last executing test programs: 3m40.420687319s ago: executing program 3 (id=984): getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8, 0x0, 0x6, 0x1, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r3, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000040)={0x18, r3}) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f00000001c0)={0x1, 0x4, 0x12, &(0x7f0000000080)=""/18}) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f0009051402100000fa0009058202"], 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x40010, r5, 0x2000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) read(r0, 0x0, 0x0) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r9, &(0x7f0000000300)='asymmetric\x00', 0x0) 3m36.550973316s ago: executing program 3 (id=994): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x40, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRES8=0x0, @ANYRES16=r3, @ANYRES8=r3], 0x48}}, 0x2044081) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x700000000000000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10}, {0xa, 0x4e22, 0x3, @local, 0x2}, r5, 0xfffffffa}}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a9c000000060a0b040000000000000000020000057000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c080003400000001730000180080001006e617400240002800800074000000000080001400000000008000340fe00001408000240000000020900010073797a30000000000900020073797a32"], 0xc4}, 0x1, 0x0, 0x0, 0x850}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe04, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0), &(0x7f0000000400)=0x8) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000005c0)=ANY=[@ANYBLOB="12015002020000082505a1a440000106000109025c000201ff00000904000001020d0000052406000105240000000d240f0100000905810300000000000904010000020d00000904010102020d0000090582020000000000090503020000000000000000a08f81032cb0bd8a3ea63180dc00282081014e096d7680a484f8f773ef56b3b055d403269fc628aee34acf2136f617b8898940dcc1580ddd7cb3b8e803f197c45b5d6265ebbc641f3a1baf7360c07fd57fed56e10571a28e271acb58afe7845b134078656f30481d9ed31aeb2ca5e89f5971932b7ee14454857ff8f74cdf4a44bf0e444dcae72a306808eb"], 0x0) 3m32.94055528s ago: executing program 3 (id=1003): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x40000) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x24000000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}], 0x1}, 0x10150) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) 3m31.146478106s ago: executing program 3 (id=1006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') keyctl$dh_compute(0x17, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={'rmd160-generic\x00'}}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x188, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0x8, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x158, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x5, 0x1, 0x5, 0x17, 0x16, 0x5}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0x0, 0x6, 0xe, 0x19, 0xc, 0x8}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xc4d, 0xb7, 0x8, 0x17, 0x1d, 0xd}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0xa79, 0x6, 0x5, 0x20, 0x12, 0x4}}, @TCA_CHOKE_STAB={0x104, 0x2, "2c6b91245b350807b26f92b339c6b22f23065f066b37a51d5f0ca09bed852428c5998bc261080c4c1b775a31e5be9a46734d60f854101c3333d071182000208aff328af237ce66ab019005b79efd1d6697f7edc8c0c438dbfbde24901cddd0709b6761c17f507a17fdbc957995941aab28c0b6819ae86b425aabd3daa700ce841808abf258e2b403e874277c1fef0019ffa1f3effc58108ae5c51e0e7a24ac4d68e80bc00251b8f6cb4ad0946ed60335217a301e82db1a0d83197064fce8c7e990969902a3be285b8732b377490ccd81a5b5b5da5d24ae4c079973d6731914a31253a33f1c08c2de0f17c8664a2b0b120197e9cd8a91146730d647a61191b35b"}]}}]}, 0x188}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x8070bd29, 0x4, {0x0, 0x0, 0x0, r8, {0x9}, {0xffff}, {0x0, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 3m28.922258738s ago: executing program 3 (id=1012): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6f, 0x0, 0x9, 0x0, 0xe999, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000480)={0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xfbfbfbfb}) r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r8, 0xcccccccc}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r8], &(0x7f0000000200), &(0x7f00000000c0)=[r9], &(0x7f0000000040), 0x0, 0x300}) 3m28.595169188s ago: executing program 3 (id=1013): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x5, 0x4, 0x20, 0x80, 0x6, 0xd, 0x7, 0x2, 0x31, 0xa2, 0xb, 0x81, 0x84}, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) shutdown(r5, 0x0) r6 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20001002, 0x0, 0x111, 0xa}}, 0x20) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f0000000180)) close(r1) r7 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="300020000000000082", @ANYRES16=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYRESOCT=r3], 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x4000104) readv(r7, &(0x7f0000001540), 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0x0, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@ah={{0x30}, {[0xfffffc00, 0x401]}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1, 0x0, 0x9}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x3, 0x5, 0x4, 0x1, 0x6], 0x1}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x7, 0xe, [0x2d, 0x3, 0x3, 0x11, 0x1e, 0x1c, 0x38, 0x21, 0x1, 0x40, 0x3, 0x2f, 0x28, 0x7, 0x13, 0x16], 0x2, 0x8, 0x2}}}, {{@ip={@multicast1, @local, 0xff000000, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x1d, 0x2, 0x3a}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0xfffffbff, 0x225], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x4, 0x6, 0x5, 0x2, 0xb], 0x3, 0x3}, {0x3, [0x4, 0x1, 0x4, 0x0, 0x5, 0x6], 0x2, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) socket$inet_icmp_raw(0x2, 0x3, 0x1) 3m28.039134264s ago: executing program 32 (id=1013): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x5, 0x4, 0x20, 0x80, 0x6, 0xd, 0x7, 0x2, 0x31, 0xa2, 0xb, 0x81, 0x84}, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) shutdown(r5, 0x0) r6 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20001002, 0x0, 0x111, 0xa}}, 0x20) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f0000000180)) close(r1) r7 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="300020000000000082", @ANYRES16=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYRESOCT=r3], 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x4000104) readv(r7, &(0x7f0000001540), 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0x0, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@ah={{0x30}, {[0xfffffc00, 0x401]}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1, 0x0, 0x9}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x3, 0x5, 0x4, 0x1, 0x6], 0x1}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x7, 0xe, [0x2d, 0x3, 0x3, 0x11, 0x1e, 0x1c, 0x38, 0x21, 0x1, 0x40, 0x3, 0x2f, 0x28, 0x7, 0x13, 0x16], 0x2, 0x8, 0x2}}}, {{@ip={@multicast1, @local, 0xff000000, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x1d, 0x2, 0x3a}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0xfffffbff, 0x225], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x4, 0x6, 0x5, 0x2, 0xb], 0x3, 0x3}, {0x3, [0x4, 0x1, 0x4, 0x0, 0x5, 0x6], 0x2, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) socket$inet_icmp_raw(0x2, 0x3, 0x1) 7.453353302s ago: executing program 5 (id=1665): r0 = syz_usb_connect(0x2, 0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 7.167446134s ago: executing program 0 (id=1668): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0cee021000"], 0xf) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) 7.019374712s ago: executing program 0 (id=1669): quotactl$Q_SYNC(0xffffffff800000ff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x2b2080) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x5, 0x8, 0xfa11, 0x1}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0xffffffff, 0x1}, 0xffffff1b) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000003c0)=0x59a, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x2, @mcast2, 0x4}, 0x18, 0x0}}], 0x1, 0x40040c5) fcntl$getownex(r0, 0x10, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES16=r1, @ANYRES8], 0x50) socket$kcm(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) mkdirat$cgroup(r2, &(0x7f0000000dc0)='syz0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) fchown(0xffffffffffffffff, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r3 = openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r3, r3, 0x0, 0x8000002) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @broadcast}}}, 0x88) 6.85778204s ago: executing program 2 (id=1670): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c404) exit(0xfe) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000007c0)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r2, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0xfffffffd, 0x4, 0x800}, 0x3c) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) madvise(&(0x7f00002a3000/0x2000)=nil, 0x2000, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x4000054) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000440)={{0xffffffffffffffff, &(0x7f0000000180)='\',+\x00', 0x202, &(0x7f00000002c0)={@_ha_fsid={[0xb, 0x7]}, {0x40, 0x9, 0xffffffff, 0xfffffffffffffffa}}, 0xb0, &(0x7f0000000380)={@_ha_fsid}, 0x0}, {[0x1, 0x6, 0x9, 0x8000]}, 0x4, 0x1000, &(0x7f0000002380)=""/4096}) readlinkat(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000980)=""/193, 0xc1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x8000, &(0x7f0000000080)={@align=0x3, {0x5, 0x5, 0x1, 0x8}}, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0xb}) ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f0000000240)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000200)=""/3, 0x3}) r5 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x80, 0x0, 0x6, 0x9, 0x2, 0x0, &(0x7f00000017c0)="39c9"}) 4.903792396s ago: executing program 0 (id=1673): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000400)=0x5, 0x4) sendmmsg$inet(r0, &(0x7f0000001a40)=[{{&(0x7f0000000000)={0x2, 0x4e1f, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) 4.594444677s ago: executing program 0 (id=1676): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x5, 0x9000, 0x5}) 4.500569327s ago: executing program 0 (id=1677): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={'rmd160-generic\x00'}}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x8070bd29, 0x4, {0x0, 0x0, 0x0, r5, {0x9}, {0xffff}, {0x0, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x0, 0x3, 0x9, 0xbffc}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote, r9}, 0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r9, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) 4.490269625s ago: executing program 2 (id=1678): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {0x0, 0x0, 0x8000000}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0x4a4}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x7, 0x0, 0x6, 0x4000000, 0x0, 0xfffffffe, 0x0, 0x100, 0x3}) 4.217105509s ago: executing program 2 (id=1679): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000600)={0x0, 0x8}, 0x8) 4.15568236s ago: executing program 5 (id=1680): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x5, 0x4, 0x20, 0x80, 0x6, 0xd, 0x7, 0x2, 0x31, 0xa2, 0xb, 0x81, 0x84}, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) shutdown(r5, 0x0) r6 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20001002, 0x0, 0x111, 0xa}}, 0x20) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x1, 0x2000c851, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f0000000180)) close(r1) r7 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="300020000000000082", @ANYRES16=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYRESOCT=r3], 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x4000104) readv(r7, &(0x7f0000001540), 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0x0, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@ah={{0x30}, {[0xfffffc00, 0x401]}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1, 0x0, 0x9}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x3, 0x5, 0x4, 0x1, 0x6], 0x1}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x7, 0xe, [0x2d, 0x3, 0x3, 0x11, 0x1e, 0x1c, 0x38, 0x21, 0x1, 0x40, 0x3, 0x2f, 0x28, 0x7, 0x13, 0x16], 0x2, 0x8, 0x2}}}, {{@ip={@multicast1, @local, 0xff000000, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x1d, 0x2, 0x3a}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0xfffffbff, 0x225], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x4, 0x6, 0x5, 0x2, 0xb], 0x3, 0x3}, {0x3, [0x4, 0x1, 0x4, 0x0, 0x5, 0x6], 0x2, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) socket$inet_icmp_raw(0x2, 0x3, 0x1) 3.927217756s ago: executing program 2 (id=1681): close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000040)='\b\x00\x00', 0x3}, {}], 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x7) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_RESET(r5, 0x4141, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="b7000000010003c3bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000065040200000000ff2d410500000000002000000001ed00007b030000000000001d440000000000007a0a00fe00ffffffdb03000040000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2400000000000000800643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a0deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a4dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737371cdf8f681dd7a2685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd6100"/2967], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x4) fsopen(&(0x7f0000000000)='9p\x00', 0x1) close_range(r6, 0xffffffffffffffff, 0x0) 2.91956159s ago: executing program 1 (id=1684): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000600005000200070000000500040001000000050003"], 0x44}}, 0x0) 2.760085541s ago: executing program 1 (id=1686): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x370, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x344, 0x2, [@TCA_RED_STAB={0x104, 0x2, "0a1fb0699d46dac48f11d158dbe8cfb1979e12979688dc039b90627d7b60f0d5ca47f33eed46409b7c8722ce0205f6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c7667ce67af25166c7406119c2a6f1f892e31dea982c5ab0348d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b51424df36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0f356a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444ea07459af0ec9a278df401177ad5f2e6529ed0ad424b47ec67522477f979360b76d100"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x89, 0xb, 0x14}}, @TCA_RED_PARMS={0x0, 0x1, {0x80000000, 0xff, 0x3, 0x5, 0x1e, 0x1b}}, @TCA_RED_EARLY_DROP_BLOCK={0x0, 0x5, 0x1ff}, @TCA_RED_FLAGS={0xc, 0x4, {0x8}}, @TCA_RED_STAB={0xffffffffffffffd7, 0x2, "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"}, @TCA_RED_FLAGS={0xc, 0x4, {0x14, 0x7}}]}}]}, 0x370}, 0x1, 0x0, 0x0, 0x8800}, 0x4000010) 2.597976785s ago: executing program 4 (id=1688): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c404) exit(0xfe) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000007c0)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r2, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0xfffffffd, 0x4, 0x800}, 0x3c) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) madvise(&(0x7f00002a3000/0x2000)=nil, 0x2000, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x4000054) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000440)={{0xffffffffffffffff, &(0x7f0000000180)='\',+\x00', 0x202, &(0x7f00000002c0)={@_ha_fsid={[0xb, 0x7]}, {0x40, 0x9, 0xffffffff, 0xfffffffffffffffa}}, 0xb0, &(0x7f0000000380)={@_ha_fsid}, 0x0}, {[0x1, 0x6, 0x9, 0x8000]}, 0x4, 0x1000, &(0x7f0000002380)=""/4096}) readlinkat(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000980)=""/193, 0xc1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x8000, &(0x7f0000000080)={@align=0x3, {0x5, 0x5, 0x1, 0x8}}, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0xb}) ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f0000000240)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000200)=""/3, 0x3}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, 0x0) 2.5215766s ago: executing program 1 (id=1689): socket$kcm(0x10, 0x2, 0x10) socket$xdp(0x2c, 0x3, 0x0) unshare(0x6a040000) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x940d, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, 0x0, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01300000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31f5ffffff38000000030a01040000000000000000010000010900030001007a32000000000c00024000000000000000010900010073797a300000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x2004041}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010100, 0x15, 0x3, 'sh\x00', 0x28, 0x0, 0x70}, 0x2c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x140}}, 0x844) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000100)={'veth0_to_team\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xffffff2f, 0x2, 0x2, 0x18, 0x3, 0xf0a6}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc5}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x114435b29ef03429}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r6, 0x0, 0x0) 2.286977951s ago: executing program 0 (id=1690): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040d904c2a000000000000109022400010000100009040100090300000009210300000122290009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.179630987s ago: executing program 5 (id=1691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c0000000a0a050000000000000000000a00000a090001"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 1.974271565s ago: executing program 5 (id=1692): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000600)={0x1, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) 1.871283635s ago: executing program 2 (id=1693): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000002c0)=@ethtool_drvinfo={0x3, "03749038d01032dea8b973903b958e568929e0ffb8ac2114b92f68f4c91dec98", "c191b28bd5b1373b73cd111bec22fa99982d2062a16048a48db87c6531b50e01", "fbea876bcdd0a205c1ebd083004000", "bacfd04c5eaca89f442ee4b7cd0c7b0bc35dc0d5963cc8fc59ccb1d422ecf157", "943ad662492572a798c16eacc99c9669ddfa13f522897e15806ab3dfc90275d6", "639defad1d2cd85c4000d990", 0x5, 0x7ff, 0x80004, 0x10, 0x8}}) 1.826316034s ago: executing program 5 (id=1694): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x5, 0x4, 0x20, 0x80, 0x6, 0xd, 0x7, 0x2, 0x31, 0xa2, 0xb, 0x81, 0x84}, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) shutdown(r5, 0x0) r6 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20001002, 0x0, 0x111, 0xa}}, 0x20) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x1, 0x2000c851, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f0000000180)) close(r1) r7 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="300020000000000082", @ANYRES16=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYRESOCT=r3], 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x4000104) readv(r7, &(0x7f0000001540), 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0x0, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@ah={{0x30}, {[0xfffffc00, 0x401]}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1, 0x0, 0x9}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x3, 0x5, 0x4, 0x1, 0x6], 0x1}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x7, 0xe, [0x2d, 0x3, 0x3, 0x11, 0x1e, 0x1c, 0x38, 0x21, 0x1, 0x40, 0x3, 0x2f, 0x28, 0x7, 0x13, 0x16], 0x2, 0x8, 0x2}}}, {{@ip={@multicast1, @local, 0xff000000, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x1d, 0x2, 0x3a}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0xfffffbff, 0x225], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x4, 0x6, 0x5, 0x2, 0xb], 0x3, 0x3}, {0x3, [0x4, 0x1, 0x4, 0x0, 0x5, 0x6], 0x2, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) socket$inet_icmp_raw(0x2, 0x3, 0x1) 1.783251564s ago: executing program 2 (id=1695): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d0102030109021a0001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)={0x0, 0x13, 0x1, "fc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 842.438063ms ago: executing program 4 (id=1696): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r0, 0x4bfa, &(0x7f0000002f80)=""/61) 747.201586ms ago: executing program 1 (id=1697): socket$inet(0x2, 0x3, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) 720.095024ms ago: executing program 4 (id=1698): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfffffffffffffffb, 0x40002) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000080)=0x8) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x1, 0xb, 0x400, 0x0, 0x0, 0xfffffffc, 0x0}) 558.47759ms ago: executing program 4 (id=1699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f000000a080)=ANY=[@ANYBLOB="080008000704"], 0xfca) 558.111903ms ago: executing program 1 (id=1700): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x39}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) 475.496962ms ago: executing program 1 (id=1701): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={'rmd160-generic\x00'}}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x8070bd29, 0x4, {0x0, 0x0, 0x0, r5, {0x9}, {0xffff}, {0x0, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x0, 0x3, 0x9, 0xbffc}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote, r9}, 0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r9, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) 327.668435ms ago: executing program 4 (id=1702): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x807, @empty, 'vlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) 296.213362ms ago: executing program 5 (id=1703): close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}, {}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x7) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_RESET(r5, 0x4141, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"/2967], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x4) fsopen(&(0x7f0000000000)='9p\x00', 0x1) close_range(r6, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=1704): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/5, 0x5}], 0x1, 0x3, 0xffff) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x70a, 0x183e, 0x34565348, 0x6, 0x4, [{0x8c, 0xf}, {0x4, 0x5}, {0x5, 0x5}, {0x400, 0x7fff}, {0x2, 0xffffff78}, {0x2e, 0xfdfd}, {0xffffdffb, 0x10}, {0xffff, 0x1f}], 0x9, 0x2, 0x2, 0x0, 0x6}}) kernel console output (not intermixed with test programs): 39cdd9 code=0x7ffc0000 [ 523.989729][ T29] audit: type=1326 audit(1778535622.040:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.4.1070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 524.105032][ T29] audit: type=1326 audit(1778535622.050:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.4.1070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 524.234034][ T29] audit: type=1326 audit(1778535622.050:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.4.1070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 524.273483][T11528] loop2: detected capacity change from 0 to 7 [ 524.368280][ T29] audit: type=1326 audit(1778535622.050:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.4.1070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 524.409803][T11528] Dev loop2: unable to read RDB block 7 [ 524.432132][T11528] loop2: AHDI p2 p3 [ 524.444435][T11528] loop2: partition table partially beyond EOD, truncated [ 524.462091][ T29] audit: type=1326 audit(1778535622.050:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.4.1070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 524.585939][ T29] audit: type=1326 audit(1778535622.050:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.4.1070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 524.993233][ T4995] Dev loop2: unable to read RDB block 7 [ 525.010976][ T4995] loop2: AHDI p2 p3 [ 525.023361][ T4995] loop2: partition table partially beyond EOD, truncated [ 525.734538][T11557] loop2: detected capacity change from 0 to 7 [ 525.819873][T11557] Dev loop2: unable to read RDB block 7 [ 525.826717][T11557] loop2: AHDI p2 p3 [ 525.840913][T11557] loop2: partition table partially beyond EOD, truncated [ 525.874257][ T4995] Dev loop2: unable to read RDB block 7 [ 525.883031][ T4995] loop2: AHDI p2 p3 [ 525.892741][ T4995] loop2: partition table partially beyond EOD, truncated [ 525.951256][T11568] netlink: 'syz.2.1077': attribute type 4 has an invalid length. [ 526.008505][T11567] netlink: 'syz.2.1077': attribute type 4 has an invalid length. [ 527.416556][T11578] : renamed from vlan0 (while UP) [ 527.487217][T11575] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1078'. [ 528.285116][T11593] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 529.336422][T11604] loop2: detected capacity change from 0 to 7 [ 529.429323][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 529.429340][ T29] audit: type=1800 audit(1778535627.650:1075): pid=11608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1085" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 529.638216][T11604] Dev loop2: unable to read RDB block 7 [ 529.680172][T11604] loop2: AHDI p2 p3 [ 529.759768][T11604] loop2: partition table partially beyond EOD, truncated [ 529.967738][ T4995] Dev loop2: unable to read RDB block 7 [ 529.991707][ T4995] loop2: AHDI p2 p3 [ 530.007890][ T4995] loop2: partition table partially beyond EOD, truncated [ 530.479355][ T4995] Dev loop2: unable to read RDB block 7 [ 530.505394][ T4995] loop2: AHDI p2 p3 [ 530.522091][ T4995] loop2: partition table partially beyond EOD, truncated [ 531.228674][T11639] loop2: detected capacity change from 0 to 7 [ 531.268691][T11639] Dev loop2: unable to read RDB block 7 [ 531.307192][T11639] loop2: AHDI p2 p3 [ 531.341009][T11639] loop2: partition table partially beyond EOD, truncated [ 535.156903][ T29] audit: type=1326 audit(1778535633.340:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11683 comm="syz.0.1101" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0925b9cdd9 code=0x0 [ 535.308285][T11687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1101'. [ 536.410557][T11707] fuse: Unknown parameter '0xffffffffffffffff' [ 537.560738][T11725] xt_TPROXY: Can be used only with -p tcp or -p udp [ 537.587257][T11725] netlink: 'syz.1.1109': attribute type 10 has an invalid length. [ 538.213005][T11302] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 538.418738][T11302] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 538.436009][T11302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.460268][T11302] usb 5-1: Product: syz [ 538.474886][T11302] usb 5-1: Manufacturer: syz [ 538.493338][T11302] usb 5-1: SerialNumber: syz [ 538.550773][T11302] usb 5-1: config 0 descriptor?? [ 538.792083][T11302] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 539.376211][T11735] cifs: Unknown parameter ' [ 539.683109][ T5713] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 539.957956][ T5713] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 539.968844][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.977334][ T5713] usb 6-1: Product: syz [ 539.981870][ T5713] usb 6-1: Manufacturer: syz [ 539.987125][ T5713] usb 6-1: SerialNumber: syz [ 540.407651][ T5713] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 540.429577][ T5713] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 541.326699][ T5713] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 541.357467][ T5713] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 541.385834][ T5713] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 541.399168][ T5713] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 541.413826][ T5713] usb 6-1: USB disconnect, device number 2 [ 541.814274][ T29] audit: type=1800 audit(1778535640.040:1077): pid=11762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1119" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 542.001600][T11768] binder: 11761:11768 ioctl c0306201 0 returned -14 [ 542.057330][T11302] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 542.089658][T11302] usb 5-1: USB disconnect, device number 54 [ 542.145594][ T29] audit: type=1326 audit(1778535640.370:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11761 comm="syz.1.1119" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f8f99cdd9 code=0x0 [ 542.415990][T11773] loop2: detected capacity change from 0 to 7 [ 542.458244][T11777] xt_TCPMSS: Only works on TCP SYN packets [ 542.466388][T11773] Dev loop2: unable to read RDB block 7 [ 542.489926][T11773] loop2: AHDI p2 p3 [ 542.500446][T11773] loop2: partition table partially beyond EOD, truncated [ 542.539670][T11773] loop2: p2 start 1702059890 is beyond EOD, truncated [ 542.680954][T11762] ipvlan2: entered promiscuous mode [ 542.696176][T11762] bridge0: port 2(ipvlan2) entered blocking state [ 542.719716][T11762] bridge0: port 2(ipvlan2) entered disabled state [ 542.738443][T11762] ipvlan2: entered allmulticast mode [ 542.757009][T11762] bridge0: entered allmulticast mode [ 542.781896][T11762] ipvlan2: left allmulticast mode [ 542.792748][T11762] bridge0: left allmulticast mode [ 542.852182][T11777] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 543.344534][T11790] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 543.394996][T11790] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 543.975223][T11798] loop2: detected capacity change from 0 to 7 [ 544.029543][T11798] Dev loop2: unable to read RDB block 7 [ 544.044685][T11798] loop2: AHDI p2 p3 [ 544.059671][T11798] loop2: partition table partially beyond EOD, truncated [ 544.738773][T11803] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1126'. [ 545.648540][T11818] vlan2: left promiscuous mode [ 545.671513][T11818] geneve0: left promiscuous mode [ 546.007031][T11824] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1131'. [ 546.823096][ T5713] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 547.004431][ T5713] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 547.051487][ T5713] usb 5-1: config 0 has no interface number 0 [ 547.085555][ T5713] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.147743][ T5713] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.207487][ T5713] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 547.245531][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.267899][ T5713] usb 5-1: config 0 descriptor?? [ 547.444772][T11840] loop2: detected capacity change from 0 to 7 [ 547.532741][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1134'. [ 547.560338][T11840] Dev loop2: unable to read RDB block 7 [ 547.566288][T11840] loop2: AHDI p2 p3 [ 547.580025][T11840] loop2: partition table partially beyond EOD, truncated [ 547.849197][T11844] kvm: pic: non byte write [ 547.976651][ T5713] usbhid 5-1:0.1: can't add hid device: -71 [ 547.995587][ T5713] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 548.015418][T11847] kAFS: unable to lookup cell '(/' [ 548.031844][ T5713] usb 5-1: USB disconnect, device number 55 [ 548.867792][T11859] loop2: detected capacity change from 0 to 7 [ 548.998305][T11866] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1139'. [ 549.063448][T11859] Dev loop2: unable to read RDB block 7 [ 549.138922][T11859] loop2: AHDI p2 p3 [ 549.483061][T11859] loop2: partition table partially beyond EOD, truncated [ 549.587855][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.177276][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.334988][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.568446][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.672794][ T5641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 550.680748][ T5641] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 550.701004][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 550.735367][ T5641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 550.758748][ T5641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 550.816865][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 550.826359][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 550.834176][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 550.842565][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 550.850375][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 551.379116][ T12] vlan2: left allmulticast mode [ 551.410238][ T12] geneve0: left allmulticast mode [ 551.435136][ T12] vlan2: left promiscuous mode [ 551.466571][ T12] geneve0: left promiscuous mode [ 551.488481][ T12] bridge0: port 3(vlan2) entered disabled state [ 551.523375][ T12] bridge_slave_1: left allmulticast mode [ 551.538512][ T12] bridge_slave_1: left promiscuous mode [ 551.551917][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.583804][ T12] bridge_slave_0: left allmulticast mode [ 551.605718][ T12] bridge_slave_0: left promiscuous mode [ 551.625481][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.673227][ T12] veth0_to_bond: left allmulticast mode [ 551.680857][ T12] veth0_to_bond: left promiscuous mode [ 551.693344][ T12] bridge3: port 1(veth0_to_bond) entered disabled state [ 552.411295][ T12] bond1 (unregistering): (slave gretap1): Releasing active interface [ 552.934229][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.954051][ T5641] Bluetooth: hci1: command tx timeout [ 553.017334][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.062696][ T12] bond0 (unregistering): Released all slaves [ 553.125656][ T12] bond1 (unregistering): Released all slaves [ 553.248614][ T5290] 8021q: adding VLAN 0 to HW filter on device eth5 [ 553.383346][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 553.555769][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 553.574344][ T10] usb 6-1: config 0 has no interface number 0 [ 553.590314][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.609088][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.621748][ T10] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 553.639953][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.696787][ T10] usb 6-1: config 0 descriptor?? [ 554.040365][ T12] hsr_slave_0: left promiscuous mode [ 554.065989][ T12] hsr_slave_1: left promiscuous mode [ 554.086104][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.105114][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.135153][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.171702][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.257642][ T12] veth1_macvtap: left promiscuous mode [ 554.283772][ T12] veth0_macvtap: left promiscuous mode [ 554.314665][ T12] veth1_vlan: left promiscuous mode [ 554.331686][ T12] veth0_vlan: left promiscuous mode [ 555.033507][ T5641] Bluetooth: hci1: command tx timeout [ 555.408726][ T12] ` (unregistering): Port device veth0_to_hsr removed [ 555.543350][ T12] ` (unregistering): Port device team_slave_1 removed [ 555.608685][ T12] ` (unregistering): Port device team_slave_0 removed [ 556.130855][ T5290] 8021q: adding VLAN 0 to HW filter on device eth6 [ 556.332811][T11877] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.340031][ T10] usbhid 6-1:0.1: can't add hid device: -71 [ 556.358526][ T10] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 556.377729][T11877] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.400741][ T10] usb 6-1: USB disconnect, device number 3 [ 556.417535][T11877] bridge_slave_0: entered allmulticast mode [ 556.447727][T11877] bridge_slave_0: entered promiscuous mode [ 556.480973][T11877] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.501953][T11877] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.536563][T11877] bridge_slave_1: entered allmulticast mode [ 556.559069][T11965] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 556.566581][T11877] bridge_slave_1: entered promiscuous mode [ 556.588777][T11966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1153'. [ 556.763781][T11877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.855153][T11877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.963540][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 557.028399][T11877] team0: Port device team_slave_0 added [ 557.113052][ T5641] Bluetooth: hci1: command tx timeout [ 557.164851][ T12] IPVS: stop unused estimator thread 0... [ 557.196278][T11877] team0: Port device team_slave_1 added [ 557.377850][ T10] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 557.432947][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.465035][T11877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.481997][T11877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.512101][ T10] usb 2-1: Product: syz [ 557.558051][ T10] usb 2-1: Manufacturer: syz [ 557.573056][ T10] usb 2-1: SerialNumber: syz [ 557.600532][ T10] usb 2-1: config 0 descriptor?? [ 557.627806][ T10] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 025 [ 557.652471][T11877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.722681][T11877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.745867][T11877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.828446][T11877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.163513][T11877] hsr_slave_0: entered promiscuous mode [ 558.204093][T11877] hsr_slave_1: entered promiscuous mode [ 558.244402][T11877] debugfs: 'hsr0' already exists in 'hsr' [ 558.271245][T11877] Cannot create hsr debugfs directory [ 558.876580][ T5290] 8021q: adding VLAN 0 to HW filter on device eth7 [ 559.193037][ T5641] Bluetooth: hci1: command tx timeout [ 559.609009][ T10] (null): failure setting delay to 10us [ 559.644762][ T10] i2c-tiny-usb 2-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 559.727233][ T10] usb 2-1: USB disconnect, device number 25 [ 560.452631][T12016] bond4: option arp_interval: invalid value (18446744072904038628) [ 560.511038][T12016] bond4: option arp_interval: allowed values 0 - 2147483647 [ 560.578846][T12016] bond4 (unregistering): Released all slaves [ 561.423388][T12037] xt_ecn: cannot match TCP bits for non-tcp packets [ 561.462628][ T29] audit: type=1326 audit(1778535659.660:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12035 comm="syz.4.1161" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 561.589107][ T29] audit: type=1326 audit(1778535659.660:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12035 comm="syz.4.1161" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 561.685546][T11877] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 561.731885][T11877] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 561.763422][T11877] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 561.788086][ T29] audit: type=1326 audit(1778535659.660:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12035 comm="syz.4.1161" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 561.829410][T11877] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 561.849094][ T29] audit: type=1326 audit(1778535659.670:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12035 comm="syz.4.1161" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 561.915459][T11877] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 561.960243][ T29] audit: type=1326 audit(1778535659.670:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12035 comm="syz.4.1161" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 562.002250][T11877] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 562.016222][T11877] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 562.233116][ T29] audit: type=1326 audit(1778535659.670:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12035 comm="syz.4.1161" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 562.293054][ T29] audit: type=1326 audit(1778535659.680:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12035 comm="syz.4.1161" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 562.306994][T11877] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 562.380674][ T29] audit: type=1326 audit(1778535659.680:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12035 comm="syz.4.1161" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 562.448825][ T29] audit: type=1326 audit(1778535659.880:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12035 comm="syz.4.1161" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 562.522235][ T29] audit: type=1326 audit(1778535659.880:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12035 comm="syz.4.1161" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 562.613024][ T992] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 562.717957][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.724695][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.782105][ T992] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 562.794293][ T992] usb 2-1: config 0 has no interface number 0 [ 562.828343][ T992] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.873695][ T992] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.907060][T11877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.928184][ T992] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 562.966953][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.020576][ T992] usb 2-1: config 0 descriptor?? [ 563.080293][T11877] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.127766][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.134963][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.209497][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.216689][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.643599][T11877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.758031][ T992] usbhid 2-1:0.1: can't add hid device: -71 [ 563.810687][ T992] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 563.920064][ T992] usb 2-1: USB disconnect, device number 26 [ 563.987806][T11877] veth0_vlan: entered promiscuous mode [ 564.041537][T11877] veth1_vlan: entered promiscuous mode [ 564.182377][T11877] veth0_macvtap: entered promiscuous mode [ 564.221579][T11877] veth1_macvtap: entered promiscuous mode [ 564.277871][T12092] netlink: 'syz.5.1165': attribute type 1 has an invalid length. [ 564.325461][T11877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.419346][T12096] netlink: 212352 bytes leftover after parsing attributes in process `syz.5.1165'. [ 564.531891][T12104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1167'. [ 564.640426][T12109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1167'. [ 564.963135][ T5713] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 564.999324][T12096] bond1: (slave gretap1): making interface the new active one [ 565.037521][T12096] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 565.296429][T12102] macvlan2: entered promiscuous mode [ 565.332064][T12102] macvlan2: entered allmulticast mode [ 565.443848][T12102] bond1: entered promiscuous mode [ 565.460766][T12102] gretap1: entered promiscuous mode [ 565.508648][T12102] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 565.559419][T12102] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 565.610547][T12102] bond1: left promiscuous mode [ 565.658101][T12102] gretap1: left promiscuous mode [ 566.010409][T12113] tipc: Started in network mode [ 566.042247][T12113] tipc: Node identity 84e, cluster identity 4711 [ 566.102495][T12113] tipc: Node number set to 2126 [ 566.151730][T12137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1168'. [ 566.179001][T11877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.379737][T12137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1168'. [ 566.428200][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.466554][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.496800][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.506357][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.885122][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.936768][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.118778][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.149335][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.813402][T11302] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 568.013094][T11302] usb 3-1: Using ep0 maxpacket: 16 [ 568.045998][T11302] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 568.056300][T11302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.086721][T11302] usb 3-1: Product: syz [ 568.101227][T11302] usb 3-1: Manufacturer: syz [ 568.116353][T11302] usb 3-1: SerialNumber: syz [ 568.174196][T11302] usb 3-1: config 0 descriptor?? [ 568.221234][T11302] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 568.472688][ T29] audit: type=1326 audit(1778535666.690:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12175 comm="syz.5.1173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2edcb9cdd9 code=0x7ffc0000 [ 568.507297][T12164] input: syz0 as /devices/virtual/input/input52 [ 568.548827][T12177] fuse: Bad value for 'fd' [ 568.565054][ T29] audit: type=1326 audit(1778535666.730:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12175 comm="syz.5.1173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2edcb9cdd9 code=0x7ffc0000 [ 568.648276][T11302] usb 3-1: clie_3_5_startup: get config number failed: -71 [ 568.661998][ T29] audit: type=1326 audit(1778535666.730:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12175 comm="syz.5.1173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2edcb9cdd9 code=0x7ffc0000 [ 568.693169][T11302] visor 3-1:0.0: probe with driver visor failed with error -71 [ 568.745286][T11302] usb 3-1: USB disconnect, device number 36 [ 568.774835][ T992] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 568.810095][ T29] audit: type=1326 audit(1778535666.730:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12175 comm="syz.5.1173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2edcb9cdd9 code=0x7ffc0000 [ 568.887129][ T29] audit: type=1326 audit(1778535666.730:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12175 comm="syz.5.1173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2edcb9cdd9 code=0x7ffc0000 [ 568.942521][ T992] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.955006][ T992] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 568.971657][ T29] audit: type=1326 audit(1778535666.730:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12175 comm="syz.5.1173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2edcb5d60e code=0x7ffc0000 [ 569.023231][ T992] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 569.039533][ T992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.065512][ T992] usb 6-1: Product: syz [ 569.092529][ T29] audit: type=1326 audit(1778535666.730:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12175 comm="syz.5.1173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2edcb9ca6b code=0x7ffc0000 [ 569.117448][ T992] usb 6-1: Manufacturer: syz [ 569.132239][ T992] usb 6-1: SerialNumber: syz [ 569.163013][ T29] audit: type=1326 audit(1778535666.730:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12175 comm="syz.5.1173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2edcb9ca6b code=0x7ffc0000 [ 569.204372][T12180] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1174'. [ 569.240787][ T29] audit: type=1326 audit(1778535666.730:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12175 comm="syz.5.1173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2edcb9ca6b code=0x7ffc0000 [ 569.306556][ T29] audit: type=1326 audit(1778535666.730:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12175 comm="syz.5.1173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2edcb9ca6b code=0x7ffc0000 [ 569.450047][T12176] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 569.594338][ T992] usb 6-1: USB disconnect, device number 4 [ 569.691182][ T7568] udevd[7568]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 570.013846][T11302] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 570.185786][T11302] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 570.209719][T11302] usb 5-1: config 0 has no interface number 0 [ 570.237384][T11302] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.278862][T11302] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.309821][T11302] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 570.330239][T11302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.354809][T11302] usb 5-1: config 0 descriptor?? [ 570.990934][T11302] usbhid 5-1:0.1: can't add hid device: -71 [ 571.005293][T11302] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 571.070226][T11302] usb 5-1: USB disconnect, device number 56 [ 571.326566][T12206] loop2: detected capacity change from 0 to 7 [ 571.368058][T12206] Dev loop2: unable to read RDB block 7 [ 571.476809][T12206] loop2: AHDI p2 p3 [ 571.505104][ T5713] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 571.526226][T12206] loop2: partition table partially beyond EOD, truncated [ 571.561623][T12206] loop2: p2 start 1702059890 is beyond EOD, truncated [ 571.693323][ T5713] usb 6-1: Using ep0 maxpacket: 16 [ 571.705338][ T5713] usb 6-1: config index 0 descriptor too short (expected 1810, got 18) [ 571.731596][ T5713] usb 6-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 571.770017][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.809446][ T5713] usb 6-1: config 0 descriptor?? [ 571.840307][ T5713] gspca_main: etoms-2.14.0 probing 102c:6151 [ 572.035611][T12224] dummy0: entered allmulticast mode [ 572.251524][ T5713] usb 6-1: USB disconnect, device number 5 [ 573.763767][T12246] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1188'. [ 573.967293][T12250] overlayfs: missing 'lowerdir' [ 574.715026][ T1011] wlan0: Trigger new scan to find an IBSS to join [ 574.737375][T12237] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 574.748134][T12237] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 575.239395][T12237] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 575.616141][T12271] binder: BINDER_SET_CONTEXT_MGR already set [ 575.640707][T12271] binder: 12266:12271 ioctl 4018620d 200000004a80 returned -16 [ 576.275888][T12286] loop2: detected capacity change from 0 to 7 [ 576.425502][T12286] Dev loop2: unable to read RDB block 7 [ 576.458886][T12286] loop2: AHDI p2 p3 [ 576.496782][T12286] loop2: partition table partially beyond EOD, truncated [ 576.794147][ T5641] Bluetooth: hci1: command 0x0c1a tx timeout [ 577.034901][ T4995] Dev loop2: unable to read RDB block 7 [ 577.040706][ T4995] loop2: AHDI p2 p3 [ 577.051923][ T4995] loop2: partition table partially beyond EOD, truncated [ 577.654027][ T5713] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 577.833102][ T5713] usb 3-1: Using ep0 maxpacket: 16 [ 577.859333][ T5713] usb 3-1: config 0 has no interfaces? [ 577.880464][ T5713] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 577.911896][ T5713] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 577.942004][ T5713] usb 3-1: Manufacturer: syz [ 577.976515][ T5713] usb 3-1: config 0 descriptor?? [ 578.544298][T12309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1197'. [ 578.915417][ T5641] Bluetooth: hci1: command 0x0c1a tx timeout [ 579.673758][ T13] wlan0: Trigger new scan to find an IBSS to join [ 579.943128][ T5713] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 580.071286][T12325] loop2: detected capacity change from 0 to 7 [ 580.147462][ T5713] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 580.161278][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.174338][T12325] Dev loop2: unable to read RDB block 7 [ 580.180129][T12325] loop2: AHDI p2 p3 [ 580.186311][T12325] loop2: partition table partially beyond EOD, truncated [ 580.239773][ T5713] usb 2-1: config 0 descriptor?? [ 580.457749][ T5713] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 580.626365][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.941499][ T5713] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 580.953031][ T5641] Bluetooth: hci1: command 0x0c1a tx timeout [ 580.961215][ T5713] [drm] Initialized udl on minor 2 [ 581.240323][ T5713] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 581.321266][ T5713] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 581.378372][ T5713] usb 2-1: USB disconnect, device number 28 [ 581.393120][ T5699] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 581.451772][ T5699] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 581.778051][ T5699] usb 3-1: USB disconnect, device number 37 [ 582.502975][ T5699] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 582.587608][T12359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 582.757845][ T5699] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 582.821509][ T5699] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 582.833111][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 582.845268][ T5699] usb 3-1: Product: syz [ 582.864537][ T5699] usb 3-1: Manufacturer: syz [ 582.879502][ T5699] usb 3-1: SerialNumber: syz [ 583.657678][ T5699] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 583.671075][T12370] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1212'. [ 583.741981][ T5699] usb 3-1: USB disconnect, device number 38 [ 583.789435][ T5699] usblp0: removed [ 583.879593][T12372] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1212'. [ 583.881398][T12374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1213'. [ 583.902270][T12374] No such timeout policy "syz1" [ 583.923540][T12374] netlink: 'syz.4.1213': attribute type 8 has an invalid length. [ 584.753033][T11302] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 584.804544][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 584.804557][ T29] audit: type=1326 audit(1778535683.030:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.5.1216" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2edcb9cdd9 code=0x7ffc0000 [ 584.899876][ T29] audit: type=1326 audit(1778535683.030:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.5.1216" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2edcb9cdd9 code=0x7ffc0000 [ 584.959210][T11302] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 584.980563][T11302] usb 3-1: config 0 has no interface number 0 [ 585.000732][T11302] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.036481][T11302] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.070675][T11302] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 585.099681][ T29] audit: type=1326 audit(1778535683.030:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.5.1216" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2edcb9cdd9 code=0x7ffc0000 [ 585.148384][T11302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.196599][ T29] audit: type=1326 audit(1778535683.030:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.5.1216" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2edcb9cdd9 code=0x7ffc0000 [ 585.284569][T11302] usb 3-1: config 0 descriptor?? [ 585.309369][ T29] audit: type=1326 audit(1778535683.030:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.5.1216" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2edcb9cdd9 code=0x7ffc0000 [ 585.410955][ T29] audit: type=1326 audit(1778535683.100:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.5.1216" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2edcb9cdd9 code=0x7ffc0000 [ 585.506016][ T29] audit: type=1326 audit(1778535683.160:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.5.1216" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2edcb9cdd9 code=0x7ffc0000 [ 585.652736][ T29] audit: type=1326 audit(1778535683.160:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.5.1216" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2edcb9cdd9 code=0x7ffc0000 [ 585.793205][ T29] audit: type=1326 audit(1778535683.170:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.5.1216" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2edcb9cdd9 code=0x7ffc0000 [ 585.949987][ T29] audit: type=1326 audit(1778535683.170:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.5.1216" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2edcb9cdd9 code=0x7ffc0000 [ 586.041381][T12394] loop2: detected capacity change from 0 to 7 [ 586.085715][T12394] Dev loop2: unable to read RDB block 7 [ 586.201982][T11302] usbhid 3-1:0.1: can't add hid device: -71 [ 586.210901][T11302] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 586.238766][T11302] usb 3-1: USB disconnect, device number 39 [ 586.256143][T12394] loop2: AHDI p2 p3 [ 586.270398][T12394] loop2: partition table partially beyond EOD, truncated [ 586.773023][ T4995] Dev loop2: unable to read RDB block 7 [ 586.792679][ T4995] loop2: AHDI p2 p3 [ 586.801759][ T4995] loop2: partition table partially beyond EOD, truncated [ 587.083352][T12403] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1220'. [ 587.472612][T12403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.686175][ T1011] wlan1: Trigger new scan to find an IBSS to join [ 589.143482][T11302] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 589.325973][T11302] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 589.392462][T11302] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 589.439077][T11302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 589.465339][T11302] usb 3-1: Product: syz [ 589.488774][T11302] usb 3-1: Manufacturer: syz [ 589.504217][T11302] usb 3-1: SerialNumber: syz [ 589.754452][T11302] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 590.050622][T11302] usb 3-1: USB disconnect, device number 40 [ 590.088046][T11302] usblp0: removed [ 590.545584][T12457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1232'. [ 590.591216][T12458] fuse: root generation should be zero [ 590.646164][T12461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1232'. [ 590.813072][T11302] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 590.983893][T11302] usb 2-1: Using ep0 maxpacket: 32 [ 591.013417][T11302] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 591.029080][T11302] usb 2-1: config 0 has no interface number 0 [ 591.048597][T11302] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 591.063709][T11302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.088342][T11302] usb 2-1: Product: syz [ 591.098505][T11302] usb 2-1: Manufacturer: syz [ 591.109192][T11302] usb 2-1: SerialNumber: syz [ 591.127961][T11302] usb 2-1: config 0 descriptor?? [ 591.145199][T11302] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 591.168488][T11302] usb 2-1: selecting invalid altsetting 1 [ 591.190380][T11302] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 591.249746][T11302] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 591.275088][T11302] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 591.300671][T11302] usb 2-1: media controller created [ 591.373053][T11302] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 591.496672][T11302] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 591.521184][T11302] zl10353_read_register: readreg error (reg=127, ret==-71) [ 591.545485][T11302] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 591.645481][T11302] usb 2-1: USB disconnect, device number 29 [ 592.341871][T12476] fuse: Bad value for 'fd' [ 592.428738][T12482] binder: 12475:12482 ioctl 80105873 200000000140 returned -22 [ 592.518785][T12483] binder: 12475:12483 ioctl c0306201 200000000640 returned -14 [ 592.633634][ T13] wlan1: Trigger new scan to find an IBSS to join [ 593.093462][T12494] loop2: detected capacity change from 0 to 7 [ 593.186920][T12494] Dev loop2: unable to read RDB block 7 [ 593.194305][T12494] loop2: AHDI p2 p3 [ 593.342137][T12494] loop2: partition table partially beyond EOD, truncated [ 593.573383][ T1011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.699722][T12505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1245'. [ 593.776235][ T4995] Dev loop2: unable to read RDB block 7 [ 593.790880][ T4995] loop2: AHDI p2 p3 [ 593.824054][ T4995] loop2: partition table partially beyond EOD, truncated [ 593.854799][T12508] macsec0: Caught tx_queue_len zero misconfig [ 593.920147][T12508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1245'. [ 595.381713][T12525] loop2: detected capacity change from 0 to 7 [ 595.414059][T12529] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 595.633375][T12525] Dev loop2: unable to read RDB block 7 [ 595.678219][T12525] loop2: AHDI p2 p3 [ 595.682448][T12525] loop2: partition table partially beyond EOD, truncated [ 595.741883][ T4995] Dev loop2: unable to read RDB block 7 [ 595.794996][ T4995] loop2: AHDI p2 p3 [ 595.812704][ T4995] loop2: partition table partially beyond EOD, truncated [ 595.832807][T12527] loop6: detected capacity change from 0 to 524288000 [ 596.172728][ T4995] Dev loop2: unable to read RDB block 7 [ 596.185526][ T4995] loop2: AHDI p2 p3 [ 596.208260][ T4995] loop2: partition table partially beyond EOD, truncated [ 597.254653][ T5625] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 597.295416][ T5625] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz0] on syz0 [ 597.678915][T12558] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1257'. [ 597.694588][T11302] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 597.821689][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 597.821701][ T29] audit: type=1326 audit(1778535696.040:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.2.1257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c8b9cdd9 code=0x7ffc0000 [ 597.854564][T12560] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1257'. [ 597.882993][T11302] usb 6-1: Using ep0 maxpacket: 16 [ 597.904362][ T29] audit: type=1326 audit(1778535696.040:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.2.1257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f75c8b9cdd9 code=0x7ffc0000 [ 597.942380][T11302] usb 6-1: config index 0 descriptor too short (expected 1810, got 18) [ 597.963158][T11302] usb 6-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 597.979120][T11302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.988473][ T29] audit: type=1326 audit(1778535696.040:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.2.1257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c8b9cdd9 code=0x7ffc0000 [ 598.037757][ T29] audit: type=1326 audit(1778535696.040:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.2.1257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f75c8b9cdd9 code=0x7ffc0000 [ 598.073911][T11302] usb 6-1: config 0 descriptor?? [ 598.097458][T11302] gspca_main: etoms-2.14.0 probing 102c:6151 [ 598.155028][ T29] audit: type=1326 audit(1778535696.040:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.2.1257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c8b9cdd9 code=0x7ffc0000 [ 598.216517][ T29] audit: type=1326 audit(1778535696.040:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.2.1257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f75c8b9cdd9 code=0x7ffc0000 [ 598.271498][ T29] audit: type=1326 audit(1778535696.040:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.2.1257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c8b9cdd9 code=0x7ffc0000 [ 598.344219][ T29] audit: type=1326 audit(1778535696.040:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.2.1257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f75c8b9cdd9 code=0x7ffc0000 [ 598.440956][ T29] audit: type=1326 audit(1778535696.040:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.2.1257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c8b9cdd9 code=0x7ffc0000 [ 598.542337][ T29] audit: type=1326 audit(1778535696.040:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.2.1257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f75c8b9cdd9 code=0x7ffc0000 [ 599.054263][T12567] kvm: pic: non byte write [ 599.128135][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1260'. [ 600.268519][T12591] loop2: detected capacity change from 0 to 7 [ 600.335122][T12591] Dev loop2: unable to read RDB block 7 [ 600.342811][T12591] loop2: AHDI p2 p3 [ 600.375146][T12591] loop2: partition table partially beyond EOD, truncated [ 600.533284][ T5699] usb 6-1: USB disconnect, device number 6 [ 600.978592][ T9] IPVS: starting estimator thread 0... [ 600.998016][T12600] IPVS: sh: FWM 3 0x00000003 - no destination available [ 601.011445][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 601.103384][T12603] IPVS: using max 53 ests per chain, 127200 per kthread [ 601.831122][T12610] netlink: 'syz.2.1269': attribute type 4 has an invalid length. [ 602.107363][ T9] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 602.179641][ T9] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz0] on syz0 [ 602.843328][ T5699] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 602.943190][ T5625] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 602.994424][ T5699] usb 2-1: Using ep0 maxpacket: 16 [ 603.012385][ T5699] usb 2-1: unable to get BOS descriptor or descriptor too short [ 603.035477][ T5699] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 603.059772][ T5699] usb 2-1: string descriptor 0 read error: -22 [ 603.078881][ T5699] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 603.115611][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.125780][ T5625] usb 6-1: unable to get BOS descriptor or descriptor too short [ 603.143314][ T5625] usb 6-1: not running at top speed; connect to a high speed hub [ 603.153810][ T5699] usb 2-1: 1:1 : invalid channels 0 [ 603.163616][ T5625] usb 6-1: config 2 has an invalid interface number: 9 but max is 0 [ 603.173712][ T5625] usb 6-1: config 2 has no interface number 0 [ 603.181600][ T5625] usb 6-1: config 2 interface 9 has no altsetting 0 [ 603.195470][ T5625] usb 6-1: New USB device found, idVendor=061d, idProduct=c1a0, bcdDevice=23.72 [ 603.207179][ T5625] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.225485][ T5625] usb 6-1: Product: syz [ 603.233447][ T5625] usb 6-1: Manufacturer: syz [ 603.239675][ T5625] usb 6-1: SerialNumber: syz [ 603.350100][ T5699] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 603.474748][ T5625] quatech2 6-1:2.9: Quatech 2nd gen USB to Serial Driver converter detected [ 603.495043][ T5699] usb 2-1: USB disconnect, device number 30 [ 603.506347][ T5625] usb 6-1: qt2_attach - failed to power on unit: -71 [ 603.529963][ T5625] quatech2 6-1:2.9: probe with driver quatech2 failed with error -71 [ 603.581385][ T5625] usb 6-1: USB disconnect, device number 7 [ 603.863092][ T9] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 603.933224][ T24] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 604.050290][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 604.063277][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 604.071995][ T9] usb 3-1: config 17 has an invalid interface number: 8 but max is 1 [ 604.080631][ T9] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 604.083003][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 604.090325][ T9] usb 3-1: config 17 has no interface number 0 [ 604.099012][ T24] usb 5-1: config index 0 descriptor too short (expected 1810, got 18) [ 604.109768][ T9] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 86, changing to 4 [ 604.121480][ T24] usb 5-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 604.129720][ T9] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 62603, setting to 1023 [ 604.140985][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.149919][ T9] usb 3-1: config 17 interface 8 has no altsetting 0 [ 604.152193][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 604.183056][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.208937][ T9] usb 3-1: Product: syz [ 604.209899][ T24] usb 5-1: config 0 descriptor?? [ 604.225131][ T9] usb 3-1: Manufacturer: syz [ 604.240406][ T9] usb 3-1: SerialNumber: syz [ 604.240836][ T24] gspca_main: etoms-2.14.0 probing 102c:6151 [ 604.477536][ T9] usb 3-1: selecting invalid altsetting 0 [ 604.491671][ T9] usb 3-1: 8:6 : no UAC_FORMAT_TYPE desc [ 604.517045][ T9] usb 3-1: selecting invalid altsetting 0 [ 604.634413][ T9] usb 3-1: USB disconnect, device number 41 [ 605.384964][T12651] loop2: detected capacity change from 0 to 7 [ 605.532442][T12660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1282'. [ 605.560655][T12651] Dev loop2: unable to read RDB block 7 [ 605.580031][T12651] loop2: AHDI p2 p3 [ 605.597524][T12651] loop2: partition table partially beyond EOD, truncated [ 606.221534][T12663] fuse: Bad value for 'rootmode' [ 606.716114][T11302] usb 5-1: USB disconnect, device number 57 [ 606.999694][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 606.999710][ T29] audit: type=1326 audit(1778535705.220:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12667 comm="syz.4.1284" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 607.129116][ T29] audit: type=1326 audit(1778535705.260:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12667 comm="syz.4.1284" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d4735d60e code=0x7ffc0000 [ 607.138394][T12677] loop2: detected capacity change from 0 to 7 [ 607.194476][ T29] audit: type=1326 audit(1778535705.260:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12667 comm="syz.4.1284" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 607.250344][T12677] Dev loop2: unable to read RDB block 7 [ 607.297042][ T29] audit: type=1326 audit(1778535705.270:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12667 comm="syz.4.1284" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 607.388663][ T29] audit: type=1326 audit(1778535705.270:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12667 comm="syz.4.1284" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 607.419611][T12677] loop2: AHDI p2 p3 [ 607.437167][T12677] loop2: partition table partially beyond EOD, truncated [ 607.524953][ T29] audit: type=1326 audit(1778535705.280:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12667 comm="syz.4.1284" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 607.631638][ T29] audit: type=1326 audit(1778535705.280:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12667 comm="syz.4.1284" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 607.743269][ T29] audit: type=1326 audit(1778535705.280:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12667 comm="syz.4.1284" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d4735d60e code=0x7ffc0000 [ 607.841468][ T29] audit: type=1326 audit(1778535705.280:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12667 comm="syz.4.1284" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d4735d60e code=0x7ffc0000 [ 607.974798][ T29] audit: type=1326 audit(1778535705.290:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12667 comm="syz.4.1284" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 608.143220][ T5699] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 608.325250][ T5699] usb 2-1: Using ep0 maxpacket: 8 [ 608.354909][ T5699] usb 2-1: unable to get BOS descriptor or descriptor too short [ 608.372543][ T5699] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 608.409505][ T5699] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 608.444109][ T5699] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 608.473055][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.498590][ T5699] usb 2-1: Product: syz [ 608.513480][ T5699] usb 2-1: Manufacturer: syz [ 608.540222][ T5699] usb 2-1: SerialNumber: syz [ 608.773180][ T5699] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 608.801739][ T5699] usb 2-1: found format II with max.bitrate = 7, frame size=29911 [ 608.825636][ T5699] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 608.953540][ T5699] usb 2-1: USB disconnect, device number 31 [ 609.044999][ T7568] udevd[7568]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 609.143087][ T5625] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 609.307958][ T5625] usb 3-1: unable to get BOS descriptor or descriptor too short [ 609.343687][ T5625] usb 3-1: not running at top speed; connect to a high speed hub [ 609.352678][ T5625] usb 3-1: config 4 has an invalid interface number: 106 but max is 0 [ 609.380476][ T5625] usb 3-1: config 4 has no interface number 0 [ 609.394277][ T5625] usb 3-1: config 4 interface 106 has no altsetting 0 [ 609.414529][ T5625] usb 3-1: New USB device found, idVendor=0408, idProduct=4033, bcdDevice=96.91 [ 609.428789][ T5625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.437474][ T5625] usb 3-1: Product: syz [ 609.441687][ T5625] usb 3-1: Manufacturer: syz [ 609.446483][ T5625] usb 3-1: SerialNumber: syz [ 609.548173][T12706] loop2: detected capacity change from 0 to 7 [ 609.571675][T12706] Dev loop2: unable to read RDB block 7 [ 609.582510][T12706] loop2: AHDI p2 p3 [ 609.592839][T12706] loop2: partition table partially beyond EOD, truncated [ 609.674766][ T5625] uvcvideo 3-1:4.106: Found UVC 0.00 device syz (0408:4033) [ 609.694063][ T5625] uvcvideo 3-1:4.106: Forcing UVC version to 1.0a [ 609.723459][ T5625] uvcvideo 3-1:4.106: No valid video chain found. [ 609.765536][ T5625] usb 3-1: USB disconnect, device number 42 [ 610.209960][ T4995] Dev loop2: unable to read RDB block 7 [ 610.220495][ T4995] loop2: AHDI p2 p3 [ 610.237270][ T4995] loop2: partition table partially beyond EOD, truncated [ 610.383811][T12712] bridge0: port 3(vlan2) entered blocking state [ 610.430640][T12712] bridge0: port 3(vlan2) entered disabled state [ 610.465171][T12712] vlan2: entered allmulticast mode [ 610.492436][T12712] geneve0: entered allmulticast mode [ 610.524384][T12712] vlan2: entered promiscuous mode [ 610.540956][T12712] geneve0: entered promiscuous mode [ 611.083142][ T5625] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 611.173028][ T5699] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 611.243823][ T5625] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 611.258249][ T5625] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.268723][ T5625] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 611.291265][ T5625] usb 3-1: config 0 interface 0 has no altsetting 0 [ 611.306462][ T5625] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.317602][ T5625] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 611.331025][ T5625] usb 3-1: config 0 interface 0 has no altsetting 0 [ 611.339854][ T5699] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 611.349983][ T5699] usb 6-1: config 0 has no interface number 0 [ 611.358305][ T5625] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.373505][ T5699] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.385011][ T5625] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 611.395100][ T5699] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.405930][ T5625] usb 3-1: config 0 interface 0 has no altsetting 0 [ 611.418961][ T5625] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.428449][ T5699] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 611.437823][ T5625] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 611.447774][ T5699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.455982][ T5625] usb 3-1: config 0 interface 0 has no altsetting 0 [ 611.470068][ T5699] usb 6-1: config 0 descriptor?? [ 611.477223][ T5625] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.506735][ T5625] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 611.531738][ T5625] usb 3-1: config 0 interface 0 has no altsetting 0 [ 611.548118][ T5625] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.577852][ T5625] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 611.613051][ T5625] usb 3-1: config 0 interface 0 has no altsetting 0 [ 611.644259][ T5625] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.667058][ T5625] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 611.697645][ T5625] usb 3-1: config 0 interface 0 has no altsetting 0 [ 611.722086][ T5625] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.740573][ T5625] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 611.771325][ T5625] usb 3-1: config 0 interface 0 has no altsetting 0 [ 611.792153][ T5625] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 611.815127][ T5625] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 611.834725][ T5625] usb 3-1: Product: syz [ 611.845800][ T5625] usb 3-1: Manufacturer: syz [ 611.863273][ T5625] usb 3-1: SerialNumber: syz [ 611.884294][ T5625] usb 3-1: config 0 descriptor?? [ 611.901082][ T5625] yurex 3-1:0.0: Could not find endpoints [ 612.132292][ T9] usb 3-1: USB disconnect, device number 43 [ 612.201197][ T5699] usbhid 6-1:0.1: can't add hid device: -71 [ 612.224504][ T5699] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 612.265109][ T5699] usb 6-1: USB disconnect, device number 8 [ 612.633129][ T1011] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 612.864196][T11302] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 613.053069][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 613.064495][T11302] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 613.091062][T11302] usb 5-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 613.130343][T11302] usb 5-1: config 1 interface 0 has no altsetting 0 [ 613.161429][T11302] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 613.183553][T11302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.218235][T11302] usb 5-1: Product: syz [ 613.235465][T11302] usb 5-1: Manufacturer: syz [ 613.241843][ T9] usb 3-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b [ 613.261439][T11302] usb 5-1: SerialNumber: syz [ 613.270725][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.313380][ T9] pegasus 3-1:254.0: Missing or invalid endpoints [ 613.500707][ T9] usb 5-1: USB disconnect, device number 58 [ 613.559563][ T992] usb 3-1: USB disconnect, device number 44 [ 614.703097][ T9] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 614.896685][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.921263][ T9] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 614.942490][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.962502][ T9] usb 3-1: Product: syz [ 614.971677][ T9] usb 3-1: Manufacturer: syz [ 614.981719][ T9] usb 3-1: SerialNumber: syz [ 615.003132][ T992] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 615.012329][ T9] usb 3-1: config 0 descriptor?? [ 615.030221][ T9] usb 3-1: No union descriptors [ 615.042304][ T9] usb 3-1: unsupported MDLM descriptors [ 615.184790][ T992] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 615.201804][ T992] usb 6-1: config 0 has no interface number 0 [ 615.220750][ T992] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.250846][ T5699] usb 3-1: USB disconnect, device number 45 [ 615.264772][ T992] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.296830][ T992] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 615.317443][ T992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.351708][ T992] usb 6-1: config 0 descriptor?? [ 615.793075][ T5625] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 615.925721][ T992] usbhid 6-1:0.1: can't add hid device: -71 [ 615.933162][ T992] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 615.955362][ T5625] usb 5-1: unable to get BOS descriptor or descriptor too short [ 615.969771][ T9] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 615.977796][ T992] usb 6-1: USB disconnect, device number 9 [ 615.984817][ T5625] usb 5-1: not running at top speed; connect to a high speed hub [ 615.995768][ T9] hid-generic 0000:0000:0000.0042: hidraw0: HID v0.00 Device [syz0] on syz0 [ 616.014106][ T5625] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 616.041042][ T5625] usb 5-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= 0.40 [ 616.061047][ T5625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.078769][ T5625] usb 5-1: Product: syz [ 616.089394][ T5625] usb 5-1: Manufacturer: syz [ 616.103372][ T5625] usb 5-1: SerialNumber: syz [ 616.343621][ T5625] usb 5-1: 1:1 : sample bitwidth 62 in over sample bytes 4 [ 616.351552][ T5625] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 616.370547][ T5625] usb 5-1: failed to enable PITCH for EP 0x1 [ 616.379493][ T5625] usb 5-1: unit 2 not found! [ 616.387744][ T5625] usb 5-1: unit 0 not found! [ 616.544213][ T5625] usb 5-1: USB disconnect, device number 59 [ 617.283059][ T5699] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 617.322997][ T5625] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 617.445309][ T5699] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 617.462736][ T5699] usb 2-1: config 0 has no interface number 0 [ 617.481779][ T5699] usb 2-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 617.495515][ T5625] usb 5-1: Using ep0 maxpacket: 16 [ 617.512282][ T5625] usb 5-1: unable to get BOS descriptor or descriptor too short [ 617.520459][ T5699] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x82 has invalid maxpacket 24019, setting to 64 [ 617.551144][ T5625] usb 5-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 617.562036][ T5699] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 617.580579][ T5625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.597529][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.610979][ T5625] usb 5-1: Product: syz [ 617.619570][ T5625] usb 5-1: Manufacturer: syz [ 617.624691][ T5699] usb 2-1: config 0 descriptor?? [ 617.640431][ T5625] usb 5-1: SerialNumber: syz [ 617.646026][T12797] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 617.668107][ T5699] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input53 [ 617.824186][ C0] usbtouchscreen 2-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 617.879523][ T5699] usb 2-1: USB disconnect, device number 32 [ 617.897525][ T5625] usb 5-1: cannot find UAC_HEADER [ 618.008109][ T5625] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 618.042199][ T5625] usb 5-1: USB disconnect, device number 60 [ 618.071016][ T7568] udevd[7568]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 618.723701][ T5713] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 618.897068][ T5713] usb 2-1: New USB device found, idVendor=046d, idProduct=08b4, bcdDevice=ca.8e [ 618.906815][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.926074][ T5713] pwc: Logitech QuickCam Zoom (new model) USB webcam detected. [ 618.982993][ T992] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 619.132181][ T5713] pwc: Failed to set LED on/off time (-71) [ 619.142723][ T5713] pwc: send_video_command error -71 [ 619.154643][ T5713] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 619.162488][ T5713] Philips webcam 2-1:127.0: probe with driver Philips webcam failed with error -71 [ 619.188925][ T992] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 619.189720][ T5713] usb 2-1: USB disconnect, device number 33 [ 619.231167][ T992] usb 3-1: config 0 has no interface number 0 [ 619.251690][ T992] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.284268][ T992] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.310822][ T992] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 619.330354][ T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.351561][ T992] usb 3-1: config 0 descriptor?? [ 619.353537][ T5625] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 619.518802][ T5625] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 619.528191][ T5625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.536664][ T5625] usb 5-1: Product: syz [ 619.540962][ T5625] usb 5-1: Manufacturer: syz [ 619.545958][ T5625] usb 5-1: SerialNumber: syz [ 620.025901][ T5625] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 620.037913][ T5713] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 620.049352][ T5625] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 620.049388][ T992] usbhid 3-1:0.1: can't add hid device: -71 [ 620.078487][ T992] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 620.089940][ T992] usb 3-1: USB disconnect, device number 46 [ 620.189270][T11302] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 620.212558][T11302] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz0] on syz0 [ 620.213060][ T5713] usb 2-1: Using ep0 maxpacket: 32 [ 620.264228][ T5713] usb 2-1: config 4 has an invalid interface number: 228 but max is 0 [ 620.281377][ T5713] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 620.312235][ T5713] usb 2-1: config 4 has no interface number 0 [ 620.341117][ T5713] usb 2-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30 [ 620.389474][ T5713] usb 2-1: config 4 interface 228 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 620.417725][ T5713] usb 2-1: config 4 interface 228 has no altsetting 0 [ 620.430192][ T5713] usb 2-1: New USB device found, idVendor=0499, idProduct=a902, bcdDevice=a6.e8 [ 620.439456][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.449017][ T5713] usb 2-1: Product: syz [ 620.455750][ T5713] usb 2-1: Manufacturer: syz [ 620.467862][ T5713] usb 2-1: SerialNumber: syz [ 620.766867][ T5625] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 620.797866][ T5625] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 620.839713][ T5713] usb 2-1: USB disconnect, device number 34 [ 620.881237][ T5625] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 620.900748][ T7243] udevd[7243]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 620.933047][T11302] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 620.975946][ T5625] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 621.039251][ T5625] usb 5-1: USB disconnect, device number 61 [ 621.114656][T11302] usb 3-1: Using ep0 maxpacket: 8 [ 621.122264][T11302] usb 3-1: unable to get BOS descriptor or descriptor too short [ 621.137423][T11302] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 983 [ 621.147945][T11302] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 32 [ 621.161968][T11302] usb 3-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40 [ 621.173096][T11302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.181593][T11302] usb 3-1: Product: syz [ 621.186161][T11302] usb 3-1: Manufacturer: syz [ 621.190792][T11302] usb 3-1: SerialNumber: syz [ 621.214271][T12842] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 621.223129][T12842] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 621.353257][ T5713] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 621.475333][T11302] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 621.493102][T11302] usb 3-1: MIDIStreaming interface descriptor not found [ 621.524850][ T5713] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.556237][ T5713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 621.598038][ T5713] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 621.630730][ T5713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 621.659923][ T5713] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 621.689089][T11302] usb 3-1: USB disconnect, device number 47 [ 621.743021][ T5713] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 621.782396][ T5713] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 621.791124][T12851] loop2: detected capacity change from 0 to 7 [ 621.808866][T12851] Dev loop2: unable to read RDB block 7 [ 621.814813][T12851] loop2: AHDI p2 p3 [ 621.833953][T12851] loop2: partition table partially beyond EOD, truncated [ 621.841144][ T5713] usb 6-1: Manufacturer: syz [ 621.872618][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 621.893468][ T5713] usb 6-1: config 0 descriptor?? [ 622.138960][T11302] usb 6-1: USB disconnect, device number 10 [ 622.178366][ T4995] Dev loop2: unable to read RDB block 7 [ 622.200618][ T4995] loop2: AHDI p2 p3 [ 622.213412][ T4995] loop2: partition table partially beyond EOD, truncated [ 622.483007][ T992] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 622.653081][ T992] usb 3-1: Using ep0 maxpacket: 16 [ 622.669867][ T992] usb 3-1: config index 0 descriptor too short (expected 1810, got 18) [ 622.702840][ T992] usb 3-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 622.751950][ T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.796517][ T992] usb 3-1: config 0 descriptor?? [ 622.825971][ T992] gspca_main: etoms-2.14.0 probing 102c:6151 [ 623.162412][ T992] usb 3-1: USB disconnect, device number 48 [ 624.095406][T12890] loop2: detected capacity change from 0 to 7 [ 624.155605][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.162149][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.389832][T12890] Dev loop2: unable to read RDB block 7 [ 624.412778][T12890] loop2: AHDI p2 p3 [ 624.435109][T12890] loop2: partition table partially beyond EOD, truncated [ 624.911125][ T4995] Dev loop2: unable to read RDB block 7 [ 624.938204][ T4995] loop2: AHDI p2 p3 [ 624.960656][ T4995] loop2: partition table partially beyond EOD, truncated [ 625.013040][ T5713] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 625.192008][ T5713] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 625.236727][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.270476][ T5713] usb 2-1: Product: syz [ 625.286691][ T5713] usb 2-1: Manufacturer: syz [ 625.314550][ T5713] usb 2-1: SerialNumber: syz [ 625.529597][ T4995] Dev loop2: unable to read RDB block 7 [ 625.556628][ T4995] loop2: AHDI p2 p3 [ 625.580887][ T4995] loop2: partition table partially beyond EOD, truncated [ 625.775448][ T5713] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 625.819193][ T5713] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 626.076137][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 626.538308][ T5713] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 626.570297][ T5713] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 626.610477][ T5713] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 626.640107][ T5713] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 626.680486][ T5713] usb 2-1: USB disconnect, device number 35 [ 626.752026][T12925] loop2: detected capacity change from 0 to 7 [ 626.843440][T12925] Dev loop2: unable to read RDB block 7 [ 626.851916][T12925] loop2: AHDI p2 p3 [ 626.872812][T12925] loop2: partition table partially beyond EOD, truncated [ 627.223173][ T5713] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 627.393549][ T5713] usb 6-1: Using ep0 maxpacket: 16 [ 627.414085][ T5713] usb 6-1: unable to get BOS descriptor or descriptor too short [ 627.435414][ T5713] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 627.465906][ T5713] usb 6-1: string descriptor 0 read error: -22 [ 627.476840][ T5713] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 627.535788][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.560464][T12938] ip6t_rpfilter: unknown options [ 627.679199][ T5713] snd-ua101 6-1:1.0: invalid num_altsetting [ 627.808420][ T5713] usb 6-1: USB disconnect, device number 11 [ 628.026582][T12949] loop2: detected capacity change from 0 to 7 [ 628.100348][T12949] Dev loop2: unable to read RDB block 7 [ 628.116893][T12949] loop2: AHDI p2 p3 [ 628.128102][T12949] loop2: partition table partially beyond EOD, truncated [ 628.211984][ T4995] Dev loop2: unable to read RDB block 7 [ 628.219176][ T4995] loop2: AHDI p2 p3 [ 628.225421][ T4995] loop2: partition table partially beyond EOD, truncated [ 628.387824][ T4995] Dev loop2: unable to read RDB block 7 [ 628.414628][ T4995] loop2: AHDI p2 p3 [ 628.430637][ T4995] loop2: partition table partially beyond EOD, truncated [ 628.451266][T12955] binder: 12954:12955 ioctl c018620c 2000000002c0 returned -22 [ 628.622353][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 628.622370][ T29] audit: type=1326 audit(1778535726.840:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.2.1369" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c8b9cdd9 code=0x7ffc0000 [ 628.724217][ T29] audit: type=1326 audit(1778535726.880:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.2.1369" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c8b9cdd9 code=0x7ffc0000 [ 628.832469][ T29] audit: type=1326 audit(1778535726.880:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.2.1369" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f75c8b9cdd9 code=0x7ffc0000 [ 628.968811][ T29] audit: type=1326 audit(1778535726.880:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.2.1369" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c8b9cdd9 code=0x7ffc0000 [ 629.046574][ T29] audit: type=1326 audit(1778535726.880:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.2.1369" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c8b9cdd9 code=0x7ffc0000 [ 629.135607][ T29] audit: type=1326 audit(1778535726.880:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.2.1369" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f75c8b9cdd9 code=0x7ffc0000 [ 629.234208][ T29] audit: type=1326 audit(1778535726.880:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.2.1369" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c8b9cdd9 code=0x7ffc0000 [ 629.421564][ T29] audit: type=1326 audit(1778535726.880:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.2.1369" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f75c8b9cdd9 code=0x7ffc0000 [ 629.582982][ T29] audit: type=1326 audit(1778535726.880:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.2.1369" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c8b9cdd9 code=0x7ffc0000 [ 629.720215][ T29] audit: type=1326 audit(1778535726.920:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.2.1369" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c8b9cdd9 code=0x7ffc0000 [ 630.464048][T12981] team0: entered promiscuous mode [ 630.472056][T12981] veth0_to_hsr: entered promiscuous mode [ 630.479524][T12981] vlan0: entered promiscuous mode [ 630.843192][ T5713] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 630.858293][T12991] loop2: detected capacity change from 0 to 7 [ 630.887230][T12991] Dev loop2: unable to read RDB block 7 [ 630.900588][T12991] loop2: AHDI p2 p3 [ 630.907077][T12991] loop2: partition table partially beyond EOD, truncated [ 631.017363][ T5713] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 631.035864][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.060379][ T5713] usb 6-1: Product: syz [ 631.077185][ T5713] usb 6-1: Manufacturer: syz [ 631.082382][ T4995] Dev loop2: unable to read RDB block 7 [ 631.091414][ T5713] usb 6-1: SerialNumber: syz [ 631.108060][ T4995] loop2: AHDI p2 p3 [ 631.131429][ T4995] loop2: partition table partially beyond EOD, truncated [ 631.393170][ T5625] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 631.543746][ T5713] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 631.573021][ T5625] usb 3-1: Using ep0 maxpacket: 16 [ 631.580247][ T5713] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 631.605213][ T5625] usb 3-1: config index 0 descriptor too short (expected 1810, got 18) [ 631.633128][ T5625] usb 3-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 631.663065][ T5625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.705394][ T5625] usb 3-1: config 0 descriptor?? [ 631.747699][ T5625] gspca_main: etoms-2.14.0 probing 102c:6151 [ 632.333848][ T5713] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 632.381893][ T5625] usb 3-1: USB disconnect, device number 49 [ 632.387882][ T5713] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 632.398802][T13006] loop2: detected capacity change from 0 to 7 [ 632.417119][ T5713] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 632.428154][T13006] Dev loop2: unable to read RDB block 7 [ 632.439795][ T5713] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 632.483153][ T5713] usb 6-1: USB disconnect, device number 12 [ 632.495425][T13006] loop2: AHDI p2 p3 [ 632.657617][T13006] loop2: partition table partially beyond EOD, truncated [ 634.143903][T13033] netlink: 'syz.1.1391': attribute type 1 has an invalid length. [ 634.209363][ T5625] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 634.254622][ T5625] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz0] on syz0 [ 634.373929][T13045] netlink: 212352 bytes leftover after parsing attributes in process `syz.1.1391'. [ 634.825868][T13052] macvlan2: entered promiscuous mode [ 634.837066][T13052] macvlan2: entered allmulticast mode [ 634.846328][T13052] bond4: entered promiscuous mode [ 634.875854][T13052] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 634.938375][T13052] bond4: left promiscuous mode [ 636.048808][T13060] loop2: detected capacity change from 0 to 7 [ 636.146339][T13060] Dev loop2: unable to read RDB block 7 [ 636.235333][T13060] loop2: AHDI p2 p3 [ 636.260386][T13060] loop2: partition table partially beyond EOD, truncated [ 636.455275][T11302] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 636.494841][T11302] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz0] on syz0 [ 636.782430][ T4995] Dev loop2: unable to read RDB block 7 [ 636.798275][ T4995] loop2: AHDI p2 p3 [ 636.811344][ T4995] loop2: partition table partially beyond EOD, truncated [ 637.299239][ T4995] Dev loop2: unable to read RDB block 7 [ 637.317710][ T4995] loop2: AHDI p2 p3 [ 637.339691][ T4995] loop2: partition table partially beyond EOD, truncated [ 637.495064][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 637.590266][ T4995] Dev loop2: unable to read RDB block 7 [ 637.612161][ T4995] loop2: AHDI p2 p3 [ 637.644404][ T4995] loop2: partition table partially beyond EOD, truncated [ 637.652046][T13084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1404'. [ 637.703714][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 637.732665][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.757470][ T24] usb 6-1: Product: syz [ 637.784005][ T24] usb 6-1: Manufacturer: syz [ 637.807728][ T24] usb 6-1: SerialNumber: syz [ 637.983043][ T5625] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 638.165849][ T5625] usb 2-1: Using ep0 maxpacket: 16 [ 638.181512][ T5625] usb 2-1: config index 0 descriptor too short (expected 1810, got 18) [ 638.209797][ T5625] usb 2-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 638.239366][ T5625] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.252490][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 638.271516][ T5625] usb 2-1: config 0 descriptor?? [ 638.299068][ T5625] gspca_main: etoms-2.14.0 probing 102c:6151 [ 638.314315][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 638.807257][ T5625] usb 2-1: USB disconnect, device number 36 [ 639.026778][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 639.063233][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 639.089573][ T5625] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 639.123994][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 639.141900][ T5625] hid-generic 0000:0000:0000.0046: hidraw0: HID v0.00 Device [syz0] on syz0 [ 639.160839][ T24] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 639.216034][ T24] usb 6-1: USB disconnect, device number 13 [ 639.474994][T13108] loop2: detected capacity change from 0 to 7 [ 639.531496][T13108] Dev loop2: unable to read RDB block 7 [ 639.557288][T13108] loop2: AHDI p2 p3 [ 639.565537][T13108] loop2: partition table partially beyond EOD, truncated [ 639.862325][ T24] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 639.903473][ T24] hid-generic 0000:0000:0000.0047: hidraw0: HID v0.00 Device [syz0] on syz0 [ 640.303085][T11302] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 640.485281][T11302] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 640.516051][T11302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.562523][T11302] usb 6-1: config 0 descriptor?? [ 640.583957][T11302] cp210x 6-1:0.0: cp210x converter detected [ 641.010092][T11302] usb 6-1: cp210x converter now attached to ttyUSB0 [ 641.074361][T11302] usb 6-1: USB disconnect, device number 14 [ 641.110787][T11302] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 641.136760][T13134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1415'. [ 641.151563][T11302] cp210x 6-1:0.0: device disconnected [ 641.246423][T13131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1415'. [ 641.617665][ T5625] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 641.646975][ T5625] hid-generic 0000:0000:0000.0048: hidraw0: HID v0.00 Device [syz0] on syz0 [ 641.697508][T13146] loop2: detected capacity change from 0 to 7 [ 641.758711][T13146] Dev loop2: unable to read RDB block 7 [ 641.776071][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1418'. [ 641.791448][ T24] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 641.847287][T13146] loop2: AHDI p2 p3 [ 641.897966][T13146] loop2: partition table partially beyond EOD, truncated [ 641.973021][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 642.002985][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.015769][ T24] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 642.080904][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 642.113331][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 642.170824][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.219497][ T24] usb 5-1: config 0 descriptor?? [ 642.260651][ T24] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 642.522145][ T4995] Dev loop2: unable to read RDB block 7 [ 642.543763][ T4995] loop2: AHDI p2 p3 [ 642.562795][ T4995] loop2: partition table partially beyond EOD, truncated [ 643.993438][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 644.231013][ T5625] usb 5-1: USB disconnect, device number 62 [ 644.400383][T13173] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1432'. [ 645.362054][T13188] netlink: 'syz.0.1424': attribute type 4 has an invalid length. [ 645.500075][T13193] loop2: detected capacity change from 0 to 7 [ 645.543355][T13193] Dev loop2: unable to read RDB block 7 [ 645.563033][T13193] loop2: AHDI p2 p3 [ 645.609971][T13193] loop2: partition table partially beyond EOD, truncated [ 645.851392][T13194] xt_TCPMSS: Only works on TCP SYN packets [ 645.904549][ T24] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 646.067293][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 646.110468][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.148752][ T24] usb 3-1: Product: syz [ 646.182180][ T24] usb 3-1: Manufacturer: syz [ 646.220582][ T24] usb 3-1: SerialNumber: syz [ 646.625212][T11302] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 646.669070][T11302] hid-generic 0000:0000:0000.0049: hidraw0: HID v0.00 Device [syz0] on syz0 [ 646.719692][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 646.758968][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 647.505658][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 647.552282][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 647.606755][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 647.678878][ T24] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 647.762881][ T24] usb 3-1: USB disconnect, device number 50 [ 647.962942][T13224] loop2: detected capacity change from 0 to 7 [ 648.081571][T13224] Dev loop2: unable to read RDB block 7 [ 648.217543][T13224] loop2: AHDI p2 p3 [ 648.250894][T13224] loop2: partition table partially beyond EOD, truncated [ 648.423647][T13235] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1436'. [ 649.835927][T13255] loop2: detected capacity change from 0 to 7 [ 649.920154][T13255] Dev loop2: unable to read RDB block 7 [ 649.939371][T13255] loop2: AHDI p2 p3 [ 649.954041][T13255] loop2: partition table partially beyond EOD, truncated [ 651.664007][T13265] dummy0: entered allmulticast mode [ 651.743514][T11302] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 651.913236][T11302] usb 5-1: Using ep0 maxpacket: 16 [ 651.927736][T11302] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 651.973895][T11302] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 652.007140][T11302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.037401][T11302] usb 5-1: Product: syz [ 652.056516][T11302] usb 5-1: Manufacturer: syz [ 652.077594][T11302] usb 5-1: SerialNumber: syz [ 652.118957][T11302] r8152-cfgselector 5-1: Unknown version 0x0000 [ 652.133328][T11302] r8152-cfgselector 5-1: config 0 descriptor?? [ 652.622872][T11302] r8152-cfgselector 5-1: USB disconnect, device number 63 [ 653.279557][T13298] loop2: detected capacity change from 0 to 7 [ 653.366468][T13298] Dev loop2: unable to read RDB block 7 [ 653.385429][T13298] loop2: AHDI p2 p3 [ 653.391365][T13298] loop2: partition table partially beyond EOD, truncated [ 653.573006][T11302] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 653.748260][T11302] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 653.770163][T11302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.790692][T11302] usb 2-1: Product: syz [ 653.802302][T11302] usb 2-1: Manufacturer: syz [ 653.818636][T11302] usb 2-1: SerialNumber: syz [ 653.991278][ T4995] Dev loop2: unable to read RDB block 7 [ 654.004832][ T4995] loop2: AHDI p2 p3 [ 654.015899][ T4995] loop2: partition table partially beyond EOD, truncated [ 654.254860][T11302] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 654.291807][T11302] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 654.824025][T13312] binder: 13311:13312 ioctl c0306201 200000000680 returned -14 [ 654.831959][T13313] loop2: detected capacity change from 0 to 7 [ 654.842932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 654.861021][T13313] Dev loop2: unable to read RDB block 7 [ 654.871568][T13313] loop2: AHDI p2 p3 [ 654.928562][T13315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1452'. [ 655.019763][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 655.019780][ T29] audit: type=1326 audit(1778535753.240:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13317 comm="syz.4.1456" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 655.050963][T13313] loop2: partition table partially beyond EOD, truncated [ 655.076169][ T29] audit: type=1326 audit(1778535753.240:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13317 comm="syz.4.1456" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 655.125332][ T29] audit: type=1326 audit(1778535753.280:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13317 comm="syz.4.1456" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 655.151910][ T29] audit: type=1326 audit(1778535753.280:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13317 comm="syz.4.1456" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 655.179575][T11302] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 655.218358][ T29] audit: type=1326 audit(1778535753.280:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13317 comm="syz.4.1456" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 655.243326][ T29] audit: type=1326 audit(1778535753.300:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13317 comm="syz.4.1456" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 655.270510][ T29] audit: type=1326 audit(1778535753.300:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13317 comm="syz.4.1456" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 655.302216][T11302] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 655.318474][T13322] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 655.327440][T11302] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 655.327838][ T29] audit: type=1326 audit(1778535753.300:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13317 comm="syz.4.1456" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 655.381293][ T29] audit: type=1326 audit(1778535753.330:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13317 comm="syz.4.1456" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 655.408555][ T29] audit: type=1326 audit(1778535753.330:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13317 comm="syz.4.1456" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 655.456358][T11302] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 655.491937][T11302] usb 2-1: USB disconnect, device number 37 [ 655.616874][ T4995] Dev loop2: unable to read RDB block 7 [ 655.645658][ T4995] loop2: AHDI p2 p3 [ 655.654867][ T4995] loop2: partition table partially beyond EOD, truncated [ 655.843965][T13329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1457'. [ 658.073055][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 658.098382][ T24] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 658.152711][ T24] hid-generic 0000:0000:0000.004A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 658.183037][ T5713] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 658.376797][ T5713] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 658.416435][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.462266][ T5713] usb 2-1: config 0 descriptor?? [ 658.811352][T13365] loop2: detected capacity change from 0 to 7 [ 659.124910][T13365] Dev loop2: unable to read RDB block 7 [ 659.168518][T13365] loop2: AHDI p2 p3 [ 659.178284][T13370] netlink: 'syz.1.1463': attribute type 10 has an invalid length. [ 659.216433][T13365] loop2: partition table partially beyond EOD, truncated [ 659.400427][ T4995] Dev loop2: unable to read RDB block 7 [ 659.444362][ T4995] loop2: AHDI p2 p3 [ 659.472319][ T4995] loop2: partition table partially beyond EOD, truncated [ 660.281893][T13389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1472'. [ 660.295491][T13390] IPVS: sh: FWM 3 0x00000003 - no destination available [ 660.352391][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 662.173344][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 662.349087][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 662.372368][T11302] usb 2-1: USB disconnect, device number 38 [ 662.385940][ T24] usb 6-1: config index 0 descriptor too short (expected 1810, got 18) [ 662.408314][ T24] usb 6-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 662.443142][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.500210][ T24] usb 6-1: config 0 descriptor?? [ 662.562199][ T24] gspca_main: etoms-2.14.0 probing 102c:6151 [ 662.781208][T13421] loop2: detected capacity change from 0 to 7 [ 662.946844][T13421] Dev loop2: unable to read RDB block 7 [ 662.962402][T13421] loop2: AHDI p2 p3 [ 662.991115][T13421] loop2: partition table partially beyond EOD, truncated [ 663.067787][ T24] usb 6-1: USB disconnect, device number 15 [ 663.400973][T11302] hid-generic 0000:0000:0000.004B: unknown main item tag 0x0 [ 663.436897][T11302] hid-generic 0000:0000:0000.004B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 663.533229][ T4995] Dev loop2: unable to read RDB block 7 [ 663.621128][ T4995] loop2: AHDI p2 p3 [ 663.635962][ T4995] loop2: partition table partially beyond EOD, truncated [ 664.046748][T13442] loop2: detected capacity change from 0 to 7 [ 664.413203][T13442] Dev loop2: unable to read RDB block 7 [ 664.446919][T13442] loop2: AHDI p2 p3 [ 664.478835][T13442] loop2: partition table partially beyond EOD, truncated [ 664.615857][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1484'. [ 664.722572][ T4995] Dev loop2: unable to read RDB block 7 [ 664.744932][ T4995] loop2: AHDI p2 p3 [ 664.759454][ T4995] loop2: partition table partially beyond EOD, truncated [ 665.348089][ T9] hid-generic 0000:0000:0000.004C: unknown main item tag 0x0 [ 665.394187][ T9] hid-generic 0000:0000:0000.004C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 666.432326][T13487] loop2: detected capacity change from 0 to 7 [ 666.476133][T13487] Dev loop2: unable to read RDB block 7 [ 666.492734][T13487] loop2: AHDI p2 p3 [ 666.513644][T13487] loop2: partition table partially beyond EOD, truncated [ 666.696619][ T4995] Dev loop2: unable to read RDB block 7 [ 666.707656][ T4995] loop2: AHDI p2 p3 [ 666.726177][ T4995] loop2: partition table partially beyond EOD, truncated [ 666.796372][ T4995] Dev loop2: unable to read RDB block 7 [ 666.820000][ T4995] loop2: AHDI p2 p3 [ 666.843045][ T4995] loop2: partition table partially beyond EOD, truncated [ 667.204238][ T4995] Dev loop2: unable to read RDB block 7 [ 667.216057][ T4995] loop2: AHDI p2 p3 [ 667.221405][ T4995] loop2: partition table partially beyond EOD, truncated [ 667.881127][T11302] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0 [ 667.912007][T11302] hid-generic 0000:0000:0000.004D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 669.046749][T13516] loop2: detected capacity change from 0 to 7 [ 669.153431][T13516] Dev loop2: unable to read RDB block 7 [ 669.159121][T13516] loop2: AHDI p2 p3 [ 669.177614][T13516] loop2: partition table partially beyond EOD, truncated [ 669.385522][T13522] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1503'. [ 669.745180][ T9] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 669.833264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 669.866959][ T9] hid-generic 0000:0000:0000.004E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 669.907014][ T4995] Dev loop2: unable to read RDB block 7 [ 669.912674][ T4995] loop2: AHDI p2 p3 [ 669.925006][ T4995] loop2: partition table partially beyond EOD, truncated [ 670.029890][ T4995] Dev loop2: unable to read RDB block 7 [ 670.052060][ T4995] loop2: AHDI p2 p3 [ 670.065314][ T4995] loop2: partition table partially beyond EOD, truncated [ 670.420786][ T4995] Dev loop2: unable to read RDB block 7 [ 670.434331][ T4995] loop2: AHDI p2 p3 [ 670.472821][ T4995] loop2: partition table partially beyond EOD, truncated [ 671.663022][T13562] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1512'. [ 671.810097][T13563] fuse: Unknown parameter '0xffffffffffffffff' [ 672.258262][ T9] hid-generic 0000:0000:0000.004F: unknown main item tag 0x0 [ 672.304646][ T9] hid-generic 0000:0000:0000.004F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 673.970280][T13597] loop2: detected capacity change from 0 to 7 [ 674.004221][T13597] Dev loop2: unable to read RDB block 7 [ 674.036150][T13597] loop2: AHDI p2 p3 [ 674.046335][T13597] loop2: partition table partially beyond EOD, truncated [ 674.606519][T13576] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 675.295068][T13610] loop2: detected capacity change from 0 to 7 [ 675.390842][T13610] Dev loop2: unable to read RDB block 7 [ 675.417907][T13610] loop2: AHDI p2 p3 [ 675.500583][T13610] loop2: partition table partially beyond EOD, truncated [ 675.663171][T13622] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1527'. [ 675.753483][ T5641] Bluetooth: hci1: command 0x0c1a tx timeout [ 675.993430][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 676.525583][T13630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1529'. [ 676.548114][T13628] dummy0: entered allmulticast mode [ 676.563301][T13630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1529'. [ 676.679622][T13630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1529'. [ 676.741756][ T5713] hid-generic 0000:0000:0000.0050: unknown main item tag 0x0 [ 676.765652][T13630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1529'. [ 676.778383][ T5713] hid-generic 0000:0000:0000.0050: hidraw0: HID v0.00 Device [syz0] on syz0 [ 677.094289][T13630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1529'. [ 677.132486][T13630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1529'. [ 677.617665][T13649] loop2: detected capacity change from 0 to 7 [ 677.881976][T13649] Dev loop2: unable to read RDB block 7 [ 677.903934][T13649] loop2: AHDI p1 p2 p3 [ 677.928373][T13649] loop2: partition table partially beyond EOD, truncated [ 678.058249][T13649] loop2: p1 start 1601398130 is beyond EOD, truncated [ 678.101982][T13649] loop2: p2 start 1702059890 is beyond EOD, truncated [ 678.353344][T11302] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 678.526699][T11302] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.561621][T11302] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 678.607223][T11302] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 678.665219][T11302] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 678.695966][T11302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.727321][T11302] usb 2-1: Product: syz [ 678.745166][T11302] usb 2-1: Manufacturer: syz [ 678.758414][T11302] usb 2-1: SerialNumber: syz [ 678.798420][T11302] cdc_ncm 2-1:1.0: invalid descriptor buffer length [ 678.819777][T11302] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 678.834603][ T9] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 678.862218][T11302] cdc_ncm 2-1:1.0: bind() failure [ 678.901705][ T9] hid-generic 0000:0000:0000.0051: hidraw0: HID v0.00 Device [syz0] on syz0 [ 678.999589][ T9] usb 2-1: USB disconnect, device number 39 [ 679.341465][T13673] xt_CT: You must specify a L4 protocol and not use inversions on it [ 679.641942][T13678] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1540'. [ 679.644039][T13677] Invalid option length (1043940) for dns_resolver key [ 679.917323][T13683] IPVS: sh: FWM 3 0x00000003 - no destination available [ 680.607525][ T5713] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 680.669587][ T5713] hid-generic 0000:0000:0000.0052: hidraw0: HID v0.00 Device [syz0] on syz0 [ 680.943066][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 681.130209][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 681.169180][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.219342][ T9] usb 3-1: Product: syz [ 681.236445][ T9] usb 3-1: Manufacturer: syz [ 681.248435][ T9] usb 3-1: SerialNumber: syz [ 681.336245][T13724] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1557'. [ 681.717325][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 681.748646][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 682.285078][T13749] kernel read not supported for file / 7âW)sL_:Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 13749 comm: syz.5.1568) [ 682.300910][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 682.300924][ T29] audit: type=1800 audit(1778535780.530:1341): pid=13749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1568" name=20019C1437B3CFFCC3A25729EB739313EB014C5F3A9E1F518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=45524 res=0 errno=0 [ 682.485948][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 682.536326][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 682.549567][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 682.593174][ T9] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 682.650166][ T9] usb 3-1: USB disconnect, device number 51 [ 682.778433][T13768] loop2: detected capacity change from 0 to 7 [ 682.967180][T13768] Dev loop2: unable to read RDB block 7 [ 682.980928][T13768] loop2: AHDI p2 p3 [ 683.000801][T13768] loop2: partition table partially beyond EOD, truncated [ 683.046826][ T5713] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0 [ 683.096226][ T5713] hid-generic 0000:0000:0000.0053: hidraw0: HID v0.00 Device [syz0] on syz0 [ 683.137279][ T9] hid-generic 0000:0000:0000.0054: unknown main item tag 0x0 [ 683.202019][ T9] hid-generic 0000:0000:0000.0054: hidraw1: HID v0.00 Device [syz0] on syz0 [ 683.261080][ T5713] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 683.322366][ T5713] hid-generic 0000:0000:0000.0055: hidraw2: HID v0.00 Device [syz0] on syz0 [ 683.414887][ T4995] Dev loop2: unable to read RDB block 7 [ 683.442313][ T4995] loop2: AHDI p2 p3 [ 683.462613][ T4995] loop2: partition table partially beyond EOD, truncated [ 683.938648][ T5713] IPVS: starting estimator thread 0... [ 684.073178][T13800] IPVS: using max 34 ests per chain, 81600 per kthread [ 684.983949][ T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 685.173314][ T9] usb 3-1: device descriptor read/64, error -71 [ 685.423179][ T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 685.550511][T13835] loop2: detected capacity change from 0 to 7 [ 685.576486][ T9] usb 3-1: device descriptor read/64, error -71 [ 685.604670][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.613302][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.615003][T13838] IPVS: sh: FWM 3 0x00000003 - no destination available [ 685.693909][ T9] usb usb3-port1: attempt power cycle [ 685.746562][T11301] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 685.761138][T13835] Dev loop2: unable to read RDB block 7 [ 685.772181][T11301] hid-generic 0000:0000:0000.0056: hidraw0: HID v0.00 Device [syz0] on syz0 [ 685.796348][T13835] loop2: AHDI p2 p3 [ 685.817841][T13835] loop2: partition table partially beyond EOD, truncated [ 686.063091][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 686.093809][ T9] usb 3-1: device descriptor read/8, error -71 [ 686.345181][ T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 686.413504][ T9] usb 3-1: device descriptor read/8, error -71 [ 686.545133][ T9] usb usb3-port1: unable to enumerate USB device [ 686.602826][ T5713] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 686.672214][ T5713] hid-generic 0000:0000:0000.0057: hidraw0: HID v0.00 Device [syz0] on syz0 [ 688.081077][ T9] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 688.121036][ T9] hid-generic 0000:0000:0000.0058: hidraw0: HID v0.00 Device [syz0] on syz0 [ 688.149983][T11301] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 688.206847][T11301] hid-generic 0000:0000:0000.0059: hidraw1: HID v0.00 Device [syz0] on syz0 [ 688.954542][T13897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1610'. [ 689.490555][ T24] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 689.588335][ T24] hid-generic 0000:0000:0000.005A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 689.945892][T13907] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 689.945892][T13907] Please contact the netfilter-devel mailing list or update your nftables rules. [ 690.085434][ T3394] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 690.322613][T13920] vlan0: entered promiscuous mode [ 690.332509][T13920] vlan0: entered allmulticast mode [ 690.348183][T13920] veth0_vlan: entered allmulticast mode [ 690.393687][ T9] hid-generic 0000:0000:0000.005B: unknown main item tag 0x0 [ 690.430268][ T9] hid-generic 0000:0000:0000.005B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 690.543099][T11301] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 690.677998][T13929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1621'. [ 690.707354][T11301] usb 2-1: device descriptor read/64, error -71 [ 690.973461][T11301] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 691.143105][T11301] usb 2-1: device descriptor read/64, error -71 [ 691.295812][T11301] usb usb2-port1: attempt power cycle [ 691.653186][T11301] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 691.694340][T11301] usb 2-1: device descriptor read/8, error -71 [ 691.891192][T13952] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1629'. [ 691.963315][T11301] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 692.008033][T11301] usb 2-1: device descriptor read/8, error -71 [ 692.126734][T11301] usb usb2-port1: unable to enumerate USB device [ 692.321025][T13958] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1632'. [ 693.060665][ T24] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 693.087099][ T24] hid-generic 0000:0000:0000.005C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 693.399320][T11302] hid-generic 0000:0000:0000.005D: unknown main item tag 0x0 [ 693.446805][T11302] hid-generic 0000:0000:0000.005D: hidraw1: HID v0.00 Device [syz0] on syz0 [ 694.279621][T13999] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 694.567642][T14005] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 695.367903][T14026] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1653'. [ 695.856631][T14039] IPVS: sh: FWM 3 0x00000003 - no destination available [ 696.373768][T14044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1658'. [ 697.324165][T14050] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1660'. [ 697.880297][T11301] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 697.961876][T11301] hid-generic 0000:0000:0000.005E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 698.413229][ T24] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 698.570177][T14075] loop2: detected capacity change from 0 to 7 [ 698.589871][ T24] usb 6-1: config 0 has an invalid interface number: 231 but max is 0 [ 698.623729][ T24] usb 6-1: config 0 has no interface number 0 [ 698.632780][ T24] usb 6-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 698.663110][ T24] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 698.680928][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.709104][ T24] usb 6-1: Product: syz [ 698.722181][ T24] usb 6-1: Manufacturer: syz [ 698.742162][ T24] usb 6-1: SerialNumber: syz [ 698.744294][T14075] Dev loop2: unable to read RDB block 7 [ 698.752993][T14075] loop2: AHDI p2 p3 [ 698.778122][ T24] usb 6-1: config 0 descriptor?? [ 698.792611][T14064] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 698.802628][T14075] loop2: partition table partially beyond EOD, truncated [ 698.850601][ T24] plusb 6-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 5a:28:3c:d2:ed:bb [ 698.865212][ T4995] Dev loop2: unable to read RDB block 7 [ 698.881756][ T4995] loop2: AHDI p2 p3 [ 698.891064][ T4995] loop2: partition table partially beyond EOD, truncated [ 700.164233][T11301] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 700.210041][T11301] hid-generic 0000:0000:0000.005F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 700.594196][ T29] audit: type=1326 audit(1778535798.810:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.4.1672" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 700.655934][T12150] usb 6-1: USB disconnect, device number 16 [ 700.666343][ T29] audit: type=1326 audit(1778535798.840:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.4.1672" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 700.719810][T12150] plusb 6-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 700.731257][ T29] audit: type=1326 audit(1778535798.850:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.4.1672" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 700.835526][ T29] audit: type=1326 audit(1778535798.850:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.4.1672" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 700.997841][ T29] audit: type=1326 audit(1778535798.850:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.4.1672" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 701.027326][ T29] audit: type=1326 audit(1778535798.850:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.4.1672" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 701.052216][ T29] audit: type=1326 audit(1778535798.850:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.4.1672" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 701.082328][T11301] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 701.142345][ T29] audit: type=1326 audit(1778535798.850:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.4.1672" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4739cdd9 code=0x7ffc0000 [ 701.283589][T11301] usb 5-1: Using ep0 maxpacket: 8 [ 701.308606][T11301] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 701.342859][T11301] usb 5-1: config 0 has no interface number 0 [ 701.367122][T11301] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 701.380627][T11301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.400765][T14126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1677'. [ 701.414097][T11301] usb 5-1: Product: syz [ 701.429109][T11301] usb 5-1: Manufacturer: syz [ 701.441774][T11301] usb 5-1: SerialNumber: syz [ 701.475404][T14126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1677'. [ 701.515596][T11301] usb 5-1: config 0 descriptor?? [ 701.739787][T11301] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 701.772264][T11301] uvcvideo 5-1:0.31: No valid video chain found. [ 701.832884][ T5713] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 701.867036][ T5713] hid-generic 0000:0000:0000.0060: hidraw0: HID v0.00 Device [syz0] on syz0 [ 701.980345][ T5713] usb 5-1: USB disconnect, device number 64 [ 702.210560][T14145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 702.217836][T14145] IPv6: NLM_F_CREATE should be set when creating new route [ 702.225142][T14145] IPv6: NLM_F_CREATE should be set when creating new route [ 702.857493][T14158] netlink: 552 bytes leftover after parsing attributes in process `syz.1.1686'. [ 703.380858][T14173] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1691'. [ 703.525065][T14174] IPVS: sh: FWM 3 0x00000003 - no destination available [ 703.993250][T11301] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 704.163271][T11301] usb 3-1: Using ep0 maxpacket: 8 [ 704.208799][T11301] usb 3-1: config index 0 descriptor too short (expected 26, got 18) [ 704.250236][T11301] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 704.269797][T11301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.279536][T11301] usb 3-1: Product: syz [ 704.293129][T11301] usb 3-1: Manufacturer: syz [ 704.298582][T11301] usb 3-1: SerialNumber: syz [ 704.375066][T11301] usb 3-1: config 0 descriptor?? [ 704.427039][T11301] gspca_main: sq930x-2.14.0 probing 2770:930c [ 704.819932][T14189] netlink: 'syz.1.1697': attribute type 8 has an invalid length. [ 705.083818][T11301] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 705.265482][T14201] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1701'. [ 705.308044][T14201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1701'. [ 705.317005][T11301] gspca_sq930x: Sensor ov9630 not yet treated [ 705.328743][T11301] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 705.370679][T11301] usb 3-1: USB disconnect, device number 56 [ 705.421721][ T24] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 705.478820][ T24] hid-generic 0000:0000:0000.0061: hidraw0: HID v0.00 Device [syz0] on syz0 [ 705.566851][T14210] ================================================================== [ 705.574958][T14210] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 705.583701][T14210] Write of size 1440 at addr ffffc900059e1a80 by task vivid-000-vid-c/14210 [ 705.592358][T14210] [ 705.594745][T14210] CPU: 1 UID: 0 PID: 14210 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 705.594802][T14210] Tainted: [L]=SOFTLOCKUP [ 705.594806][T14210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 705.594818][T14210] Call Trace: [ 705.594827][T14210] [ 705.594878][T14210] dump_stack_lvl+0xe8/0x150 [ 705.594950][T14210] print_address_description+0x55/0x1e0 [ 705.594968][T14210] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 705.595002][T14210] print_report+0x58/0x70 [ 705.595011][T14210] kasan_report+0x117/0x150 [ 705.595043][T14210] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 705.595056][T14210] kasan_check_range+0x264/0x2c0 [ 705.595070][T14210] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 705.595082][T14210] __asan_memcpy+0x40/0x70 [ 705.595094][T14210] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 705.595120][T14210] vivid_thread_vid_cap_tick+0x1021/0x5fd0 [ 705.595201][T14210] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 705.595265][T14210] ? lockdep_hardirqs_on+0x7a/0x110 [ 705.595319][T14210] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 705.595335][T14210] ? vivid_thread_vid_cap+0x491/0x1190 [ 705.595352][T14210] ? cgroup1_freezing+0x29a/0x350 [ 705.595367][T14210] vivid_thread_vid_cap+0x909/0x1190 [ 705.595382][T14210] ? __lock_acquire+0x6b5/0x2cf0 [ 705.595404][T14210] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 705.595421][T14210] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 705.595433][T14210] ? __kthread_parkme+0x7a/0x1f0 [ 705.595453][T14210] kthread+0x388/0x470 [ 705.595466][T14210] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 705.595480][T14210] ? __pfx_kthread+0x10/0x10 [ 705.595492][T14210] ret_from_fork+0x514/0xb70 [ 705.595507][T14210] ? __pfx_ret_from_fork+0x10/0x10 [ 705.595517][T14210] ? __switch_to+0xc79/0x1410 [ 705.595531][T14210] ? __pfx_kthread+0x10/0x10 [ 705.595543][T14210] ret_from_fork_asm+0x1a/0x30 [ 705.595558][T14210] [ 705.595581][T14210] [ 705.780884][T14210] The buggy address belongs to a 1-page vmalloc region starting at 0xffffc900059e1000 allocated at vb2_vmalloc_alloc+0xef/0x360 [ 705.794141][T14210] The buggy address belongs to the physical page: [ 705.800585][T14210] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x7f8cdc498 pfn:0x69806 [ 705.810022][T14210] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 705.817141][T14210] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 705.825709][T14210] raw: 00000007f8cdc498 0000000000000000 00000001ffffffff 0000000000000000 [ 705.834278][T14210] page dumped because: kasan: bad access detected [ 705.840676][T14210] page_owner tracks the page as allocated [ 705.846368][T14210] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 14209, tgid 14208 (syz.4.1704), ts 705562429611, free_ts 705562410969 [ 705.865702][T14210] post_alloc_hook+0x231/0x280 [ 705.870476][T14210] get_page_from_freelist+0x24ba/0x2540 [ 705.876011][T14210] __alloc_frozen_pages_noprof+0x18d/0x380 [ 705.881798][T14210] __alloc_pages_noprof+0x10/0x100 [ 705.886885][T14210] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 705.892322][T14210] alloc_pages_bulk_mempolicy_noprof+0x34e/0x1680 [ 705.898715][T14210] __vmalloc_node_range_noprof+0xad1/0x1750 [ 705.904605][T14210] vmalloc_user_noprof+0xad/0xe0 [ 705.909521][T14210] vb2_vmalloc_alloc+0xef/0x360 [ 705.914350][T14210] __vb2_queue_alloc+0x9c5/0x15a0 [ 705.919355][T14210] vb2_core_reqbufs+0xc1f/0x1410 [ 705.924269][T14210] __vb2_init_fileio+0x318/0xff0 [ 705.929184][T14210] __vb2_perform_fileio+0x282/0x1620 [ 705.934476][T14210] vb2_fop_read+0x273/0x360 [ 705.938977][T14210] v4l2_read+0x19c/0x2c0 [ 705.943288][T14210] vfs_readv+0x587/0x840 [ 705.947526][T14210] page last free pid 14209 tgid 14208 stack trace: [ 705.953998][T14210] __free_frozen_pages+0xbc7/0xd30 [ 705.959091][T14210] __kasan_populate_vmalloc+0x1b2/0x1d0 [ 705.964617][T14210] alloc_vmap_area+0xd47/0x1480 [ 705.969452][T14210] __get_vm_area_node+0x1f8/0x300 [ 705.974459][T14210] __vmalloc_node_range_noprof+0x36a/0x1750 [ 705.980353][T14210] vmalloc_user_noprof+0xad/0xe0 [ 705.985281][T14210] vb2_vmalloc_alloc+0xef/0x360 [ 705.990120][T14210] __vb2_queue_alloc+0x9c5/0x15a0 [ 705.995129][T14210] vb2_core_reqbufs+0xc1f/0x1410 [ 706.000050][T14210] __vb2_init_fileio+0x318/0xff0 [ 706.004972][T14210] __vb2_perform_fileio+0x282/0x1620 [ 706.010237][T14210] vb2_fop_read+0x273/0x360 [ 706.014718][T14210] v4l2_read+0x19c/0x2c0 [ 706.018944][T14210] vfs_readv+0x587/0x840 [ 706.023168][T14210] __x64_sys_preadv+0x19f/0x2a0 [ 706.028003][T14210] do_syscall_64+0x15f/0xf80 [ 706.032646][T14210] [ 706.034948][T14210] Memory state around the buggy address: [ 706.040599][T14210] ffffc900059e1f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 706.048667][T14210] ffffc900059e1f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 706.056732][T14210] >ffffc900059e2000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 706.064780][T14210] ^ [ 706.068829][T14210] ffffc900059e2080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 706.076874][T14210] ffffc900059e2100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 706.084919][T14210] ================================================================== [ 706.190065][T14207] fido_id[14207]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 706.261330][T14210] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 706.268556][T14210] CPU: 1 UID: 0 PID: 14210 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 706.279917][T14210] Tainted: [L]=SOFTLOCKUP [ 706.284222][T14210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 706.294256][T14210] Call Trace: [ 706.297517][T14210] [ 706.300426][T14210] vpanic+0x56c/0xa60 [ 706.304394][T14210] ? __pfx_vpanic+0x10/0x10 [ 706.308876][T14210] ? __pfx___schedule+0x10/0x10 [ 706.313712][T14210] panic+0xc5/0xd0 [ 706.317415][T14210] ? __pfx_panic+0x10/0x10 [ 706.321811][T14210] ? preempt_schedule_common+0x82/0xd0 [ 706.327254][T14210] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 706.332869][T14210] check_panic_on_warn+0x89/0xb0 [ 706.337796][T14210] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 706.343410][T14210] end_report+0x73/0x170 [ 706.347637][T14210] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 706.353250][T14210] kasan_report+0x128/0x150 [ 706.357739][T14210] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 706.363353][T14210] kasan_check_range+0x264/0x2c0 [ 706.368288][T14210] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 706.373915][T14210] __asan_memcpy+0x40/0x70 [ 706.378323][T14210] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 706.383782][T14210] vivid_thread_vid_cap_tick+0x1021/0x5fd0 [ 706.389597][T14210] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 706.395395][T14210] ? lockdep_hardirqs_on+0x7a/0x110 [ 706.400588][T14210] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 706.406737][T14210] ? vivid_thread_vid_cap+0x491/0x1190 [ 706.412186][T14210] ? cgroup1_freezing+0x29a/0x350 [ 706.417193][T14210] vivid_thread_vid_cap+0x909/0x1190 [ 706.422464][T14210] ? __lock_acquire+0x6b5/0x2cf0 [ 706.427387][T14210] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 706.433103][T14210] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 706.438890][T14210] ? __kthread_parkme+0x7a/0x1f0 [ 706.443808][T14210] kthread+0x388/0x470 [ 706.447856][T14210] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 706.453554][T14210] ? __pfx_kthread+0x10/0x10 [ 706.458125][T14210] ret_from_fork+0x514/0xb70 [ 706.462692][T14210] ? __pfx_ret_from_fork+0x10/0x10 [ 706.467779][T14210] ? __switch_to+0xc79/0x1410 [ 706.472438][T14210] ? __pfx_kthread+0x10/0x10 [ 706.477013][T14210] ret_from_fork_asm+0x1a/0x30 [ 706.481764][T14210] [ 706.485103][T14210] Kernel Offset: disabled [ 706.489415][T14210] Rebooting in 86400 seconds..