C0] TC_ACT_REPEAT abuse ? [ 608.475945][T10948] loop0: detected capacity change from 0 to 8192 [ 609.120271][T10948] loop0: p2 p3 p4 [ 609.124153][T10948] loop0: partition table partially beyond EOD, truncated [ 609.132665][T10948] loop0: p2 start 2936012800 is beyond EOD, truncated [ 609.139618][T10948] loop0: p3 start 1912602624 is beyond EOD, truncated [ 609.146611][T10948] loop0: p4 size 656640 extends beyond EOD, truncated [ 609.262369][ T5158] loop0: p2 p3 p4 [ 609.273398][ T5158] loop0: partition table partially beyond EOD, truncated [ 609.305275][ T5158] loop0: p2 start 2936012800 is beyond EOD, truncated [ 609.342474][ T5158] loop0: p3 start 1912602624 is beyond EOD, truncated [ 609.349527][ T5158] loop0: p4 size 656640 extends beyond EOD, truncated [ 609.400035][T10954] binder: 10953:10954 ioctl c00c620f 2000000003c0 returned -22 [ 609.504593][T10945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1440'. [ 609.696673][T10115] udevd[10115]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 609.707390][ T6011] TC_ACT_REPEAT abuse ? [ 609.711886][ C0] TC_ACT_REPEAT abuse ? [ 610.507733][T10115] udevd[10115]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 611.267504][T10976] loop0: detected capacity change from 0 to 8192 [ 612.430092][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1453'. [ 612.471161][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1453'. [ 612.521707][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1453'. [ 615.504896][ T6011] TC_ACT_REPEAT abuse ? [ 615.509673][ C0] TC_ACT_REPEAT abuse ? [ 620.633229][ T2922] TC_ACT_REPEAT abuse ? [ 620.637784][ C0] TC_ACT_REPEAT abuse ? [ 620.663838][T11041] TC_ACT_REPEAT abuse ? [ 620.668350][T11041] TC_ACT_REPEAT abuse ? [ 620.672908][T11041] TC_ACT_REPEAT abuse ? [ 620.678183][T11041] TC_ACT_REPEAT abuse ? [ 620.683013][T11041] TC_ACT_REPEAT abuse ? [ 620.687471][T11041] TC_ACT_REPEAT abuse ? [ 620.691881][T11041] TC_ACT_REPEAT abuse ? [ 620.696370][T11041] TC_ACT_REPEAT abuse ? [ 622.073112][ T28] audit: type=1326 audit(1757859968.962:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.3.1472" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27b458eba9 code=0x0 [ 622.304321][T11056] IPVS: Unknown mcast interface: vcan0 [ 625.376996][T11082] (null): rxe_set_mtu: Set mtu to 256 [ 625.385938][T11082] vxcan1 speed is unknown, defaulting to 1000 [ 625.397418][T11082] vxcan1 speed is unknown, defaulting to 1000 [ 625.407179][T11082] vxcan1 speed is unknown, defaulting to 1000 [ 625.573533][T11082] infiniband syz2: set active [ 625.578769][T11082] infiniband syz2: added vxcan1 [ 625.587579][T11082] syz2: rxe_create_cq: returned err = -12 [ 625.594413][T11082] infiniband syz2: Couldn't create ib_mad CQ [ 625.602639][T11082] infiniband syz2: Couldn't open port 1 [ 625.635533][ T5865] vxcan1 speed is unknown, defaulting to 1000 [ 625.688585][T11082] RDS/IB: syz2: added [ 625.693640][T11082] smc: adding ib device syz2 with port count 1 [ 625.700179][T11082] smc: ib device syz2 port 1 has pnetid [ 625.714386][T11082] vxcan1 speed is unknown, defaulting to 1000 [ 625.813827][ T970] vxcan1 speed is unknown, defaulting to 1000 [ 625.928094][T11082] vxcan1 speed is unknown, defaulting to 1000 [ 626.107606][T11082] vxcan1 speed is unknown, defaulting to 1000 [ 626.283099][T11082] vxcan1 speed is unknown, defaulting to 1000 [ 626.319161][ T6137] net_ratelimit: 24 callbacks suppressed [ 626.319181][ T6137] TC_ACT_REPEAT abuse ? [ 626.329607][ C1] TC_ACT_REPEAT abuse ? [ 626.598452][ T28] audit: type=1326 audit(1757859974.202:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11084 comm="syz.3.1485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27b458eba9 code=0x0 [ 627.242234][T11092] raw_sendmsg: syz.4.1486 forgot to set AF_INET. Fix it! [ 627.590907][T11099] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 1, id = 0 [ 629.513316][T11120] loop0: detected capacity change from 0 to 512 [ 629.546653][T11120] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 629.567373][T11120] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 629.587572][T11120] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 629.610251][T11120] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 629.638818][T11120] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 629.670071][T11120] EXT4-fs (loop0): orphan cleanup on readonly fs [ 629.719687][T11120] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1496: bg 0: block 34: padding at end of block bitmap is not set [ 629.772892][T11120] Quota error (device loop0): write_blk: dquota write failed [ 629.800858][T11120] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 629.816585][T11120] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.1496: Failed to acquire dquot type 1 [ 629.834550][T11120] EXT4-fs (loop0): 1 truncate cleaned up [ 629.899050][T11120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 630.302574][ T28] audit: type=1326 audit(1757859977.922:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="syz.0.1496" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee8f18eba9 code=0x0 [ 630.849564][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.856968][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.872758][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.051485][T11149] fuse: Bad value for 'fd' [ 632.079704][ T1098] TC_ACT_REPEAT abuse ? [ 632.084606][ C1] TC_ACT_REPEAT abuse ? [ 632.517789][T11156] fuse: Bad value for 'fd' [ 637.885363][ T2922] TC_ACT_REPEAT abuse ? [ 637.890935][ C0] TC_ACT_REPEAT abuse ? [ 638.220396][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1514'. [ 638.412064][ T8] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 638.782006][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 638.806094][ T8] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 638.818850][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 638.832172][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 638.842252][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.863686][ T8] usbtmc 1-1:16.0: bulk endpoints not found [ 641.859219][ T5865] usb 1-1: USB disconnect, device number 32 [ 643.592711][ T6011] TC_ACT_REPEAT abuse ? [ 643.597357][ C1] TC_ACT_REPEAT abuse ? [ 643.648281][T11244] TC_ACT_REPEAT abuse ? [ 643.652927][ C1] TC_ACT_REPEAT abuse ? [ 644.628271][T11252] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1532'. [ 645.227858][T11257] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1533'. [ 646.671860][T11266] IPVS: Unknown mcast interface: vcan0 [ 646.744170][T11268] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 649.355145][ T6137] TC_ACT_REPEAT abuse ? [ 649.359790][ C1] TC_ACT_REPEAT abuse ? [ 649.532263][T11282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1539'. [ 653.936898][T11326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'. [ 653.958189][T11331] tipc: Enabling of bearer rejected, failed to enable media [ 655.188447][ T2922] TC_ACT_REPEAT abuse ? [ 655.193345][ C0] TC_ACT_REPEAT abuse ? [ 656.008392][T11353] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 1, id = 0 [ 657.101331][T11363] tipc: Enabling of bearer rejected, failed to enable media [ 658.531528][T11383] TC_ACT_REPEAT abuse ? [ 658.572274][T11383] TC_ACT_REPEAT abuse ? [ 658.593704][T11383] TC_ACT_REPEAT abuse ? [ 658.615865][T11382] TC_ACT_REPEAT abuse ? [ 658.621844][T11382] TC_ACT_REPEAT abuse ? [ 661.347234][ T6011] TC_ACT_REPEAT abuse ? [ 661.351861][ C1] TC_ACT_REPEAT abuse ? [ 661.986633][T11405] tipc: Enabling of bearer rejected, failed to enable media [ 667.275628][ T2922] TC_ACT_REPEAT abuse ? [ 667.280325][ C0] TC_ACT_REPEAT abuse ? [ 667.674967][T11450] tipc: Enabled bearer , priority 0 [ 667.704358][T11450] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 667.978939][T11455] tipc: Resetting bearer [ 668.477158][T11449] tipc: Disabling bearer [ 669.449093][T11473] TC_ACT_REPEAT abuse ? [ 669.453798][ C1] TC_ACT_REPEAT abuse ? [ 672.473779][ T6137] TC_ACT_REPEAT abuse ? [ 672.478473][ C1] TC_ACT_REPEAT abuse ? [ 673.187418][ T5865] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 673.392019][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 673.399991][ T5865] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 673.414730][ T5865] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 673.425674][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.434110][ T5865] usb 1-1: Product: syz [ 673.438743][ T5865] usb 1-1: Manufacturer: syz [ 673.444309][ T5865] usb 1-1: SerialNumber: syz [ 673.455173][ T5865] usb 1-1: config 0 descriptor?? [ 675.932722][ T5865] usb 1-1: USB disconnect, device number 33 [ 676.114232][ T5955] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 676.142235][ T5955] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 676.358826][T11535] fido_id[11535]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 678.306815][ T6011] TC_ACT_REPEAT abuse ? [ 678.312198][ C0] TC_ACT_REPEAT abuse ? [ 679.210572][T11555] kvm: kvm [11553]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 679.322108][T11555] kvm: kvm [11553]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 679.378092][T11555] kvm: kvm [11553]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 680.140601][T11565] overlayfs: failed to resolve './file1': -2 [ 680.809150][T11575] TC_ACT_REPEAT abuse ? [ 680.813770][ C1] TC_ACT_REPEAT abuse ? [ 683.650794][T11599] TC_ACT_REPEAT abuse ? [ 683.913624][ T48] TC_ACT_REPEAT abuse ? [ 683.918304][ C1] TC_ACT_REPEAT abuse ? [ 689.051839][T11650] TC_ACT_REPEAT abuse ? [ 689.066827][T11650] TC_ACT_REPEAT abuse ? [ 689.071580][T11650] TC_ACT_REPEAT abuse ? [ 689.100541][T11650] TC_ACT_REPEAT abuse ? [ 689.432340][T11650] TC_ACT_REPEAT abuse ? [ 689.439135][T11650] TC_ACT_REPEAT abuse ? [ 689.447074][T11650] TC_ACT_REPEAT abuse ? [ 689.472840][T11650] TC_ACT_REPEAT abuse ? [ 689.489844][T11650] TC_ACT_REPEAT abuse ? [ 689.494798][T11650] TC_ACT_REPEAT abuse ? [ 692.237390][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 692.244039][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 694.960181][ T6011] net_ratelimit: 227 callbacks suppressed [ 694.960200][ T6011] TC_ACT_REPEAT abuse ? [ 694.970862][ C0] TC_ACT_REPEAT abuse ? [ 697.059419][T11722] loop1: detected capacity change from 0 to 40427 [ 697.080103][T11722] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 697.088106][T11722] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 697.119856][T11722] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 697.264553][T11733] loop0: detected capacity change from 0 to 8192 [ 697.397100][T11722] F2FS-fs (loop1): Found nat_bits in checkpoint [ 697.420469][T11733] loop0: p2 p3 p4 [ 697.425135][T11733] loop0: partition table partially beyond EOD, truncated [ 697.432781][T11733] loop0: p2 start 2936012800 is beyond EOD, truncated [ 697.439643][T11733] loop0: p3 start 1912602624 is beyond EOD, truncated [ 697.446725][T11733] loop0: p4 size 656640 extends beyond EOD, truncated [ 698.091085][T11722] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 698.122838][T11722] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 698.204912][T11745] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 698.213109][T11722] netlink: 'syz.1.1662': attribute type 30 has an invalid length. [ 698.308962][T11745] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 698.343487][T11746] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 698.487207][T11748] TC_ACT_REPEAT abuse ? [ 698.491769][T11748] TC_ACT_REPEAT abuse ? [ 698.496505][T11748] TC_ACT_REPEAT abuse ? [ 698.506013][T11502] udevd[11502]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 699.037391][ T5790] syz-executor: attempt to access beyond end of device [ 699.037391][ T5790] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 699.052758][T11748] TC_ACT_REPEAT abuse ? [ 699.057336][T11748] TC_ACT_REPEAT abuse ? [ 699.061817][T11748] TC_ACT_REPEAT abuse ? [ 699.066866][T11748] TC_ACT_REPEAT abuse ? [ 699.071480][T11748] TC_ACT_REPEAT abuse ? [ 699.091030][ T5790] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 700.555199][T11664] net_ratelimit: 24 callbacks suppressed [ 700.555220][T11664] TC_ACT_REPEAT abuse ? [ 700.565896][ C0] TC_ACT_REPEAT abuse ? [ 702.093994][ T5955] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 702.794881][T11776] TC_ACT_REPEAT abuse ? [ 702.800801][ C0] TC_ACT_REPEAT abuse ? [ 703.637255][ T5955] usb 1-1: Using ep0 maxpacket: 8 [ 703.660803][ T5955] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 703.682150][ T5955] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 703.700359][ T5955] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 703.850223][ T5955] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 703.850256][ T5955] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 703.850310][ T5955] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 703.850334][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.856494][ T5955] usbtmc: probe of 1-1:16.0 failed with error -22 [ 705.087140][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1682'. [ 705.648903][ T5865] usb 1-1: USB disconnect, device number 34 [ 706.526592][T11664] TC_ACT_REPEAT abuse ? [ 706.531290][ C1] TC_ACT_REPEAT abuse ? [ 707.093636][T11816] TC_ACT_REPEAT abuse ? [ 707.098236][ C1] TC_ACT_REPEAT abuse ? [ 710.818584][T11843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1694'. [ 711.876378][ T5865] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 711.933668][ T5865] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 712.345346][T11852] fido_id[11852]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 712.734935][T11858] loop0: detected capacity change from 0 to 8192 [ 713.778271][T11871] syz.0.1705: attempt to access beyond end of device [ 713.778271][T11871] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 713.798786][T11871] EXT4-fs (loop1): unable to read superblock [ 713.831120][T11877] syzkaller0: entered promiscuous mode [ 713.848886][T11877] syzkaller0: entered allmulticast mode [ 713.874234][T11877] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 715.265208][T11894] loop1: detected capacity change from 0 to 8192 [ 715.435164][T11894] loop1: p2 p3 p4 [ 715.439190][T11894] loop1: partition table partially beyond EOD, truncated [ 715.458634][T11894] loop1: p2 start 2936012800 is beyond EOD, truncated [ 715.465713][T11894] loop1: p3 start 1912602624 is beyond EOD, truncated [ 715.472815][T11894] loop1: p4 size 656640 extends beyond EOD, truncated [ 716.618458][T11408] udevd[11408]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 720.399920][ T5839] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 720.686355][T11934] TC_ACT_REPEAT abuse ? [ 720.690939][ C0] TC_ACT_REPEAT abuse ? [ 722.211254][ T5839] usb 2-1: unable to get BOS descriptor or descriptor too short [ 722.247977][ T5839] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 722.252322][T11939] TC_ACT_REPEAT abuse ? [ 722.261381][T11939] TC_ACT_REPEAT abuse ? [ 722.278050][T11938] TC_ACT_REPEAT abuse ? [ 722.282345][ T5839] usb 2-1: can't read configurations, error -71 [ 722.289457][T11938] TC_ACT_REPEAT abuse ? [ 724.971453][T11951] loop1: detected capacity change from 0 to 40427 [ 724.981660][T11951] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 724.999103][T11951] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 725.018463][T11951] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 725.043999][T11951] F2FS-fs (loop1): Found nat_bits in checkpoint [ 725.354370][T11951] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 725.354404][T11951] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 725.411178][T11951] netlink: 'syz.1.1726': attribute type 30 has an invalid length. [ 726.203566][ T5790] syz-executor: attempt to access beyond end of device [ 726.203566][ T5790] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 726.203652][ T5790] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 726.205705][ T1098] TC_ACT_REPEAT abuse ? [ 726.206360][ C0] TC_ACT_REPEAT abuse ? [ 727.332559][T11981] TC_ACT_REPEAT abuse ? [ 727.332872][ C0] TC_ACT_REPEAT abuse ? [ 729.632202][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1737'. [ 732.445638][ T6011] TC_ACT_REPEAT abuse ? [ 732.450259][ C0] TC_ACT_REPEAT abuse ? [ 734.120309][ T28] audit: type=1107 audit(1757860081.592:385): pid=12037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¯' [ 735.440211][T12052] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 738.312962][ C1] TC_ACT_REPEAT abuse ? [ 738.324088][ T48] TC_ACT_REPEAT abuse ? [ 738.328883][ C1] TC_ACT_REPEAT abuse ? [ 738.406438][T12087] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 738.413887][T12087] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 738.423808][T12087] vhci_hcd vhci_hcd.0: Device attached [ 739.332109][ T5839] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 739.474159][T12088] vhci_hcd: connection reset by peer [ 739.565933][T11664] vhci_hcd: stop threads [ 739.657168][T11664] vhci_hcd: release socket [ 739.753503][T11664] vhci_hcd: disconnect device [ 740.988109][T12109] TC_ACT_REPEAT abuse ? [ 740.992808][ C0] TC_ACT_REPEAT abuse ? [ 742.388043][ C0] TC_ACT_REPEAT abuse ? [ 743.233129][T12094] libceph: connect (1)[c::]:6789 error -101 [ 743.257381][T12094] libceph: mon0 (1)[c::]:6789 connect error [ 743.286078][T12094] libceph: connect (1)[c::]:6789 error -101 [ 743.322423][T12094] libceph: mon0 (1)[c::]:6789 connect error [ 743.506576][T12128] ceph: No mds server is up or the cluster is laggy [ 743.591967][T12094] libceph: connect (1)[c::]:6789 error -101 [ 743.626902][T12094] libceph: mon0 (1)[c::]:6789 connect error [ 744.072644][ T2922] TC_ACT_REPEAT abuse ? [ 744.077340][ C1] TC_ACT_REPEAT abuse ? [ 744.770675][ T5839] vhci_hcd: vhci_device speed not set [ 747.011279][T12154] loop0: detected capacity change from 0 to 40427 [ 747.029386][T12154] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 747.100293][T12154] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 747.163574][T12154] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 747.180777][T12179] TC_ACT_REPEAT abuse ? [ 747.185563][ C0] TC_ACT_REPEAT abuse ? [ 747.945465][T12154] F2FS-fs (loop0): Found nat_bits in checkpoint [ 748.186551][T12154] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 748.198812][T12154] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 748.332226][T12154] netlink: 'syz.0.1776': attribute type 30 has an invalid length. [ 749.950625][ T6137] TC_ACT_REPEAT abuse ? [ 749.955382][ C1] TC_ACT_REPEAT abuse ? [ 751.182153][ T5787] syz-executor: attempt to access beyond end of device [ 751.182153][ T5787] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 751.216318][ T5787] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 752.080567][T12219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'. [ 752.091048][T12219] netlink: set zone limit has 8 unknown bytes [ 752.716675][T12228] loop1: detected capacity change from 0 to 8192 [ 752.777754][T12228] loop1: p2 p3 p4 [ 752.781628][T12228] loop1: partition table partially beyond EOD, truncated [ 752.789173][T12228] loop1: p2 start 2936012800 is beyond EOD, truncated [ 752.796318][T12228] loop1: p3 start 1912602624 is beyond EOD, truncated [ 752.803591][T12228] loop1: p4 size 656640 extends beyond EOD, truncated [ 753.650418][T11408] udevd[11408]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 753.686895][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.695335][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.088265][T12094] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 755.034057][T12094] usb 1-1: unable to get BOS descriptor or descriptor too short [ 755.092354][T12094] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 755.120751][T12094] usb 1-1: can't read configurations, error -71 [ 757.553682][ T48] TC_ACT_REPEAT abuse ? [ 757.558326][ C0] TC_ACT_REPEAT abuse ? [ 757.564584][ T1134] TC_ACT_REPEAT abuse ? [ 757.569918][ C0] TC_ACT_REPEAT abuse ? [ 758.784514][T12273] overlayfs: failed to clone lowerpath [ 761.138608][ T8] libceph: connect (1)[c::]:6789 error -101 [ 761.145026][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 761.422366][ T8] libceph: connect (1)[c::]:6789 error -101 [ 761.428454][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 761.500549][T12299] ceph: No mds server is up or the cluster is laggy [ 761.942397][ T9] libceph: connect (1)[c::]:6789 error -101 [ 761.948524][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 762.371035][T12094] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 762.560573][T12094] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 762.807529][T12314] fido_id[12314]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 763.274468][ T1134] TC_ACT_REPEAT abuse ? [ 763.279255][ C0] TC_ACT_REPEAT abuse ? [ 763.285796][ T48] TC_ACT_REPEAT abuse ? [ 763.290441][ C0] TC_ACT_REPEAT abuse ? [ 765.616988][T12343] syzkaller0: entered promiscuous mode [ 765.642628][T12343] syzkaller0: entered allmulticast mode [ 765.668747][T12343] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 765.726056][ T28] audit: type=1326 audit(1757860113.352:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12345 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b458eba9 code=0x7ffc0000 [ 765.751280][ T28] audit: type=1326 audit(1757860113.352:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12345 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b458eba9 code=0x7ffc0000 [ 765.774233][ T28] audit: type=1326 audit(1757860113.352:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12345 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27b458eba9 code=0x7ffc0000 [ 765.804656][ T28] audit: type=1326 audit(1757860113.432:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12345 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b458eba9 code=0x7ffc0000 [ 765.837438][ T28] audit: type=1326 audit(1757860113.432:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12345 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b458eba9 code=0x7ffc0000 [ 766.506431][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 766.536870][ T9] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 766.699642][T12367] fido_id[12367]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 766.902001][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1839'. [ 767.328254][T12377] TC_ACT_REPEAT abuse ? [ 767.332889][ C0] TC_ACT_REPEAT abuse ? [ 769.469716][ T48] TC_ACT_REPEAT abuse ? [ 769.474530][ C0] TC_ACT_REPEAT abuse ? [ 769.492503][T11664] TC_ACT_REPEAT abuse ? [ 769.497125][ C0] TC_ACT_REPEAT abuse ? [ 774.493540][ T8] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 774.620516][ T8] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 774.793681][ T48] TC_ACT_REPEAT abuse ? [ 774.798421][ C1] TC_ACT_REPEAT abuse ? [ 774.805659][ T6137] TC_ACT_REPEAT abuse ? [ 774.810269][ C1] TC_ACT_REPEAT abuse ? [ 774.848939][T12458] TC_ACT_REPEAT abuse ? [ 774.853525][T12458] TC_ACT_REPEAT abuse ? [ 774.857989][T12458] TC_ACT_REPEAT abuse ? [ 774.873247][T12458] TC_ACT_REPEAT abuse ? [ 774.877656][T12458] TC_ACT_REPEAT abuse ? [ 774.882263][T12458] TC_ACT_REPEAT abuse ? [ 774.909411][T12455] fido_id[12455]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/0000:0000:0000.000D/report_descriptor': No such device [ 778.904422][T12494] kvm: kvm [12491]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xe200006a00 [ 778.954314][T12494] kvm: kvm [12491]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0xe200002a00 [ 779.066459][T12494] kvm: kvm [12491]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x9100000c0a [ 779.088359][T12494] kvm: kvm [12491]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x9100004c0a [ 779.165073][T12494] kvm: kvm [12491]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x3600000aa0 [ 779.191233][T12494] kvm: kvm [12491]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x3600004aa0 [ 779.389599][T12494] kvm: kvm [12491]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xfe000042a9 [ 779.490526][T12494] kvm: kvm [12491]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0xfe000002a9 [ 779.506274][T12494] kvm: kvm [12491]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x9300006c21 [ 779.526505][T12494] kvm: kvm [12491]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x9300002c21 [ 779.918839][ T2922] net_ratelimit: 26 callbacks suppressed [ 779.918856][ T2922] TC_ACT_REPEAT abuse ? [ 779.929108][ C0] TC_ACT_REPEAT abuse ? [ 780.563454][ T1134] TC_ACT_REPEAT abuse ? [ 780.568157][ C1] TC_ACT_REPEAT abuse ? [ 784.297041][T12541] TC_ACT_REPEAT abuse ? [ 784.301602][T12541] TC_ACT_REPEAT abuse ? [ 784.323876][T12541] TC_ACT_REPEAT abuse ? [ 784.335032][T12541] TC_ACT_REPEAT abuse ? [ 784.339423][T12541] TC_ACT_REPEAT abuse ? [ 784.366620][T12541] TC_ACT_REPEAT abuse ? [ 785.077874][T12552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1892'. [ 785.673742][ T1098] net_ratelimit: 23 callbacks suppressed [ 785.673761][ T1098] TC_ACT_REPEAT abuse ? [ 785.684307][ C1] TC_ACT_REPEAT abuse ? [ 785.755110][ T2922] TC_ACT_REPEAT abuse ? [ 785.759819][ C1] TC_ACT_REPEAT abuse ? [ 787.521639][T12569] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 787.568237][T12550] netlink: 'syz.4.1891': attribute type 30 has an invalid length. [ 792.029131][ T1098] TC_ACT_REPEAT abuse ? [ 792.033880][ C0] TC_ACT_REPEAT abuse ? [ 792.042500][T11664] TC_ACT_REPEAT abuse ? [ 792.047472][ C1] TC_ACT_REPEAT abuse ? [ 796.981307][T12662] loop0: detected capacity change from 0 to 8192 [ 797.579872][T12662] loop0: p2 p3 p4 [ 797.583764][T12662] loop0: partition table partially beyond EOD, truncated [ 797.591075][T12662] loop0: p2 start 2936012800 is beyond EOD, truncated [ 797.598463][T12662] loop0: p3 start 1912602624 is beyond EOD, truncated [ 797.605378][T12662] loop0: p4 size 656640 extends beyond EOD, truncated [ 797.879557][ T2922] TC_ACT_REPEAT abuse ? [ 797.883027][T11664] TC_ACT_REPEAT abuse ? [ 797.884391][ C0] TC_ACT_REPEAT abuse ? [ 797.888351][ C1] TC_ACT_REPEAT abuse ? [ 798.615006][T11408] udevd[11408]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 799.964321][T12674] netlink: 'syz.4.1931': attribute type 30 has an invalid length. [ 800.746497][T12690] loop0: detected capacity change from 0 to 8192 [ 801.202301][T12682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1934'. [ 803.593084][ T1134] TC_ACT_REPEAT abuse ? [ 803.596893][ T1098] TC_ACT_REPEAT abuse ? [ 803.597783][ C0] TC_ACT_REPEAT abuse ? [ 803.601978][ C1] TC_ACT_REPEAT abuse ? [ 804.892464][T12741] TC_ACT_REPEAT abuse ? [ 804.898448][ C0] TC_ACT_REPEAT abuse ? [ 808.884839][T12760] kvm: kvm [12759]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 809.033458][T12760] kvm: kvm [12759]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 809.075119][T12760] kvm: kvm [12759]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 809.362983][ T2922] TC_ACT_REPEAT abuse ? [ 809.367761][ C0] TC_ACT_REPEAT abuse ? [ 809.374412][ T6137] TC_ACT_REPEAT abuse ? [ 809.379110][ C0] TC_ACT_REPEAT abuse ? [ 809.559694][T12781] TC_ACT_REPEAT abuse ? [ 809.564447][ C0] TC_ACT_REPEAT abuse ? [ 811.002045][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 811.874587][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 811.906746][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 811.932033][ T9] usb 1-1: can't read configurations, error -71 [ 812.453628][T12809] syzkaller0: entered promiscuous mode [ 812.459574][T12809] syzkaller0: entered allmulticast mode [ 812.502904][T12809] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 813.654776][T12814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1966'. [ 814.134668][T12822] loop0: detected capacity change from 0 to 8192 [ 815.116347][ T1134] TC_ACT_REPEAT abuse ? [ 815.117380][T11664] TC_ACT_REPEAT abuse ? [ 815.120990][ C0] TC_ACT_REPEAT abuse ? [ 815.129510][ C1] TC_ACT_REPEAT abuse ? [ 815.134732][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 815.141080][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 816.040062][ T5865] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 816.079448][T12840] TC_ACT_REPEAT abuse ? [ 816.084944][ C1] TC_ACT_REPEAT abuse ? [ 817.076517][ T5865] usb 1-1: unable to get BOS descriptor or descriptor too short [ 817.096496][ T5865] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 817.104651][ T5865] usb 1-1: can't read configurations, error -71 [ 817.596705][T12844] syzkaller0: entered promiscuous mode [ 817.612090][T12844] syzkaller0: entered allmulticast mode [ 817.627398][T12844] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 818.048554][T12856] TC_ACT_REPEAT abuse ? [ 818.053410][ C0] TC_ACT_REPEAT abuse ? [ 819.510855][T12875] fuse: Bad value for 'fd' [ 820.860375][T12890] loop0: detected capacity change from 0 to 8192 [ 820.876410][ T1098] TC_ACT_REPEAT abuse ? [ 820.881044][ C0] TC_ACT_REPEAT abuse ? [ 820.897935][ T34] TC_ACT_REPEAT abuse ? [ 820.902669][ C0] TC_ACT_REPEAT abuse ? [ 820.987834][T12890] loop0: p2 p3 p4 [ 820.991953][T12890] loop0: partition table partially beyond EOD, truncated [ 821.003010][T12890] loop0: p2 start 2936012800 is beyond EOD, truncated [ 821.009987][T12890] loop0: p3 start 1912602624 is beyond EOD, truncated [ 821.017102][T12890] loop0: p4 size 656640 extends beyond EOD, truncated [ 821.422994][ T5158] loop0: p2 p3 p4 [ 821.452571][ T5158] loop0: partition table partially beyond EOD, truncated [ 821.482321][ T5158] loop0: p2 start 2936012800 is beyond EOD, truncated [ 821.511936][ T5158] loop0: p3 start 1912602624 is beyond EOD, truncated [ 821.555126][ T5158] loop0: p4 size 656640 extends beyond EOD, truncated [ 821.744649][T11408] udevd[11408]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 821.800992][T12901] udevd[12901]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 821.962460][ T5955] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 823.967083][ T5955] usb 1-1: unable to get BOS descriptor or descriptor too short [ 824.015310][ T5955] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 824.111283][ T5955] usb 1-1: can't read configurations, error -71 [ 824.397527][T12919] TC_ACT_REPEAT abuse ? [ 824.402327][ C0] TC_ACT_REPEAT abuse ? [ 824.500265][T12913] kvm: kvm [12912]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 824.519136][T12913] kvm: kvm [12912]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 825.871436][T12930] TC_ACT_REPEAT abuse ? [ 825.876311][ C0] TC_ACT_REPEAT abuse ? [ 826.639087][ T48] TC_ACT_REPEAT abuse ? [ 826.643986][ C1] TC_ACT_REPEAT abuse ? [ 826.659312][ T34] TC_ACT_REPEAT abuse ? [ 826.664050][ C1] TC_ACT_REPEAT abuse ? [ 828.096275][T12953] binder: BINDER_SET_CONTEXT_MGR already set [ 828.116681][T12953] binder: 12952:12953 ioctl 4018620d 200000000040 returned -16 [ 829.550804][T12971] loop0: detected capacity change from 0 to 8192 [ 829.751460][T12967] IPVS: Unknown mcast interface: vcan0 [ 830.762268][ T5865] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 830.962013][ T5865] usb 2-1: Using ep0 maxpacket: 8 [ 830.969355][ T5865] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 830.981982][ T5865] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 831.002242][ T5865] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 831.038347][T12980] ksmbd: Unknown IPC event: 6, ignore. [ 831.315804][ T5865] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 831.341917][ T5865] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 831.365493][ T5865] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 831.652242][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.674631][ T5865] usb 2-1: can't set config #16, error -71 [ 831.768230][ T6137] TC_ACT_REPEAT abuse ? [ 831.772815][ C0] TC_ACT_REPEAT abuse ? [ 831.778413][ T6137] TC_ACT_REPEAT abuse ? [ 831.778491][ T5865] usb 2-1: USB disconnect, device number 26 [ 831.783250][ C0] TC_ACT_REPEAT abuse ? [ 832.398749][T12998] TC_ACT_REPEAT abuse ? [ 832.403380][T12998] TC_ACT_REPEAT abuse ? [ 832.407976][T12998] TC_ACT_REPEAT abuse ? [ 832.413328][T12998] TC_ACT_REPEAT abuse ? [ 832.417817][T12998] TC_ACT_REPEAT abuse ? [ 832.422345][T12998] TC_ACT_REPEAT abuse ? [ 837.858025][ T2908] net_ratelimit: 30 callbacks suppressed [ 837.858044][ T2908] TC_ACT_REPEAT abuse ? [ 837.863381][ T1098] TC_ACT_REPEAT abuse ? [ 837.864299][ C1] TC_ACT_REPEAT abuse ? [ 837.868367][ C0] TC_ACT_REPEAT abuse ? [ 837.959067][T13059] IPVS: Unknown mcast interface: vcan0 [ 840.588765][T13087] ksmbd: Unknown IPC event: 6, ignore. [ 840.796585][T13094] IPVS: Unknown mcast interface: vcan0 [ 842.810393][T13115] TC_ACT_REPEAT abuse ? [ 842.815246][T13115] TC_ACT_REPEAT abuse ? [ 842.819853][T13115] TC_ACT_REPEAT abuse ? [ 842.828673][T13115] TC_ACT_REPEAT abuse ? [ 842.833391][T13115] TC_ACT_REPEAT abuse ? [ 842.838109][T13115] TC_ACT_REPEAT abuse ? [ 842.966238][ T2908] net_ratelimit: 26 callbacks suppressed [ 842.966257][ T2908] TC_ACT_REPEAT abuse ? [ 842.976820][ C1] TC_ACT_REPEAT abuse ? [ 843.275511][ T34] TC_ACT_REPEAT abuse ? [ 843.280163][ C1] TC_ACT_REPEAT abuse ? [ 843.473573][T13121] TC_ACT_REPEAT abuse ? [ 843.478021][ C1] TC_ACT_REPEAT abuse ? [ 845.270593][T13142] ksmbd: Unknown IPC event: 6, ignore. [ 845.469142][T13155] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2068'. [ 846.524403][T13158] IPVS: Unknown mcast interface: vcan0 [ 847.166281][T13178] TC_ACT_REPEAT abuse ? [ 847.170939][ C1] TC_ACT_REPEAT abuse ? [ 848.077196][T13182] tipc: Enabling of bearer rejected, failed to enable media [ 848.401012][ T2908] TC_ACT_REPEAT abuse ? [ 848.405928][ C0] TC_ACT_REPEAT abuse ? [ 848.410933][ T1098] TC_ACT_REPEAT abuse ? [ 848.415565][ C0] TC_ACT_REPEAT abuse ? [ 848.768762][T13198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2081'. [ 848.852142][T13194] ksmbd: Unknown IPC event: 6, ignore. [ 848.925324][T13198] bridge_slave_1: left allmulticast mode [ 849.603083][T13198] bridge_slave_1: left promiscuous mode [ 849.609133][T13198] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.714010][T13198] bridge_slave_0: left allmulticast mode [ 849.721058][T13198] bridge_slave_0: left promiscuous mode [ 849.733924][T13198] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.582679][T13215] loop0: detected capacity change from 0 to 8192 [ 851.279910][T13216] syzkaller0: entered promiscuous mode [ 851.295377][T13216] syzkaller0: entered allmulticast mode [ 851.411114][T13217] tipc: Enabling of bearer rejected, failed to enable media [ 851.435150][T13216] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 855.318166][T13257] loop1: detected capacity change from 0 to 8192 [ 855.442793][ T6137] TC_ACT_REPEAT abuse ? [ 855.447521][ C1] TC_ACT_REPEAT abuse ? [ 855.461701][ T6137] TC_ACT_REPEAT abuse ? [ 855.466414][ C1] TC_ACT_REPEAT abuse ? [ 855.698465][T12901] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 855.872153][T13261] tipc: Enabling of bearer rejected, failed to enable media [ 858.671972][ T9] IPVS: starting estimator thread 0... [ 858.802493][T13286] IPVS: using max 17 ests per chain, 40800 per kthread [ 859.914263][T13291] syz.1.2108 (13291): drop_caches: 2 [ 861.476618][ T34] TC_ACT_REPEAT abuse ? [ 861.481330][ C1] TC_ACT_REPEAT abuse ? [ 863.524028][T13348] loop0: detected capacity change from 0 to 8192 [ 863.695831][T13348] loop0: p2 p3 p4 [ 863.699929][T13348] loop0: partition table partially beyond EOD, truncated [ 863.727182][T13348] loop0: p2 start 2936012800 is beyond EOD, truncated [ 863.734721][T13348] loop0: p3 start 1912602624 is beyond EOD, truncated [ 863.743489][T13348] loop0: p4 size 656640 extends beyond EOD, truncated [ 864.559725][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2127'. [ 864.801589][T12901] udevd[12901]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 865.413281][T13376] loop0: detected capacity change from 0 to 8192 [ 866.467699][T13379] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 866.906537][ T5955] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 866.948475][ T5955] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 866.964546][T11664] TC_ACT_REPEAT abuse ? [ 866.969069][ C1] TC_ACT_REPEAT abuse ? [ 871.421600][T13442] fuse: Bad value for 'fd' [ 873.202018][ T5791] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 873.500505][ T5791] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 874.642901][ T34] TC_ACT_REPEAT abuse ? [ 874.650031][ C1] TC_ACT_REPEAT abuse ? [ 874.838208][ T5789] bridge0: port 3(syz_tun) entered disabled state [ 874.984700][ T5789] syz_tun (unregistering): left allmulticast mode [ 875.058867][ T5789] syz_tun (unregistering): left promiscuous mode [ 875.067258][ T5789] bridge0: port 3(syz_tun) entered disabled state [ 875.259269][ T1134] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.312438][T12094] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 875.461368][ T1134] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.512085][T12094] usb 1-1: Using ep0 maxpacket: 8 [ 875.520187][T12094] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 875.520519][T13439] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 875.529280][T12094] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 875.589924][T12094] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.630292][ T1134] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.634390][T12094] usb 1-1: config 0 has no interface number 0 [ 875.665752][T12094] usb 1-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 875.717495][T12094] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 875.744266][T12094] usb 1-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 875.765751][ T1134] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.769659][T12094] usb 1-1: Product: syz [ 875.785657][T12094] usb 1-1: Manufacturer: syz [ 875.814182][T12094] usb 1-1: config 0 descriptor?? [ 876.116656][ T9] usb 1-1: USB disconnect, device number 43 [ 876.190628][ T1134] tipc: Disabling bearer [ 876.213818][ T1134] tipc: Left network mode [ 876.343207][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2161'. [ 876.362422][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2161'. [ 876.567838][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.574275][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.881330][T13440] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 877.903009][T13440] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 878.213663][T13440] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 878.234411][T13440] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 878.243482][T13440] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 878.251019][T13440] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 878.275306][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 878.283020][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 878.290503][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 878.299418][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 878.309664][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 878.317660][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 878.476519][T13488] vxcan1 speed is unknown, defaulting to 1000 [ 880.300700][ T1134] dvmrp8 (unregistering): left allmulticast mode [ 880.395440][T13440] Bluetooth: hci2: command tx timeout [ 880.402888][ T1098] TC_ACT_REPEAT abuse ? [ 880.407530][ C1] TC_ACT_REPEAT abuse ? [ 880.957099][T13488] chnl_net:caif_netlink_parms(): no params data found [ 881.942254][ T1134] hsr_slave_0: left promiscuous mode [ 882.025112][ T1134] hsr_slave_1: left promiscuous mode [ 882.054594][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.084993][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.118650][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.137776][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.173552][ T1134] bridge_slave_1: left allmulticast mode [ 882.189437][ T1134] bridge_slave_1: left promiscuous mode [ 882.215909][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.300833][ T1134] bridge_slave_0: left allmulticast mode [ 882.343859][ T1134] bridge_slave_0: left promiscuous mode [ 882.350267][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.552402][T13440] Bluetooth: hci2: command tx timeout [ 883.133872][ T1134] veth1_macvtap: left promiscuous mode [ 883.139531][ T1134] veth0_macvtap: left promiscuous mode [ 883.145501][ T1134] veth1_vlan: left promiscuous mode [ 883.151203][ T1134] veth0_vlan: left promiscuous mode [ 884.632174][T13440] Bluetooth: hci2: command tx timeout [ 885.512737][ T6137] TC_ACT_REPEAT abuse ? [ 885.517501][ C0] TC_ACT_REPEAT abuse ? [ 886.732325][T13440] Bluetooth: hci2: command tx timeout [ 887.504663][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 887.631457][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 887.737847][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 887.836328][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.276819][ T6137] TC_ACT_REPEAT abuse ? [ 891.281513][ C0] TC_ACT_REPEAT abuse ? [ 893.607683][ T1134] bond0 (unregistering): Released all slaves [ 893.898270][T13626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2194'. [ 895.744663][T13488] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.764086][T13488] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.815052][T13488] bridge_slave_0: entered allmulticast mode [ 895.828180][T13488] bridge_slave_0: entered promiscuous mode [ 895.882794][T13488] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.905575][T13488] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.915077][T13488] bridge_slave_1: entered allmulticast mode [ 895.967168][T13488] bridge_slave_1: entered promiscuous mode [ 897.294761][ T48] TC_ACT_REPEAT abuse ? [ 897.299419][ C0] TC_ACT_REPEAT abuse ? [ 897.428129][T13488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.455258][T13488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.631039][T13488] team0: Port device team_slave_0 added [ 897.683021][T13488] team0: Port device team_slave_1 added [ 900.087046][ T1134] IPVS: stop unused estimator thread 0... [ 900.134223][T13488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 900.141245][T13488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 900.335852][T13488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 900.378874][T13661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2204'. [ 900.476750][T13488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 900.509042][T13488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 900.589646][T13488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 900.610387][ T2908] Bluetooth: hci4: Frame reassembly failed (-84) [ 901.339214][T13488] hsr_slave_0: entered promiscuous mode [ 901.364547][T13488] hsr_slave_1: entered promiscuous mode [ 901.396983][T13488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 901.409969][T13488] Cannot create hsr debugfs directory [ 902.637122][ T5791] Bluetooth: hci4: command 0x1003 tx timeout [ 902.645989][T13440] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 902.802916][ T2908] TC_ACT_REPEAT abuse ? [ 902.807679][ C1] TC_ACT_REPEAT abuse ? [ 906.196251][T13713] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 906.234166][T13713] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 906.310169][T13713] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 906.369910][T13715] random: crng reseeded on system resumption [ 906.687041][T13488] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 906.730779][T13488] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 907.024547][T13488] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 907.351988][T13440] Bluetooth: hci2: command 0x0c1a tx timeout [ 907.390932][T13488] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 909.330896][T11664] TC_ACT_REPEAT abuse ? [ 909.335656][ C1] TC_ACT_REPEAT abuse ? [ 909.390263][T13488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.442010][T13440] Bluetooth: hci2: command 0x0c1a tx timeout [ 909.484575][T13488] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.563418][T11664] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.570675][T11664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.655695][T11664] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.662975][T11664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.725786][T13440] Bluetooth: hci2: command 0x0c1a tx timeout [ 912.620860][T13488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 912.932619][T13488] veth0_vlan: entered promiscuous mode [ 913.005175][T13488] veth1_vlan: entered promiscuous mode [ 913.184737][T13488] veth0_macvtap: entered promiscuous mode [ 913.228589][T13488] veth1_macvtap: entered promiscuous mode [ 913.300349][T13488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.315762][T13488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.327350][T13488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.340581][T13488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.396805][T13488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.445616][T13488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.490875][T13488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 913.517250][T13488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.546763][T13488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.559584][T13488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.583319][T13488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.615920][T13488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.646790][T13488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.675337][T13488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 913.739171][T13488] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.781904][T13488] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.817649][T13488] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.836990][T13488] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.874679][T13792] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 914.601468][T13804] loop0: detected capacity change from 0 to 32768 [ 914.643074][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.701640][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.799545][T13804] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 914.869492][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.942247][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.955193][ T34] TC_ACT_REPEAT abuse ? [ 914.959786][ C1] TC_ACT_REPEAT abuse ? [ 915.039022][T13812] [ 915.041447][T13812] ====================================================== [ 915.048501][T13812] WARNING: possible circular locking dependency detected [ 915.055564][T13812] syzkaller #0 Not tainted [ 915.060035][T13812] ------------------------------------------------------ [ 915.067088][T13812] syz.0.2231/13812 is trying to acquire lock: [ 915.073270][T13812] ffff88805bf706f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x2fa/0x720 [ 915.082753][T13812] [ 915.082753][T13812] but task is already holding lock: [ 915.090151][T13812] ffff888078306990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e7d/0x20c0 [ 915.099437][T13812] [ 915.099437][T13812] which lock already depends on the new lock. [ 915.099437][T13812] [ 915.109975][T13812] [ 915.109975][T13812] the existing dependency chain (in reverse order) is: [ 915.119011][T13812] [ 915.119011][T13812] -> #5 (jbd2_handle){++++}-{0:0}: [ 915.126507][T13812] start_this_handle+0x1e9d/0x20c0 [ 915.132163][T13812] jbd2__journal_start+0x2bb/0x5b0 [ 915.137814][T13812] jbd2_journal_start+0x2a/0x40 [ 915.143201][T13812] ocfs2_start_trans+0x376/0x6c0 [ 915.148684][T13812] ocfs2_reserve_suballoc_bits+0x715/0x4360 [ 915.155137][T13812] ocfs2_reserve_new_metadata_blocks+0x404/0x940 [ 915.162032][T13812] ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0 [ 915.168396][T13812] ocfs2_xattr_set+0xb6d/0x11f0 [ 915.173808][T13812] ocfs2_set_acl+0x4e1/0x590 [ 915.179036][T13812] ocfs2_iop_set_acl+0x1ab/0x2a0 [ 915.184533][T13812] vfs_set_acl+0x803/0xa60 [ 915.189503][T13812] do_set_acl+0xf5/0x180 [ 915.194299][T13812] path_setxattr+0x39f/0x550 [ 915.199435][T13812] __x64_sys_setxattr+0xbb/0xd0 [ 915.204843][T13812] do_syscall_64+0x55/0xb0 [ 915.209802][T13812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 915.216248][T13812] [ 915.216248][T13812] -> #4 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 915.224799][T13812] down_read+0x46/0x2e0 [ 915.229685][T13812] ocfs2_start_trans+0x36a/0x6c0 [ 915.235198][T13812] ocfs2_reserve_suballoc_bits+0x715/0x4360 [ 915.241726][T13812] ocfs2_reserve_new_metadata_blocks+0x404/0x940 [ 915.248604][T13812] ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0 [ 915.254895][T13812] ocfs2_xattr_set+0xb6d/0x11f0 [ 915.260377][T13812] ocfs2_set_acl+0x4e1/0x590 [ 915.265516][T13812] ocfs2_iop_set_acl+0x1ab/0x2a0 [ 915.271101][T13812] vfs_set_acl+0x803/0xa60 [ 915.276090][T13812] do_set_acl+0xf5/0x180 [ 915.280893][T13812] path_setxattr+0x39f/0x550 [ 915.286035][T13812] __x64_sys_setxattr+0xbb/0xd0 [ 915.291453][T13812] do_syscall_64+0x55/0xb0 [ 915.296415][T13812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 915.302862][T13812] [ 915.302862][T13812] -> #3 (sb_internal#5){.+.+}-{0:0}: [ 915.310389][T13812] ocfs2_start_trans+0x26b/0x6c0 [ 915.315993][T13812] ocfs2_reserve_suballoc_bits+0x715/0x4360 [ 915.322438][T13812] ocfs2_reserve_new_metadata_blocks+0x404/0x940 [ 915.329454][T13812] ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0 [ 915.335773][T13812] ocfs2_xattr_set+0xb6d/0x11f0 [ 915.341227][T13812] ocfs2_set_acl+0x4e1/0x590 [ 915.346397][T13812] ocfs2_iop_set_acl+0x1ab/0x2a0 [ 915.351982][T13812] vfs_set_acl+0x803/0xa60 [ 915.356948][T13812] do_set_acl+0xf5/0x180 [ 915.361739][T13812] path_setxattr+0x39f/0x550 [ 915.366962][T13812] __x64_sys_setxattr+0xbb/0xd0 [ 915.372433][T13812] do_syscall_64+0x55/0xb0 [ 915.377401][T13812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 915.383862][T13812] [ 915.383862][T13812] -> #2 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 915.394418][T13812] down_write+0x97/0x1f0 [ 915.399230][T13812] ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 915.405700][T13812] ocfs2_reserve_clusters_with_limit+0x2fc/0xba0 [ 915.412592][T13812] ocfs2_reserve_suballoc_bits+0x6eb/0x4360 [ 915.419413][T13812] ocfs2_reserve_new_metadata_blocks+0x404/0x940 [ 915.426501][T13812] ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0 [ 915.432774][T13812] ocfs2_xattr_set+0xb6d/0x11f0 [ 915.438287][T13812] ocfs2_set_acl+0x4e1/0x590 [ 915.443456][T13812] ocfs2_iop_set_acl+0x1ab/0x2a0 [ 915.448939][T13812] vfs_set_acl+0x803/0xa60 [ 915.454003][T13812] do_set_acl+0xf5/0x180 [ 915.458803][T13812] path_setxattr+0x39f/0x550 [ 915.463935][T13812] __x64_sys_setxattr+0xbb/0xd0 [ 915.469414][T13812] do_syscall_64+0x55/0xb0 [ 915.474463][T13812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 915.480946][T13812] [ 915.480946][T13812] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 915.491495][T13812] down_write+0x97/0x1f0 [ 915.496298][T13812] ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 915.502737][T13812] ocfs2_reserve_new_metadata_blocks+0x404/0x940 [ 915.509629][T13812] ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0 [ 915.515908][T13812] ocfs2_xattr_set+0xb6d/0x11f0 [ 915.521303][T13812] ocfs2_set_acl+0x4e1/0x590 [ 915.526448][T13812] ocfs2_iop_set_acl+0x1ab/0x2a0 [ 915.531934][T13812] vfs_set_acl+0x803/0xa60 [ 915.536986][T13812] do_set_acl+0xf5/0x180 [ 915.541804][T13812] path_setxattr+0x39f/0x550 [ 915.546942][T13812] __x64_sys_setxattr+0xbb/0xd0 [ 915.552336][T13812] do_syscall_64+0x55/0xb0 [ 915.557296][T13812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 915.563739][T13812] [ 915.563739][T13812] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 915.571579][T13812] __lock_acquire+0x2ddb/0x7c80 [ 915.576992][T13812] lock_acquire+0x197/0x410 [ 915.582065][T13812] down_read+0x46/0x2e0 [ 915.586794][T13812] ocfs2_init_acl+0x2fa/0x720 [ 915.592142][T13812] ocfs2_mknod+0x12e5/0x20f0 [ 915.597283][T13812] ocfs2_mkdir+0x196/0x410 [ 915.602238][T13812] vfs_mkdir+0x296/0x440 [ 915.607021][T13812] do_mkdirat+0x1d4/0x440 [ 915.611921][T13812] __x64_sys_mkdirat+0x89/0xa0 [ 915.617315][T13812] do_syscall_64+0x55/0xb0 [ 915.622359][T13812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 915.628909][T13812] [ 915.628909][T13812] other info that might help us debug this: [ 915.628909][T13812] [ 915.639199][T13812] Chain exists of: [ 915.639199][T13812] &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle [ 915.639199][T13812] [ 915.652955][T13812] Possible unsafe locking scenario: [ 915.652955][T13812] [ 915.660417][T13812] CPU0 CPU1 [ 915.665791][T13812] ---- ---- [ 915.671182][T13812] rlock(jbd2_handle); [ 915.675355][T13812] lock(&journal->j_trans_barrier); [ 915.683232][T13812] lock(jbd2_handle); [ 915.689842][T13812] rlock(&oi->ip_xattr_sem); [ 915.694535][T13812] [ 915.694535][T13812] *** DEADLOCK *** [ 915.694535][T13812] [ 915.702718][T13812] 8 locks held by syz.0.2231/13812: [ 915.708008][T13812] #0: ffff88807ab1e418 (sb_writers#32){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 915.717366][T13812] #1: ffff88805bf709d8 (&type->i_mutex_dir_key#18/1){+.+.}-{3:3}, at: filename_create+0x1f6/0x460 [ 915.728209][T13812] #2: ffff88805bf389d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 915.742267][T13812] #3: ffff88805bf76d98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 915.756064][T13812] #4: ffff88805bf3a658 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 915.770142][T13812] #5: ffff88807ab1e608 (sb_internal#5){.+.+}-{0:0}, at: ocfs2_mknod+0xe47/0x20f0 [ 915.779497][T13812] #6: ffff88805cd264e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x36a/0x6c0 [ 915.790381][T13812] #7: ffff888078306990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e7d/0x20c0 [ 915.800084][T13812] [ 915.800084][T13812] stack backtrace: [ 915.806001][T13812] CPU: 0 PID: 13812 Comm: syz.0.2231 Not tainted syzkaller #0 [ 915.813485][T13812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 915.823578][T13812] Call Trace: [ 915.826882][T13812] [ 915.829860][T13812] dump_stack_lvl+0x16c/0x230 [ 915.834566][T13812] ? load_image+0x3b0/0x3b0 [ 915.839137][T13812] ? show_regs_print_info+0x20/0x20 [ 915.844468][T13812] ? print_circular_bug+0x12b/0x1a0 [ 915.849703][T13812] check_noncircular+0x2bd/0x3c0 [ 915.854673][T13812] ? print_deadlock_bug+0x5d0/0x5d0 [ 915.859889][T13812] ? lockdep_lock+0xe0/0x220 [ 915.864583][T13812] ? _find_first_zero_bit+0xd3/0x100 [ 915.869896][T13812] __lock_acquire+0x2ddb/0x7c80 [ 915.874774][T13812] ? verify_lock_unused+0x140/0x140 [ 915.879991][T13812] ? verify_lock_unused+0x140/0x140 [ 915.885224][T13812] ? __ocfs2_journal_access+0x612/0x7f0 [ 915.890906][T13812] lock_acquire+0x197/0x410 [ 915.895445][T13812] ? ocfs2_init_acl+0x2fa/0x720 [ 915.900428][T13812] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 915.906098][T13812] ? __might_sleep+0xe0/0xe0 [ 915.910720][T13812] ? read_lock_is_recursive+0x20/0x20 [ 915.916108][T13812] ? do_raw_spin_lock+0x121/0x2c0 [ 915.921166][T13812] ? jbd2_write_access_granted+0x2ec/0x300 [ 915.926985][T13812] ? jbd2_write_access_granted+0x69/0x300 [ 915.932747][T13812] down_read+0x46/0x2e0 [ 915.936928][T13812] ? ocfs2_init_acl+0x2fa/0x720 [ 915.941804][T13812] ocfs2_init_acl+0x2fa/0x720 [ 915.946511][T13812] ? ocfs2_acl_chmod+0x320/0x320 [ 915.951468][T13812] ? dquot_alloc_inode+0x211/0xa40 [ 915.956605][T13812] ? ocfs2_journal_access+0x40/0x40 [ 915.961833][T13812] ? ocfs2_block_signals+0x95/0xd0 [ 915.966983][T13812] ? ocfs2_free_mem_caches+0x50/0x50 [ 915.972332][T13812] ? ocfs2_metadata_cache_get_super+0x46/0x90 [ 915.978442][T13812] ? ocfs2_inode_cache_get_super+0xd/0x40 [ 915.984192][T13812] ocfs2_mknod+0x12e5/0x20f0 [ 915.988811][T13812] ? ocfs2_mkdir+0x410/0x410 [ 915.993423][T13812] ? verify_lock_unused+0x140/0x140 [ 915.998705][T13812] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 916.004651][T13812] ? __lock_acquire+0x7c80/0x7c80 [ 916.009707][T13812] ? do_raw_spin_lock+0x121/0x2c0 [ 916.014770][T13812] ? ocfs2_inode_unlock_tracker+0x270/0x2e0 [ 916.020704][T13812] ? __lock_acquire+0x7c80/0x7c80 [ 916.025765][T13812] ? __rwlock_init+0x150/0x150 [ 916.030586][T13812] ? do_raw_spin_unlock+0x121/0x230 [ 916.035838][T13812] ? put_pid+0xde/0x120 [ 916.040036][T13812] ocfs2_mkdir+0x196/0x410 [ 916.044475][T13812] ? make_kgid+0x640/0x640 [ 916.048927][T13812] ? apparmor_path_mkdir+0x1a7/0x220 [ 916.054344][T13812] ? ocfs2_symlink+0x2550/0x2550 [ 916.059608][T13812] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 916.064586][T13812] ? inode_permission+0xf3/0x480 [ 916.069569][T13812] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 916.074728][T13812] ? security_inode_mkdir+0xb7/0x100 [ 916.080050][T13812] vfs_mkdir+0x296/0x440 [ 916.084392][T13812] do_mkdirat+0x1d4/0x440 [ 916.088748][T13812] ? vfs_mkdir+0x440/0x440 [ 916.093251][T13812] __x64_sys_mkdirat+0x89/0xa0 [ 916.098141][T13812] do_syscall_64+0x55/0xb0 [ 916.102585][T13812] ? clear_bhb_loop+0x40/0x90 [ 916.107537][T13812] ? clear_bhb_loop+0x40/0x90 [ 916.112238][T13812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 916.118253][T13812] RIP: 0033:0x7fee8f18eba9 [ 916.122874][T13812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 916.142850][T13812] RSP: 002b:00007fee8ff44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 916.151374][T13812] RAX: ffffffffffffffda RBX: 00007fee8f3d6090 RCX: 00007fee8f18eba9 [ 916.159387][T13812] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 916.167396][T13812] RBP: 00007fee8f211e19 R08: 0000000000000000 R09: 0000000000000000 [ 916.175486][T13812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 916.183576][T13812] R13: 00007fee8f3d6128 R14: 00007fee8f3d6090 R15: 00007fff5a271c28 [ 916.191597][T13812] [ 916.379591][ T5787] ocfs2: Unmounting device (7,0) on (node local) [ 920.712557][T11664] TC_ACT_REPEAT abuse ? [ 920.717120][ C1] TC_ACT_REPEAT abuse ?